last executing test programs:

6m1.870056079s ago: executing program 3 (id=1454):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r2, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0xfdcd, 0x0, @wg=@data}}}}}, 0x0)

6m1.83153967s ago: executing program 3 (id=1457):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000196c0), 0x0, 0x400c010)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
r2 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x10000, @empty}, 0x1c)
accept(r1, 0x0, 0x0)

5m59.706502195s ago: executing program 3 (id=1459):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000001c0)=0x1)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x60}], 0x1, 0x0, 0x0, 0x0)

5m58.859894966s ago: executing program 3 (id=1466):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
getpid()
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@ipv6_newrule={0x2c, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e23}}]}, 0x2c}}, 0x80)

5m58.835309267s ago: executing program 3 (id=1467):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000540)={'pcl818\x00', [0x5c22, 0x3, 0x1, 0x0, 0xa, 0x7, 0xc, 0x7, 0x5, 0x800, 0x6b5b, 0x2, 0x3d, 0x403, 0x7, 0x1, 0x1, 0x0, 0x7, 0x40400007, 0x8c, 0x1007fff, 0x200006, 0xd, 0x8004, 0x8, 0x2, 0x8, 0x8, 0x3]})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000040)={0x2, 'macsec0\x00', {0xc000}, 0x1})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r4)
socket$nl_netfilter(0x10, 0x3, 0xc)
fsopen(0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
read$FUSE(r5, &(0x7f0000005bc0)={0x2020}, 0x207d)
write$cgroup_pid(r5, &(0x7f00000000c0), 0x12)
r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x1, 0x0)
r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x42, 0xa)
read$FUSE(r5, &(0x7f0000003b80)={0x2020}, 0x2020)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r9, 0x0, 0x20004080)
socket$inet6(0xa, 0x5, 0x0)

5m58.78648697s ago: executing program 3 (id=1468):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x3, 0x2, 0x1}, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2)
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$kcm(r2, &(0x7f0000000640)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r5, 0x40}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)="2703", 0x2}], 0x1}, 0x4041)

5m43.774527175s ago: executing program 32 (id=1468):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x3, 0x2, 0x1}, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2)
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$kcm(r2, &(0x7f0000000640)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r5, 0x40}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)="2703", 0x2}], 0x1}, 0x4041)

10.491854078s ago: executing program 0 (id=3052):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000001c0)=0x1)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
ppoll(&(0x7f00000000c0)=[{r3, 0x60}], 0x1, 0x0, 0x0, 0x0)

9.795432053s ago: executing program 4 (id=3057):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond0\x00'})
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockname(r3, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80)

9.295400887s ago: executing program 0 (id=3060):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002100), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1)
r1 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
open(&(0x7f0000000280)='.\x00', 0x141080, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x44, r6, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40810}, 0x20000000)

