last executing test programs:

2m11.449802009s ago: executing program 2 (id=1496):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r0, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x54, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="1d0000000000000000000000b0a5000000e2ffffff00000000400000"], 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000006c0)={r1, 0xffffffffffffffff, 0x26, 0x0, @void}, 0xfffffe37)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
finit_module(r2, &(0x7f0000000040)='/dev/cpu/#/msr\x00', 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x208800, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000001a40)=""/102392, 0x18ff8)
r3 = socket$inet6(0xa, 0x5, 0xb)
setsockopt$inet6_int(r3, 0x29, 0x21, &(0x7f0000000000)=0x2, 0x4)
sendmmsg$inet6(r3, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00'], 0x28}}], 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f000001aa40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x720, 0x210, 0xf0, 0x440, 0x0, 0x210, 0x650, 0x650, 0x650, 0x650, 0x650, 0x6, &(0x7f0000000c40), {[{{@ipv6={@mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xffffff00, 0xffffff00, 0xffffffff], [0xff000000], 'gre0\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x5, 0x0, 0x40}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@private0, 0x8, 0x5, 0x1}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, [0xff, 0x0, 0xff, 0xff000000], [0x0, 0xff000000, 0xff, 0xff000000], 'ipvlan1\x00', 'wg0\x00', {}, {0xff}, 0xc8, 0x3c, 0x880d4ae6c3ffa294, 0x25}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x2}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@rt={{0x138}, {0x9, [0x5, 0xe79], 0x7, 0x1, 0x6, [@rand_addr=' \x01\x00', @private0, @dev={0xfe, 0x80, '\x00', 0x16}, @mcast2, @local, @private0, @mcast2, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x10}, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty], 0x5}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xcd, 0x9}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @empty, [0xff, 0xffffffff, 0x0, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xffffffff], 'caif0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x2, 0xc, 0x4, 0x3}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@loopback, @ipv6=@empty, 0x35, 0xf, 0x1}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xe1, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x780)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r6=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800b1efb9669237000000000000000000ff00"/30], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c00), r2)
sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="f0030000", @ANYRES16=r7, @ANYBLOB="00032abd7000ffdbdf2518000000900001802c000280080001000b000000080001001d0000000800040000080000080004000600000008000400f34100000c00010069623a6772653000380004001400010002004e20ac1e00010000000000000000200002000a004e22fffffff2fe8000000000000000000000000000aa010000801c00028008000400ffff00000800010005000000080004000d0c00008c00058008000100756470000c000280080004000050f00007000100696200000700010069620000080001007564700008000100756470000800010075647000080001006574680007000100696200003c00028008000100080000000800030000000100080003008248000008000300080000000800010008000000080003000104000008000100070000004c00038008000200090000000800020009000000080001000008000008000300040000000800020006000000080002007f00000008000100a300000008000200f90000000800010029000000f80006801300030019a8327609cb873c1498c64f9a2ef5000400030087000300561b48984328251234391261a6a18ec94794f63c6f641e623a1f3fc1ec6babc9f91bdf48f6efefd5b604c2a5ce13a0da16a762cb07eba8a4d17d2857d2057019ce05a9caf9474d2bb4f6bfc4366d4426afc8a395f16af5225971ec0db71083a5c87b94605fceb4dcf06881e93c30384dbadf4dc1c62e466c02ab868d6e05a8cab56bc9000800060000000000040002004500040067636d28616573290000000000000000000000000000000000000000000000001d00000073eaf755f8056cfe552361cdebf8609e16be4e6aa348ac0c3968114955000000880005800400028014000280080001000500000008000300c900000008000100756470002c000280080001000f000000080003000400000008000200400000000800040007000000080004005d0d000014000280080003000900000008000300ff01000007000100696200000c0002800800030004000000080001007564700008000100657468002c0009800800020009000000080002000800000008000200030000000800020000800000080002000800000034000780080001000600000008000100ff0f00000c0003000f000000000000000c000400482c00000000000008000200db7f000094000680040002004600040067636d28616573290000000000000000000000000000000000000000000000001e000000c8643976a18ec676f5284b28e08399253048bddfd84d9e75c885ea27bd9f00004300040067636d28616573290000000000000000000000000000000000000000000000001b0000006d6632a30217eb42322bbaa67af3eb228a0ca9f7af21d8ec9fe94100baad9ae4878f117865f1c3105d81d6a94d3d0e6ed6d26338572616a27a721162713503481c10abe0d187476b65c81314360be28f954eaca437599183de4bfa12cdda1ae98696e47c6b058a7f400f5895104a2c4a108c36c7bc9eca714796ca0eaae77b8ed2686beffbd2c0955ae75f278f3388de342674bb505a7446ae2cfbe8a2941070808600cecb4849b9847fdb3b140b8e8cd2e79e6d6b64f99ed78c1fc0ed5173a5c0064f84e17f49a20fbf040f946e40aa9415d8689d75ae0b85cfb896e80422687a814964cee567d536806bf924656c9fa1573b4c0f1d231b4490b1398d2d545504e989ea36f45bcd8093ddda4841f8077276e980764da3b0b53da634f670a92ad013bf3819bf7a445aed3a4e16"], 0x3f0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8050)

2m11.02973532s ago: executing program 2 (id=1498):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, @null, @bpq0, 0x4, 'syz1\x00', @null, 0xfffffffd, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]})
r3 = io_uring_setup(0x7d5, &(0x7f0000000500))
r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
bind$ax25(r4, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
connect$ax25(r4, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
close_range(r3, 0xffffffffffffffff, 0x0)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000406c256d000000000000010902240001000000000904000001030000000921000000012205000905810300000000008b4a24036319fa84cde9d70cdd134f3d7ec0b47cc27a905b3ca1500f42eb9ceafdf4dbfe82e991edc5d52a0e77397f0cf98297803f48dda139224932c6cc1172b64e0e9224ab4f1ee130c41e74745c054770832d82b12c09dd06d7eccd83230174479c91dfff2a03b1942c4ceed671b987b2048f5ba4eea08a8674207c4a63d499186151fbd703cb2a8c8868d8324632e704f8fe6c83ceac53e1da1720b4d7a0fdb09b59b621f0a6bf0d220973e1706a00ab0482"], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)

2m7.925844042s ago: executing program 2 (id=1510):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf3, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0x11, 0x4623f, 0x6, 0x0, 0x1ff, 0x8000, 0xfffffffe, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0xa, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c33, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x985, 0x4, 0x8, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x9, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd3, 0x7, 0x20, 0x8404, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x9, 0x80000001, 0x8, 0x3f92, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x1000, 0x80000001, 0x4, 0xff, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x47, 0x0, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x8, 0x95e, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x5, 0x1000, 0x82, 0x5, 0x3fa6, 0x7, 0x0, 0x5, 0x1e2, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0xfffffff8, 0x20008, 0x8a8, 0x2, 0x800, 0x409, 0x7, 0x4, 0x4, 0x10, 0x4, 0x0, 0x7fff, 0x8, 0x8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x7, 0x6]}, 0x45c)
r1 = io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0x4e43, 0x400, 0x20001, 0x2})
setresuid(0x0, 0xee00, 0xffffffffffffffff)
r2 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x0, 0x28b, 0x0, r1})
io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000)=[r1], 0x1)
setfsuid(0xee00)
setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000080)=0x1c, 0x80000)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e21, 0x46, @remote, 0x5}, 0x1c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
readv(r0, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7f40, 0x20, 0x9e, 0x2, {{0x6, 0x4, 0x1, 0x9, 0x18, 0x67, 0x0, 0x4, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @multicast1, {[@ssrr={0x89, 0x3, 0x28}]}}}}})
write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6672)

2m7.176739607s ago: executing program 2 (id=1514):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f000060b000/0x4000)=nil)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x2082, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x9, 0x4, 0x40})
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
r3 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r3, 0x2000)
getdents64(r2, &(0x7f0000002f40)=""/4098, 0x1002)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb0}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x85, 0x0, 0x0, {0x0, 0x0, 0xf}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000480)={{0x1, 0x1, 0x18, r5}, './file0\x00'})
r6 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, &(0x7f0000000240)={0x3, "0f0200"}, 0x4)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
writev(r7, &(0x7f0000000b00)=[{&(0x7f0000000940)='\r', 0xfdef}], 0x2)

2m6.335617048s ago: executing program 2 (id=1517):
pipe(&(0x7f0000000040))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
setrlimit(0x6, &(0x7f0000000100)={0x9, 0xffffffff})
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000c80)=[@ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x18}, 0x0)
read$char_usb(r4, &(0x7f0000000180)=""/147, 0xfdef)

2m5.289698233s ago: executing program 2 (id=1521):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00')
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0xfffffead, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r3 = request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe)
request_key(&(0x7f00000008c0)='id_legacy\x00', &(0x7f0000000900)={'syz', 0x0}, 0x0, r3)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18)
close_range(r1, r2, 0x2)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
ioctl$TCSBRKP(r6, 0x5425, 0x13)
ioctl$TIOCMSET(r6, 0x5418, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r9=>0x0})
r10 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\x9e\xce\x84\xae\xb3\x92\xab\a\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef', 0x6)
fcntl$addseals(r10, 0x409, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r8, 0x6b, 0x4, &(0x7f0000000300)=0x1, 0x4)
bind$can_j1939(r8, &(0x7f0000000380)={0x1d, r9, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18)
r11 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r11, &(0x7f0000000140)={0x1d, r9, 0x1, {0x0, 0x0, 0x4}, 0x2}, 0x18)
setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048001)
sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r9, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)
writev(r0, &(0x7f0000000200), 0x0)
r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r12, &(0x7f0000000000)={0x1f, 0x3, @fixed}, 0xe)
socket$inet_sctp(0x2, 0x1, 0x84)

1m49.4164178s ago: executing program 32 (id=1521):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00')
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0xfffffead, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r3 = request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe)
request_key(&(0x7f00000008c0)='id_legacy\x00', &(0x7f0000000900)={'syz', 0x0}, 0x0, r3)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18)
close_range(r1, r2, 0x2)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
ioctl$TCSBRKP(r6, 0x5425, 0x13)
ioctl$TIOCMSET(r6, 0x5418, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r9=>0x0})
r10 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\x9e\xce\x84\xae\xb3\x92\xab\a\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef', 0x6)
fcntl$addseals(r10, 0x409, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r8, 0x6b, 0x4, &(0x7f0000000300)=0x1, 0x4)
bind$can_j1939(r8, &(0x7f0000000380)={0x1d, r9, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18)
r11 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r11, &(0x7f0000000140)={0x1d, r9, 0x1, {0x0, 0x0, 0x4}, 0x2}, 0x18)
setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048001)
sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r9, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)
writev(r0, &(0x7f0000000200), 0x0)
r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r12, &(0x7f0000000000)={0x1f, 0x3, @fixed}, 0xe)
socket$inet_sctp(0x2, 0x1, 0x84)

1m44.53404885s ago: executing program 1 (id=1558):
r0 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc4}, &(0x7f0000000240)={0x0, "1f531b3e2c74080fc8764a97acc38c5577c7ccab1f42bba3d13ecef852d2f680954e430cf7b9a5e7f91ba13d8e469f93b8deb914b9ac94c7fb842cae7254f646", 0x29}, 0x48, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r0)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r1)
keyctl$search(0xa, r1, &(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, r1)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10)
fsopen(&(0x7f0000000040)='binder\x00', 0x1)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10)

1m44.147399679s ago: executing program 1 (id=1561):
r0 = socket$kcm(0x10, 0x3, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40081271, &(0x7f0000000980)=0x4000)
msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000000)=""/83)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10)
sendmmsg$inet(r3, &(0x7f0000002440)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001180)="c545b8e6891930d00e0c9f9a34b60edab22431d599675d86f2f876ea962ace703f8afaf9c4262d97ed63349f484d868856c1bc9cca3150f7e96d42e36ab839caeb28614673b668f1d4bfbc2ffdc9bbb7faa421ca301c10368c46010ec37a088c3414908889082d9fdffe5f74be78e4ab3d545c22d3148d9b024b52ac9280db8ea86894997c083e31229fa2365a8bceb69178468b0b7741df61069d66365ec555624cf395e1359669aec4eb18c84c59149442a7315383dd26efb1c7e3ad05", 0xbe}, {&(0x7f0000000cc0)="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", 0x12d}, {&(0x7f0000001040)="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", 0x113}, {&(0x7f00000007c0)="ae21c1ffa47432736ef41d1ca7a55e6ee84fc95a490173e6f97a5c34095cb06b53d352aa1286e387f629ad9defaffa365aaf37ba4d1bac9280fe71822e0900ef5878455e97286102cdde893d7ccc8f6fbaf39ebfc87a0889162556dd2c750b72373cfc7c03b20d68bac0e03f2957d4cebb8fbac2af9aba141fe5820064122f5bd93ebef6e200989cdb", 0x89}, {&(0x7f0000000580)="6b9cacb7f6804c331a3aa9379734ec2aedb597c32af634ddb581e3cef4c3058812b5118b70a11b4169426d7df4887c10782a5cfc7f8ea9995dea4ac79993469d55895298a177c1e96fbc02b422b2f658450f124c1f7fbb0ffc995cac4fb8186835e2811d77f90cd9a4d933cb708bc5a346e7fc85379cca848191ce387c3aba4c12d2c7a110b4ce3114b3bd8d1b7b116a803bd8ce2405f7c43700329ad680dfa721b65823c09cca147a24f365e0cbc678092ae44a632b5c8da7f3e8b31ceaf1b5577b783908da7734f30d7ade6113b3adfebb2b03ed05", 0xd6}, {&(0x7f0000000940)="b3fe109a0a0e5fbf3f4e8ce314c9dee2296599bb37db484506f7f4a1fab11782e0e1581812720001a80b9a0f3b1906d25b5efb254a1119eafe8167fa354fb03a066c8733d91c9127a8c77f2d647fbee113e52351c782ebfba85879d9482fd52ff178111c30472dc8243f1e28fc4d6127452b0d5b98c225054f78c4db08b2aaa9275252150a05682058a0c2b50728dd04c8040000007233beaa311ecc5fe3fa158d", 0xa1}, {&(0x7f0000002500)="b85a302756b5c983924c342778e000aa1707d581478a9fc2db3eb7bb6c82e757c981749d65c93373f6549b488c1d2a4482dbbe77a836e6bd114cf72569cff1b57bc9054f77729d58073686e6fd5b1c92c883cdebfda1463120d2356e16d7cb26624ea547aea16f78ce1cd3c83041147ad29c7994a42c185bbeaa2b209232379157c4efcb82d1d1b1368cb36504f089940aa15f7351221d03d900d329d9019d343e39b49e6acb0bd17a95940f91a3a783f10b828fe8d260bf7600cc87f78a6dccaaa741bb90a1fc4ce4173068f3e3293db23abdf1c488ed70954d1fcafcae8cfe29c52384891d916f45ca246afbe2f81035ea92cf94145d43", 0xf8}, {&(0x7f0000000200)="db328433d8cfa472e00d6224a3fd8b1ce74f128f58df0bf2dd0c555b399256c989a373083e1245810b2661686c82667e784b508659132a8f", 0x38}], 0x8}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)="65582f9359a0131171dfb403e1249c431ad1fe8b66afd6ef0c978154f4a27eb98cb25896eeff99e775a758a7a4ce88468bea15e461e3cc83087a642104112fe047a567b0714f81ac002aab74fc8c960ad78df3473fa60d537ecf5a373c13a0c8a6b5686c", 0x64}], 0x1}}], 0x3, 0xc044)
write$binfmt_misc(r3, &(0x7f0000000300), 0x5b0)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x9}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@remote, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r4, 0x3)
ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, 0x0)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
geteuid()
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x0, 0x0, 0xc}}}}}}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r5, 0x84, 0x84, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744)
syz_clone3(&(0x7f00000001c0)={0x100600, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r6=>0x0, {0x38}, &(0x7f00000000c0)=""/62, 0x3e, &(0x7f0000000100)=""/88, &(0x7f0000000180)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58)
prlimit64(r6, 0xf, 0x0, &(0x7f0000000280))
sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0)
getrlimit(0xd, &(0x7f0000000380))
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001580)=""/4090, 0xffa}], 0x1}, 0x0)