7.950747655s ago: executing program 0 (id=3066):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
syz_mount_image$exfat(&(0x7f0000000700), &(0x7f00000001c0)='./file0\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x5, 0x1501, &(0x7f0000002a80)="$eJzs3AuYzlW7MPD7Xmv9GdOkp0kOw1rr/vOkwTJJkkOKHJIkSZKcEpImSRISQ0gSkpwPk+QwhOQwjUnjfD7knDR5pUmSkJzC+q7pbW/vu3v3297f2/581577d13rmnXPeu71rDX3zDz/9b+u5/m+x8i6zevVakpE8C/Bv35JAYAYABgCANcBQAAAleIrxeeOF5CY8q89CftzPZJ2tVfAriauf97G9c/buP55G9c/b+P6521c/7yN65+3cf0Zy8u2zyl2Pbe82/j+f17Gr///i+SUn/z1xvI39vxvpHD98zauf97G9c/buP55G9c/b+P6/+9X85+Mcf3zNq4/Y3nZ1b7/zO3qtqv9+8cYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjLG84569QAPBv/au9LsYYY4wxxhhjjP15fP6rvQLGGGOMMcYYY4z9z0MQIEFBAPkgP8RAAYiFayAOroWCcB1E4HqIhxugENwIhaEIFIVikADFoQRoMGCBIISSUAqicBOUhpshEcpAWSgHDspDEtwCFeBWqAi3QSW4HSrDHVAFqkI1qA53Qg24C+6GmlAL7oHaUAfqQj24F+rDfdAA7oeG8AA0ggehMTwETeBhaAqPQDN4FJrDY9ACHoeW0ApaQxto+3+V/zL0gVegL/SDFOgPA+BVGAiDYDC8BkPgdRgKb8AweBOGwwgYCW/BKHgbRsM7MAbGwjgYDxNgIkyCyTAFpkIqvAvT4D2YDu/DDJgJs2A2pMEcmAsfwDyYDwvgQ1gIH8EiWAxLYCmkw8eQAcsgEz6B5fApZMEKWAmrYDWsgbWwDtbDBtgIm2AzbIGtsA22w2ewA3bCLtgNe2Av7IPPYT98AQfgS8iGr/6b+Wf/Q35PBAQUKFChwnyYD2MwBmMxFuMwDgtiQYxgBOMxHgthISyMhbEoFsUETMASWAINGiQkLIklMYpRLI2lMRETsSyWRYcOkzAJK+CtWBErYiWshJWxMlbBqlgVq2N1rIE18G6EKgHUwtpYG+tiXbwX78X7sAE2wIbYEBthI2yMjbEJNsGm2BSbYTNsjs2xBbbAltgSW2NrbIttsR22w/bYHjtiR+yEnbAzdsZkTMYu2AW7Ylfsht2wO3bHHtgDe2Iv7IUv48v4Cr6C/bC26I8DcAAOxIEHcv8YXsPXcSi+gW/gmzgcR+BIfAvfwrdxNJ7BMTgWx+E4rCEm4iScjCSmYiqm4jSchtNxOs7AmTgTZ2MazsG5OBfn4Xycjx/iQvwIP8LFuBiXYjqmYwYuw0zMxOV4FrNwBa7EVbga1+BqXIfrcR1uxE24EbfgFtyG2/Az/Ax34k7cjbtxL+7Fz/Fz/AK/wOGYjdl4EA/iITyEh/Ew5mAOHsEjeBSP4jE8hsfxOJ7Ak3gKT+JpPI1n8Cyew3N4AS/gRXwx4dtme8tsGA4ilxJK5BP5RIyIEbEiVsSJOFFQFBQRERHxIl4UEoVEYVFYFBVFRYJIECVECWGEESRCUVKUFFERFaVFaZEoEkVZUVY44USSSBIVRAVRUVQUlcTtorK4Q1QRVUUHV11UFzVER3e3qClqiVqitqgj6op6op6oL+qLBqKBaCgaikaikWgsHhJNRH8cjI+I3Mo0FyOwhRiJLUUr0Vq0EW/jE6KdGI3tRQfRUTwlxuIY7CzauWTxrOgiJmFX8byYjC+I7mIq9hAviZ6il+gtXhZ9RHvXV/QTM7C/GCBm40AxSAwWr4l5WEfkVqyueFMMFyPESPGWWIpvi9HiHTFGjBXjxHgxQUwUk8RkMUVMFaniXTFNvCemi/fFDDFTzBKzRZqYI+aKD8Q8MV8sEB+KheIjsUgsFkvEUpEuPhYZYpnIFJ+I5eJTkSVWiJVilVgt1oi1Yp1YLzaIjWKT2Cy2iK1im9guPhM7xE6xS+wWe8ResU98LvaLL8QB8aXIFl+Jg+Iv4pD4WhwW34gc8a04Ir4TR8X34pj4QRwXP4oT4qQ4JX4Sp8XP4ow4K86J8+KC+EVcFJfEZeEFSJRCSqlkIPPJ/DJGFpCx8hoZJ6+VBeV1MiKvl/HyBllI3igLyyKyqCwmE2RxWUJqaaSVJENZUpaSUXmTLC1vlomyjCwry0kny8skeYusIG+VFeVtspK8XVaWd8gqsqqsJqvLO2UNeZe8W9aUteQ9srasI+vKevJeWV/eJxvI+2VD+YBsJB+UjeVDsol8WDaVj8hm8lHZXD4mW8jHZUvZSraWbWRb+YRsJ5+U7WUH2VE+JTvJp2Vn+YxMls/KLvI52VU+L7vJF2R3+aLsIV+SPWUv2Vtekpell31lP5ki+8sB8lU5UA6Sg+Vrcoh8XQ6Vb8hh8k05XI6QI+VbcpR8W46W78gxcqwcJ8fLCXKinCQnyylyqkyV78pp8j05Xb4vZ8iZcpacLdPkHDn4t5kW/Bfy3/sH+cN+ffZtcrv8TO6QO+UuuVvukXvlPrlP7pf75QF5QGbLbHlQHpSH5CF5WB6WOTJHHpFH5FF5VB6Tx+RxeVyekCflefmTPC1/lmfkWXlWnpcX5AV58befAShUQkmlVKDyqfwqRhVQseoaFaeuVQXVdSqirlfx6gZVSN2oCqsiqqgqphJUcVVCaWWUVaRCVVKVUlF1kyqtblaJqowqq8opp8qrJHXLv5z/R+trq9qqdqqdaq/aq46qo+qkOqnOqrNKVsmqi+qiuqquqpvqprqr7qqH6qF6qp6qt+qt+qg+qq/qq1JUihqgXlUD1SA1WL2mhqjX1VA1VA1Tw9RwNVyNVCPVKDVKjVaj1Rg1Ro1T49QENUFNUpPUFDVFpapUNU1NU9PVdDVDzVCz1CyVptLUXDVXzVPz1AK1QC1UC9UitUgtUUtUukpXGSpDZapMtVwtV1lqhVqhVqlVao1ao9apdWqD2qA2qU1qi9qistR2tV3tUDvULrVL7VF71D61T+1X+9UBdUBlq2x1UB1Uh9QhdVgdVjkqRx1RR9RRdVQdU8fUcXVcnVAn1Cl1Sp1Wp9UZdUadU+fUBXVBXVQX1WV1OfeyLxCBCFSggnxBviAmiAlig9ggLogLCgYFg0gQCeKD+KBQcGNQOCgSFA2KBQlB8aBEoAMT2ICCMCgZlAqiwU1B6eDmIDEoE5QNygUuKB8kBbcEFYJbg4rBbUGl4PagcnBHUCWoGlQLqgd3BjWCu4K7g5pBreCeoHZQJ6gb1AvuDeoH9wUNgvuDhsEDQaPgwaBx8FDQJHg4aBo8EjQLHg2aB48FLYLHg5ZBq6B10CZo+6fO7/2ZIk+6vrqfTtH99QD9qh6oB+nB+jU9RL+uh+o39DD9ph6uR+iR+i09Sr+tR+t39Bg9Vo/T4/UEPVFP0pP1FD1Vp+p39TT9np6u39cz9Ew9S8/WaXqOnqs/0PP0fL1Af6gX6o/0Ir1YL9FLdbr+WGfoZTpTf6KX6091ll6hV+pVerVeo9fqdXq93qA36k16s96it+pterv+TO/QO/UuvVvv0Xv1Pv253q+/0Af0lzpbf6UP6r/oQ/prfVh/o3P0t/qI/k4f1d/rY/oHfVz/qE/ok/qU/kmf1j/rM/qsPqfP6wv6F31RX9KXtc+9uM99eTfKKJPP5DMxJsbEmlgTZ+JMQVPQREzExJt4U8gUMoVNYVPUFDUJJsGUMCVMLjJkSpqSJmqiprQpbRJNoilryhpnnEkySaaCqWAqmoqmkqlkKpvKpoqpYqqZauZOc6e5y9xlapqa5h5zj6lj6ph6pp6pb+qbBqaBaWgamkamkWlsGpsmpolpapqaZqaZaW6amxamhWlpWprWprVpa9qadqadaW/am46mo+lkOpnOprNJNsmmi+liupquppvpZrqb7qaH6WF6mp6mt+lt+pg+pq/pa1JMihlgBpiBZqAZbAabIWaIGWqGmmFmmBlfYVPN3JPTKDPKjDajzRgz1owz480EM9FMMpPNFDPVpJpUM81MM9PNdDPDzDCzzCyTZtLMXDPXzDPzzAKzwCw0C80is8gsMUtMukk3GSbDZJpMs9wsN1kmy6w0K81qs9qsNWvNerPebDQbzWaz2Ww1W812s93sMDvMLrPL7DF7zD6zz+w3+80Bc8Bkm+yY3w535rA5bHJMjjlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86ZC+YXc9FcMpeNNzFWQKy9xsbZa21Be52NsQXs38ZFbTGbYIvbElbbwrbI38XGWptoy9iytpx1trxNsrf8Lq5iq9pqtrq909awd9m7fxfXt/fZBvZ+29A+YOvZe/8ubmQftI3tY7aJfdw2ta1sM9vGNreP2Rb2cdvStrKtbRvbyT5tO9tnbLJ91naxz/0uzrDL7Hq7wW60m+x++4U9Z8/bo/Z7e8H+YvvafnaIfd0OtW/YYfZNO9yO+F08zo63E+xEO8lOtlPs1N/Fs+xsm2bn2Ln2AzvPzv9dnG4/tgttpl1kF9sldumvce6aMu0ndrn91GbZFXalXWVX2zV2rV3372tdZbfYrXab3Wc/tzvsTrvL7rZ77N5f49x9HLBf2mz7lT1iv7OH7Nf2sD1mc+y3v8a5+wP4wR63P9oT9qQ9ZX+yp+3P9ow9++v+c/f+k71kL1tvgZAESVIUUD7KTzFUgGLpGoqja6kgXUcRup7i6QYqRDdSYSpCRakYJVBxKkGaDFkiCqkklaIo3USl6WZKpDJUlsqRo/KURLdQBbqVKtJtVIlup8p0B1WhqlSNqtOdVIPuorupJtWie6g21aG6VI/upfp0HzWg+6khPUCN6EFqTA9RE3qYmtIj1Iwepeb0GLWgx6kltaLW1Iba0hPUjp6k9tSBOtJT1Imeps70DCXTs9SFnqOu9Dx1oxeoO71IPegl6km9qDe9TH3oFepL/SiF+tMAepUG0iAaTK/REHqdhtIbNIzepOE0gkbSWzSK3qbR9A6NobE0jsbTBJpIk2gyTaGplErv0jR6j6bT+zSDZtIsmk1pNIfm0gc0j+bTAvqQFtJHtIgW0xJaSun0MWXQMsqkT2g5fUpZtIJW0ipaTWtoLa2j9bSBNtIm2kxbaCtto+30Ge2gnbSLdtMe2kv76HPaT1/QAfqSsukrOkh/oUP0NR2mbyiHvqUj9B0dpe/pGP1Ax+lHOkEn6RT9RKfpZzpDZ+kcnacL9AtdpEt0mTxBiKEIZajCIMwX5g9jwgJhbHhNGBdeGxYMrwsj4fVhfHhDWCi8MSwcFgmLhsXChLB4WCLUoQltSGEYlgxLhdHwprB0eHOYGJYJy4blQheWD5PCW8IK4a1hxfC2sFJ4e1g5vCOsElYNH3ugenhnWCO8K7w7rBnWCu8Ja4d1wrphvfDesH54X9ggvD9sGD4QVgwfDBuHD4VNwofDpuEjYbPw0bB5+FjYInw8bBm2CluHbcK24RNhu/DJsH3YIewYPhV2Cp8OO4fPhMnhs2GX8Lk/HE8J+4cDwlfDV0Pv75dLokuj6dGPoxnRZdHM6CfR5dFPo1nRFdGV0VXR1dE10bXRddH10Q3RjdFN0c3RLdGt0W1R7+vlB4dOOOmUC1w+l9/FuAIu1l3j4ty1rqC7zkXc9S7e3eAKuRtdYVfEFXXFXIIr7ko47YyzjlzoSrpSLupucqXdzS7RlXFlXTnnXHmX5Nq4tq6ta+eedO1dB9fRPeWeck+7p90z7hn3rOvinnNd3fOum3vBdXcvuhfdS66n6+V6u5ddH/eK6+v6uRSX4ga4AW6gG+gGu8FuiBvihrqhbpgb5oa74W6kG+lGuVFutBvtxrgxbpwb5ya4CW6Sm+SmuCku1aW6aW6am+6muxluhpvlZrk0l+bmurlunpvnFrgFbmHiQrfILXJL3BKX7tJdhstwmS7TLXfLXZbLcivdSrfarXZr3Vq33q13G91Gt9ltdlvdVrfdbXc73A63y+1ye9wet8/tc/vdfnfAHXDZLtsddAfdIXfIHXbfuBz3rTvivnNH3ffumPvBHXc/uhPupDvlfnKn3c/ujDvrzrnz7oL7xV10l9xl511q5N3ItMh7kemR9yMzIjMjsyKzI2mROZG5kQ8i8yLzIwsiH0YWRj6KLIosjiyJLI2kRz6OZESWRTIjn0SWRz6NZEVWRFZGVkVWR9ZEvC++I/QlfSkf9Tf50v5mn+jL+LK+nHe+vE/yt/gK/lZf0d/mK/nbfWV/h6/iq/pq/nHf0rfyrX0b39Y/4dv5J31738F39E/5Tv5p39k/45P9s76Lf8539c/7bv4F392/6Hv4l3xP38v39i/7Pv4V39f38ym+vx/gX/UD/SA/2L/mh/jX/VD/hh/m3/TD/Qg/0r/lR/m3/Wj/jh/jx/pxfryf4Cf6SX6yn+Kn+lT/rp/m3/PT/ft+hp/pZ/nZPs3P8XP9B36en+8X+A/9Qv+RX+QX+yV+qU/3H/sMv8xn+k/8cv+pz/Ir/Eq/yq/2a/xav86v9xv8Rr/Jb/Zb/Fa/zW/3n/kdfqff5Xf7PX6v3+c/9/v9F/6A/9Jn+6/8Qf8Xf8h/7Q/7b3yO/9Yf8d/5o/57f8z/4I/7H/0Jf9Kf8j/50/5nf8af9ef8eX/B/+Iv+kv+8n/1PWv5/ifvpTPGGGOM/f8v9Q/G+/+D74nfWq4BAHDtzmI5fzsuAWBz4b/2B4mEThEAeLZfj0f+rdWunZKS8ttjsyQEpRYDQORK/q+XaL/FK6AjPA3J0AEq/MP1DRK9LtAfzB+9HSD2b3Ji/voxB/9h/lv/k/mfeGpcRuXwXPw/mX8xQGKpKzkF4Ep8Zf6K/8n8Rdr9wfoLfJ0K0P5vcuLgSnxl/iR4Ep6D5L97JGOMMcYYY4wx9leDRLVulHsihn9+Pk9QV3Lyw5X4j87njDHGGGOMMcYYu/pe6NX7mSeSkzt04w53uMOdf+9c7f9MjDHGGGOMsT/blYv+q70SxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMs7/p/8XFiV3uPjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG2NX2fwIAAP//sN45jQ==")
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03296804268c989e14f088a8", 0x0, 0x542, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

6.724294425s ago: executing program 4 (id=3070):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000001c0)=0x1)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
ppoll(&(0x7f00000000c0)=[{r3, 0x60}], 0x1, 0x0, 0x0, 0x0)

6.552067544s ago: executing program 0 (id=3071):
r0 = io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x2c97, 0x1000, 0xfffffffd, 0x17b})
syz_init_net_socket$rose(0xb, 0x5, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xfffffffd}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0x13, &(0x7f0000000880), 0x4)
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

6.548756844s ago: executing program 2 (id=3072):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020100030e000000fcffffff0400000005000600000000000a00000000000000fc01ff80000000000000000000000000000000000000000005000500000000000a0000002efcb098950a0ec00000000000000000000000aa0000000000000000020013"], 0x70}}, 0x0)
sendmmsg(r1, 0x0, 0x0, 0x0)

6.390455502s ago: executing program 2 (id=3074):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
r1 = openat$sndseq(0xffffff9c, &(0x7f0000000340), 0x404e80)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000380)={0x7, 0x9, 0x1, 'queue0\x00', 0x42})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_io_uring_setup(0x497, &(0x7f00000004c0)={0x0, 0x465e, 0x400, 0x7, 0x31d}, &(0x7f00000001c0)=<r4=>0x0, &(0x7f0000000300)=<r5=>0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = getpid()
r8 = syz_pidfd_open(r7, 0x0)
setns(r8, 0x24020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
umount2(&(0x7f0000000040)='.\x00', 0x2)
ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000001ac0)=@ethtool_regs={0x4, 0x5}})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x40, 0x4004, @fd_index, 0xf, &(0x7f0000000bc0), 0x0, 0x2})
r9 = socket(0x29, 0x801, 0xb)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60000000100039042cbd7000eaffffff000003e4", @ANYRES32=r10, @ANYBLOB="001100000000000040001280080001007369740034000280050009002900000008000200ac1414bb08000c00000001"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)

5.362901023s ago: executing program 5 (id=3076):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0xd7e02e5a506b2fd3}, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1, 0x0, 0x0, 0x4000000}, 0x0)
io_uring_setup(0x30aa, &(0x7f00000007c0)={0x0, 0x760, 0x80, 0x1, 0x14c})
openat$dsp1(0xffffffffffffff9c, 0x0, 0x88a01, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r9 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0)
futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x2)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000)

5.311443076s ago: executing program 4 (id=3077):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002100), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1)
r1 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
open(&(0x7f0000000280)='.\x00', 0x141080, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23"], &(0x7f0000000100)='GPL\x00'}, 0x94)
mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x44, r6, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40810}, 0x20000000)

4.347039944s ago: executing program 0 (id=3078):
socket$unix(0x1, 0x5, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='cgroup\x00', 0x0, &(0x7f0000000380)='source')
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local})
openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd)
futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0)
futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0)
r3 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x4000)
r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SNDCTL_DSP_RESET(r5, 0x80044dff, 0x1000000000000)