1m43.420925125s ago: executing program 1 (id=1565):
socket$inet6(0x10, 0x3, 0x0)
prctl$PR_GET_TSC(0x43, &(0x7f0000000040))
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x4, &(0x7f0000000a40)=ANY=[], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0))
ioprio_set$pid(0x2, 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={0x1314, r4, 0x10ada85e65c25359, 0x70bd29, 0x8000000, {{0x6b}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x33c, 0x11d, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3c}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf9}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x49}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xa5b8da6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x264, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1b}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x250, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x809c, 0x0, 0x2, 0xa, 0x7b71, 0x0, 0x7, 0x1]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x4, 0x60, 0x3, 0x36, 0x1, 0x48, 0x9, 0x60, 0x30, 0x0, 0x48, 0x16, 0x18, 0x4, 0x16, 0x24, 0x3, 0x1, 0x36, 0x2, 0x5, 0xc, 0x1]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x6}, {0x4, 0x2}, {0x4, 0x7}, {0x0, 0x4}, {0x3, 0x9}, {0x6, 0x7}, {0x4, 0xa}, {0x5, 0x3}, {0x0, 0xa}, {0x7, 0x1}, {0x1, 0x1}, {0x7, 0xa}, {0x2, 0x5}, {0x2, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x7, 0xfffa, 0x6, 0x8001, 0xa, 0x6, 0xaa]}}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xc, 0x6, 0x8, 0xb, 0x1, 0x9, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x0, 0x6}, {0x4, 0x6}, {0x0, 0x5}, {0x2, 0x8}, {0x0, 0x6}, {0x7, 0x3}, {0x6, 0x5}, {0x3, 0x2}, {0x2, 0x1}, {0x3, 0x5}, {0x2, 0x8}, {0x1, 0x4}, {0x5, 0x3}, {0x0, 0x8}, {0x4, 0x8}, {0x5, 0x5}, {0x6, 0x3}, {0x6, 0x1}, {0x3, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x7}, {0x4, 0x4}, {0x7, 0x2}, {0x7, 0x8}, {0x5, 0x6}, {0x5, 0x8}, {0x1, 0x7}, {0x3, 0xa}, {0x3, 0x7}, {0x0, 0x1}, {0x5, 0x5}, {0x0, 0x7}, {0x5, 0x6}, {0x2, 0xa}, {0x7, 0x1}, {0x2, 0x4}, {0x7, 0x6}, {0x6}, {0x7, 0x6}, {0x1}, {0x0, 0x7}, {0x4}, {0x0, 0x3}, {0x4, 0x7}, {0x6, 0x7}, {0x2, 0x2}, {0x1, 0x7}, {0x0, 0xa}, {0x5, 0x7}, {0x3, 0x6}, {0x1, 0x9}]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x0, 0x3}, {0x7, 0x7}, {0x5, 0x7}, {0x6, 0x5}, {0x5, 0x2}]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x7, 0x9}, {0x5, 0x4}, {0x5, 0xa}]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xb, 0xfffb, 0x26, 0x10, 0x6, 0x7, 0x2]}}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x70be, 0x2, 0x5, 0x7, 0x3, 0xd612, 0x5, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x6, 0x8, 0x7, 0x7, 0x3, 0x4, 0x68]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x60, 0x24, 0x2, 0x16, 0x6, 0x24]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x48, 0x5, 0x5, 0x60, 0x4, 0x30, 0x48, 0x9, 0xb, 0x0, 0x3, 0x48, 0x5, 0x24, 0x1, 0x16, 0x48, 0x9, 0x48, 0x48, 0x18, 0x1b, 0x1b, 0x60, 0x6, 0x60]}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x1, 0x6}, {0x4, 0x1}, {}, {0x1, 0x5}, {0x4}, {0x2, 0x2}, {0x0, 0x9}, {0x6, 0x6}, {0x6, 0x7}, {0x4, 0x3}, {0x1, 0x5}, {0x7, 0x9}, {0x2, 0xa}, {0x5, 0x2}, {}, {0x4, 0x9}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x5}, {0x3, 0x1}, {0x3, 0x2}, {0x6, 0x6}, {0x1, 0x4}, {0x6, 0x2}, {0x0, 0xa}, {0x3, 0x9}, {0x0, 0x1}, {0x0, 0x5}, {0x6, 0x2}, {0x7, 0x6}, {0x6, 0x4}, {0x2, 0x5}, {0x2, 0x7}, {0x2}, {0x1, 0xa}, {0x4, 0x1}, {0x4, 0x3}, {0x7, 0xa}, {0x6, 0x1}, {0x4, 0x5}, {0x4, 0x5}, {0x5, 0x1}, {0x2, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x4, 0x7}, {0x4, 0x8}, {0x2, 0x4}, {0x6, 0x5}, {0x2, 0xa}, {0x3, 0x1}, {0x0, 0x3}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x6}, {0x1}, {0x3, 0x3}, {}, {0x1, 0x9}, {0x1, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x400, 0x3a, 0x3, 0x5, 0x141, 0x7ff]}}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x29, 0x2, [{0x5, 0x1}, {0x4, 0x4}, {0x2, 0x5}, {0x2, 0x3}, {0x3, 0x6}, {0x6}, {0x1, 0x1}, {0x7, 0x1}, {0x0, 0x4}, {0x5, 0xa}, {0x1, 0x2}, {0x4, 0x8}, {0x1, 0x6}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x7, 0x5}, {}, {0x6, 0x6}, {0x7, 0x8}, {0x4, 0x9}, {0x7, 0x4}, {0x1, 0x3}, {0x2}, {0x1, 0xa}, {0x2, 0x6}, {}, {0x1, 0x5}, {0x7, 0x1}, {0x4, 0x7}, {0x3}, {0x5, 0xa}, {0x0, 0x5}, {0x3, 0x8}, {0x3}, {0x0, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff1a, 0x8, 0x7fff, 0x6, 0x3, 0xcc4d, 0x2, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4afc, 0x8, 0x160, 0x2, 0x7f, 0x200, 0x10, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0xe, 0xf31d, 0x2, 0x218, 0x9, 0x4, 0x8]}}]}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x80}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}]}, @NL80211_ATTR_TID_CONFIG={0x228, 0x11d, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xa4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1b, 0x9, 0x18, 0x9, 0x36, 0x1, 0xb, 0x36, 0x12, 0x1, 0x3, 0x36, 0x6c, 0x60, 0x4, 0x9, 0x16, 0x18, 0x48, 0x3, 0x4, 0x24, 0x16, 0x36, 0x6, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2f57, 0x0, 0xd, 0xf0fd, 0x7, 0x8001]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x7}, {0x0, 0x5}, {0x5, 0x7}, {0x4, 0xa}, {0x1, 0x4}, {0x6, 0x2}, {0x7, 0x9}, {0x1, 0x8}, {0x7, 0x9}, {0x0, 0x15}, {0x0, 0x3}, {0x4, 0x7}, {0x0, 0x2}, {0x7, 0x8}, {0x7, 0x5}, {0x2, 0x7}, {0x0, 0xa}, {0x1, 0x3}, {0x0, 0x8}, {0x7, 0x2}, {0x1, 0x9}, {0x2, 0x4}, {0x4, 0x4}, {0x7, 0x6}, {0x5, 0x1}]}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x4, 0x3}, {0x2, 0x2}, {0x0, 0x8}, {0x2, 0xa}, {0x4, 0x5}, {0x3, 0x5}, {0x4, 0x5}, {0x5, 0xa}, {0x3, 0x7}, {0x6, 0x2}, {0x1}, {0x3, 0xa}, {0x6, 0xa}, {0x5, 0x3}, {0x3, 0x5}, {0x7, 0x6}, {0x6, 0x6}, {0x3, 0x5}, {0x5, 0x3}, {0x0, 0x8}, {0x2, 0x6}, {0x3, 0x8}]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xf000, 0x0, 0x8, 0xc69, 0x7, 0xc, 0xfff8]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x150, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x7}, {0x2}, {0x1, 0x5}, {0x5, 0x3}, {0x4, 0xa}, {0x7, 0x5}, {0x0, 0x9}, {0x3, 0x2}, {0x3, 0x8}, {0x1, 0xa}, {0x4, 0x4}, {0x7, 0x2}, {0x5, 0x4}, {0x1, 0x8}, {0x1, 0x7}, {0x3, 0x3}, {0x7, 0x9}, {0x7, 0x4}, {0x4, 0x7}, {0x1, 0xa}, {0x0, 0x7}, {0x1, 0x2}, {0x6, 0x6}, {0x3, 0x2}, {0x6, 0x9}, {0x7, 0x6}, {0x1, 0x1}, {0x2, 0x6}, {0x3, 0x2}, {0x6, 0x2}, {0x1}, {0x3, 0xa}, {0x3, 0x8}, {0x6, 0x1}, {0x0, 0x3}, {0x3, 0x3}, {0x1, 0x7}, {0x1, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x1}, {0x7, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x6, 0x1}, {0x7, 0x1}, {0x6, 0x6}, {0x6, 0x6}, {0x6, 0x1}, {0x3, 0x3}, {0x5, 0x9}, {0x0, 0x6}, {0x0, 0x7}, {0x4}, {}, {0x3, 0x5}, {0x0, 0x9}, {}, {0x1, 0xa}, {0x3, 0x1}, {0x7, 0x4}, {0x0, 0x8}, {0x5, 0x8}, {0x0, 0x1}, {0x0, 0x6}, {0x0, 0x5}, {0x5, 0x4}, {0x4, 0x7}, {0x1, 0x4}, {0x4, 0x2}, {0x7, 0x9}, {0x4, 0x7}, {0x0, 0x9}, {0x1, 0x8}, {0x7, 0x1}, {0x5, 0x5}, {0x0, 0x7}, {0x3, 0x2}, {0x1, 0x8}, {0x1, 0x4}, {0x4, 0xa}, {0x5, 0x7}, {0x0, 0x2}, {0x7, 0x5}, {0x5, 0x7}, {0x3, 0x5}, {0x1, 0x2}, {0x2, 0x8}, {0x4}, {0x2, 0x1}, {0x5, 0x5}, {0x0, 0x9}, {0x4, 0x4}, {0x2, 0x5}, {0x3, 0x9}, {0x4, 0x2}, {0x7, 0x1}, {0x6, 0xa}, {0x3, 0x7}, {0x3, 0x1}, {0x0, 0x9}, {0x4}, {0x1, 0x3}, {0x0, 0xa}, {0x1, 0x5}, {0x5, 0x3}, {0x0, 0x9}, {0x4, 0x6}, {0x4, 0x6}, {0x3, 0x5}, {0x6, 0x5}, {0x3, 0x1}, {0x3, 0x6}, {0x5}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xc, 0x1, 0x5, 0x48]}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x34, 0x2, [{0x2, 0xa}, {0x4, 0x6}, {0x1, 0x6}, {0x0, 0x9}, {0x3, 0x6}, {0x1, 0xa}, {0x1, 0x5}, {0x1, 0x1}, {0x7, 0xa}, {0x6, 0x4}, {0x2, 0x4}, {0x6, 0x7}, {0x5, 0x7}, {0x5, 0x7}, {0x0, 0x4}, {0x4, 0x6}, {0x5, 0x7}, {0x0, 0x3}, {0x1, 0x5}, {0x4, 0x9}, {0x1, 0xa}, {0x6, 0x3}, {0x0, 0x4}, {0x0, 0x8}, {0x4, 0x5}, {0x3, 0x5}, {0x5, 0x9}, {0x5, 0x5}, {0x0, 0x2}, {0x7, 0x2}, {0x5, 0x5}, {0x3, 0x5}, {0x3, 0x4}, {0x2, 0xa}, {0x4, 0x7}, {0x6, 0x3}, {0x2, 0x4}, {0x0, 0x9}, {0x0, 0x5}, {0x4, 0x2}, {0x2, 0x2}, {0x1, 0x6}, {0x5}, {0x3, 0x4}, {0x1, 0x4}, {0x7, 0x3}, {0x4, 0x7}, {0x3, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x6, 0xfffc, 0x4, 0x5, 0x9, 0x9, 0x8001]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdc2b, 0x9, 0xffff, 0xff, 0xea8, 0x9, 0x3, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x12, 0xa, 0x1, 0x60, 0x3, 0xb, 0x5, 0xc, 0xc, 0x9, 0x5, 0x3, 0x6c, 0x60, 0x0, 0x1e, 0x1b, 0x2, 0x0, 0x18, 0x2, 0x2, 0x60, 0x25, 0x6, 0x60, 0x16, 0x9, 0x2c, 0x1]}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffffb}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xb4, 0x11d, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xc5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x5c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x0, 0x8}, {0x7, 0x6}, {0x2, 0x3}, {0x5, 0x4}, {0x1, 0x2}, {0x3}, {0x3, 0x3}, {0x6, 0x1}, {0x0, 0x2}, {0x7, 0x7}, {0x2, 0x4}, {0x1, 0x8}, {0x5, 0x9}, {0x1, 0x6}, {0x2, 0x4}]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x6}, {0x6, 0x6}, {0x5, 0x3}, {0x6, 0x7}, {0x3, 0xa}, {0x3, 0x1}, {0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x6}, {0x4, 0x7}, {0x5, 0x3}, {0x2, 0x4}, {0x7, 0x3}, {0x3, 0x2}, {0x4, 0xa}, {0x0, 0x5}, {0x2, 0x1}, {0x6, 0x1}, {0x3, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x9, 0x30, 0x36, 0x1, 0x6c, 0x5, 0x5, 0x36, 0x1, 0x60]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xa6e}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x24}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9a}]}]}, @NL80211_ATTR_TID_CONFIG={0x4b4, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x6c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x50, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x1000, 0x2, 0x1, 0x400, 0x5, 0x6, 0x7ff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x0, 0x6}, {0x5, 0x2}, {0x6, 0x7}, {0x5, 0x6}, {0x1, 0x5}, {0x7, 0x1}, {0x3, 0x5}, {0x1, 0xa}, {0x1, 0x6}, {0x0, 0x7}, {0x3, 0x9}, {0x4, 0x4}, {0x0, 0x3}, {0x6, 0x6}, {0x6, 0x7}, {0x2, 0x7}, {0x3, 0x2}, {0x4, 0x4}, {0x0, 0x4}, {0x2, 0x4}, {0x0, 0x7}, {0x7, 0x1}, {0x5, 0xa}, {0x5, 0xa}, {0x6, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x39}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x380, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xfff6, 0x2, 0x9, 0x9, 0xff6b, 0xa228, 0x4]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x6, 0x8, 0x7, 0x4b, 0x7, 0x8000, 0xfffd]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x24, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1b, 0x9, 0x24, 0x30, 0x6, 0x1, 0x18, 0x1, 0x5, 0x1b, 0x1b, 0x1b, 0x30, 0xb, 0x1b, 0x18, 0x4, 0x4, 0x48, 0x1b, 0x12, 0x3, 0x2, 0xc, 0x60, 0xc, 0x24]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0x2, 0x36, 0xb, 0x6, 0x0, 0x36, 0x5, 0x1, 0xb, 0x60, 0x60, 0x9, 0x6c, 0x16, 0xb, 0xb, 0x1b, 0x30, 0x12, 0x12, 0x60, 0x16, 0x27]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x56, 0xed05, 0xe0, 0xfff9, 0x2, 0x8, 0x4]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0xc, 0x30, 0x12, 0x3, 0x987859be30429b6c, 0x0, 0x4, 0x1, 0x1e, 0x4, 0x18, 0x3, 0x2f, 0x12]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x3, 0xb, 0x16, 0x4]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x2a, 0xb, 0x16, 0x16, 0x3, 0xb, 0x0, 0x5, 0x62, 0x6c, 0x6, 0x60, 0x3, 0x24, 0xd, 0x9, 0x6, 0x1, 0x0, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x4, 0x9}, {0x3}, {0x0, 0x9}, {0x6, 0x1}, {0x3, 0x4}, {0x5, 0xa}, {0x7, 0x3}, {0x3, 0x4}, {0x7, 0x2}, {0x0, 0x5}, {0x4, 0x6}, {0x7, 0x7}, {0x4, 0x9}, {0x0, 0x4}, {0x7, 0x7}, {0x4, 0x7}, {}, {0x6, 0x9}, {0x0, 0x7}, {0x7, 0x8}, {0x2, 0x3}, {0x3, 0x6}, {0x1, 0x9}, {0x3, 0x9}, {0x2, 0x4}, {0x1, 0x8}, {0x7, 0x8}, {0x2, 0x2}, {0x7, 0x6}, {0x6, 0x9}, {0x5, 0x7}, {0x4, 0x7}, {0x2, 0x9}, {0x1}, {0x5, 0x3}, {0x1, 0xa}, {0x4, 0x2}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x4}, {0x6, 0x4}, {0x3, 0x3}, {0x5, 0x9}, {0x6, 0x2}, {0x0, 0x4}, {0x0, 0x4}, {0x1, 0x2}, {0x1, 0x9}, {0x1, 0x4}, {0x1, 0x4}, {0x1, 0x8}, {0x0, 0x9}, {0x2, 0x2}, {0x4, 0x3}, {0x4, 0xa}, {0x0, 0x8}, {0x5, 0x7}, {0x2, 0x9}, {}, {0x6}, {0x7, 0x2}, {0x5, 0x5}, {0x5, 0x3}, {0x3}, {0x1, 0x6}, {0x6, 0x9}, {0x0, 0x4}, {0x0, 0x8}, {0x5}, {0x3}, {0x0, 0x9}, {0x7, 0x2}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x7, 0x9}, {0x6, 0x5}, {0x1}, {0x3, 0x7}, {0x1, 0x2}, {0x7, 0x1}, {}, {0x3, 0x1}, {0x0, 0x8}, {0x2, 0x1}, {0x0, 0x6}, {0x6, 0xa}, {0x2, 0x5}, {0x0, 0x3}, {0x2, 0x7}, {0x4, 0x2}, {0x0, 0x2}, {0x5, 0x8}, {0x6, 0x9}, {0x6, 0x8}, {0x7, 0x1}, {0x4, 0x4}, {0x1, 0x8}, {0x5, 0x3}, {0x1, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x3, 0x53, 0x3d, 0x9, 0x200, 0x8]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1cc, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xcc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6c, 0x3, 0x12, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x4, 0xa3, 0x9, 0x9, 0x7f, 0x6]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x4, 0x4}, {0x7, 0x8}, {0x1, 0x1}, {0x5, 0xa}, {0x2, 0x5}, {0x0, 0x8}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0x4}, {0x1, 0xa}, {0x7, 0x6}, {0x3, 0x7}, {0x5, 0x9}, {0x5, 0x2}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x7}, {0x6, 0x3}, {0x7, 0x1}, {0x7}, {0x6, 0x5}, {0x3}, {0x1, 0x6}, {0x4, 0x2}, {0x0, 0x1}, {0x2, 0x4}, {0x4, 0x6}, {0x7, 0xa}, {0x4, 0x4}, {0x5, 0x8}, {0x0, 0x6}, {0x6, 0x9}, {0x7, 0x9}, {0x3, 0x4}, {0x5, 0xa}, {0x6}, {0x1}, {0x5, 0x6}, {0x0, 0x3}, {0x2, 0x2}, {0x6, 0x8}, {0x1, 0xa}, {0x0, 0x6}, {0x1, 0x1}, {0x6}, {0x3, 0x5}, {0x2, 0x3}, {0x3, 0x5}, {0x7, 0x6}, {0x0, 0x9}, {0x1, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x6, 0x4}, {0x0, 0x7}, {0x6, 0x1}, {0x0, 0x2}, {0x7, 0x3}, {0x4, 0x6}, {0x2, 0x9}, {0x0, 0x2}, {0x4, 0x4}, {0x0, 0x2}, {0x5}, {0x0, 0x6}, {0x3, 0x3}, {0x7, 0x9}, {0x0, 0x7}, {0x7, 0x9}, {0x5, 0x9}, {0x1, 0x1}, {0x1, 0x4}, {0x6, 0x9}, {0x4, 0x8}, {0x6, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x0, 0xffff, 0x884, 0x101, 0x7, 0xc, 0x8e]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x36, 0x1b, 0xc, 0x6, 0x6c, 0x36, 0xb, 0x3]}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x4, 0x3}, {0x4, 0xa}, {0x7, 0x1}, {0x1, 0x7}, {0x7, 0x3}, {0x7, 0xa}, {0x3, 0x3}, {0x0, 0x9}, {0x1, 0x8}, {0x5, 0x2}, {0x1, 0x6}, {0x6, 0x3}, {0x0, 0x5}, {0x4, 0xa}, {0x5, 0x2}, {0x2, 0x5}, {0x0, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x8, 0xe959, 0x8, 0x8, 0x2, 0xff, 0x8]}}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x8062, 0x383, 0x6, 0x800, 0xa, 0x8]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x5, 0x1}, {0x1, 0x6}, {0x0, 0x7}, {0x1, 0x4}, {0x2, 0x9}, {0x7, 0x3}, {0x2, 0x5}, {0x3, 0x8}, {0x1, 0x9}, {0x4, 0x4}, {0x5, 0x6}, {0x3, 0x1}, {0x3, 0x7}, {0x2, 0xa}, {0x7, 0x8}, {0x3, 0x8}, {0x2, 0x8}, {0x3, 0x4}, {0x1, 0x2}, {0x3, 0x3}, {0x5, 0x5}, {0x1, 0x2}, {0x7, 0x6}, {0x5, 0x1}, {0x0, 0x6}, {0x0, 0x9}, {0x5, 0x3}, {0x5, 0x3}, {0x3, 0xa}, {0x5, 0x9}, {0x5, 0x2}, {0x0, 0x7}, {0x0, 0x6}, {0x3, 0x2}, {0x6, 0x9}, {0x1, 0x6}, {0x7, 0x2}, {0x6, 0x5}, {0x0, 0xa}, {0x4, 0x4}, {0x6}, {0x4, 0x5}, {0x6, 0x8}, {0x0, 0x6}, {0x1, 0xa}, {0x1, 0xa}, {0x1, 0x9}, {0x4, 0x1}, {0x7, 0x5}, {0x2, 0x4}, {0x7, 0x3}, {0x7, 0x7}, {0x4, 0x4}, {0x7, 0x4}, {0x4, 0x2}, {0x7, 0x8}, {0x0, 0x5}, {0x2, 0x4}, {0x7, 0x3}, {0x4, 0x2}, {0x5, 0x8}, {0x3, 0x1}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x0, 0x7}, {0x3, 0x6}, {0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0xc, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3, 0x6, 0x4, 0x2, 0x85, 0xe, 0x200]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x30, 0x1b, 0x2, 0x5, 0x36, 0x6c, 0x60, 0x1f, 0x30, 0x60, 0xc, 0xc, 0x16, 0x6c, 0x16, 0x48]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x6, 0x4}, {0x4, 0x3}, {0x6, 0x6}, {0x2, 0x1}, {0x1, 0x5}, {0x5, 0x8}, {0x6, 0x2}, {0x3, 0x7}, {0x5, 0x9}]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xf8, 0x8, 0x5, 0x2, 0x51, 0x10, 0x100, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10001}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x80}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2c}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xbe}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5b}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x41}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}, {0x4}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x78, 0x11d, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x97}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x91}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x99}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x57}]}]}, @NL80211_ATTR_TID_CONFIG={0x34c, 0x11d, 0x0, 0x1, [{0x4}, {0x218, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1cc, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x2, 0x1, 0x2000, 0x1, 0x7ff, 0x3acc, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x6, 0xff, 0xf0ac, 0x3, 0x7, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1, 0xff, 0x5, 0x6, 0x5e, 0x4, 0x3]}}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x4, 0x6}, {0x0, 0x6}, {0x5, 0x8}, {0x3}, {0x6, 0x4}, {0x3, 0x5}, {0x3, 0x8}, {0x3, 0x6}, {0x0, 0x2}, {0x1, 0x1}, {0x6, 0x6}, {}, {0x6, 0x3}, {0x1, 0x9}, {0x7, 0xa}, {0x1, 0x4}, {0x6, 0x1}, {0x5, 0x3}, {0x6, 0x7}, {0x3, 0x4}, {0x3}, {0x7, 0x9}, {0x7, 0x4}, {0x5, 0x3}, {0x1, 0x5}, {0x3, 0x3}, {0x2, 0x9}, {0x0, 0x8}, {0x1, 0x9}, {0x0, 0x1}, {0x4, 0x7}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x4, 0x9}, {0x1, 0x1}, {0x7}, {0x2, 0xa}, {0x4, 0x8}, {0x2, 0x1}, {0x1, 0x8}, {0x6, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x2, 0x69, 0x1, 0x1, 0x3, 0x40, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x9, 0x9, 0x2, 0x2, 0x6c, 0x5, 0x18, 0x12, 0xc, 0x6c, 0xc, 0x4, 0xc, 0xb, 0x30, 0x1b, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x2, 0xa}, {0x1, 0x4}, {0x7}, {0x0, 0x1}, {0x6, 0x2}, {0x0, 0x8}, {0x1, 0xa}, {0x7, 0xa}, {0x0, 0x2}, {0x0, 0x4}, {0x4, 0x3}, {0x4, 0x5}, {0x1, 0x8}, {0x7, 0xa}, {0x1, 0xa}, {0x2, 0x8}, {0x4, 0x3}, {0x6, 0x8}, {0x3, 0x9}, {0x1, 0x8}]}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x16, 0xc, 0x3, 0x6, 0x2, 0x6c, 0xb, 0x6, 0x36, 0x1b, 0x0, 0x6c, 0x48, 0x2c, 0x1, 0x6c, 0x4, 0x24, 0xb, 0x1, 0x2, 0x6c, 0x36, 0x6]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x4, 0x6c, 0x12, 0x5, 0x16, 0xb, 0x3, 0x36, 0x6, 0xb, 0x5a5f63142fc9e96f, 0x2, 0x24, 0xb, 0xc, 0x2, 0x16, 0x12, 0x5, 0x9, 0x0, 0xb, 0x18, 0x36, 0x0, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7d38, 0x5, 0x5, 0x5, 0xb007, 0x40, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0xe7aa5fcb88eba1b9}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x8, 0xff, 0x2, 0xe8, 0x2, 0x4, 0x7f]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8f}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x54}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2d}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x309}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x12c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x120, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x3, 0x5, 0x9, 0x4, 0xfff9, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x7, 0xa}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x7}, {0x5, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xc2c, 0x6, 0x1000, 0x5, 0x7f, 0x7, 0x6]}}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x4bd, 0x1, 0x1, 0x6, 0x7, 0x7f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x7, 0x5}, {0x2, 0x4}, {0x7, 0x8}, {0x3, 0x3}, {0x5, 0x3}, {0x1, 0xa}, {0x4, 0x5}, {0x6, 0x9}, {0x6, 0x2}, {0x1, 0x3}, {0x4, 0x6}, {0x2, 0x3}, {0x0, 0x8}, {0x6, 0x1}, {0x4, 0x3}]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x1, 0x6}, {0x2, 0x8}, {0x4, 0xa}]}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x4, 0x3}, {0x0, 0x9}, {0x1, 0xa}, {0x0, 0x3}, {0x7, 0x7}, {0x0, 0x9}, {0x2, 0x1}, {0x5, 0x8}, {0x1, 0x3}, {0x2, 0x2}, {0x1}, {0x0, 0x2}, {0x1, 0x1}, {0x6, 0x3}, {0x5}, {0x7, 0x2}, {0x0, 0x2}, {0x6}, {0x1, 0x8}, {0x2, 0x8}, {0x1, 0x2}, {0x3, 0x3}, {0x6, 0x1}, {0x7, 0xa}, {0x3}, {0x2, 0x5}, {0x2, 0xa}, {0x1, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x4, 0x8}, {0x3}, {0x4, 0x8}, {0x4, 0x1}, {0x3, 0xa}, {0x1, 0x7}, {0x4, 0x6}, {0x0, 0xa}, {0x5, 0x2}, {0x4, 0x1}, {0x0, 0x2}, {0x7, 0x9}, {0x3, 0x1}, {0x4, 0x7}, {0x2, 0x7}, {0x6, 0x5}, {0x5, 0x1}, {0x3, 0x5}, {0x7, 0x9}, {0x4, 0x7}, {0x5, 0x1}, {0x2, 0xa}, {0x0, 0x6}, {0x2, 0x3}, {0x0, 0x6}, {0x1, 0x5}, {0x2, 0x2}, {0x2, 0x9}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x2}, {0x0, 0x8}, {0x2, 0x7}, {0x3, 0x5}, {0x1, 0x7}, {0x3, 0x2}, {0x7, 0x3}, {0x1, 0x3}]}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1, 0x480, 0x6, 0x0, 0x3, 0x60, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x4}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x13}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe9}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3}]}]}, @NL80211_ATTR_TID_CONFIG={0x424, 0x11d, 0x0, 0x1, [{0x1b4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1a0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x36, 0x24, 0x12, 0x0, 0x5, 0x30, 0x5, 0x3, 0x2, 0xc, 0x30, 0x18, 0x18, 0x60, 0x60, 0x1, 0x5, 0xc, 0x2, 0x2, 0x24, 0x9, 0x1, 0x60, 0x0, 0x60, 0xc, 0x12]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x36, 0xb, 0x36, 0x60, 0x48, 0x36, 0x0, 0xb]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0xaa8, 0x5, 0xfa, 0x2, 0x6, 0x87]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x67, 0x5, 0x2b6, 0x5, 0x1, 0x8, 0x2000]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x5, 0x2}, {0x0, 0x6}, {0x4, 0x5}, {0x5, 0x3}, {0x2, 0x9}, {0x4, 0x9}, {0x3, 0x6}, {0x5, 0x7}, {0x1, 0xa}, {0x4, 0x4}, {0x6, 0x7}, {0x6}, {0x1, 0x7}, {0x7, 0x5}, {0x1, 0x3}, {0x1, 0x8}, {0x4, 0x4}, {0x3, 0x9}, {0x7, 0x8}, {0x2, 0x6}, {0x4, 0xa}, {0x1, 0x3}, {0x2, 0x8}, {0x5, 0x7}, {0x1, 0x2}, {0x0, 0x9}, {0x0, 0x3}, {0x2, 0x9}, {0x5, 0x4}, {0x1, 0x9}, {0x4, 0x3}, {0x6, 0x5}, {0x5, 0x8}, {0x1, 0x4}]}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3, 0x2}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x1}, {0x4, 0x9}, {0x0, 0x4}, {0x6}, {0x0, 0x6}, {0x0, 0x6}, {0x4, 0x6}, {0x4, 0x4}, {0x1, 0xa}, {0x1, 0x4}, {0x4, 0x7}, {0x0, 0x2}, {0x5}, {0x1, 0x9}, {0x6, 0x5}, {0x6, 0x6}, {0x0, 0x1}, {0x7, 0x2}, {0x7, 0x3}, {0x3, 0x3}, {0x6, 0x2}, {0x4, 0x8}, {0x4, 0x3}, {0x1, 0x4}, {0x7, 0x2}, {0x2, 0xa}, {0x5, 0x7}, {0x5, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x16, 0x4, 0x18, 0x3, 0x24, 0x6, 0x9, 0x12, 0x2, 0x6, 0x1b, 0x33, 0x3, 0x6c, 0x1b, 0x6c, 0x18, 0x24]}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1b, 0x48, 0x60, 0x60, 0x6, 0x9, 0x60, 0x36, 0x30, 0x6c, 0x18, 0x18, 0x24, 0x9, 0x30, 0x30, 0x2, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3, 0x8, 0xcf5, 0x1000, 0x6, 0x70, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xfff9, 0xe, 0x7, 0x81, 0x42, 0x4e76, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x0, 0x1}, {0x1, 0x7}, {0x0, 0x7}, {0x7, 0x5}, {0x0, 0x9}, {0x2, 0x7}, {0x2, 0x4}, {0x7}, {0x6, 0x3}, {0x0, 0x1}, {0x7, 0x4}, {0x1, 0x6}, {0x4, 0x6}, {0x5, 0x7}, {0x0, 0x2}, {0x7, 0x7}, {0x7}, {0x0, 0x4}, {0x0, 0x5}, {0x5, 0x2}, {0x2, 0x9}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0x7}, {0x4, 0x7}, {0x0, 0x9}, {0x4, 0xa}, {0x3}, {0x5, 0x2}, {0x3}, {0x1, 0x6}, {0x7, 0x6}, {0x6, 0x9}, {0x1, 0x3}, {0x0, 0x3}, {0x7, 0x1}, {0x2, 0x2}, {0x4, 0x6}, {0x2, 0x7}, {0x2, 0x7}, {0x6, 0x1}, {0x6, 0x9}, {0x7, 0x5}, {0x5, 0x5}, {0x0, 0x8}, {0x0, 0x2}]}]}]}]}, {0x268, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x64, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x8, 0x6, 0x2, 0x9, 0xe, 0xd, 0xb6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x6, 0xa}, {0x0, 0x6}, {0x7}, {0x3, 0x4}, {0x1}, {0x4, 0x4}, {0x6, 0x6}, {0x4}, {0x5, 0x7}, {0x3}, {0x7, 0x5}, {0x7, 0x7}, {0x3, 0x1}, {0x1, 0x9}, {0x5, 0x3}, {0x2, 0x5}, {0x5}, {0x4, 0xa}, {0x1, 0x2}, {0x1, 0x3}, {0x0, 0x9}, {0x5, 0x4}, {0x4, 0x7}, {0x6, 0x3}, {0x6, 0x9}, {0x3, 0x5}, {0x1, 0x5}, {0x1}, {0x6, 0x6}, {0x3, 0x1}, {0x1, 0xa}, {0x5, 0x8}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1dc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xf, 0x1, 0xffff, 0x9, 0xff, 0xfff9, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x3, 0xa6, 0x7, 0xfff, 0x9, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x958, 0x8, 0x306, 0x29, 0x0, 0x7, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x2, 0xd22, 0x2, 0x10, 0xfffe, 0xcb, 0x1000]}}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb4, 0x9, 0x7, 0x4, 0x5, 0x2, 0x2, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa9b, 0x8000, 0xb, 0x4, 0x5, 0x6, 0x6, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0xc, 0x5, 0x24, 0x2, 0x31, 0x24, 0x12, 0x6c, 0x1a, 0x16, 0xb, 0x4, 0x48, 0x5, 0x4f, 0x1b, 0x1b, 0x4, 0x16, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0xd8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x1, 0x3}, {0x4}, {0x0, 0x6}, {0x3, 0x5}, {0x0, 0x3}, {0x7, 0x1}, {0x3, 0x5}, {0x5, 0x7}, {0x5, 0xa}, {0x1, 0x3}, {0x5, 0x6}, {0x1, 0x9}, {0x5, 0x6}, {}, {0x2, 0x9}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0xa}, {0x0, 0x4}, {0x4, 0x4}, {0x7, 0x6}, {0x6, 0x7}, {0x3, 0x9}, {0x7, 0x6}, {0x5, 0x6}, {0x7, 0x6}, {0x6, 0x8}, {0x6, 0x3}, {0x1, 0x3}, {0x0, 0x3}, {}, {0x1, 0x8}, {0x1, 0x5}, {0x0, 0x6}, {0x0, 0xa}, {0x5, 0x7}, {0x3, 0x5}, {0x1, 0x9}, {0x0, 0x2}, {0x1, 0xa}, {0x0, 0x4}, {0x4, 0x5}, {0x2, 0x2}, {0x1, 0x1}, {0x0, 0x2}, {0x0, 0x9}, {0x1, 0xa}, {0x0, 0xa}, {0x1, 0x1}, {}, {0x1, 0x5}, {0x2, 0x7}, {0x1, 0xa}, {0x5, 0x2}, {0x2, 0x3}, {}, {0x0, 0x6}, {0x2, 0x8}, {0x7, 0x4}, {0x5}, {0x1, 0x5}, {}, {0x0, 0x5}, {0x3, 0x9}, {0x1, 0xa}, {0x2, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x2, 0x9}, {0x5, 0x6}, {0x2, 0x5}, {0x0, 0x7}, {0x6, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6c, 0x24, 0x30, 0x3, 0x9, 0x48, 0x41, 0x1, 0x12, 0x4, 0x48, 0x3, 0x6, 0x1b, 0x24, 0x1b, 0x18, 0x1, 0x24, 0xc, 0x24, 0xc, 0x6c, 0x18, 0x9, 0x18, 0x48, 0x4, 0xb]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x18, 0x36, 0x30, 0x48, 0x30, 0x6, 0x2, 0xb, 0x73, 0x6c]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x60, 0x4, 0x6c, 0x6, 0x1b, 0x1, 0x48, 0x9, 0x39, 0x60, 0x4, 0x6, 0x6c, 0x5, 0x1, 0x5, 0x24, 0x48, 0x6, 0x30, 0x3, 0x6, 0xc, 0x24, 0x48, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x4}]}]}, 0x1314}}, 0x800)

1m43.257790088s ago: executing program 0 (id=1566):
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x26, 0x0, @void}, 0xfffffe37)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x208800, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
r1 = socket$inet6(0xa, 0x5, 0xb)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f000001aa40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x720, 0x210, 0xf0, 0x440, 0x0, 0x210, 0x650, 0x650, 0x650, 0x650, 0x650, 0x6, &(0x7f0000000c40), {[{{@ipv6={@mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xffffff00, 0xffffff00, 0xffffffff], [0xff000000], 'gre0\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x5, 0x0, 0x40}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@private0, 0x8, 0x5, 0x1}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, [0xff, 0x0, 0xff, 0xff000000], [0x0, 0xff000000, 0xff, 0xff000000], 'ipvlan1\x00', 'wg0\x00', {}, {0xff}, 0xc8, 0x3c, 0x880d4ae6c3ffa294, 0x25}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x2}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@rt={{0x138}, {0x9, [0x5, 0xe79], 0x7, 0x1, 0x6, [@rand_addr=' \x01\x00', @private0, @dev={0xfe, 0x80, '\x00', 0x16}, @mcast2, @local, @private0, @mcast2, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x10}, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty], 0x5}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xcd, 0x9}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @empty, [0xff, 0xffffffff, 0x0, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xffffffff], 'caif0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x2, 0xc, 0x4, 0x3}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@loopback, @ipv6=@empty, 0x35, 0xf, 0x1}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xe1, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x780)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x800)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r5=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800b1efb9669237000000000000000000ff00"/30], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c00), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000001080)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="f0030000", @ANYRES16=r6, @ANYBLOB="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"], 0x3f0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8050)

1m42.12930104s ago: executing program 0 (id=1568):
r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
r1 = fcntl$getown(r0, 0x9)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
io_uring_setup(0x93d, &(0x7f0000000080)={0x0, 0x70e6, 0x2, 0x2, 0x119})
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
write$qrtrtun(r5, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x47], &(0x7f0000000240), 0x9, 0x1}}, 0x40)
syz_open_procfs(r1, &(0x7f00000000c0)='oom_score_adj\x00')
r8 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$sock_int(r8, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0xc613}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r9, 0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000001500)=""/4081, 0xff1}}, 0x10)
setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4)

1m40.701772161s ago: executing program 3 (id=1569):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000))
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
unshare(0x22020600)
r1 = syz_io_uring_setup(0x1f87, 0x0, &(0x7f0000000100)=<r2=>0x0, 0x0)
syz_io_uring_submit(r2, 0x0, 0x0)
io_uring_enter(r1, 0x54, 0x4, 0xf, 0x0, 0x18)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]})

1m38.404092264s ago: executing program 3 (id=1570):
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x3f1243, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="fe"])
ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000280))
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7c34, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x7f, 0x4000000, 0x38416761, 0x2, 0x0, 0x4, 0xa, 0x9, 0x1, 0x3, 0x1, 0xc0b4c4325ad1a7ca}})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
acct(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00')

1m37.657032029s ago: executing program 4 (id=1572):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRESHEX=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)={0x2c, r3, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x551}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r6, 0x0)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x4, 0x0, 0x0, 0xef5f, 0x0, 0x2, 0x6], 0x0, 0x8340})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10)
r9 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r9, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r10 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r10, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x34, r8, 0x1, 0x0, 0x0, {0x7}, [@ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x34}}, 0x0)
symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00')

1m36.582939016s ago: executing program 3 (id=1573):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = msgget$private(0x0, 0x1c0)
msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYRES8], 0x0, 0x0)
msgsnd(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01"], 0x8, 0x0)
msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000180)=""/145)

1m33.957708614s ago: executing program 3 (id=1574):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r2=>0x0})
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
write$dsp(0xffffffffffffffff, 0x0, 0x0)
mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r4, 0x0, 0x0)
r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="2b72646d6120accf1dbe7909239f8eb702133329b4239b6c52836d6a0434b2c9d7a6a3d2f93e0e737163ea1b0951b7c06ae8638e16c47f3fa9721aa2e0eeff16a1eb014e4c3cca9c4154fcb56b3b1362c9ff60b349b145c44957f6f75698"], 0x6)
r9 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xfe, r2}, [@IFA_FLAGS={0x8, 0x8, 0x466}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}]}, 0x28}}, 0x0)
ioctl$FS_IOC_SETFSLABEL(r9, 0x41009432, &(0x7f0000000300)="644f5ffa83760e446dc62217061ddc67a6e863e96280209d8cb8fcd9dd34c230236a89d204d133b349090d9bc5d3bd17f15add5da3b50a8836e5261a5ae7a8643158b1ab59c70ddf6b175cc626160cb9abf80dc90f730cb048d943640209dd135f1ad180b947669a5eae69c5c4b113bdd47a8730e69d8856e4c151596d03f207be990dabead0e63494207278d6c42f8c4cc286c6d68a08fc38c3bc3413f1761a76ef743fc93921545e6c698aa7b768d20971fb86ce3de1818801bfbebf84110c8d264684893c38ad03890c01b4654dca839b2f786ee317589651a765c89cc9959935beced415ee1defea8f698901255a87cd4344238943966104db86f1b60c4c")
r10 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0)
ioctl$I2C_SMBUS(r10, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x5, &(0x7f0000000080)={0x3, "90f541a5e60000000003f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}})
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0)
sendmsg$key(r0, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0x0, 0x25dfdbfe}, 0x10}}, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)

1m33.493017232s ago: executing program 0 (id=1575):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000304000000000000000100000300", @ANYRES32=0x0, @ANYBLOB="000000004000000014001280090001007665746800000000", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x48}}, 0x0)
fsopen(&(0x7f0000000000)='efs\x00', 0x1)

1m33.199784307s ago: executing program 4 (id=1576):
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14)
syz_80211_inject_frame(0x0, 0x0, 0xb5)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

1m31.906314241s ago: executing program 1 (id=1577):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0)
ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
bind$can_raw(r3, &(0x7f00000001c0)={0x1d, r4}, 0x10)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000003c0)=0x101, 0x4)
ioctl$SIOCGSTAMP(r3, 0x8906, 0x0)
sendmsg$can_raw(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0a08000000000100"}, 0x10}}, 0x0)
recvmmsg(r3, &(0x7f0000004fc0)=[{{0x0, 0x0, 0x0}, 0x68f}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000e00)=""/4096, 0x1000}, {0x0}], 0x2}, 0x4}], 0x2, 0x23, 0x0)
execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0)
sendto$unix(r1, &(0x7f0000000180)="e28c2300e5b25ebe1fb8378b0435b3d4616ae6dc6e92058bb68e22eb9039f9f9f6f3318412d31ae7d64941c63584e0f21b0f61c8bf7e81003ddef0f889d21dd5707ed97f440927860d0911299b8552e093a38b1610f8d48c2f7e1bf6c06ccf40b6155164e5d0bae6bf484a1499faa047d33355923d19863e5bde9d067daf0ea37332b0dce07388e3e9109bd26639b84f1bd03740827240480d693a35e2c5684d50641428c433410122c580226cc1f91594fbc27b5c24b7fc62f07dbfcf39e2653606eefaaade804de8995da0a39e32f5903d440d5f4dbf2a78c5c981278cbb1420c9529de090b760db13e956c6335a", 0xffffffffffffffb5, 0x0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010200000010f3044d0740000102030109022400010103"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x44)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0xd81e)

1m31.443899345s ago: executing program 0 (id=1578):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={<r6=>0xffffffffffffffff}, 0x106, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f00000002c0)={0x7, 0x8, 0xfa00, {r6, 0x27d1}}, 0x10)
r7 = epoll_create1(0x0)
r8 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
r9 = io_uring_setup(0x7cac, &(0x7f00000000c0)={0x0, 0x753a, 0x8, 0x2, 0x1fd})
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r11 = accept4(r10, 0x0, 0x0, 0x0)
sendmmsg$alg(r11, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0)
ioctl$int_in(r11, 0x5452, &(0x7f0000000500)=0xd0)
close_range(r9, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000040)={0xb0000000})
sendmsg$nl_route_sched(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3513, 0x6, 0xffffffffffffffff, 0xb6b9, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x24000880)