3.932712635s ago: executing program 5 (id=3079):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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")
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffff6, 0x2)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x398, 0x0, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@ip={@private, @private, 0x0, 0x0, 'bond_slave_1\x00', 'geneve1\x00'}, 0x0, 0x220, 0x248, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x0, 0x39, 0x0, 0x0, 0x80000000, 0x3}}}, @common=@inet=@hashlimit1={{0x58}, {'veth0_to_batadv\x00', {0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'ip6erspan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3f8)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0x0, 0x100f, 0x1, @discrete={0x2, 0x7fff}})
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05007cd6e1bee61e2aba0600000008000300", @ANYRES32=r4, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05002abd7000000000002e00000008000300", @ANYRES32=r4, @ANYBLOB="0a000200d516010000000045000000"], 0x30}}, 0x0)
r5 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
accept4(r5, 0x0, 0x0, 0x0)
r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockname(r6, 0x0, &(0x7f0000000ec0))
write$uinput_user_dev(r0, &(0x7f0000000180)={'syz1\x00', {0x3, 0xa, 0x0, 0xfff7}, 0x38, [0xffff, 0x8, 0x7, 0xe9, 0x4, 0x6, 0x7, 0x10, 0x2, 0x950c, 0x1298, 0x8, 0x2, 0x5506fd78, 0x8000, 0xffffffa2, 0x9, 0x1, 0x8, 0x401, 0x8, 0x3, 0x3, 0x222, 0x1, 0xde, 0x10000, 0x4, 0x5, 0xbf7, 0xfffffffe, 0x200, 0x3, 0x4, 0xa, 0x7, 0x0, 0x9, 0x101, 0x1, 0x8, 0x2, 0x9, 0x4, 0x7, 0x4, 0xa, 0x0, 0x635dfebb, 0x0, 0x8, 0xd, 0x3, 0x7, 0x5, 0x0, 0x0, 0xae, 0x4, 0xfffffff7, 0x5, 0x3, 0x2, 0xfffffff9], [0x7, 0x7, 0x7, 0xb, 0xdd6, 0x6, 0x5, 0x7fff, 0x7, 0x52263b86, 0x0, 0x3, 0x5ce3, 0xfffffff7, 0xf, 0x3, 0x4, 0x200, 0xa66, 0xb0, 0x6, 0x8, 0x20000, 0x45, 0xffffffff, 0x0, 0x2, 0x3, 0x7, 0x10000003, 0x6, 0x2b86, 0x139d3, 0x9, 0x385a, 0x3ff8, 0x5, 0x1, 0x4, 0xffffffff, 0x8, 0x4, 0x1, 0x8, 0x4, 0xfffff305, 0x622e, 0x2, 0xf4f4, 0x8, 0x2, 0x36, 0x2, 0x92, 0x0, 0x7, 0xfff, 0xfffffff9, 0x7, 0x1cd4, 0x5a26, 0x17, 0x80000001, 0x9], [0x204, 0x8000, 0x40002e, 0x23, 0x14b, 0x2, 0x200, 0x0, 0x2, 0x80000000, 0x1, 0x6, 0x51d, 0x5, 0x5, 0xa1, 0x6, 0x0, 0x4, 0x1, 0x7, 0x7, 0x2, 0xe000001, 0xacd, 0xbc, 0x7, 0x9, 0x40, 0xc, 0x7, 0x6, 0xa, 0x5, 0x7, 0xb7, 0x401, 0x9, 0x3, 0x4, 0x4, 0x81, 0x5, 0x7, 0xfff, 0xdb91, 0xfffffffc, 0xd, 0x58cf, 0x1, 0x519eb04a, 0xfffffffb, 0xdd7, 0x4c, 0x200ffff, 0x6, 0x7fffffff, 0x4, 0x401, 0x7eedff86, 0x0, 0x1, 0x1, 0xc7be], [0x7, 0x5d90, 0x3fe0, 0x1, 0x200, 0x101, 0x101, 0x4, 0x99, 0x7287, 0x8003, 0x5, 0x7, 0xdfe, 0xe, 0x7, 0x101, 0x5, 0x8, 0x4000200, 0x1, 0x5365, 0x6, 0x8, 0x7, 0x2, 0x5, 0xbfff8004, 0xe, 0x3, 0x1, 0xda, 0x4, 0x6f8, 0xfcf, 0x8, 0x80008, 0x2, 0x6, 0x10001, 0x3919, 0x2, 0x1000, 0x7, 0x0, 0x80000000, 0xb, 0xc33, 0x7, 0x7, 0x3, 0xc2e, 0x8, 0x2, 0x0, 0x1, 0x7fff, 0xffffffff, 0x31, 0x7fffffff, 0xff, 0x1ff, 0x3, 0x2d]}, 0x45c)
socket(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d131, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x100000})

3.925913505s ago: executing program 2 (id=3080):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond0\x00'})
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockname(r3, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80)

3.719430235s ago: executing program 1 (id=3082):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
syz_mount_image$exfat(&(0x7f0000000700), &(0x7f00000001c0)='./file0\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x5, 0x1501, &(0x7f0000002a80)="$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")
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03296804268c989e14f088a8", 0x0, 0x542, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.646017039s ago: executing program 4 (id=3083):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000640)=@gcm_256={{0x304}, "55b2bfe456f65ac5", "94933eabd65daad540f97d075c35dc3d0c5423c36a5a29e09986c18918a9d481", "ea6eda2b", "a3df11c174fa26bb"}, 0x38)
syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
socket$unix(0x1, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711227000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x49, 0x0, &(0x7f0000000900)="d9e09758eda175284a04c7fa0bf2946a2677f37f5be0ae2b9b0a1b5923e79818d2e59aa7eef595d9795c58288ff2e7e42a486e071cf8cb54263e9841ac134a3ca4dde908689b1d533e", 0x0}, 0x50)
r5 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00')
r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff)
close(r6)
syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7)
getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)

3.551714974s ago: executing program 5 (id=3084):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
capset(0x0, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0x2})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7)
getpid()
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$igmp(0x2, 0x3, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4070, 0xfed}, {&(0x7f0000002140)=""/130, 0x82}], 0x2}}], 0x110, 0x42, 0x0)

3.066467948s ago: executing program 0 (id=3085):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
r4 = getpid()
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f00000003c0)={{0xa, 0x6, 0x6, 0x0, 'syz1\x00', 0x401}, 0x3, 0x20000000, 0x6, r4, 0x9, 0x3, 'syz0\x00', &(0x7f0000000300)=['/dev/vim2m\x00', '-\x14[&$\x00', '\x00', '{-[+-\x00', 'GPL\x00', '\x00', '*\x00', '/dev/vim2m\x00', '/dev/comedi0\x00'], 0x37})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="170000000700"], 0x50)
sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x0, 0x0, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r7, &(0x7f0000000000), 0xd)
sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020011b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010)
preadv(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000000)=""/91, 0x5b}], 0x1, 0x801, 0x6)

2.831436579s ago: executing program 5 (id=3086):
bind$rds(0xffffffffffffffff, 0x0, 0x0)
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
gettid()
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000350000000801000001000000800000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c000900080000003e"], 0x30}}, 0x0)

2.769709562s ago: executing program 1 (id=3087):
socket(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xf)

2.768704533s ago: executing program 4 (id=3088):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
capset(0x0, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0x2})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7)
getpid()
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0)
recvmmsg$unix(r3, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4070, 0xfed}, {&(0x7f0000002140)=""/130, 0x82}], 0x2}}], 0x110, 0x42, 0x0)

2.000135591s ago: executing program 5 (id=3089):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x1)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r5=>0x0})
bind$can_raw(r4, &(0x7f0000000000)={0x1d, r5}, 0x10)
setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
bind$can_raw(r4, &(0x7f0000000080), 0x10)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000080)={0x80, 0x6, 0x101, 0x0, 0xec, 0x2, 0x0})

1.82019475s ago: executing program 1 (id=3090):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0xd7e02e5a506b2fd3}, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1, 0x0, 0x0, 0x4000000}, 0x0)
io_uring_setup(0x30aa, &(0x7f00000007c0)={0x0, 0x760, 0x80, 0x1, 0x14c})
openat$dsp1(0xffffffffffffff9c, 0x0, 0x88a01, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r9 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0)
futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x2)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000)

1.819211999s ago: executing program 1 (id=3091):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000001c0)={0x30, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