1m31.283305365s ago: executing program 3 (id=1579):
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000002380), 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000950000100000000075a994f742b97015907f147e4cf9b39c5da1e12bf818a7feacecbdd0db6809e4e8357106d5bd478e3ab4dffc4845a49ce5298cad36ea29bc281fbf4253c4dcb3b8ad3c35560634b13ab488417a7b8993aeefeade94964989b3c896ba119575f816caeedca191b1519de49bcfe373781f"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x18)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x0, 0x0, 0x7ff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x801, 0x70bd24, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)
socket$kcm(0x10, 0x2, 0x4)
capset(0x0, &(0x7f00000000c0))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000380), 0x111}}, 0x20)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]})
socket$nl_xfrm(0x10, 0x3, 0x6)

1m30.604764609s ago: executing program 4 (id=1580):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRESHEX=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)={0x2c, r3, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x551}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r6, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="120000002004"], 0x20)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10)
r9 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r9, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r10 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r10, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x34, r8, 0x1, 0x0, 0x0, {0x7}, [@ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x34}}, 0x0)
symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00')

1m17.992065282s ago: executing program 4 (id=1581):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001000000000000008f4008000000000f316e8d553e0"], 0x50)
openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101042)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0xb6c)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)=0x1000c)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x0, 0x0)
fanotify_init(0x200, 0x0)
signalfd(0xffffffffffffffff, &(0x7f0000000600), 0x8)
socket$inet_udp(0x2, 0x2, 0x0)
syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r3}, 0x1e)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]})

1m17.294133068s ago: executing program 3 (id=1582):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b00010000000009046b00016a93f00009058803", @ANYRES32], 0x0)
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110017a953210ac0504c777620102030109022d0001080540040904270102fffd01000921e700070122b30409050c0200020103400905df02"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="00031a0000000403"], 0x0, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="200b06"], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000040)={0x0, 0xd, 0xea, {0xea, 0x24, "c73f626663328c2c81019a3bdd8e102da49701b76d54ec4e4ef18a50012cf2a34f3bbda3eff6a599132030727d7e9a36ce24a3ff93f1d7b6ce9642f535f966abbe40e256e2e094511fba5fcb5d92a37864b72380f3c657c9caa8b89fb042c2a3fc2b3b6bfe8652f6a225700c6109622bedc3ea3c169e5e013b27ad1c4c4b2e150da2c86c4607e30785fa9f3b827575b217c36b2775747b50f0856539088340685afc53d7b0782e72463ec96183d73b4748667954831db94b94cdec1baa82f441f745751cf6530969b6a4811f66dbe7b11f22a66ed16afa94fe2a6167c91506cdb01a3d8530f2c062"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x445}}, &(0x7f0000000180)={0x0, 0x22, 0x12, {[@main=@item_012={0x2, 0x0, 0xc, "4193"}, @global=@item_4={0x3, 0x1, 0x1, "42b35e98"}, @main=@item_012={0x2, 0x0, 0x9, "1f6e"}, @global=@item_012={0x1, 0x1, 0x3, "12"}, @main=@item_4={0x3, 0x0, 0x8, "0563936e"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xc, 0x1, {0x22, 0x59}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x20, 0x5, 0x69, "1525f885a5cb986608ea404b04cb2f8d3048aca1f09cc4c958395a9ab08877c39b8c68d44500a6b28cd889564fe8d5a9a440ec848d567856f17976b133de041ba6f5eb750c00d27a639afb9bab13da02d3255b0eca942367220d4f0c4d9354380326632742c22bdafe"}, &(0x7f00000002c0)={0x0, 0xa, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000340)={0x20, 0x1, 0x9b, "4bff7cd032b4b9c501f08ad7e9846ccdb7ed9fce346a9c591c8eb55b1311e0e0a7ccdf1e3d1b5524170eae3c2a0f92e1edb919ce1a6ed31493f9c0d2bcb7c774344b3d86c742e19a51d918f8b0abb09b6bb633ab9da2dbc37e8a2b2ad8c9913052b6cd403b9c612a032d307e043ab1aa5700b39ea59ee6399619bff4357220c47c3f67bdfae03417f36e322b87df66a07d9afdaaf503dd655aec08"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x80}})

1m16.945452478s ago: executing program 1 (id=1583):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = msgget$private(0x0, 0x1c0)
msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYRES8], 0x0, 0x0)
msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000180)=""/145)

1m16.86458236s ago: executing program 4 (id=1584):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106}}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}}, {0xa, 0x4e20, 0x7, @remote}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0xa, 0x3, 0x3, @local}}}, 0x48)
close_range(r0, 0xffffffffffffffff, 0x400000000000000)

1m16.659719329s ago: executing program 1 (id=1585):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRESHEX=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)={0x2c, r3, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x551}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r6, 0x0)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x4, 0x0, 0x0, 0xef5f, 0x0, 0x2, 0x6], 0x0, 0x8340})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10)
r9 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r9, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r10 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r10, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x34, r8, 0x1, 0x0, 0x0, {0x7}, [@ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x34}}, 0x0)
symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00')

1m16.624849929s ago: executing program 0 (id=1586):
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000002380), 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000950000100000000075a994f742b97015907f147e4cf9b39c5da1e12bf818a7feacecbdd0db6809e4e8357106d5bd478e3ab4dffc4845a49ce5298cad36ea29bc281fbf4253c4dcb3b8ad3c35560634b13ab488417a7b8993aeefeade94964989b3c896ba119575f816caeedca191b1519de49bcfe373781f"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x18)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x0, 0x0, 0x7ff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x801, 0x70bd24, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)
socket$kcm(0x10, 0x2, 0x4)
capset(0x0, &(0x7f00000000c0))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000380), 0x111}}, 0x20)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]})
socket$nl_xfrm(0x10, 0x3, 0x6)
close_range(r6, 0xffffffffffffffff, 0x0)

1m16.564839425s ago: executing program 4 (id=1587):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x20c}}, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0xf801, 0x2, 0x4, 0x3}, &(0x7f0000000200)=0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f0000000740)=r3, 0x4)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
openat$cgroup_ro(r5, &(0x7f00000007c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
getdents(r5, &(0x7f0000001fc0)=""/184, 0x20002078)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="10010000", @ANYRES16, @ANYBLOB="c88845e7e05ae52d00009300000008001317"], 0x1c}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b28, &(0x7f0000000000)={'wlan1\x00'})

59.629060891s ago: executing program 0 (id=1588):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r2=>0x0})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="4d7e00000000fbdbdf252a00000008002f00000000000c000500000000000000000008000200", @ANYRES32=r2, @ANYBLOB="acc844dbae0bc4efc3d3b95396b9e7a4ad"], 0x30}, 0x4, 0x700000000000000}, 0x8850)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, 0x0, 0x0, 0x2, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000015c0)={0x2020, 0x0, <r9=>0x0}, 0x2020)
write$FUSE_DIRENT(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="4001000000000000", @ANYRES64=r9, @ANYBLOB="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"], 0x140)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'})
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r10 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0)
syz_emit_ethernet(0x2b, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbc7e8862c3eb481000300080500072319f52a49134e5f46e4c922279b8f3d66c6c6b2720ca9f830f790ad6bb53294cec12841f859a47ccd9b165f4fb4c82af06e883b89db39739da89f9544b86ea07bb9bb90e9ec89634a737a5c1f6ee4c55831f98fdf7220ce19281f6f9a65db97"], &(0x7f00000001c0)={0x0, 0x1, [0x0, 0xff9, 0x128, 0xb36]})
r12 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000040)={0xa0000004})
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r10, &(0x7f0000000140)={0xa0000001})

0s ago: executing program 33 (id=1585):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRESHEX=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)={0x2c, r3, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x551}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r6, 0x0)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x4, 0x0, 0x0, 0xef5f, 0x0, 0x2, 0x6], 0x0, 0x8340})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10)
r9 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r9, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r10 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r10, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x34, r8, 0x1, 0x0, 0x0, {0x7}, [@ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x34}}, 0x0)
symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00')

kernel console output (not intermixed with test programs):