824.55536ms ago: executing program 2 (id=3092):
socket(0x10, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r2, 0x540a, 0x0)
writev(r2, &(0x7f0000008f80)=[{&(0x7f0000006f00)}], 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=r3, @ANYBLOB="08000600", @ANYRES32], 0x24}}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001d80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001d40)={&(0x7f0000000340)={0x19d0, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x454, 0x11d, 0x0, 0x1, [{0x1f8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7, 0x4, 0x1, 0x7ff, 0x8, 0x2, 0x3]}}]}, @NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x6, 0xa}, {0x6, 0xa}, {0x6, 0x7}, {0x2, 0x2}, {0x4, 0x9}, {0x2, 0x8}, {0x1, 0x9}, {0x6, 0x1}, {0x1, 0x2}, {0x5, 0x1}, {0x2, 0x6}, {0x3, 0xa}, {0x5, 0x6}, {0x0, 0x1}, {0x0, 0x6}, {0x1, 0x8}, {0x3, 0x6}, {0x5}, {0x3, 0x3}, {0x7, 0x6}, {0x7, 0x8}, {0x4, 0x1}, {0x4, 0x7}, {0x1}, {0x2, 0x3}, {0x2, 0xa}, {0x1, 0x5}, {0x7, 0x7}, {0x6, 0x7}, {0x7, 0x6}, {0x1, 0x6}, {0x2, 0x6}, {0x7, 0x1}, {0x5, 0x2}, {0x5, 0xa}, {0x4, 0x8}, {0x5, 0x2}, {0x7, 0x6}, {0x4, 0x5}, {0x3, 0x6}, {0x1}, {0x6, 0x6}, {0x6, 0x3}, {0x7, 0x7}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x3, 0x6c, 0x36, 0x16, 0x1b, 0x60]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x1b, 0x3]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x5, 0x1}, {0x7, 0x1}, {0x1, 0x8}, {0x0, 0x3}, {0x2, 0xa}, {0x5, 0x5}, {0x0, 0x7}, {0x2, 0x4}, {0x0, 0x6}, {0x0, 0x6}, {0x0, 0x1}, {0x6, 0x5}, {0x2, 0x6}, {0x1, 0x9}, {0x5, 0x8}, {0x7, 0x4}, {0x7, 0x7}, {0x3, 0x4}, {0x5, 0x2}, {0x0, 0x6}, {0x1, 0x1}, {0x7}, {}, {0x1}, {0x1, 0x8}, {0x5, 0xa}, {0x0, 0x9}, {0x1, 0xa}, {0x2, 0x1}, {0x0, 0x1}, {0x7, 0x8}, {0x6, 0x6}, {0x3, 0xa}, {0x1, 0xa}, {0x6, 0x9}, {0x3, 0xa}, {0x4, 0xa}, {0x3, 0x9}, {0x2, 0x3}, {0x1, 0xa}, {0x6, 0x3}, {0x2, 0x2}, {0x5, 0x9}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0x7}, {0x5, 0xa}, {0x4, 0x2}, {0x5, 0x6}, {0x3, 0xa}, {0x7, 0x4}, {0x3, 0xa}, {0x5}, {0x0, 0x9}, {0x6, 0x2}, {0x6, 0x4}, {0x1, 0x5}, {0x4}, {0x2, 0x5}, {0x3, 0x7}, {0x1, 0x4}, {0x5, 0x3}, {0x0, 0x6}, {0x6, 0x8}, {0x5, 0x4}, {0x0, 0x2}, {0x1, 0x6}, {0x5, 0x2}, {0x4}, {0x1, 0x4}, {0x4, 0x3}, {0x2, 0x8}, {0x7, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x3, 0x9}, {0x4, 0xa}, {0x1, 0x6}, {0x6, 0x6}, {0x1, 0x5}, {0x1, 0x5}, {0x5, 0x2}, {0x4, 0x7}, {0x5, 0x2}, {0x0, 0xa}, {0x3, 0xa}, {0x3, 0x4}, {0x4, 0xa}, {0x0, 0x4}, {0x5, 0x3}, {0x4}, {0x0, 0x5}, {0x7, 0x4}, {0x1, 0x5}, {0x7, 0x3}, {0x1, 0x4}, {0x6, 0x4}, {0x2, 0x5}, {0x5, 0x7}, {0x1, 0x3}, {0x1}, {0x5, 0x7}, {0x4, 0x4}, {0x2, 0x6}, {0x4, 0x9}, {0x4}, {0x0, 0x3}, {0x4, 0x8}, {0x1, 0x2}, {0x6, 0x9}, {0x6, 0x3}, {0x6, 0x7}, {0x5}, {0x5, 0x9}, {0x7, 0x4}, {0x4}, {0x4, 0x14}, {0x5, 0x1}, {0x6, 0x3}, {0x1, 0x5}, {0x0, 0x7}, {0x3, 0x1}, {0x0, 0xa}, {0x0, 0x8}, {0x2, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xb, 0x1b, 0x12, 0x3, 0x16, 0x1, 0x2, 0x30, 0x6, 0x18, 0x30, 0x5, 0x18, 0xb, 0x2, 0x2, 0x60, 0xb, 0x1, 0x6c, 0x16, 0x1, 0x48, 0x5, 0x1, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x4, 0x0, 0x2db3, 0x3ff, 0x6, 0x2]}}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x24, 0x30, 0x30, 0x6c, 0x1b, 0x30, 0x5, 0x1, 0x36, 0x6, 0x30, 0x6c, 0x12, 0xc, 0x12, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8001, 0x0, 0x5, 0x9, 0x8, 0xf0b5, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x9, 0x3, 0x4, 0x8, 0x80, 0xc1b]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9327, 0x0, 0x1, 0x2, 0x0, 0xa, 0x7, 0x8a27]}}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x5, 0x9}, {0x4, 0x3}, {0x0, 0x4}, {0x4, 0x3}, {0x1, 0x8}, {0x4, 0x3}, {0x5, 0x3}, {0x1, 0x4}, {0x5, 0x4}, {0x0, 0xa}, {0x5, 0x3}, {0x3, 0x3}, {0x7, 0x18}, {0x7}, {0x1, 0x1}, {0x7, 0x8}, {0x1, 0x9}, {0x3, 0x6}, {0x4, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcf}]}, {0x68, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcc}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6, 0x9, 0x64c, 0x5, 0x8, 0x5, 0xf102]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x400, 0x1, 0xc, 0x7, 0xfffc, 0x2, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x12c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x54}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x120, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x4, 0x6c]}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x41, 0x5, 0x9, 0x14, 0x8001, 0x4, 0x2, 0x3f]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8, 0x4, 0x1, 0x4, 0x2, 0x2, 0x9]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x24, 0x1, 0x30, 0x16, 0xb, 0x60, 0x30, 0x0, 0xb, 0x34, 0x34, 0x5, 0x1, 0x5, 0x6, 0x12, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x1, 0x6, 0xd2, 0x82, 0x45a5, 0x900]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x48, 0x6, 0x6c, 0x5, 0x12, 0x24, 0xc, 0x5, 0x18, 0x0, 0x36, 0x12, 0x60, 0x9, 0x48, 0x48, 0x24, 0x24, 0x5, 0x1, 0x24, 0x60, 0x24, 0x18, 0x12, 0x60, 0x6c, 0x1a, 0x16, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x2, 0x40, 0x2, 0xe0d5, 0x6, 0x8]}}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x7, 0x3}, {0x0, 0xa}, {0x3, 0x7}, {0x6, 0x5}, {0x3, 0x2}, {0x5, 0x7}, {0x7, 0x7}, {0x1, 0x1}, {0x6, 0xa}, {0x2, 0xa}, {0x0, 0xa}, {0x1, 0x6}, {0x1, 0xa}, {0x7, 0x5}, {0x1, 0x7}, {0x4, 0x1}, {0x1, 0x7}, {0x2, 0x3}, {0x3}, {0x2}, {0x7, 0x6}, {0x7, 0x1}, {0x4, 0x1}, {0x1, 0x2}, {0x0, 0x4}, {0x1, 0x5}, {0x1, 0x4}, {0x5, 0x7}, {0x4, 0x9}, {0x7}, {0x6, 