axpacket: 8
[  447.519116][ T1774] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  447.553725][ T1774] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  447.587639][ T1774] usb 4-1: config 168 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping
[  447.623291][ T1774] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  447.624807][ T5921] kernel write not supported for file /input/mouse0 (pid: 5921 comm: kworker/0:4)
[  447.631140][ T1774] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  447.673310][ T1774] usb 4-1: config 168 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping
[  447.694592][ T1774] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  447.716142][T10105] tipc: Started in network mode
[  447.721039][T10105] tipc: Node identity b6c7fea11fdc, cluster identity 4711
[  447.732783][ T1774] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  447.754663][T10105] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  447.773328][ T1774] usb 4-1: config 168 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping
[  447.791718][T10109] syzkaller0: entered promiscuous mode
[  447.803731][T10109] syzkaller0: entered allmulticast mode
[  447.815821][T10108] /dev/nullb0: Can't open blockdev
[  447.815878][ T1774] usb 4-1: string descriptor 0 read error: -22
[  447.843386][ T1774] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  447.877991][ T1774] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.887829][T10105] tipc: Resetting bearer <eth:syzkaller0>
[  447.906769][ T1774] adutux 4-1:168.0: interrupt endpoints not found
[  447.920953][T10104] tipc: Resetting bearer <eth:syzkaller0>
[  448.081903][T10104] tipc: Disabling bearer <eth:syzkaller0>
[  448.473806][ T5921] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  448.675313][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 152, changing to 11
[  448.781624][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  448.838702][ T5921] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  448.910516][ T5921] usb 3-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00
[  448.948933][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.974141][ T5921] usb 3-1: config 0 descriptor??
[  449.119691][T10131] binder: 10126:10131 ioctl c0306201 200000000480 returned -14
[  449.430782][ T1774] usb 4-1: USB disconnect, device number 36
[  450.157581][T10139] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1134'.
[  450.301863][ T5921] uclogic 0003:5543:0064.0007: reserved main item tag 0xd
[  450.363720][ T5921] uclogic 0003:5543:0064.0007: hidraw0: USB HID v0.00 Device [HID 5543:0064] on usb-dummy_hcd.2-1/input0
[  450.541220][ T1774] usb 3-1: USB disconnect, device number 23
[  451.659942][T10150] fido_id[10150]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  452.118623][ T1167] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  453.727716][T10187] binder: 10182:10187 ioctl c0306201 200000000480 returned -14
[  453.981853][T10191] xt_CT: You must specify a L4 protocol and not use inversions on it
[  455.627803][T10183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1146'.
[  455.849954][T10210] vivid-007: =================  START STATUS  =================
[  455.857865][T10210] vivid-007: Enable Output Cropping: true
[  455.865582][T10210] vivid-007: Enable Output Composing: true
[  455.871662][T10210] vivid-007: Enable Output Scaler: true
[  455.877489][T10210] vivid-007: Tx RGB Quantization Range: Automatic
[  455.884293][T10210] vivid-007: Transmit Mode: HDMI
[  455.889492][T10210] vivid-007: Hotplug Present: 0x00000000
[  455.895481][T10210] vivid-007: RxSense Present: 0x00000000
[  455.940745][T10210] vivid-007: EDID Present: 0x00000000
[  455.947119][T10210] vivid-007: ==================  END STATUS  ==================
[  457.700279][T10222] comedi comedi2: s526: I/O port conflict (0x4f0,64)
[  459.252018][T10248] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  459.290642][T10248] input: syz1 as /devices/virtual/input/input12
[  459.325712][T10247] bridge0: port 3(batadv1) entered blocking state
[  459.337721][T10247] bridge0: port 3(batadv1) entered disabled state
[  459.346345][T10247] batadv1: entered allmulticast mode
[  459.365862][T10244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1166'.
[  459.374835][T10247] batadv1: entered promiscuous mode
[  459.708270][T10252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1169'.
[  459.820360][ T8380] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  459.830126][ T8380] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  460.253383][ T5908] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  460.298991][T10263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1174'.
[  460.743851][ T5908] usb 4-1: device descriptor read/64, error -71
[  460.889337][T10277] binder: 10273:10277 ioctl c0306201 200000000480 returned -14
[  460.983755][ T5908] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  461.133295][ T5908] usb 4-1: device descriptor read/64, error -71
[  461.346358][T10287] syz.0.1182: attempt to access beyond end of device
[  461.346358][T10287] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  461.469835][ T5908] usb usb4-port1: attempt power cycle
[  461.885815][ T5908] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  461.966818][ T5908] usb 4-1: device descriptor read/8, error -71
[  462.253683][ T5908] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  462.334993][ T5908] usb 4-1: device descriptor read/8, error -71
[  462.346665][T10301] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[  462.353219][T10301] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  462.363710][T10301] vhci_hcd vhci_hcd.0: Device attached
[  462.378693][T10298] dvmrp5: entered allmulticast mode
[  462.408416][T10301] dvmrp5: left allmulticast mode
[  462.444468][ T5908] usb usb4-port1: unable to enumerate USB device
[  462.536043][T10302] vhci_hcd: connection closed
[  462.543550][ T8380] vhci_hcd: stop threads
[  462.559772][ T8380] vhci_hcd: release socket
[  462.567508][ T8380] vhci_hcd: disconnect device
[  462.705936][  T978] vhci_hcd: vhci_device speed not set
[  464.467112][T10343] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1200'.
[  464.480681][T10343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1200'.
[  464.497161][T10343] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1200'.
[  464.602208][T10343] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1200'.
[  464.757968][T10350] netlink: 'syz.4.1203': attribute type 10 has an invalid length.
[  464.771456][T10351] tmpfs: Bad value for 'huge'
[  464.776829][T10350] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1203'.
[  465.493617][T10359] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1206'.
[  465.530740][T10360] FAULT_INJECTION: forcing a failure.
[  465.530740][T10360] name failslab, interval 1, probability 0, space 0, times 0
[  465.556557][T10360] CPU: 0 UID: 0 PID: 10360 Comm: syz.4.1205 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) 
[  465.556583][T10360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  465.556594][T10360] Call Trace:
[  465.556601][T10360]  <TASK>
[  465.556609][T10360]  dump_stack_lvl+0x189/0x250
[  465.556634][T10360]  ? __pfx____ratelimit+0x10/0x10
[  465.556659][T10360]  ? __pfx_dump_stack_lvl+0x10/0x10
[  465.556678][T10360]  ? __pfx__printk+0x10/0x10
[  465.556704][T10360]  ? __pfx___might_resched+0x10/0x10
[  465.556728][T10360]  should_fail_ex+0x414/0x560
[  465.556756][T10360]  should_failslab+0xa8/0x100
[  465.556782][T10360]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  465.556806][T10360]  ? __alloc_skb+0x112/0x2d0
[  465.556830][T10360]  __alloc_skb+0x112/0x2d0
[  465.556852][T10360]  netlink_sendmsg+0x5c6/0xb30
[  465.556882][T10360]  ? __pfx_netlink_sendmsg+0x10/0x10
[  465.556904][T10360]  ? __lock_acquire+0xab9/0xd20
[  465.556923][T10360]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  465.556944][T10360]  ? __pfx_netlink_sendmsg+0x10/0x10
[  465.556962][T10360]  __sock_sendmsg+0x219/0x270
[  465.556986][T10360]  sock_write_iter+0x258/0x330
[  465.557016][T10360]  ? __pfx_sock_write_iter+0x10/0x10
[  465.557047][T10360]  ? bpf_lsm_file_permission+0x9/0x20
[  465.557060][T10360]  ? security_file_permission+0x75/0x290
[  465.557092][T10360]  vfs_write+0x54b/0xa90
[  465.557118][T10360]  ? __pfx_sock_write_iter+0x10/0x10
[  465.557139][T10360]  ? __pfx_vfs_write+0x10/0x10
[  465.557169][T10360]  ? __fget_files+0x2a/0x420
[  465.557194][T10360]  ksys_write+0x145/0x250
[  465.557217][T10360]  ? __pfx_ksys_write+0x10/0x10
[  465.557235][T10360]  ? rcu_is_watching+0x15/0xb0
[  465.557258][T10360]  ? do_syscall_64+0xbe/0x3b0
[  465.557283][T10360]  do_syscall_64+0xfa/0x3b0
[  465.557298][T10360]  ? lockdep_hardirqs_on+0x9c/0x150
[  465.557320][T10360]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  465.557336][T10360]  ? clear_bhb_loop+0x60/0xb0
[  465.557357][T10360]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  465.557372][T10360] RIP: 0033:0x7f889138e929
[  465.557388][T10360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  465.557402][T10360] RSP: 002b:00007f88921dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  465.557421][T10360] RAX: ffffffffffffffda RBX: 00007f88915b6160 RCX: 00007f889138e929
[  465.557434][T10360] RDX: 0000000000000024 RSI: 00002000000000c0 RDI: 0000000000000005
[  465.557445][T10360] RBP: 00007f88921dc090 R08: 0000000000000000 R09: 0000000000000000
[  465.557455][T10360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  465.557465][T10360] R13: 0000000000000000 R14: 00007f88915b6160 R15: 00007ffcf5db4278
[  465.557493][T10360]  </TASK>
[  467.007985][T10370] /dev/nullb0: Can't open blockdev
[  467.869685][T10384] FAULT_INJECTION: forcing a failure.
[  467.869685][T10384] name failslab, interval 1, probability 0, space 0, times 0
[  468.219195][T10384] CPU: 1 UID: 0 PID: 10384 Comm: syz.1.1212 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) 
[  468.219222][T10384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  468.219233][T10384] Call Trace:
[  468.219241][T10384]  <TASK>
[  468.219249][T10384]  dump_stack_lvl+0x189/0x250
[  468.219273][T10384]  ? __pfx____ratelimit+0x10/0x10
[  468.219303][T10384]  ? __pfx_dump_stack_lvl+0x10/0x10
[  468.219322][T10384]  ? __pfx__printk+0x10/0x10
[  468.219349][T10384]  ? __pfx___might_resched+0x10/0x10
[  468.219368][T10384]  ? fs_reclaim_acquire+0x7d/0x100
[  468.219391][T10384]  should_fail_ex+0x414/0x560
[  468.219420][T10384]  should_failslab+0xa8/0x100
[  468.219445][T10384]  __kmalloc_noprof+0xcb/0x4f0
[  468.219466][T10384]  ? kfree+0x4d/0x440
[  468.219484][T10384]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  468.219508][T10384]  tomoyo_realpath_from_path+0xe3/0x5d0
[  468.219528][T10384]  ? tomoyo_domain+0xda/0x130
[  468.219552][T10384]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  468.219576][T10384]  tomoyo_path_number_perm+0x1e8/0x5a0
[  468.219602][T10384]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  468.219643][T10384]  ? __lock_acquire+0xab9/0xd20
[  468.219682][T10384]  ? __fget_files+0x2a/0x420
[  468.219702][T10384]  ? __fget_files+0x2a/0x420
[  468.219715][T10384]  ? __fget_files+0x3a0/0x420
[  468.219729][T10384]  ? __fget_files+0x2a/0x420
[  468.219749][T10384]  security_file_ioctl+0xcb/0x2d0
[  468.219776][T10384]  __se_sys_ioctl+0x47/0x170
[  468.219800][T10384]  do_syscall_64+0xfa/0x3b0
[  468.219816][T10384]  ? lockdep_hardirqs_on+0x9c/0x150
[  468.219838][T10384]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.219856][T10384]  ? clear_bhb_loop+0x60/0xb0
[  468.219876][T10384]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.219893][T10384] RIP: 0033:0x7f8d5ff8e929
[  468.219909][T10384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  468.219923][T10384] RSP: 002b:00007f8d60ea0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  468.219942][T10384] RAX: ffffffffffffffda RBX: 00007f8d601b5fa0 RCX: 00007f8d5ff8e929
[  468.219955][T10384] RDX: 0000200000000080 RSI: 00000000c008ae88 RDI: 0000000000000005
[  468.219966][T10384] RBP: 00007f8d60ea0090 R08: 0000000000000000 R09: 0000000000000000
[  468.219977][T10384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  468.219988][T10384] R13: 0000000000000000 R14: 00007f8d601b5fa0 R15: 00007ffe7caa4f38
[  468.220017][T10384]  </TASK>
[  468.220024][T10384] ERROR: Out of memory at tomoyo_realpath_from_path.
[  468.485842][T10389] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1214'.
[  468.744517][T10394] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1217'.
[  470.820787][T10427] misc userio: Begin command sent, but we're already running
[  470.880879][T10430] misc userio: Begin command sent, but we're already running
[  471.173510][  T978] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  471.347369][  T978] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  471.359577][  T978] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  471.370812][  T978] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  471.382828][  T978] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  471.394639][  T978] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  471.405635][T10438] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000
[  471.414751][T10438] netlink: 'syz.2.1231': attribute type 16 has an invalid length.
[  471.422603][T10438] netlink: 'syz.2.1231': attribute type 3 has an invalid length.
[  471.430487][T10438] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1231'.
[  471.440908][  T978] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  471.450031][  T978] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  471.458242][  T978] usb 4-1: Product: syz
[  471.462391][  T978] usb 4-1: Manufacturer: syz
[  471.476186][  T978] cdc_wdm 4-1:1.0: skipping garbage
[  471.481412][  T978] cdc_wdm 4-1:1.0: skipping garbage
[  471.489392][  T978] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  471.495402][  T978] cdc_wdm 4-1:1.0: Unknown control protocol
[  471.681015][T10433] cdc_wdm 4-1:1.0: Error submitting int urb - -90
[  472.193479][T10445] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  474.876298][   T43] usb 4-1: USB disconnect, device number 41
[  477.125723][   T30] audit: type=1400 audit(1752485123.673:27): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10479 comm="syz.4.1244" dest=2
[  478.762688][T10497] netlink: 'syz.4.1247': attribute type 303 has an invalid length.
[  479.520921][T10494] netlink: 'syz.0.1248': attribute type 10 has an invalid length.
[  479.538959][T10494] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1248'.
[  479.655986][T10505] comedi comedi0: Minor 14 could not be opened
[  481.283360][T10531] binder: 10526:10531 ioctl c0306201 200000000480 returned -14
[  481.422431][   T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  481.592238][   T10] usb 3-1: Using ep0 maxpacket: 8
[  481.601007][   T10] usb 3-1: config 0 has no interfaces?
[  481.610606][   T10] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  481.622083][   T10] usb 3-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3
[  481.645775][   T10] usb 3-1: Product: syz
[  481.654066][   T10] usb 3-1: Manufacturer: syz
[  481.663133][   T10] usb 3-1: SerialNumber: syz
[  481.678150][   T10] usb 3-1: config 0 descriptor??
[  481.906875][   T10] usb 3-1: USB disconnect, device number 24
[  482.108643][T10523] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1256'.
[  484.820734][   T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  485.347768][T10554] netlink: 'syz.3.1264': attribute type 10 has an invalid length.
[  485.406757][T10554] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1264'.
[  486.946832][T10574] FAULT_INJECTION: forcing a failure.
[  486.946832][T10574] name failslab, interval 1, probability 0, space 0, times 0
[  486.971544][  T978] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  486.971752][T10574] CPU: 1 UID: 0 PID: 10574 Comm: syz.3.1269 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) 
[  486.971775][T10574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  486.971786][T10574] Call Trace:
[  486.971793][T10574]  <TASK>
[  486.971801][T10574]  dump_stack_lvl+0x189/0x250
[  486.971825][T10574]  ? __pfx____ratelimit+0x10/0x10
[  486.971849][T10574]  ? __pfx_dump_stack_lvl+0x10/0x10
[  486.971867][T10574]  ? __pfx__printk+0x10/0x10
[  486.971894][T10574]  ? __pfx___might_resched+0x10/0x10
[  486.971911][T10574]  ? fs_reclaim_acquire+0x7d/0x100
[  486.971934][T10574]  should_fail_ex+0x414/0x560
[  486.971962][T10574]  should_failslab+0xa8/0x100
[  486.971987][T10574]  __kmalloc_noprof+0xcb/0x4f0
[  486.972007][T10574]  ? kfree+0x4d/0x440
[  486.972024][T10574]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  486.972047][T10574]  tomoyo_realpath_from_path+0xe3/0x5d0
[  486.972066][T10574]  ? tomoyo_domain+0xda/0x130
[  486.972090][T10574]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  486.972112][T10574]  tomoyo_path_number_perm+0x1e8/0x5a0
[  486.972138][T10574]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  486.972177][T10574]  ? __lock_acquire+0xab9/0xd20
[  486.972214][T10574]  ? __fget_files+0x2a/0x420
[  486.972233][T10574]  ? __fget_files+0x2a/0x420
[  486.972246][T10574]  ? __fget_files+0x3a0/0x420
[  486.972259][T10574]  ? __fget_files+0x2a/0x420
[  486.972278][T10574]  security_file_ioctl+0xcb/0x2d0
[  486.972304][T10574]  __se_sys_ioctl+0x47/0x170
[  486.972328][T10574]  do_syscall_64+0xfa/0x3b0
[  486.972344][T10574]  ? lockdep_hardirqs_on+0x9c/0x150
[  486.972366][T10574]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  486.972382][T10574]  ? clear_bhb_loop+0x60/0xb0
[  486.972402][T10574]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  486.972418][T10574] RIP: 0033:0x7f076fd8e929
[  486.972434][T10574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  486.972448][T10574] RSP: 002b:00007f0770bfa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  486.972465][T10574] RAX: ffffffffffffffda RBX: 00007f076ffb5fa0 RCX: 00007f076fd8e929
[  486.972478][T10574] RDX: 0000200000000080 RSI: 00000000c008ae88 RDI: 0000000000000005
[  486.972489][T10574] RBP: 00007f0770bfa090 R08: 0000000000000000 R09: 0000000000000000
[  486.972499][T10574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  486.972509][T10574] R13: 0000000000000000 R14: 00007f076ffb5fa0 R15: 00007ffc4589c858
[  486.972544][T10574]  </TASK>
[  486.972552][T10574] ERROR: Out of memory at tomoyo_realpath_from_path.
[  487.391614][  T978] usb 2-1: Using ep0 maxpacket: 8
[  487.412818][  T978] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  487.451532][  T978] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  487.517311][  T978] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  487.536677][  T978] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  487.557594][  T978] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  487.567037][  T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  487.600510][  T978] usbtmc 2-1:16.0: bulk endpoints not found
[  489.953700][ T5908] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  490.157772][ T5908] usb 3-1: config 0 has an invalid interface number: 216 but max is 0
[  490.186570][ T5908] usb 3-1: config 0 has no interface number 0
[  490.211093][ T5908] usb 3-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64
[  490.240294][ T5908] usb 3-1: config 0 interface 216 altsetting 4 endpoint 0x1 has invalid wMaxPacketSize 0
[  490.285462][ T5908] usb 3-1: config 0 interface 216 has no altsetting 0
[  490.324760][ T5908] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e
[  490.384817][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  490.446547][ T5908] usb 3-1: config 0 descriptor??
[  490.561389][T10603] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  490.678005][ T5908] usb 3-1: NFC: intf ffff88802401f000 id ffffffff8eb411e0
[  490.693315][ T1774] usb 2-1: USB disconnect, device number 28
[  490.853742][T10626] FAULT_INJECTION: forcing a failure.
[  490.853742][T10626] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  490.897290][T10626] CPU: 1 UID: 0 PID: 10626 Comm: syz.1.1283 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) 
[  490.897317][T10626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  490.897325][T10626] Call Trace:
[  490.897330][T10626]  <TASK>
[  490.897336][T10626]  dump_stack_lvl+0x189/0x250
[  490.897351][T10626]  ? __pfx____ratelimit+0x10/0x10
[  490.897365][T10626]  ? __pfx_dump_stack_lvl+0x10/0x10
[  490.897376][T10626]  ? __pfx__printk+0x10/0x10
[  490.897388][T10626]  ? __might_fault+0xb0/0x130
[  490.897414][T10626]  should_fail_ex+0x414/0x560
[  490.897439][T10626]  _copy_from_user+0x2d/0xb0
[  490.897452][T10626]  input_event_from_user+0xb2/0x280
[  490.897472][T10626]  ? __pfx_input_event_from_user+0x10/0x10
[  490.897492][T10626]  ? input_inject_event+0xbc/0x320
[  490.897504][T10626]  evdev_write+0x2a6/0x480
[  490.897520][T10626]  ? __pfx_evdev_write+0x10/0x10
[  490.897535][T10626]  ? bpf_lsm_file_permission+0x9/0x20
[  490.897545][T10626]  ? security_file_permission+0x75/0x290
[  490.897560][T10626]  ? rw_verify_area+0x258/0x650
[  490.897572][T10626]  ? __pfx_evdev_write+0x10/0x10
[  490.897584][T10626]  vfs_write+0x27e/0xa90
[  490.897601][T10626]  ? __pfx_vfs_write+0x10/0x10
[  490.897616][T10626]  ? __fget_files+0x2a/0x420
[  490.897628][T10626]  ? __fget_files+0x2a/0x420
[  490.897640][T10626]  ? __fget_files+0x3a0/0x420
[  490.897651][T10626]  ? __fget_files+0x2a/0x420
[  490.897672][T10626]  ksys_write+0x145/0x250
[  490.897693][T10626]  ? __pfx_ksys_write+0x10/0x10
[  490.897717][T10626]  ? do_syscall_64+0xbe/0x3b0
[  490.897742][T10626]  do_syscall_64+0xfa/0x3b0
[  490.897755][T10626]  ? lockdep_hardirqs_on+0x9c/0x150
[  490.897775][T10626]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  490.897790][T10626]  ? clear_bhb_loop+0x60/0xb0
[  490.897809][T10626]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  490.897824][T10626] RIP: 0033:0x7f8d5ff8e929
[  490.897839][T10626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  490.897853][T10626] RSP: 002b:00007f8d60e7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  490.897872][T10626] RAX: ffffffffffffffda RBX: 00007f8d601b6080 RCX: 00007f8d5ff8e929
[  490.897885][T10626] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003
[  490.897896][T10626] RBP: 00007f8d60e7f090 R08: 0000000000000000 R09: 0000000000000000
[  490.897905][T10626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  490.897914][T10626] R13: 0000000000000001 R14: 00007f8d601b6080 R15: 00007ffe7caa4f38
[  490.897947][T10626]  </TASK>
[  490.900061][ T5908] usb 3-1: USB disconnect, device number 25
[  491.283532][T10630] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1285'.
[  493.253383][T10655] binder: Bad value for 'max'
[  493.905521][T10655] veth0: entered promiscuous mode
[  494.039152][T10655] veth0: left promiscuous mode
[  494.239253][T10665] binder: BINDER_SET_CONTEXT_MGR already set
[  494.245382][T10665] binder: 10647:10665 ioctl 4018620d 200000000040 returned -16
[  495.359006][T10681] netlink: 'syz.4.1297': attribute type 303 has an invalid length.
[  496.012259][T10687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1300'.
[  496.900106][T10701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1306'.
[  497.617536][T10707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  497.671796][T10707] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  497.741337][T10710] netlink: 284 bytes leftover after parsing attributes in process `syz.3.1309'.
[  497.850305][ T1774] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  497.869356][T10713] netlink: 'syz.4.1310': attribute type 1 has an invalid length.
[  497.968957][T10716] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  498.070224][T10716] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  498.113329][T10716] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  498.168353][T10716] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  498.193657][ T1774] usb 2-1: config index 0 descriptor too short (expected 34, got 18)
[  498.206488][ T1774] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  498.220100][ T1774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  498.228114][ T1774] usb 2-1: Product: syz
[  498.234221][T10716] bond2: (slave geneve2): making interface the new active one
[  498.242212][ T1774] usb 2-1: Manufacturer: syz
[  498.246857][ T1774] usb 2-1: SerialNumber: syz
[  498.326443][ T1774] usb 2-1: config 0 descriptor??
[  498.332847][T10716] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  498.731180][T10722] ALSA: mixer_oss: invalid OSS volume ''
[  498.736884][T10722] ALSA: mixer_oss: invalid OSS volume '›î+]OØ“OG”§eÐÔc¦Íï¯9
bx'�Ä®Cú'
[  498.745360][T10722] ALSA: mixer_oss: invalid OSS volume '_ü¨²å*[bYcqî~l¬r‹<Wí|3z”'
[  498.753549][T10722] ALSA: mixer_oss: invalid OSS volume '{Û±HÎÊJ:'
[  498.759896][T10722] ALSA: mixer_oss: invalid OSS volume 'ú†òóB}sÛæë‘¥"fÎ0ƒôñò^üCç¤ÿ'
[  498.768308][T10722] ALSA: mixer_oss: invalid OSS volume '›gRšyí
›'ù»æG!ÉÛÖP'
[  498.775747][T10722] ALSA: mixer_oss: invalid OSS volume '¡ñ{ßþû”çouD±1*Ú¦i&qrmµ€Ó4_Xn�'
[  498.790036][T10722] ALSA: mixer_oss: invalid OSS volume 'äþ/U~d«î“­?"ù¤ô:9SÀÇ'
[  498.808488][T10722] ALSA: mixer_oss: invalid OSS volume '(»8¿'
[  498.829686][T10722] ALSA: mixer_oss: invalid OSS volume '�íÿ'»)†3loßX³»+iGç9SNW•ŽþØë'
[  498.863342][T10722] ALSA: mixer_oss: invalid OSS volume '¥%•X%°Å‡ø¦î9WsE?%Þ7îˆ3'
[  498.896819][T10722] ALSA: mixer_oss: invalid OSS volume 'úµJ¦i'
[  498.918140][T10722] ALSA: mixer_oss: invalid OSS volume 'Îßù˜°›OfŽãªùS·ŽÒ–Ø×[sΘxÉÓ'
[  498.940467][T10722] ALSA: mixer_oss: invalid OSS volume ':ø:IJ›U€”¦½TTÚ�Aÿ­"B^ÅãCsb;`c'
[  498.948893][T10722] ALSA: mixer_oss: invalid OSS volume 'cÛ‰�<ŠÿSÙª3n¸©ôF‡òˆŸ/¹‡¡Pf'
[  498.957420][T10722] ALSA: mixer_oss: invalid OSS volume '¨9ŽìýäþÖh�Ĩ±y·àùøá^�7ã�]·'
[  498.976071][T10722] ALSA: mixer_oss: invalid OSS volume '›?6´<Àæßg¹$/Á�©ð”uX¨´…AdÄ>=V'
[  498.986192][T10722] ALSA: mixer_oss: invalid OSS volume '+ˆ®ê×Í¿èºê‰…nU<$³È^EKʘürÈ+'
[  499.001551][T10722] ALSA: mixer_oss: invalid OSS volume '+8çµiYJzËåý'
[  499.069870][ T1774] usb-storage 2-1:0.0: USB Mass Storage device detected
[  499.198576][ T1774] usb 2-1: USB disconnect, device number 29
[  499.261487][ T5908] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  499.332839][  T978] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  499.464586][ T5908] usb 5-1: Using ep0 maxpacket: 8
[  499.541695][ T5908] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  499.575840][ T5908] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  499.686685][ T5908] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  499.706995][  T978] usb 4-1: unable to read config index 0 descriptor/start: -61
[  499.720275][  T978] usb 4-1: can't read configurations, error -61
[  499.733705][ T5908] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  499.749306][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  499.793253][ T5908] usbtmc 5-1:16.0: bulk endpoints not found
[  499.900079][  T978] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  499.920093][ T1774] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  500.074878][  T978] usb 4-1: unable to read config index 0 descriptor/start: -61
[  500.079905][ T1774] usb 3-1: Using ep0 maxpacket: 8
[  500.088897][  T978] usb 4-1: can't read configurations, error -61
[  500.126156][ T1774] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  500.144338][ T1774] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  500.154950][ T1774] usb 3-1: Product: syz
[  500.159481][ T1774] usb 3-1: Manufacturer: syz
[  500.172197][ T1774] usb 3-1: SerialNumber: syz
[  500.183533][ T1774] usb 3-1: config 0 descriptor??
[  500.379484][  T978] usb usb4-port1: attempt power cycle
[  500.407466][ T1774] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  500.693859][T10748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1320'.
[  500.740244][  T978] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  500.795663][  T978] usb 4-1: unable to read config index 0 descriptor/start: -61
[  500.809406][  T978] usb 4-1: can't read configurations, error -61
[  500.817596][ T1774] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  500.851712][ T1774] usb 3-1: USB disconnect, device number 26
[  500.960587][  T978] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  501.013829][  T978] usb 4-1: unable to read config index 0 descriptor/start: -61
[  501.023569][  T978] usb 4-1: can't read configurations, error -61
[  501.030633][  T978] usb usb4-port1: unable to enumerate USB device
[  501.394989][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  501.401463][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  502.568317][ T5908] usb 5-1: USB disconnect, device number 14
[  503.907035][T10796] netlink: 'syz.3.1331': attribute type 303 has an invalid length.
[  505.805696][T10812] overlayfs: missing 'lowerdir'
[  506.069154][  T978] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  506.374975][  T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  506.390764][  T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  506.446721][  T978] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  506.459064][  T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  506.676360][  T978] usb 2-1: config 0 descriptor??
[  506.884329][T10819] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  506.905942][T10819] overlayfs: failed to set xattr on upper
[  506.936212][T10819] overlayfs: ...falling back to index=off.
[  506.958419][T10819] overlayfs: ...falling back to uuid=null.
[  507.073059][T10823] netlink: 'syz.2.1341': attribute type 10 has an invalid length.
[  507.109785][T10823] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1341'.
[  507.366234][T10832] vivid-007: =================  START STATUS  =================
[  507.374307][T10832] vivid-007: Enable Output Cropping: true
[  507.380358][T10832] vivid-007: Enable Output Composing: true
[  507.386456][T10832] vivid-007: Enable Output Scaler: true
[  507.392318][T10832] vivid-007: Tx RGB Quantization Range: Automatic
[  507.398991][T10832] vivid-007: Transmit Mode: HDMI
[  507.404237][T10832] vivid-007: Hotplug Present: 0x00000000
[  507.410789][T10832] vivid-007: RxSense Present: 0x00000000
[  507.456483][T10832] vivid-007: EDID Present: 0x00000000
[  507.462954][T10832] vivid-007: ==================  END STATUS  ==================
[  507.502908][  T978] usbhid 2-1:0.0: can't add hid device: -71
[  507.556567][  T978] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  508.714663][  T978] usb 2-1: USB disconnect, device number 30
[  509.419183][T10852] overlayfs: workdir and upperdir must reside under the same mount
[  510.023311][  T978] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  510.041490][T10864] netlink: 'syz.2.1355': attribute type 21 has an invalid length.
[  510.068789][T10865] netlink: 'syz.2.1355': attribute type 21 has an invalid length.
[  510.087808][T10864] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1355'.
[  510.127127][T10865] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1355'.
[  510.232966][  T978] usb 5-1: Using ep0 maxpacket: 32
[  510.253857][  T978] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  510.264633][  T978] usb 5-1: config 0 has no interface number 0
[  510.284199][  T978] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  510.293959][  T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.312140][  T978] usb 5-1: Product: syz
[  510.323874][  T978] usb 5-1: Manufacturer: syz
[  510.422368][  T978] usb 5-1: SerialNumber: syz
[  510.480742][ T5921] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  510.630642][  T978] usb 5-1: config 0 descriptor??
[  510.749237][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  510.780653][  T978] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  510.859304][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  511.010507][ T5921] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  511.126282][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  511.230064][ T5921] usb 4-1: config 0 descriptor??
[  511.335755][T10880] netlink: 'syz.2.1360': attribute type 39 has an invalid length.
[  511.485248][  T978] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  511.506677][  T978] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  511.508285][T10884] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1362'.
[  511.684380][    C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  511.709158][  T978] usb 5-1: USB disconnect, device number 15
[  511.742966][  T978] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  511.779402][  T978] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  511.810495][  T978] quatech2 5-1:0.51: device disconnected
[  511.853684][ T5921] usbhid 4-1:0.0: can't add hid device: -71
[  511.859956][ T5921] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  511.877800][ T5921] usb 4-1: USB disconnect, device number 46
[  512.421089][T10894] misc userio: Begin command sent, but we're already running
[  513.173632][   T30] audit: type=1400 audit(1752485159.727:28): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10908 comm="syz.0.1369" daddr=::ffff:172.20.20.187 dest=3
[  516.140439][ T7586] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  516.821806][T10935] bridge0: entered promiscuous mode
[  516.827904][T10935] macvlan2: entered promiscuous mode
[  516.852100][T10935] macvlan3: entered promiscuous mode
[  517.758747][T10952] mkiss: ax0: crc mode is auto.
[  518.128229][ T5908] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  518.330288][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  518.599202][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  518.684513][ T5908] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  518.793164][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  519.007998][ T5908] usb 4-1: config 0 descriptor??
[  519.558017][T10962] netlink: 'syz.0.1383': attribute type 303 has an invalid length.
[  519.823703][ T5908] usbhid 4-1:0.0: can't add hid device: -71
[  520.367007][ T5908] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  520.521674][ T5908] usb 4-1: USB disconnect, device number 47
[  522.098565][T10997] 9pnet_fd: Insufficient options for proto=fd
[  522.139447][T10990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1392'.
[  523.067299][T11010] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1396'.
[  523.091295][T11010] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1396'.
[  524.106492][T11019] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  524.132907][T11019] CIFS mount error: No usable UNC path provided in device string!
[  524.132907][T11019] 
[  524.143245][T11019] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  525.947240][T11047] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1407'.
[  525.956244][T11047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1407'.
[  526.836616][   T30] audit: type=1400 audit(1752485173.369:29): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11050 comm="syz.2.1408" daddr=::ffff:224.0.0.1
[  527.046711][ T5921] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  527.086064][   T30] audit: type=1326 audit(1752485173.419:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11054 comm="syz.1.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5ff8e929 code=0x7ffc0000
[  528.198307][   T30] audit: type=1326 audit(1752485173.419:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11054 comm="syz.1.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5ff8e929 code=0x7ffc0000
[  528.219980][   T30] audit: type=1326 audit(1752485173.429:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11054 comm="syz.1.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8d5ff8e929 code=0x7ffc0000
[  528.241778][   T30] audit: type=1326 audit(1752485173.429:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11054 comm="syz.1.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5ff8e929 code=0x7ffc0000
[  528.263565][ T5921] usb 3-1: Using ep0 maxpacket: 32
[  528.269656][   T30] audit: type=1326 audit(1752485173.429:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11054 comm="syz.1.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5ff8e929 code=0x7ffc0000
[  528.291857][   T30] audit: type=1326 audit(1752485173.439:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11054 comm="syz.1.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8d5ff8e929 code=0x7ffc0000
[  528.315152][ T5921] usb 3-1: config 0 has an invalid interface number: 127 but max is 0
[  528.336834][ T5921] usb 3-1: config 0 has no interface number 0
[  528.358225][ T5921] usb 3-1: too many endpoints for config 0 interface 127 altsetting 237: 82, using maximum allowed: 30
[  528.407418][   T30] audit: type=1326 audit(1752485173.439:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11054 comm="syz.1.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5ff8e929 code=0x7ffc0000
[  528.476435][ T5921] usb 3-1: config 0 interface 127 altsetting 237 has 0 endpoint descriptors, different from the interface descriptor's value: 82
[  528.575037][ T5921] usb 3-1: config 0 interface 127 has no altsetting 0
[  528.582107][   T30] audit: type=1326 audit(1752485173.439:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11054 comm="syz.1.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5ff8e929 code=0x7ffc0000
[  528.634068][ T5921] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  528.654933][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  528.665111][   T30] audit: type=1326 audit(1752485173.439:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11054 comm="syz.1.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8d5ff8e929 code=0x7ffc0000
[  528.809613][ T5921] usb 3-1: Product: syz
[  528.826009][ T5921] usb 3-1: Manufacturer: syz
[  528.847907][   T10] usb 2-1: new full-speed USB device number 31 using dummy_hcd
[  528.855657][ T5921] usb 3-1: SerialNumber: syz
[  528.905852][ T5921] usb 3-1: config 0 descriptor??
[  529.037071][   T10] usb 2-1: device descriptor read/64, error -71
[  529.077251][T11069] openvswitch: netlink: Message has 4 unknown bytes.
[  529.095676][T11069] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1415'.
[  529.186088][ T5921] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  529.208397][ T5921] gspca_topro: reg_w err -71
[  529.219909][T11061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  529.296421][   T10] usb 2-1: new full-speed USB device number 32 using dummy_hcd
[  529.301566][T11061] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  529.366368][ T5921] gspca_topro: Sensor soi763a
[  529.431007][ T5921] usb 3-1: USB disconnect, device number 27
[  529.434481][T11061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  529.466759][T11061] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  529.499593][T11061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  529.524660][T11061] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  529.547060][ T6049] udevd[6049]: failed to send result of seq 14772 to main daemon: Connection refused
[  529.568132][T11061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  529.627258][T11061] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  529.711473][T11081] netlink: 'syz.3.1416': attribute type 303 has an invalid length.
[  530.082082][T11087] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1420'.
[  530.091367][T11087] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1420'.
[  530.101470][T11087] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1420'.
[  530.626559][T11087] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1420'.
[  530.635637][T11087] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1420'.
[  530.646974][T11087] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1420'.
[  534.090342][T11132] 9pnet: Unknown protocol version 9p20\++}
[  534.095159][T11130] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1432'.
[  536.244759][T11165] syzkaller1: entered promiscuous mode
[  536.265163][T11165] syzkaller1: entered allmulticast mode
[  536.352505][T11169] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1445'.
[  536.362084][T11169] geneve1: entered promiscuous mode
[  536.445594][ T5908] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  536.605434][ T5908] usb 3-1: Using ep0 maxpacket: 16
[  536.633041][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  536.710571][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  536.778638][ T5908] usb 3-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[  536.830644][T11173] veth0_to_team: entered promiscuous mode
[  536.836898][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  536.845113][T11173] veth0_to_team: entered allmulticast mode
[  536.974741][ T5908] usb 3-1: config 0 descriptor??
[  536.985031][T11172] Falling back ldisc for ttyS3.
[  537.144389][T11175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1447'.
[  537.185078][T11175] bridge0: port 4(vlan2) entered blocking state
[  537.206498][T11175] bridge0: port 4(vlan2) entered disabled state
[  537.213037][T11175] vlan2: entered allmulticast mode
[  537.226358][T11175] bridge0: entered allmulticast mode
[  537.336800][T11175] vlan2: left allmulticast mode
[  537.341791][T11175] bridge0: left allmulticast mode
[  537.420111][ T5908] input: HID 0458:5012 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5012.0008/input/input19
[  537.519263][ T5908] input: HID 0458:5012 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5012.0008/input/input20
[  537.550837][T11181] vlan2: entered promiscuous mode
[  537.556041][T11181] bridge0: entered promiscuous mode
[  537.572571][T11181] vlan2: entered allmulticast mode
[  537.735408][T11181] bridge0: entered allmulticast mode
[  537.896886][ T5908] kye 0003:0458:5012.0008: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.2-1/input0
[  538.293946][ T5908] usb 3-1: USB disconnect, device number 28
[  538.465689][T11187] bridge0: port 2(bridge_slave_1) entered disabled state
[  538.465998][T11189] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1451'.
[  538.473412][T11187] bridge0: port 1(bridge_slave_0) entered disabled state
[  538.562363][T11187] team0: Port device bridge0 removed
[  538.572429][T11187] bridge_slave_0: left allmulticast mode
[  538.578313][T11187] bridge_slave_0: left promiscuous mode
[  538.584139][T11187] bridge0: port 1(bridge_slave_0) entered disabled state
[  538.796714][T11187] bridge_slave_1: left allmulticast mode
[  538.855501][T11187] bridge_slave_1: left promiscuous mode
[  539.096040][T11198] netlink: 'syz.1.1452': attribute type 6 has an invalid length.
[  539.483680][T11187] bridge0: port 2(bridge_slave_1) entered disabled state
[  539.604119][T11187] bond0: (slave bond_slave_0): Releasing backup interface
[  539.651890][T11187] bond0: (slave bond_slave_1): Releasing backup interface
[  539.760324][T11187] team0: Port device team_slave_0 removed
[  539.782462][T11187] team0: Port device team_slave_1 removed
[  539.794488][T11187] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  539.803442][T11187] batman_adv: batadv0: Removing interface: batadv_slave_0
[  539.824521][T11187] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  539.837214][T11187] batman_adv: batadv0: Removing interface: batadv_slave_1
[  539.857723][T11187] batadv1: left allmulticast mode
[  539.862858][T11187] batadv1: left promiscuous mode
[  539.874009][T11187] bridge0: port 3(batadv1) entered disabled state
[  539.899557][T11187] bond2: (slave geneve2): Releasing active interface
[  539.907916][T11187] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  539.917540][T11187] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  539.927700][T11187] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  539.936792][T11187] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  540.300051][T11212] FAULT_INJECTION: forcing a failure.
[  540.300051][T11212] name failslab, interval 1, probability 0, space 0, times 0
[  540.365971][T11212] CPU: 0 UID: 0 PID: 11212 Comm: syz.2.1457 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) 
[  540.365999][T11212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  540.366010][T11212] Call Trace:
[  540.366017][T11212]  <TASK>
[  540.366026][T11212]  dump_stack_lvl+0x189/0x250
[  540.366050][T11212]  ? __pfx____ratelimit+0x10/0x10
[  540.366075][T11212]  ? __pfx_dump_stack_lvl+0x10/0x10
[  540.366094][T11212]  ? __pfx__printk+0x10/0x10
[  540.366118][T11212]  ? __pfx___might_resched+0x10/0x10
[  540.366137][T11212]  ? fs_reclaim_acquire+0x7d/0x100
[  540.366160][T11212]  should_fail_ex+0x414/0x560
[  540.366190][T11212]  should_failslab+0xa8/0x100
[  540.366217][T11212]  __kmalloc_cache_noprof+0x70/0x3d0
[  540.366240][T11212]  ? alloc_netdev_mqs+0xbd5/0x11e0
[  540.366261][T11212]  ? __xdp_rxq_info_reg+0x189/0x2a0
[  540.366286][T11212]  alloc_netdev_mqs+0xbd5/0x11e0
[  540.366316][T11212]  rtnl_create_link+0x31f/0xd10
[  540.366346][T11212]  rtnl_newlink_create+0x25c/0xb00
[  540.366370][T11212]  ? nla_memcpy+0x5b/0xc0
[  540.366394][T11212]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  540.366412][T11212]  ? rtnl_newlink+0x8db/0x1c70
[  540.366432][T11212]  ? __pfx___mutex_lock+0x10/0x10
[  540.366467][T11212]  ? ns_capable+0x8a/0xf0
[  540.366489][T11212]  rtnl_newlink+0x16d6/0x1c70
[  540.366509][T11212]  ? netlink_sendmsg+0x805/0xb30
[  540.366542][T11212]  ? __pfx_rtnl_newlink+0x10/0x10
[  540.366586][T11212]  ? kasan_quarantine_put+0xdd/0x220
[  540.366607][T11212]  ? lockdep_hardirqs_on+0x9c/0x150
[  540.366637][T11212]  ? nlmon_xmit+0xb0/0x100
[  540.366653][T11212]  ? kmem_cache_free+0x18f/0x400
[  540.366683][T11212]  ? __local_bh_enable_ip+0x12d/0x1c0
[  540.366702][T11212]  ? lockdep_hardirqs_on+0x9c/0x150
[  540.366726][T11212]  ? __local_bh_enable_ip+0x12d/0x1c0
[  540.366743][T11212]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  540.366765][T11212]  ? __dev_queue_xmit+0x27e/0x3a70
[  540.366787][T11212]  ? __dev_queue_xmit+0x27e/0x3a70
[  540.366807][T11212]  ? __dev_queue_xmit+0x27e/0x3a70
[  540.366829][T11212]  ? __dev_queue_xmit+0x1cd7/0x3a70
[  540.366858][T11212]  ? __lock_acquire+0xab9/0xd20
[  540.366902][T11212]  ? __pfx_rtnl_newlink+0x10/0x10
[  540.366920][T11212]  rtnetlink_rcv_msg+0x7cf/0xb70
[  540.366942][T11212]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  540.366959][T11212]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  540.366974][T11212]  ? ref_tracker_free+0x63a/0x7d0
[  540.366995][T11212]  ? __copy_skb_header+0xa7/0x550
[  540.367023][T11212]  ? __pfx_ref_tracker_free+0x10/0x10
[  540.367058][T11212]  netlink_rcv_skb+0x208/0x470
[  540.367079][T11212]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  540.367099][T11212]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  540.367134][T11212]  ? netlink_deliver_tap+0x2e/0x1b0
[  540.367152][T11212]  ? netlink_deliver_tap+0x2e/0x1b0
[  540.367178][T11212]  netlink_unicast+0x759/0x8e0
[  540.367208][T11212]  netlink_sendmsg+0x805/0xb30
[  540.367238][T11212]  ? __pfx_netlink_sendmsg+0x10/0x10
[  540.367267][T11212]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  540.367289][T11212]  ? __pfx_netlink_sendmsg+0x10/0x10
[  540.367310][T11212]  __sock_sendmsg+0x219/0x270
[  540.367338][T11212]  ____sys_sendmsg+0x505/0x830
[  540.367365][T11212]  ? __pfx_____sys_sendmsg+0x10/0x10
[  540.367396][T11212]  ? import_iovec+0x74/0xa0
[  540.367419][T11212]  ___sys_sendmsg+0x21f/0x2a0
[  540.367448][T11212]  ? __pfx____sys_sendmsg+0x10/0x10
[  540.367509][T11212]  ? __fget_files+0x2a/0x420
[  540.367524][T11212]  ? __fget_files+0x3a0/0x420
[  540.367552][T11212]  __x64_sys_sendmsg+0x19b/0x260
[  540.367576][T11212]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  540.367607][T11212]  ? __pfx_ksys_write+0x10/0x10
[  540.367626][T11212]  ? rcu_is_watching+0x15/0xb0
[  540.367651][T11212]  ? do_syscall_64+0xbe/0x3b0
[  540.367672][T11212]  do_syscall_64+0xfa/0x3b0
[  540.367687][T11212]  ? lockdep_hardirqs_on+0x9c/0x150
[  540.367709][T11212]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.367726][T11212]  ? clear_bhb_loop+0x60/0xb0
[  540.367747][T11212]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.367763][T11212] RIP: 0033:0x7f3e4ef8e929
[  540.367779][T11212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  540.367794][T11212] RSP: 002b:00007f3e4fdaa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  540.367812][T11212] RAX: ffffffffffffffda RBX: 00007f3e4f1b5fa0 RCX: 00007f3e4ef8e929
[  540.367825][T11212] RDX: 000000000400c094 RSI: 00002000000000c0 RDI: 0000000000000003
[  540.367837][T11212] RBP: 00007f3e4fdaa090 R08: 0000000000000000 R09: 0000000000000000
[  540.367847][T11212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  540.367858][T11212] R13: 0000000000000000 R14: 00007f3e4f1b5fa0 R15: 00007ffc9b543e88
[  540.367888][T11212]  </TASK>
[  540.871466][T11180] delete_channel: no stack
[  540.879024][T11214] bridge0: port 3(veth0_to_bridge) entered blocking state
[  540.886322][T11214] bridge0: port 3(veth0_to_bridge) entered disabled state
[  540.894552][T11214] veth0_to_bridge: entered allmulticast mode
[  540.902500][T11214] veth0_to_bridge: entered promiscuous mode
[  540.908631][T11214] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  540.958533][T11214] bridge0: port 3(veth0_to_bridge) entered blocking state
[  540.965877][T11214] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  541.244596][   T30] kauditd_printk_skb: 16 callbacks suppressed
[  541.244635][   T30] audit: type=1326 audit(1752485187.801:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11206 comm="syz.3.1455" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f076fd8e929 code=0x0
[  541.806826][T11227] overlayfs: missing 'lowerdir'
[  542.387075][T11230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1461'.
[  543.825635][T11253] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1468'.
[  543.986372][T11259] overlayfs: failed to resolve './file1': -2
[  544.763780][ T5921] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  544.934295][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  545.004548][T11281] binder: 11275:11281 ioctl c0306201 2000000003c0 returned -14
[  545.153727][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  545.416589][ T5921] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  545.425916][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  545.437135][ T5921] usb 3-1: config 0 descriptor??
[  546.088661][T11290] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  546.150991][ T5921] usbhid 3-1:0.0: can't add hid device: -71
[  546.226015][ T5921] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  546.258832][ T5921] usb 3-1: USB disconnect, device number 29
[  546.888817][T11317] netlink: 22 bytes leftover after parsing attributes in process `syz.2.1488'.
[  548.480571][T11337] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1493'.
[  548.510672][T11337] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  548.510716][T11337] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  548.510732][T11337] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  548.510747][T11337] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  548.528223][T11337] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  548.560985][T11337] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  548.561006][T11337] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  548.561021][T11337] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  548.651258][T11342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1495'.
[  548.737263][ T8378] wlan1: Trigger new scan to find an IBSS to join
[  549.400898][T11358] CIFS: iocharset name too long
[  549.454587][ T5908] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  549.809265][   T30] audit: type=1326 audit(1752485196.372:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11350 comm="syz.4.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889138e929 code=0x7fc00000
[  549.837795][   T30] audit: type=1326 audit(1752485196.372:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11350 comm="syz.4.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f889138e929 code=0x7fc00000
[  549.878129][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  549.930481][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  549.940684][ T5908] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  549.949923][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  549.968596][ T5908] usb 3-1: config 0 descriptor??
[  550.291127][T11370] SET target dimension over the limit!
[  550.633562][ T5908] usbhid 3-1:0.0: can't add hid device: -71
[  550.998600][ T5908] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  551.165324][ T5921] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  551.183260][ T5908] usb 3-1: USB disconnect, device number 30
[  551.206768][ T5921] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  551.264474][T11380] netlink: 'syz.0.1507': attribute type 10 has an invalid length.
[  551.761407][T11387] xt_hashlimit: size too large, truncated to 1048576
[  551.934031][ T8368] wlan1: Trigger new scan to find an IBSS to join
[  552.397204][T11391] input: syz1 as /devices/virtual/input/input21
[  552.427114][T11393] Invalid ELF header magic: != ELF
[  552.871483][T11400] overlayfs: failed to resolve './file0': -2
[  553.029804][T11404] [U] 
[  553.032875][T11404] [U] 
[  553.035548][T11404] [U] 
[  553.038210][T11404] [U] 
[  553.041208][T11404] [U] 
[  553.043899][T11404] [U] 
[  553.046566][T11404] [U] 
[  553.049234][T11404] [U] 
[  553.052350][T11404] [U] 
[  553.055039][T11404] [U] 
[  553.057705][T11404] [U] 
[  553.060366][T11404] [U] 
[  553.063524][T11404] [U] 
[  553.066223][T11404] [U] 
[  553.068888][T11404] [U] 
[  553.071557][T11404] [U] 
[  553.696878][T11402] [U] 
[  553.842263][ T5979] wlan1: Creating new IBSS network, BSSID ba:7f:c7:06:6a:66
[  554.809069][T11414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1518'.
[  557.258190][T11432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1521'.
[  557.436869][T11414] hsr_slave_1 (unregistering): left promiscuous mode
[  557.695333][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  557.707736][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  557.719948][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  557.732399][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  557.744859][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  557.757226][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  557.769492][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  557.781688][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  557.794015][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  557.806193][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  558.083003][ T5885] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  558.258335][ T5885] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  558.280864][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  558.344868][ T5885] usb 4-1: config 0 descriptor??
[  558.370029][ T5885] cp210x 4-1:0.0: cp210x converter detected
[  559.891140][T11455] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1528'.
[  560.620628][ T5885] cp210x 4-1:0.0: failed to get vendor val 0x370c size 13: -71
[  560.658142][ T5885] cp210x 4-1:0.0: GPIO initialisation failed: -71
[  560.706979][ T5885] usb 4-1: cp210x converter now attached to ttyUSB0
[  560.729988][ T5885] usb 4-1: USB disconnect, device number 48
[  561.036450][ T5885] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  561.049465][ T5885] cp210x 4-1:0.0: device disconnected
[  562.702427][    C0] net_ratelimit: 13600 callbacks suppressed
[  562.702441][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  562.720575][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  562.732769][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  562.744918][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  562.757079][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  562.769222][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  562.781373][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  562.793511][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  562.805662][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  562.817801][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  562.835700][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  562.842114][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  563.216425][T11474] netlink: 'syz.1.1535': attribute type 10 has an invalid length.
[  563.887125][T11478] tmpfs: Bad value for 'grpquota_block_hardlimit'
[  563.921918][T11474] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  565.020837][T11488] bridge_slave_0: left allmulticast mode
[  565.028456][T11488] bridge_slave_0: left promiscuous mode
[  565.041121][T11488] bridge0: port 1(bridge_slave_0) entered disabled state
[  565.143986][T11488] bridge_slave_1: left allmulticast mode
[  565.233189][ T5908] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  565.256172][T11488] bridge_slave_1: left promiscuous mode
[  565.290626][T11488] bridge0: port 2(bridge_slave_1) entered disabled state
[  566.042501][ T5908] usb 2-1: Using ep0 maxpacket: 8
[  566.090908][ T5908] usb 2-1: config 0 has an invalid interface number: 126 but max is 0
[  566.136294][T11488] bond0: (slave bond_slave_0): Releasing backup interface
[  566.145752][ T5908] usb 2-1: config 0 has no interface number 0
[  566.424712][T11488] bond_slave_0: left promiscuous mode
[  566.429787][ T5908] usb 2-1: config 0 interface 126 has no altsetting 0
[  566.464633][ T5908] usb 2-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=fa.3e
[  566.578413][T11488] bond_slave_0: left allmulticast mode