0x8}]}, @NL80211_TXRATE_GI={0x5}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3ff}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd0}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe0}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9f}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xe4, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf7}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x883}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbf}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x11}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbd}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x37}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x61}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9c}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x24c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xed}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4d}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x198, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x168, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x1, 0x3}, {0x1, 0x5}, {0x4, 0x4}, {0x3, 0x5}, {0x0, 0x2}, {0x3, 0x6}, {0x0, 0x5}, {0x7, 0x9}, {0x1, 0x7}, {0x4, 0x9}, {0x6, 0x9}, {0x2, 0x1}, {0x5, 0x7}, {0x0, 0x3}, {0x5, 0x1}, {0x0, 0xa}, {0x2, 0x2}, {0x5, 0x1}, {0x3, 0x3}, {0x6, 0x2}, {0x7, 0x8}]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6, 0x5, 0x2, 0x36, 0x9, 0x3, 0xc, 0xb, 0x2, 0x3, 0x48, 0x4, 0xc, 0x48, 0x6c, 0x4, 0xb, 0x30, 0x48, 0x6c, 0x60, 0x1, 0x16, 0x24, 0x60, 0x24, 0x60, 0x48]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x81, 0x8, 0xb13b, 0x3, 0x8, 0x3, 0x3]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1, 0x60, 0x7c, 0x3, 0x3, 0x6, 0x4, 0x60, 0x6c, 0xd79da72a5b77717a, 0x3b, 0x5, 0x6, 0x5, 0x9, 0x6c, 0x6, 0x4, 0x1b, 0x5, 0x0]}]}, @NL80211_BAND_2GHZ={0xe4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xa5e, 0xb09f, 0xfffc, 0x4, 0x101, 0x6, 0x7ff]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xc, 0x60, 0x4, 0x4, 0x60, 0x3, 0x5, 0x6, 0x6, 0x12, 0x16, 0x6, 0x4f, 0x4, 0xb, 0x6, 0x18, 0xc, 0x60, 0x4, 0x16, 0x39, 0x36, 0x22, 0x9, 0x6]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x43, 0x2, [{}, {0x5}, {0x4, 0x3}, {0x0, 0x8}, {0x6, 0x1}, {0x6, 0x8}, {0x7, 0x6}, {0x2, 0x5}, {0x0, 0x6}, {0x2, 0x9}, {0x5, 0x3}, {0x0, 0x2}, {0x4, 0xa}, {0x3}, {0x6, 0x3}, {0x6, 0x3}, {0x1, 0x9}, {0x2, 0x6}, {0x4, 0x2}, {0x1, 0x6}, {0x1, 0x3}, {0x6, 0x8}, {0x1, 0x8}, {0x2, 0x6}, {0x0, 0x2}, {0x0, 0x1}, {0x4}, {0x6, 0x5}, {0x1, 0x7}, {0x6, 0x5}, {0x5, 0x5}, {0x3, 0x2}, {0x7, 0xa}, {0x2, 0x1}, {0x6}, {0x4, 0x7}, {0x3, 0x7}, {0x2}, {0x1, 0x5}, {0x3, 0x8}, {0x5, 0x2}, {0x6}, {0x3, 0x2}, {0x2, 0x7}, {0x1}, {0x1, 0x5}, {0x6}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x6}, {0x7, 0x4}, {0x7, 0x7}, {0x1, 0x5}, {0x1, 0x9}, {0x5, 0x8}, {0x0, 0x9}, {0x1, 0xa}, {0x4, 0x9}, {0x3, 0x9}, {0x6}, {0x6}, {0x0, 0x2}]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x0, 0x4}, {0x2}, {0x3, 0x5}, {0x7, 0x7}, {0x7, 0x9}, {0x0, 0x4}, {0x5, 0x7}, {0x0, 0x5}, {0x0, 0xa}, {0x5, 0x6}, {0x6, 0x8}, {0x2, 0x4}, {0x4, 0x7}, {0x3, 0x4}, {0x6, 0x4}, {0x1, 0x5}, {0x0, 0x4}, {0x4, 0x5}, {0x7, 0x7}, {0x5, 0x6}, {0x6, 0x1}, {0x1, 0x1}, {0x0, 0x7}, {}, {0x7, 0x1}, {0x4}, {0x3, 0x5}, {0x1, 0xa}, {0x7, 0x5}, {0x0, 0x5}, {0x4, 0x3}, {0x7}, {0x5, 0x3}, {0x6, 0x3}, {0x0, 0x4}, {0x2, 0xa}, {0x3, 0x3}, {0x5, 0x9}, {0x5, 0x1}, {0x5, 0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x0, 0x9}, {0x2, 0x1}, {0x5, 0x4}, {0x0, 0x1}, {0x0, 0x9}, {0x1, 0x8}, {0x3, 0x1}, {0x5, 0x6}, {0x5}, {0x4}, {0x7}, {0x0, 0x6}, {}, {0x5, 0x3}, {0x1, 0x3}, {0x7, 0x5}, {0x1, 0xa}, {0x0, 0x4}, {0x1, 0x9}, {0x3, 0xa}, {0x3, 0x6}, {0x5, 0x9}, {0x4, 0x4}, {0x0, 0x8}, {0x3, 0xa}, {0x0, 0x9}, {0x4, 0xa}, {0x6, 0x1}, {0x5, 0x2}, {0x2, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7d4, 0x9004, 0x3, 0x9, 0x3, 0x1, 0x2, 0xc]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x40}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x90}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x62}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x968, 0x11d, 0x0, 0x1, [{0x340, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x254, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf81, 0xfcf, 0x1, 0xff81, 0x9, 0x6, 0xad, 0x1a]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x4, 0x24, 0xb, 0xc, 0x12, 0xc, 0x3, 0x0, 0x0, 0x48, 0x1, 0x6c, 0x6, 0x48, 0x3, 0x1, 0x60, 0xb, 0x16, 0x1, 0x1b, 0x36, 0x3, 0x1, 0x16, 0x3, 0x48, 0x2, 0x18, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x0, 0x1, 0x7, 0x0, 0x7, 0x1, 0x3]}}]}, @NL80211_BAND_6GHZ={0xd4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x1}, {0x4, 0x2}, {0x3, 0x3}, {0x2}, {0x0, 0x5}, {0x4, 0x6}, {0x7, 0x8}, {0x1}, {0x0, 0x4}, {0x7, 0x9}, {0x7, 0x7}, {0x5, 0x5}, {}, {0x2}, {0x5, 0x4}, {0x7, 0x9}, {0x3, 0x3}, {0x0, 0x7}, {0x4, 0x5}, {0x7, 0x6}, {0x0, 0x7}, {0x5, 0x7}, {0x0, 0x5}, {0x3, 0xa}, {0x1, 0xa}, {0x2, 0x4}, {0x4, 0x7}, {0x4, 0xa}, {0x3}, {0x6, 0x5}, {0x5, 0x1}, {0x2, 0x4}, {0x5, 0x7}, {0x6, 0x5}, {0x7}, {0x0, 0x1}, {0x4, 0x1}, {0x6, 0xa}, {0x4}, {0x6, 0x2}, {0x7, 0x2}, {0x2, 0x3}, {0x5, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x0, 0x3}, {0x0, 0x1}, {0x1, 0x9}, {0x5, 0x7}, {0x7, 0x7}, {0x2, 0x6}, {0x6}, {0x4, 0x8}, {0x3, 0x5}, {0x3, 0x7}, {0x0, 0xa}, {0x4, 0x3}, {0x3, 0x9}, {0x4, 0x7}, {0x4, 0x8}, {0x0, 0x5}, {0x5, 0x4}, {0x0, 0x4}, {0x4, 0x8}, {0x0, 0x4}, {0x5, 0x3}, {0x5, 0x1}, {0x1, 0x4}, {0x1}, {0x5, 0x8}, {0x4, 0x4}, {0x4, 0x4}, {0x6, 0x8}, {0x1, 0xa}, {0x7, 0x7}, {0x2, 0xa}, {0x2, 0x7}, {0x1, 0x2}, {0x3, 0x5}, {0x7, 0x8}, {0x1, 0x4}, {0x3, 0x4}, {0x1, 