[  566.583869][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  566.583894][ T5908] usb 2-1: Product: syz
[  566.583907][ T5908] usb 2-1: Manufacturer: syz
[  566.583919][ T5908] usb 2-1: SerialNumber: syz
[  566.825281][ T5908] usb 2-1: config 0 descriptor??
[  566.836274][ T5908] gspca_main: dtcs033-2.14.0 probing 0547:7303
[  567.371331][T11488] bond0: (slave bond_slave_1): Releasing backup interface
[  567.420846][T11502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  567.473629][T11502] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  567.516356][T11488] bond_slave_1: left promiscuous mode
[  567.552490][T11488] bond_slave_1: left allmulticast mode
[  567.711730][    C0] net_ratelimit: 14916 callbacks suppressed
[  567.711751][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  567.729948][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  567.742195][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  567.754418][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  567.766611][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  567.778808][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  567.791039][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  567.803251][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  567.815433][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  567.827616][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  568.027755][T11488] team0: Port device team_slave_0 removed
[  568.096120][T11488] team0: Port device team_slave_1 removed
[  568.623217][T11488] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  568.740892][ T1774] usb 2-1: USB disconnect, device number 34
[  568.749934][T11488] batman_adv: batadv0: Removing interface: batadv_slave_0
[  568.801762][T11488] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  568.828714][T11488] batman_adv: batadv0: Removing interface: batadv_slave_1
[  571.282161][T11519] loop2: detected capacity change from 0 to 7
[  571.312505][T11519] Dev loop2: unable to read RDB block 7
[  571.349297][T11519]  loop2: unable to read partition table
[  571.385937][T11519] loop2: partition table beyond EOD, truncated
[  571.409369][T11519] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑÓ– ) failed (rc=-5)
[  572.700114][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  572.709936][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  572.718574][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  572.725839][    C0] net_ratelimit: 17633 callbacks suppressed
[  572.725856][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  572.726247][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  572.739441][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  572.744301][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  572.757467][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  572.763182][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  572.783977][ T5158] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  572.794024][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  572.813198][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  572.814745][ T5158] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  572.825623][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  572.844284][ T5158] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  572.844571][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  572.863677][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  572.876141][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  572.879455][ T5158] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  572.899108][ T5158] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  574.977156][ T5846] Bluetooth: hci5: command tx timeout
[  575.977629][T11536] chnl_net:caif_netlink_parms(): no params data found
[  576.297848][T11579] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1562'.
[  576.701395][ T5885] IPVS: starting estimator thread 0...
[  576.720913][T11585] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  576.802115][T11536] bridge0: port 1(bridge_slave_0) entered blocking state
[  576.855743][T11536] bridge0: port 1(bridge_slave_0) entered disabled state
[  576.863056][T11587] IPVS: using max 27 ests per chain, 64800 per kthread
[  576.882038][T11593] xt_hashlimit: size too large, truncated to 1048576
[  576.922346][T11536] bridge_slave_0: entered allmulticast mode
[  576.979712][T11536] bridge_slave_0: entered promiscuous mode
[  577.050834][ T5846] Bluetooth: hci5: command tx timeout
[  577.083290][T11536] bridge0: port 2(bridge_slave_1) entered blocking state
[  577.154972][T11536] bridge0: port 2(bridge_slave_1) entered disabled state
[  577.200370][T11536] bridge_slave_1: entered allmulticast mode
[  577.635331][T11536] bridge_slave_1: entered promiscuous mode
[  577.730690][    C0] net_ratelimit: 13008 callbacks suppressed
[  577.730711][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  577.749047][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  577.761438][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  577.773828][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  577.786261][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  577.798702][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  577.811139][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  577.823522][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  577.835958][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  577.848403][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  579.189082][ T5846] Bluetooth: hci5: command tx timeout
[  579.743051][T11536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  580.208935][T11536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  581.210287][ T5846] Bluetooth: hci5: command tx timeout
[  582.082137][T11536] team0: Port device team_slave_0 added
[  582.224828][T11536] team0: Port device team_slave_1 added
[  582.740066][    C0] net_ratelimit: 18972 callbacks suppressed
[  582.740080][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  582.758169][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  582.770328][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  582.782474][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  582.794634][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  582.806773][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  582.818995][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  582.831156][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  582.843286][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  582.855408][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  584.386491][   T67] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  585.994889][T11618] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1572'.
[  586.127754][T11536] batman_adv: batadv0: Adding interface: batadv_slave_0
[  586.159361][T11536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  586.220829][T11536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  586.351598][T11536] batman_adv: batadv0: Adding interface: batadv_slave_1
[  586.358579][T11536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  586.994784][T11536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  587.682751][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1575'.
[  587.708143][T11626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1575'.
[  587.741980][T11629] netlink: 'syz.4.1576': attribute type 10 has an invalid length.
[  587.749341][    C0] net_ratelimit: 22591 callbacks suppressed
[  587.749359][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  587.768347][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  587.780714][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  587.792925][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  587.806253][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  587.819446][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  587.832770][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  587.846246][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  587.859345][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  587.872626][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  588.538674][T11627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  588.641315][T11629] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  588.931116][T11536] hsr_slave_0: entered promiscuous mode
[  588.964363][T11536] hsr_slave_1: entered promiscuous mode
[  589.000141][T11536] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  589.422452][T11536] Cannot create hsr debugfs directory
[  590.046719][   T30] audit: type=1326 audit(1752485236.506:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11645 comm="syz.3.1579" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f076fd8e929 code=0x0
[  590.736944][T11654] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1580'.
[  590.819375][ T5885] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  592.758889][    C0] net_ratelimit: 14663 callbacks suppressed
[  592.758904][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  592.777263][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  592.789649][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  592.801966][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  592.814301][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  592.826654][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  592.839025][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  592.851391][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  592.863776][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  592.876083][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  595.525932][    T0] sched: DL replenish lagged too much
[  596.138373][ T5885] usb 2-1: device descriptor read/64, error -110
[  597.688188][ T5885] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  597.768264][    C0] net_ratelimit: 19598 callbacks suppressed
[  597.768278][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  597.786644][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  597.799053][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  597.818089][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  597.830589][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  597.843006][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  597.855437][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  597.867907][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  597.880351][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  597.892831][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  597.968148][ T5885] usb 2-1: device descriptor read/64, error -32
[  598.799672][ T5885] usb usb2-port1: attempt power cycle
[  599.277991][ T5885] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  599.761564][ T5885] usb 2-1: device descriptor read/8, error -32
[  600.008230][ T5885] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  602.025134][ T5885] usb 2-1: device descriptor read/8, error -32
[  602.188654][ T5885] raw-gadget.0 gadget.1: failed to queue suspend event
[  602.313354][ T5885] usb usb2-port1: unable to enumerate USB device
[  602.777701][    C0] net_ratelimit: 22188 callbacks suppressed
[  602.777724][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  602.796097][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  602.808509][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  602.820994][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  602.833426][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  602.842698][T11638] raw-gadget.0 gadget.1: failed to queue disconnect event
[  602.845844][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  602.865204][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  602.877673][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  602.890121][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  602.902600][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  603.138783][ T5908] usb 4-1: new full-speed USB device number 49 using dummy_hcd
[  603.328360][ T5908] usb 4-1: config 0 has an invalid interface number: 107 but max is 0
[  603.376351][ T5908] usb 4-1: config 0 has no interface number 0
[  603.410977][ T5908] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 65535, setting to 64
[  603.510399][ T5908] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60
[  603.547560][ T5908] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  603.602503][ T5908] usb 4-1: Product: syz
[  603.632105][ T5908] usb 4-1: Manufacturer: syz
[  603.636747][ T5908] usb 4-1: SerialNumber: syz
[  603.671822][T11668] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1585'.
[  603.918508][ T5908] usb 4-1: config 0 descriptor??
[  603.924700][T11661] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  603.954562][ T5908] keyspan 4-1:0.107: Keyspan 4 port adapter converter detected
[  603.992523][ T5908] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 81
[  604.055962][T11668] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  604.067780][ T5908] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 1
[  604.098858][ T5908] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  604.132517][T11674] overlayfs: failed to clone upperpath
[  604.414204][T11661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  604.439387][ T5908] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 2
[  604.467681][T11661] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  604.479312][T11536] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  605.008163][   T30] audit: type=1326 audit(1752485251.198:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11666 comm="syz.0.1586" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7400b8e929 code=0x0
[  605.437487][ T5908] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  605.460729][ T5908] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 4
[  607.787019][    C0] net_ratelimit: 14728 callbacks suppressed
[  607.787039][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  607.787943][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  607.793394][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  607.806214][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  607.817254][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  607.830159][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  607.841248][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  607.853997][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  607.865144][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  607.878946][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  609.915746][T11536] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  612.796619][    C0] net_ratelimit: 16077 callbacks suppressed
[  612.796640][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  612.797096][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  612.802884][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  612.815913][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  612.827152][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  612.839894][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  612.851084][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  612.863748][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  612.874917][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  612.888238][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  617.805967][    C0] net_ratelimit: 16045 callbacks suppressed
[  617.805988][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  617.806244][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  617.812371][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  617.825030][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  617.836142][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  617.850009][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  617.860154][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  617.873210][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  617.884186][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  617.897015][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  622.815255][    C0] net_ratelimit: 16071 callbacks suppressed
[  622.815277][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  622.815418][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  622.821576][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  622.834376][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  622.845601][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  622.858410][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  622.869416][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  622.882306][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  622.893401][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  622.906187][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  624.459348][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  624.479345][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  627.824531][    C0] net_ratelimit: 17229 callbacks suppressed
[  627.824551][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  627.825074][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  627.830887][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  627.843140][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  627.854828][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  627.867110][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  627.878479][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  627.891294][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  627.902508][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  627.914961][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  632.833941][    C1] net_ratelimit: 18262 callbacks suppressed
[  632.833961][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  632.834106][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  632.840832][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  632.852152][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  632.864602][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  632.876219][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  632.888555][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  632.899944][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  632.912372][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  632.924046][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  637.843329][    C1] net_ratelimit: 18946 callbacks suppressed
[  637.843348][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  637.843593][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  637.850173][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  637.861464][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  637.874008][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  637.885525][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  637.898048][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  637.909275][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  637.921735][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  637.933308][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  642.853118][    C0] net_ratelimit: 18955 callbacks suppressed
[  642.853141][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  642.853492][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  642.859391][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  642.871925][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  642.883591][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  642.896208][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  642.907243][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  642.919772][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  642.931361][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  642.943790][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  647.862208][    C1] net_ratelimit: 20229 callbacks suppressed
[  647.862228][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  647.862237][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  647.862567][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  647.868524][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  647.880581][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  647.892590][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  647.904304][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  647.916700][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  647.928300][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  647.940632][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  652.871713][    C0] net_ratelimit: 20605 callbacks suppressed
[  652.871734][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  652.872024][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  652.878076][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  652.889931][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  652.901793][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  652.913864][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  652.925796][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  652.938182][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  652.949550][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  652.962072][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  657.881060][    C1] net_ratelimit: 20331 callbacks suppressed
[  657.881079][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  657.881136][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  657.887376][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  657.899330][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  657.911379][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  657.923471][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  657.935729][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  657.947275][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  657.959647][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  657.971312][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  662.890497][    C0] net_ratelimit: 19561 callbacks suppressed
[  662.890517][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  662.890611][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  662.896836][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  662.908776][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  662.920671][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  662.932753][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  662.944702][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  662.957896][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  662.968347][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  662.980851][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  667.899811][    C0] net_ratelimit: 18389 callbacks suppressed
[  667.899831][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  667.899973][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  667.906211][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  667.918223][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  667.930221][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  667.942033][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  667.953879][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  667.967175][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  667.977940][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  667.990181][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  672.909295][    C1] net_ratelimit: 18106 callbacks suppressed
[  672.909315][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  672.909475][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  672.916854][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  672.927535][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  672.940476][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  672.951675][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  672.963448][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  672.975289][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  672.987358][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  672.999271][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  677.918960][    C0] net_ratelimit: 18412 callbacks suppressed
[  677.918981][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  677.919243][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  677.925229][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  677.937308][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  677.949244][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  677.961192][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  677.972925][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  677.986668][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  677.997010][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  678.009297][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  682.928210][    C0] net_ratelimit: 18271 callbacks suppressed
[  682.928230][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  682.928630][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  682.934654][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  682.946497][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  682.958390][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  682.970435][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  682.982291][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  682.995338][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  683.006033][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  683.018910][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  686.469780][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  686.487199][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  687.937435][    C1] net_ratelimit: 18542 callbacks suppressed
[  687.937456][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  687.937559][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  687.945011][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  687.956182][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  687.968081][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  687.979602][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  687.991607][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  688.003629][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  688.015435][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  688.027292][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  692.947002][    C0] net_ratelimit: 18408 callbacks suppressed
[  692.947026][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  692.947425][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  692.953255][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  692.966951][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  692.977341][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  692.989282][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  693.001052][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  693.013200][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  693.024990][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  693.038427][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  697.956632][    C0] net_ratelimit: 18912 callbacks suppressed
[  697.956653][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  697.957154][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  697.962986][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  697.975552][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  697.987018][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  697.998952][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  698.010765][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  698.022863][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  698.034667][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  698.048499][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  702.416237][ T5158] Bluetooth: hci5: command 0x0406 tx timeout
[  702.965686][    C1] net_ratelimit: 18874 callbacks suppressed
[  702.965708][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  702.965725][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  702.972191][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  702.983896][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  702.997415][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  703.007940][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  703.020271][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  703.031691][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  703.043810][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  703.055684][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  707.975196][    C0] net_ratelimit: 18682 callbacks suppressed