0x8}, {0x0, 0x2}, {0x3, 0xa}, {0x5, 0x5}, {0x5, 0x7}, {}, {0x1}, {0x7, 0x5}, {0x1, 0x9}, {0x1, 0x4}, {0x5, 0x9}, {0x3, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xce39, 0x4, 0xe79, 0x459c, 0x2, 0x3ff, 0x424]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x401, 0x9, 0x8, 0x7ff, 0x8, 0x6, 0xfffa]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{}, {0x1, 0x7}, {0x4, 0x4}, {0x2, 0x4}, {0x1, 0x3}, {0x7, 0x8}, {0x1, 0x7}, {0x3, 0x1}, {0x2, 0x7}, {0x3, 0x8}, {0x2, 0x5}, {0x7, 0x1}, {0x0, 0x2}, {0x2, 0x9}, {0x1, 0x5}, {0x1, 0x5}, {0x4, 0x3}, {0x7, 0x4}, {0x1, 0x7}, {0x7, 0x4}, {0x7, 0xa}, {0x7, 0x5}, {0x5, 0x8}, {0x4, 0xa}, {0x7, 0xa}, {0x5, 0x1}, {0x3, 0x6}, {0x1, 0x9}, {0x0, 0x1}, {0x7, 0x3}, {0x4, 0x4}, {0x0, 0x6}, {0x1, 0x4}, {0x5, 0x4}, {0x6, 0x5}, {0x7, 0x8}, {0x5, 0x2}, {0x5, 0xa}, {0x7}, {0x5, 0x3}, {0x6, 0x6}, {0x5, 0x8}]}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1, 0x3, 0x4, 0x1, 0x6e, 0x5, 0x4, 0x6c, 0x5, 0x2, 0x1, 0x3, 0x5, 0x24, 0x9, 0x12, 0x1, 0x3, 0x6c, 0x2, 0x36, 0x6c, 0x18, 0x9, 0x36, 0x24, 0x0, 0x9]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1, 0x9, 0x16, 0xb, 0x6c, 0x5, 0x3f, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x26, 0x2, [{0x1, 0x9}, {0x3, 0x5}, {0x1, 0x1}, {0x1, 0x7}, {0x4, 0x4}, {0x2, 0x1}, {0x3, 0x5}, {0x0, 0x5}, {0x6, 0x5}, {0x1, 0x7}, {0x2}, {0x7, 0x9}, {0x0, 0x8}, {0x0, 0x9}, {0x3, 0x4}, {0x4, 0x8}, {0x3, 0x9}, {0x7, 0x1}, {0x4, 0x7}, {0x1, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x7, 0x8}, {0x0, 0xa}, {0x1, 0x2}, {0x7, 0xa}, {0x1, 0x5}, {0x6, 0x7}, {0x6, 0x5}, {0x1, 0x9}, {0x1, 0xa}, {}, {0x1}, {0x4, 0x2}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x6}, {0x0, 0x6}, {0x0, 0xa}, {0x4, 0xa}, {0x6}, {0x5, 0xa}, {0x1, 0x3}, {0x5, 0x4}, {0x1}, {0x6, 0xa}, {0x7, 0x5}, {0x2, 0x7}, {0x7}, {0x1, 0x7}, {0x3, 0x3}, {0x1, 0x8}, {0x1}, {0x2, 0x6}, {}, {0x1, 0x9}, {0x1, 0x6}, {0x4, 0x5}, {0x6, 0x4}, {0x4, 0x7}, {0x0, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x9, 0x2, 0x8, 0xff, 0x7f, 0x8001]}}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7179, 0xa, 0xa9, 0xa, 0x0, 0x3, 0x7, 0x2c42]}}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x9, 0x2, 0x60, 0x16, 0x6, 0x6c, 0x12, 0x4, 0x16, 0x66d45d3259341d20, 0x48, 0x60, 0x6, 0x2, 0x4, 0x5, 0x30, 0x36, 0x1b, 0x5, 0x30, 0x18, 0x12, 0x6, 0x36, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x405e90e0984be4ec}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x3, 0xa}, {0x0, 0x7}, {0x1, 0x2}, {0x7, 0xa}, {0x2, 0x3}, {0x2, 0x3}, {0x0, 0x7}, {0x3, 0x9}, {0x7, 0x2}, {0x1, 0x4}, {0x1, 0x6}, {0x0, 0x1}, {0x0, 0x1}, {0x7, 0x5}, {0x0, 0x7}, {0x7, 0x1}, {0x6, 0x3}, {0x7}, {0x2, 0x7}, {0x6, 0x5}, {0x7, 0x4}, {0x3, 0x5}, {0x5, 0x1}, {0x6, 0x5}, {0x3, 0xa}, {0x0, 0x7}, {0x3, 0x8}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x87}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x96}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xc0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x20e6, 0x5490, 0x9f, 0x5, 0x2, 0xbf8, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x35, 0x2, [{0x1, 0x2}, {0x0, 0x3}, {0x6, 0x9}, {0x7}, {0x1, 0x8}, {0x6, 0x7}, {0x7, 0x2}, {0x4, 0x2}, {0x3, 0x3}, {0x3, 0x7}, {0x3, 0x2}, {0x3, 0x9}, {0x5, 0x7}, {0x1, 0x5}, {0x1, 0x8}, {0x6, 0x7}, {0x7, 0x6}, {0x5, 0x8}, {0x5, 0x9}, {0x1, 0x1}, {0x4, 0x7}, {0x6, 0x6}, {0x4, 0x5}, {0x1, 0x5}, {0x5, 0x7}, {0x1, 0xa}, {0x1, 0x2}, {}, {0x5}, {0x7, 0x5}, {0x7, 0xa}, {0x0, 0x8}, {0x3, 0x7}, {0x6, 0x7}, {0x0, 0x5}, {0x6, 0xa}, {0x1, 0x7}, {0x6, 0x2}, {0x1, 0x4}, {0x1, 0x3}, {0x0, 0x6}, {0x4, 0x3}, {0x6, 0x2}, {0x2, 0x6}, {0x1, 0x4}, {0x5, 0x4}, {0x7, 0x5}, {0x5, 0x6}, {0x3, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x48, 0xc, 0x1b, 0x3, 0x0, 0x60, 0x4, 0x30, 0xb, 0x0, 0x1b, 0x30, 0x18, 0x3, 0x1b, 0x3, 0x4, 0x6, 0x9, 0x1b, 0x6c, 0x6c, 0x20, 0x60, 0xc, 0x1, 0x1, 0x1b]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0x3, 0x5, 0x3, 0x8a96, 0xff80, 0x401]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x6, 0xbae, 0xfff9, 0x891, 0x40, 0x8001, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x174, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x24}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x14c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x2, 0x9, 0x1b, 0xc, 0x30, 0xc, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x0, 0x6, 0x836, 0x9, 0x2, 0x7ff, 0xbb]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x5, 0x3, 0x3, 0x1ff, 0x81, 0x2, 0x7]}}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xfc01, 0xffff, 0x8, 0x7fa, 0x4, 0xf81c, 0xeccb]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x7, 0x1}, {0x5, 0x9}, {0x5, 0x5}, {0x7, 0x8}, {0x0, 0x1}, {0x2, 0x6}, {0x2, 0x6}, {0x2, 0x3}, {0x4, 0x7}, {0x2}, {0x0, 0x9}, {0x5, 0x1}, {0x3, 0x5}, {}, {0x7, 0x5}, {0x4, 0x8}, {0x1, 0x8}, {0x4, 0x5}, {0x4, 0x1}, {0x3, 0x4}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xffff, 0xf, 0x3, 0x8000, 0x4, 0xe1f8, 0x300]}}]}, @NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xb75, 0x2, 0x8000, 0x8, 0xb, 0x5, 0x2, 0x3d65]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x5, 0x9}, {0x7, 0x1}, {0x6, 0x5}, {0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x5}, {0x5, 0x5}, {}, {0x2, 0x7}, {0x2, 0x4}, {0x4}, {0x2, 0x4}, {0x3, 0x4}, {0x1, 0x6}, {0x7, 0x9}, {0x1, 0x2}, {0x6, 0x7}, {0x4, 0x4}, {0x1, 0x3}, {0x2, 0x7}, {0x6, 0x5}, {0x3, 0x4}, {0x0, 0xa}, {0x4, 0x5}, {0x1, 0x8}, {0x1, 0x3}, {0x4, 0x3}, {0x3, 0x3}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x6}, {0x7, 0x5}, {0x6, 0x9}, {}, {0x6, 0x5}, {0x2, 