[  707.975216][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  707.975557][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  707.981533][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  707.993486][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  708.005358][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  708.017424][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  708.029228][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  708.042636][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  708.053047][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  708.065700][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  712.984796][    C0] net_ratelimit: 18805 callbacks suppressed
[  712.984817][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  712.985484][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  712.991133][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  713.003460][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  713.014949][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  713.026994][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  713.038866][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  713.050808][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  713.062531][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  713.076046][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  717.993949][    C1] net_ratelimit: 18240 callbacks suppressed
[  717.993971][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  717.994029][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  718.001478][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  718.012217][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  718.024811][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  718.036383][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  718.048166][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  718.060107][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  718.072161][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  718.084114][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  723.003457][    C1] net_ratelimit: 18402 callbacks suppressed
[  723.003478][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  723.003601][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  723.011173][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  723.021677][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  723.034121][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  723.045748][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  723.057638][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  723.069399][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  723.081511][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  723.093425][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  728.013080][    C1] net_ratelimit: 17802 callbacks suppressed
[  728.013102][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  728.013161][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  728.020677][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  728.031336][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  728.043773][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  728.055396][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  728.067192][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  728.079039][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  728.091153][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  728.103036][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  733.022200][    C1] net_ratelimit: 18133 callbacks suppressed
[  733.022221][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  733.022583][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  733.028948][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  733.040439][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  733.052467][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  733.064413][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  733.076290][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  733.088083][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  733.101372][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  733.112189][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  738.031767][    C0] net_ratelimit: 17969 callbacks suppressed
[  738.031788][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  738.031847][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  738.038468][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  738.050548][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  738.062408][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  738.074358][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  738.086067][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  738.099590][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  738.110145][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  738.122421][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  743.041108][    C0] net_ratelimit: 18261 callbacks suppressed
[  743.041128][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  743.041595][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  743.047397][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  743.059749][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  743.071486][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  743.083425][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  743.095236][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  743.107286][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  743.119154][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  743.132280][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  748.050536][    C0] net_ratelimit: 18113 callbacks suppressed
[  748.050556][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  748.050611][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  748.056820][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  748.070223][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  748.080885][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  748.093121][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  748.104617][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  748.116659][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  748.128604][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  748.140519][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  751.190805][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  751.208679][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  753.060109][    C0] net_ratelimit: 18155 callbacks suppressed
[  753.060129][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  753.060438][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  753.066463][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  753.078336][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  753.090191][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  753.102247][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  753.114199][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  753.128090][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  753.137922][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  753.150379][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  758.069661][    C0] net_ratelimit: 17875 callbacks suppressed
[  758.069681][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  758.069712][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  758.075890][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  758.088034][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  758.099959][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  758.111840][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  758.123609][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  758.136906][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  758.147615][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  758.159916][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  762.398818][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  762.405800][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P6411/1:b..l
[  762.414166][    C1] rcu: 	(detected by 1, t=10503 jiffies, g=43549, q=804 ncpus=2)
[  762.421895][    C1] task:syz.1.104       state:R  running task     stack:25864 pid:6411  tgid:6411  ppid:5837   task_flags:0x40044c flags:0x00004006
[  762.436444][    C1] Call Trace:
[  762.439735][    C1]  <TASK>
[  762.442680][    C1]  __schedule+0x16a2/0x4cb0
[  762.447202][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  762.452423][    C1]  ? preempt_schedule_irq+0xb5/0x150
[  762.457735][    C1]  ? __pfx___schedule+0x10/0x10
[  762.462607][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  762.467825][    C1]  ? preempt_schedule_irq+0xaa/0x150
[  762.473126][    C1]  preempt_schedule_irq+0xb5/0x150
[  762.478253][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  762.483992][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  762.489218][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  762.495040][    C1]  irqentry_exit+0x6f/0x90
[  762.499473][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  762.505460][    C1] RIP: 0010:lock_acquire+0x175/0x360
[  762.510755][    C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 ab d4 fe 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e
[  762.530381][    C1] RSP: 0018:ffffc90005226c78 EFLAGS: 00000206
[  762.536467][    C1] RAX: cd97ab311a475c00 RBX: 0000000000000000 RCX: cd97ab311a475c00
[  762.544445][    C1] RDX: 0000000000000001 RSI: ffffffff8db72142 RDI: ffffffff8be1ca00
[  762.552424][    C1] RBP: ffffffff8172aae5 R08: 0000000000000000 R09: ffffffff8172aae5
[  762.560411][    C1] R10: ffffc90005226e48 R11: fffff52000a44dd5 R12: 0000000000000002
[  762.568405][    C1] R13: ffffffff8e13f0e0 R14: 0000000000000000 R15: 0000000000000246
[  762.576405][    C1]  ? unwind_next_frame+0xa5/0x2390
[  762.581538][    C1]  ? unwind_next_frame+0xa5/0x2390
[  762.586941][    C1]  ? __unwind_start+0xf8/0x760
[  762.591722][    C1]  ? unwind_next_frame+0xa5/0x2390
[  762.596845][    C1]  unwind_next_frame+0xc2/0x2390
[  762.601790][    C1]  ? unwind_next_frame+0xa5/0x2390
[  762.606911][    C1]  ? unwind_next_frame+0xa5/0x2390
[  762.612035][    C1]  ? unwind_next_frame+0xa5/0x2390
[  762.617156][    C1]  ? get_stack_info_noinstr+0x1b/0x130
[  762.622637][    C1]  __unwind_start+0x5b9/0x760
[  762.627333][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  762.633503][    C1]  arch_stack_walk+0xe4/0x150
[  762.638200][    C1]  ? __unwind_start+0xf8/0x760
[  762.642979][    C1]  stack_trace_save+0x9c/0xe0
[  762.647672][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  762.653067][    C1]  save_stack+0xf7/0x1f0
[  762.657330][    C1]  ? __pfx_save_stack+0x10/0x10
[  762.662209][    C1]  ? page_ext_put+0x97/0xc0
[  762.666734][    C1]  __reset_page_owner+0x71/0x1f0
[  762.671688][    C1]  free_unref_folios+0xcd2/0x1570
[  762.676746][    C1]  folios_put_refs+0x559/0x640
[  762.681536][    C1]  ? __pfx_folios_put_refs+0x10/0x10
[  762.686839][    C1]  ? folio_batch_remove_exceptionals+0x18c/0x1f0
[  762.693186][    C1]  shmem_undo_range+0x49e/0x14b0
[  762.698154][    C1]  ? __pfx_shmem_undo_range+0x10/0x10
[  762.703567][    C1]  ? kernel_text_address+0xa5/0xe0
[  762.708691][    C1]  ? __kernel_text_address+0xd/0x40
[  762.713939][    C1]  ? percpu_counter_add_batch+0xea/0x1e0
[  762.719590][    C1]  shmem_evict_inode+0x272/0xa70
[  762.724551][    C1]  ? inode_wait_for_writeback+0xf9/0x290
[  762.730190][    C1]  ? __pfx_shmem_evict_inode+0x10/0x10
[  762.735664][    C1]  ? __pfx_inode_wait_for_writeback+0x10/0x10
[  762.741750][    C1]  ? do_raw_spin_unlock+0x122/0x240
[  762.746969][    C1]  ? __pfx_shmem_evict_inode+0x10/0x10
[  762.752451][    C1]  evict+0x501/0x9c0
[  762.756369][    C1]  ? __pfx_evict+0x10/0x10
[  762.760803][    C1]  ? do_raw_spin_unlock+0x122/0x240
[  762.766022][    C1]  ? _raw_spin_unlock+0x28/0x50
[  762.770893][    C1]  ? iput+0x6d8/0x9d0
[  762.774897][    C1]  __dentry_kill+0x209/0x660
[  762.779505][    C1]  ? dput+0x37/0x2b0
[  762.783417][    C1]  dput+0x19f/0x2b0
[  762.787243][    C1]  __fput+0x68e/0xa70
[  762.791252][    C1]  task_work_run+0x1d4/0x260
[  762.795861][    C1]  ? __pfx_task_work_run+0x10/0x10
[  762.801003][    C1]  do_exit+0x6b5/0x22e0
[  762.805179][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  762.810570][    C1]  ? do_raw_spin_lock+0x121/0x290
[  762.815611][    C1]  ? __pfx_do_exit+0x10/0x10
[  762.820229][    C1]  do_group_exit+0x21c/0x2d0
[  762.824829][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  762.830050][    C1]  get_signal+0x125e/0x1310
[  762.834586][    C1]  arch_do_signal_or_restart+0x9a/0x750
[  762.840148][    C1]  ? __pfx_get_timespec64+0x10/0x10
[  762.845362][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  762.851555][    C1]  ? exit_to_user_mode_loop+0x40/0x110
[  762.857023][    C1]  exit_to_user_mode_loop+0x75/0x110
[  762.862317][    C1]  do_syscall_64+0x2bd/0x3b0
[  762.866911][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  762.872128][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  762.878206][    C1]  ? clear_bhb_loop+0x60/0xb0
[  762.882897][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  762.888801][    C1] RIP: 0033:0x7f8d5ffc11e5
[  762.893223][    C1] RSP: 002b:00007f8d60e5df80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
[  762.901651][    C1] RAX: fffffffffffffdfc RBX: 00007f8d601b6160 RCX: 00007f8d5ffc11e5
[  762.909630][    C1] RDX: 00007f8d60e5dfc0 RSI: 0000000000000000 RDI: 0000000000000000
[  762.917609][    C1] RBP: 00007f8d60010b39 R08: 0000000000000000 R09: 0000000000000000
[  762.925590][    C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  762.933569][    C1] R13: 0000000000000001 R14: 00007f8d601b6160 R15: 00007ffe7caa4f38
[  762.941569][    C1]  </TASK>
[  762.944595][    C1] rcu: rcu_preempt kthread starved for 236 jiffies! g43549 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  762.956057][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  762.966032][    C1] rcu: RCU grace-period kthread stack dump:
[  762.971923][    C1] task:rcu_preempt     state:R  running task     stack:27128 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[  762.985425][    C1] Call Trace:
[  762.988712][    C1]  <TASK>
[  762.991654][    C1]  __schedule+0x16a2/0x4cb0
[  762.996188][    C1]  ? do_raw_spin_unlock+0x122/0x240
[  763.001422][    C1]  ? schedule+0x165/0x360
[  763.005770][    C1]  ? __lock_acquire+0xab9/0xd20
[  763.010634][    C1]  ? __pfx___schedule+0x10/0x10
[  763.015514][    C1]  ? schedule+0x91/0x360
[  763.019773][    C1]  schedule+0x165/0x360
[  763.023946][    C1]  schedule_timeout+0x12b/0x270
[  763.028812][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  763.034191][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  763.040099][    C1]  ? __pfx_process_timeout+0x10/0x10
[  763.045407][    C1]  ? prepare_to_swait_event+0x341/0x380
[  763.050972][    C1]  rcu_gp_fqs_loop+0x301/0x1540
[  763.055845][    C1]  ? __pfx_rcu_watching_snap_recheck+0x10/0x10
[  763.062008][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  763.067326][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[  763.072553][    C1]  ? finish_swait+0xcd/0x1f0
[  763.077160][    C1]  rcu_gp_kthread+0x99/0x390
[  763.078921][    C0] net_ratelimit: 18165 callbacks suppressed
[  763.078935][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  763.081748][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  763.087923][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  763.099560][    C1]  ? __kthread_parkme+0x7b/0x200
[  763.099584][    C1]  ? __kthread_parkme+0x1a1/0x200
[  763.099608][    C1]  kthread+0x711/0x8a0
[  763.105179][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  763.116629][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  763.116647][    C1]  ? __pfx_kthread+0x10/0x10
[  763.121902][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  763.126567][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  763.131042][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  763.142552][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  763.142576][    C1]  ? __pfx_kthread+0x10/0x10
[  763.148044][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  763.152318][    C1]  ret_from_fork+0x3fc/0x770
[  763.152340][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  763.164611][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  763.169379][    C1]  ? __switch_to_asm+0x39/0x70
[  763.181672][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  763.186501][    C1]  ? __switch_to_asm+0x33/0x70
[  763.191512][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  763.202918][    C1]  ? __pfx_kthread+0x10/0x10
[  763.202943][    C1]  ret_from_fork_asm+0x1a/0x30
[  763.207799][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  763.212613][    C1]  </TASK>
[  763.212623][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  763.212636][    C1] CPU: 1 UID: 0 PID: 1095 Comm: kworker/u8:6 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) 
[  763.300718][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  763.310793][    C1] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker
[  763.317752][    C1] RIP: 0010:lock_acquire+0x175/0x360
[  763.323046][    C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 ab d4 fe 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e
[  763.342670][    C1] RSP: 0018:ffffc90000a07818 EFLAGS: 00000206
[  763.348750][    C1] RAX: 7e5e4a06ff9fc800 RBX: 0000000000000000 RCX: 7e5e4a06ff9fc800
[  763.356732][    C1] RDX: 0000000000000000 RSI: ffffffff8db72142 RDI: ffffffff8be1ca00
[  763.364711][    C1] RBP: ffffffff8172aae5 R08: 0000000000000000 R09: ffffffff8172aae5
[  763.372694][    C1] R10: ffffc90000a079d8 R11: ffffffff81acff90 R12: 0000000000000002
[  763.380672][    C1] R13: ffffffff8e13f0e0 R14: 0000000000000000 R15: 0000000000000246
[  763.388649][    C1] FS:  0000000000000000(0000) GS:ffff888125d4f000(0000) knlGS:0000000000000000
[  763.397585][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  763.404175][    C1] CR2: 00007f53dd3ff150 CR3: 0000000031db2000 CR4: 00000000003526f0
[  763.412162][    C1] Call Trace:
[  763.415450][    C1]  <IRQ>
[  763.418311][    C1]  ? unwind_next_frame+0xa5/0x2390
[  763.423435][    C1]  ? hmac+0x288/0x330
[  763.427432][    C1]  ? unwind_next_frame+0xa5/0x2390
[  763.432559][    C1]  unwind_next_frame+0xc2/0x2390
[  763.437515][    C1]  ? unwind_next_frame+0xa5/0x2390
[  763.442643][    C1]  ? unwind_next_frame+0xa5/0x2390
[  763.447768][    C1]  ? blake2s_update+0x14b/0x450
[  763.452633][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  763.458802][    C1]  arch_stack_walk+0x11c/0x150
[  763.463584][    C1]  ? hmac+0x288/0x330
[  763.467580][    C1]  stack_trace_save+0x9c/0xe0
[  763.472268][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  763.477659][    C1]  ? __lock_acquire+0xab9/0xd20
[  763.482522][    C1]  kasan_save_track+0x3e/0x80
[  763.487214][    C1]  ? kasan_save_track+0x3e/0x80
[  763.492076][    C1]  ? kasan_save_free_info+0x46/0x50
[  763.497280][    C1]  ? __kasan_slab_free+0x62/0x70
[  763.502224][    C1]  ? kmem_cache_free+0x18f/0x400
[  763.507175][    C1]  ? ip6_mc_input+0x9c3/0xbe0
[  763.511866][    C1]  ? ip_sabotage_in+0x1e1/0x270
[  763.516726][    C1]  ? nf_hook_slow+0xc2/0x220
[  763.521327][    C1]  ? NF_HOOK+0x206/0x3a0
[  763.525583][    C1]  ? __netif_receive_skb+0xd3/0x380
[  763.530790][    C1]  ? netif_receive_skb+0x1cb/0x790
[  763.535913][    C1]  ? NF_HOOK+0xa0/0x390
[  763.540078][    C1]  ? br_handle_frame_finish+0x14d1/0x19b0
[  763.545806][    C1]  ? br_nf_hook_thresh+0x3c3/0x4a0
[  763.550927][    C1]  ? br_nf_pre_routing_finish_ipv6+0x948/0xd00
[  763.557092][    C1]  ? br_nf_pre_routing_ipv6+0x37e/0x6b0
[  763.562644][    C1]  ? br_handle_frame+0x982/0x14c0
[  763.567674][    C1]  ? __netif_receive_skb_core+0x10de/0x4180
[  763.573581][    C1]  ? __netif_receive_skb+0x72/0x380
[  763.578802][    C1]  ? process_backlog+0x60e/0x14f0
[  763.583830][    C1]  ? __napi_poll+0xc7/0x480
[  763.588336][    C1]  ? net_rx_action+0x707/0xe30
[  763.593110][    C1]  ? handle_softirqs+0x283/0x870
[  763.598055][    C1]  ? do_softirq+0xec/0x180
[  763.602475][    C1]  ? __local_bh_enable_ip+0x17d/0x1c0
[  763.607853][    C1]  ? kernel_fpu_end+0xd2/0x120
[  763.612628][    C1]  ? blake2s_compress+0x5f/0xd0
[  763.617489][    C1]  ? blake2s_update+0x14b/0x450
[  763.622348][    C1]  ? hmac+0x288/0x330
[  763.626387][    C1]  ? ip6_mc_input+0x9c3/0xbe0
[  763.631081][    C1]  kasan_save_free_info+0x46/0x50
[  763.636114][    C1]  __kasan_slab_free+0x62/0x70
[  763.640894][    C1]  kmem_cache_free+0x18f/0x400
[  763.645679][    C1]  ip6_mc_input+0x9c3/0xbe0
[  763.650200][    C1]  ? __pfx_ip6_mc_input+0x10/0x10
[  763.655253][    C1]  ? ip6_rcv_finish+0x29a/0x2d0
[  763.660114][    C1]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  763.665329][    C1]  ip_sabotage_in+0x1e1/0x270
[  763.670025][    C1]  ? __pfx_ip_sabotage_in+0x10/0x10
[  763.675235][    C1]  nf_hook_slow+0xc2/0x220
[  763.679672][    C1]  NF_HOOK+0x206/0x3a0
[  763.683749][    C1]  ? skb_orphan+0xaf/0xd0
[  763.688097][    C1]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  763.693314][    C1]  ? NF_HOOK+0x9a/0x3a0
[  763.697500][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  763.702181][    C1]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  763.707412][    C1]  __netif_receive_skb+0xd3/0x380
[  763.712460][    C1]  ? netif_receive_skb+0x115/0x790
[  763.717594][    C1]  netif_receive_skb+0x1cb/0x790
[  763.722561][    C1]  ? __pfx_netif_receive_skb+0x10/0x10
[  763.728047][    C1]  ? br_netif_receive_skb+0x126/0x190
[  763.733438][    C1]  NF_HOOK+0xa0/0x390
[  763.737434][    C1]  ? __pfx_br_netif_receive_skb+0x10/0x10
[  763.743164][    C1]  ? NF_HOOK+0x102/0x390
[  763.747420][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  763.752031][    C1]  ? __pfx_br_netif_receive_skb+0x10/0x10
[  763.757779][    C1]  ? br_pass_frame_up+0x275/0x420
[  763.762818][    C1]  br_handle_frame_finish+0x14d1/0x19b0
[  763.768388][    C1]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  763.774307][    C1]  ? ip6t_do_table+0x1db/0x1550
[  763.779175][    C1]  ? nf_hook_slow+0x176/0x220
[  763.783865][    C1]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  763.789772][    C1]  br_nf_hook_thresh+0x3c3/0x4a0
[  763.794731][    C1]  ? __pfx_br_nf_hook_thresh+0x10/0x10
[  763.800205][    C1]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  763.806112][    C1]  ? nf_nat_ipv6_in+0x1fc/0x2b0
[  763.810983][    C1]  br_nf_pre_routing_finish_ipv6+0x948/0xd00
[  763.816981][    C1]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  763.822901][    C1]  ? br_nf_pre_routing_ipv6+0x42f/0x6b0
[  763.828463][    C1]  br_nf_pre_routing_ipv6+0x37e/0x6b0
[  763.833851][    C1]  ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10
[  763.839758][    C1]  ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10
[  763.846270][    C1]  ? br_nf_pre_routing+0x720/0x1470
[  763.851488][    C1]  ? __pfx_br_nf_pre_routing+0x10/0x10
[  763.856958][    C1]  br_handle_frame+0x982/0x14c0
[  763.861828][    C1]  ? __pfx_br_handle_frame+0x10/0x10
[  763.867123][    C1]  ? rcu_lockdep_current_cpu_online+0x37/0x120
[  763.873291][    C1]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  763.879194][    C1]  ? __pfx_rcu_read_lock_bh_held+0x10/0x10
[  763.885015][    C1]  ? __pfx_br_handle_frame+0x10/0x10
[  763.890330][    C1]  __netif_receive_skb_core+0x10de/0x4180
[  763.896084][    C1]  ? ip6_mc_input+0x9c3/0xbe0
[  763.900796][    C1]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  763.906882][    C1]  ? ip6_rcv_finish+0x29a/0x2d0
[  763.911750][    C1]  ? NF_HOOK+0x309/0x3a0
[  763.916000][    C1]  ? skb_orphan+0xaf/0xd0
[  763.920364][    C1]  ? process_backlog+0x2d5/0x14f0
[  763.925405][    C1]  ? process_backlog+0x2d5/0x14f0
[  763.930443][    C1]  __netif_receive_skb+0x72/0x380
[  763.935479][    C1]  ? process_backlog+0x2d5/0x14f0
[  763.940513][    C1]  process_backlog+0x60e/0x14f0
[  763.945393][    C1]  ? __pfx_process_backlog+0x10/0x10
[  763.950688][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  763.956595][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  763.962946][    C1]  __napi_poll+0xc7/0x480
[  763.967287][    C1]  ? net_rx_action+0x46d/0xe30
[  763.972068][    C1]  net_rx_action+0x707/0xe30
[  763.976669][    C1]  ? __lock_acquire+0xab9/0xd20
[  763.981544][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  763.986670][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  763.991891][    C1]  ? __pfx_sched_clock_cpu+0x10/0x10
[  763.997204][    C1]  handle_softirqs+0x283/0x870
[  764.001982][    C1]  ? do_softirq+0xec/0x180
[  764.006421][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  764.011729][    C1]  ? kernel_fpu_end+0xc8/0x120
[  764.016509][    C1]  do_softirq+0xec/0x180
[  764.020761][    C1]  </IRQ>
[  764.023700][    C1]  <TASK>
[  764.026643][    C1]  ? __pfx_do_softirq+0x10/0x10
[  764.031506][    C1]  ? __pfx_do_softirq+0x10/0x10
[  764.036374][    C1]  ? lockdep_softirqs_on+0x13b/0x1c0
[  764.041673][    C1]  __local_bh_enable_ip+0x17d/0x1c0
[  764.046896][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  764.052621][    C1]  ? __local_bh_enable_ip+0x12d/0x1c0
[  764.058004][    C1]  ? kernel_fpu_begin_mask+0x2c8/0x3a0
[  764.063476][    C1]  kernel_fpu_end+0xd2/0x120
[  764.068078][    C1]  ? __pfx_kernel_fpu_end+0x10/0x10
[  764.073285][    C1]  ? kernel_fpu_end+0xd2/0x120
[  764.078067][    C1]  ? __pfx_kernel_fpu_end+0x10/0x10
[  764.083283][    C1]  blake2s_compress+0x5f/0xd0
[  764.087982][    C1]  blake2s_update+0x14b/0x450
[  764.092678][    C1]  hmac+0x288/0x330
[  764.096509][    C1]  ? __pfx_hmac+0x10/0x10
[  764.100846][    C1]  ? __local_bh_enable_ip+0x12d/0x1c0
[  764.106244][    C1]  ? kernel_fpu_end+0xd2/0x120
[  764.111036][    C1]  ? __asan_memset+0x22/0x50
[  764.115646][    C1]  message_ephemeral+0x1c0/0x280
[  764.120603][    C1]  ? __pfx_message_ephemeral+0x10/0x10
[  764.126114][    C1]  ? __crypto_memneq+0x2fe/0x470
[  764.131065][    C1]  wg_noise_handshake_create_initiation+0x27c/0x7e0
[  764.137677][    C1]  ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10
[  764.144806][    C1]  ? __lock_acquire+0xab9/0xd20
[  764.149680][    C1]  ? ktime_get_coarse_with_offset+0x83/0x140
[  764.155688][    C1]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  764.161937][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  764.167153][    C1]  ? ktime_get_coarse_with_offset+0x83/0x140
[  764.173148][    C1]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[  764.179403][    C1]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  764.186023][    C1]  ? ktime_get_coarse_with_offset+0xfb/0x140
[  764.192019][    C1]  wg_packet_handshake_send_worker+0x163/0x320
[  764.198187][    C1]  ? __pfx_wg_packet_handshake_send_worker+0x10/0x10
[  764.204895][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  764.210109][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  764.215843][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  764.221572][    C1]  process_scheduled_works+0xade/0x17b0
[  764.227222][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  764.233232][    C1]  worker_thread+0x8a0/0xda0
[  764.237860][    C1]  kthread+0x711/0x8a0
[  764.241947][    C1]  ? __pfx_worker_thread+0x10/0x10
[  764.247076][    C1]  ? __pfx_kthread+0x10/0x10
[  764.251680][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  764.256914][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  764.262123][    C1]  ? __pfx_kthread+0x10/0x10
[  764.266729][    C1]  ret_from_fork+0x3fc/0x770
[  764.271350][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  764.276477][    C1]  ? __switch_to_asm+0x39/0x70
[  764.281250][    C1]  ? __switch_to_asm+0x33/0x70
[  764.286026][    C1]  ? __pfx_kthread+0x10/0x10
[  764.290628][    C1]  ret_from_fork_asm+0x1a/0x30
[  764.295428][    C1]  </TASK>
[  768.088375][    C0] net_ratelimit: 17454 callbacks suppressed
[  768.088395][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  768.088454][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  768.094600][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  768.107118][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  768.118685][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  768.130530][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  768.142321][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  768.154442][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  768.166357][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)
[  768.179699][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:91:68:a0:ab:da, vlan:0)