0x6}, {0x3, 0x9}, {0x3, 0x5}, {0x2, 0x5}, {0x3, 0x6}, {0x1, 0x1}, {0x3, 0x3}, {0x6}, {0x3, 0x6}, {0x0, 0x9}, {0x7, 0x9}, {0x2, 0xa}, {0x0, 0x5}, {0x2, 0x8}, {0x2, 0x4}, {0x3, 0x1}, {0x1, 0x6}, {0x7}, {0x6, 0x3}, {0x4, 0x1}, {0x7, 0x4}, {0x6, 0x2}, {0x6}, {0x4, 0x9}, {0x4}, {0x4, 0x9}, {0x3, 0x1}]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x1}, {0x4, 0x4}, {0x6, 0x1}, {0x1}, {0x5, 0xa}, {0x1, 0xa}, {0x0, 0x8}, {0x6, 0x2}, {0x1, 0x6}, {0x6, 0x1}, {0x3, 0x6}, {0x2, 0x8}, {0x0, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc3b, 0x6, 0x5, 0x6, 0x7, 0x100, 0x2, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x424, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x418, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x3a, 0x36, 0x56, 0x48, 0x6, 0x5, 0x4, 0x2, 0x6c, 0x2, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x306, 0x7fff, 0x7, 0x7000, 0x3, 0xbece, 0xfe, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x4, 0x4, 0x1, 0xfe00, 0x6, 0xff, 0x990]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0x3, 0x1, 0xd, 0x3, 0x2, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x30, 0x2, [{0x4, 0x9}, {0x0, 0x5}, {0x3, 0x2}, {0x6}, {0x5, 0x9}, {0x5, 0x3}, {0x6, 0xa}, {}, {0x1}, {0x5, 0x5}, {0x4}, {0x1, 0x5}, {0x5, 0x5}, {0x6, 0xa}, {0x2, 0x8}, {0x0, 0xa}, {0x1, 0x7}, {0x6, 0x7}, {0x6, 0x5}, {0x1, 0x1}, {0x0, 0x2}, {0x7, 0xa}, {0x5, 0x6}, {0x3, 0x4}, {0x0, 0xa}, {0x0, 0x3}, {0x1, 0x5}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x7, 0x1}, {0x5, 0x1}, {0x6}, {0x2, 0x4}, {0x3, 0xa}, {0x0, 0x2}, {0x6, 0x9}, {0x1}, {0x6, 0x7}, {0x6, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x3, 0x1}, {0x1, 0x1}]}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x2, 0x5, 0x6, 0x7, 0x2, 0x7, 0x8000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0x8, 0x8000, 0xffff, 0x5, 0x90, 0x6]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x1, 0x9}, {0x1, 0x1}, {0x0, 0x7}, {0x4, 0xa}, {0x6, 0x9}, {0x3, 0x11}, {0x0, 0x7}, {0x7, 0x8}, {0x7, 0x1}, {0x2}, {0x7, 0x8}, {0x4, 0x1}, {0x1, 0x9}, {0x6}, {0x0, 0x4}, {0x0, 0x5}, {0x0, 0x6}, {0x6, 0x4}, {0x1, 0x9}, {0x7, 0x1}, {0x5, 0x4}, {0x5, 0x8}, {0x5, 0x8}, {0x5, 0xa}, {0x6, 0x4}, {0x7, 0x3}, {0x5, 0x9}, {0x2, 0x8}, {0x1, 0x3}, {0x1, 0x3}, {0x4, 0x2}, {0x0, 0x7}, {0x6, 0x9}, {0x6, 0x9}, {0x7, 0x7}, {0x5, 0x5}, {}, {0x1, 0x9}, {0x6, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x1, 0x5}, {0x1, 0x1}, {0x6, 0x6}, {0x3, 0x2}, {0x6, 0x8}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x8}, {0x5, 0x6}, {0x2, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x6, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x5}, {0x0, 0x1}, {0x1, 0xa}, {0x4, 0x6}, {0x7, 0x5}, {0x1, 0x6}, {0x7, 0x7}, {0x1, 0x8}, {0x7, 0x2}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x7}, {0x1, 0x3}, {0x6, 0xa}, {0x2, 0x2}, {0x0, 0x3}, {0x1, 0x1}, {0x0, 0x5}, {0x0, 0x7}, {0x4}, {0x5, 0x7}, {0x0, 0x3}, {0x7, 0x2}, {}, {0x0, 0x7}, {0x0, 0x5}, {0x0, 0x8}, {0x7, 0x9}, {0x1, 0x8}, {0x4, 0x8}, {0x6, 0x3}]}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb2d7, 0x797, 0x6, 0x26, 0x3, 0x0, 0x2, 0xa]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0xc, 0x7, 0x81, 0x7, 0x88b]}}]}, @NL80211_BAND_60GHZ={0xcc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0x4}, {0x1, 0x9}, {0x7}, {0x1, 0x6}, {0x6, 0x4}, {0x3, 0x7}, {0x5, 0x8}, {0x1, 0x5}, {0x0, 0x6}, {0x1, 0x5}, {0x5, 0x9}, {0x7}, {0x4, 0x9}, {0x3}, {0x2, 0x5}, {}, {0x0, 0x9}, {0x0, 0x7}, {0x6, 0x1}, {}, {0x5, 0x3}, {}, {0x2, 0x8}, {0x0, 0x7}, {0x5, 0x7}, {0x0, 0x1}, {0x1}, {0x0, 0x8}, {0x3, 0x7}, {0x4, 0x9}, {0x5, 0x6}, {0x4}, {0x6, 0x6}, {0x0, 0x5}, {0x4}, {0x0, 0x6}, {0x7, 0x3}, {0x6, 0x5}, {0x1, 0x8}, {0x2, 0x9}, {0x2, 0x1}, {0x0, 0x9}, {0x0, 0x9}, {0x7, 0x9}, {0x6, 0x6}, {0x1, 0x9}, {0x4, 0x8}, {0x1, 0x8}, {0x3, 0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x5}, {0x3, 0x2}, {0x1, 0x3}, {0x1, 0x8}, {0x4}, {0x0, 0x2}, {0x5, 0x1}, {0x4, 0x5}, {0x7, 0x7}, {0x7}, {0x0, 0x4}, {0x3, 0x5}, {0x2, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x1, 0x5}, {0x0, 0x9}, {0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x2, 0xa}, {0x7, 0x4}, {0x2, 0x1}, {0x1, 0x2}, {0x5, 0x6}, {0x1, 0x6}, {0x6, 0x9}, {0x0, 0x6}, {0x0, 0x6}, {0x2}, {0x3, 0x1}, {0x5, 0x9}, {0x1, 0x8}, {0x1}, {0x4, 0x3}, {0x6, 0x7}, {0x5, 0xa}, {0x3, 0x4}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x8}, {0x5, 0x2}, {0x6, 0x1}, {0x3, 0x4}, {0x1, 0x3}, {0x2, 0x3}, {0x0, 0x9}, {0x1, 0x6}, {0x5, 0xa}, {0x1, 0x9}, {0x7, 0x5}, {0x7, 0x8}, {0x6, 0x3}, {0x0, 0x7}, {0x0, 0x4}, {0x1, 0x1}, {0x2, 0xa}, {0x1}, {0x0, 0x5}, {0x1}, {0x0, 0x7}, {0x1, 0x2}, {0x2, 0x5}, {0x3, 0x2}, {0x1, 0x7}, {0x3}, {0x0, 0x3}, {0x0, 0x8}, {0x0, 0x4}, {0x1, 0x2}, {0x5, 0xa}, {0x0, 0x8}, {0x2, 0x1}, {0x7, 0x2}, {0x6, 0x4}, {0x6, 0x7}, {0x7, 0x4}, {0x2, 0x3}, {0x0, 0x1}, {0x2, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0xa374, 0x8, 0x6, 0x10, 0x2, 0x100]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x16, 0x6c]}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6c, 0x1, 0x36, 0x2, 0xb, 0x36, 0x24, 0x60, 0x1b, 0x6, 0x12, 0x9, 0x6c, 0x4, 0xc, 0x48, 0xc, 0x30, 0xc, 0x1b, 0x1, 0x36, 0x1b, 0x24, 0x1, 0x5f, 0x1b, 0x18, 0xc, 0x2, 0x6]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x24, 0x1, 0x12, 0x12, 0x24, 0x24, 0x2, 0x1, 0x0, 0x2, 0xc, 0x2, 0x12, 0x60, 0x24, 0x1b, 0x1, 0x6, 0x9, 0x9, 0x1, 0x6, 0x4, 0x18, 0x18, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xc, 0xa6ca, 0x9, 0x2, 0x5, 0x3d4, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x80d, 0xff01, 0x2, 0x2, 0x4, 0x1000, 0x1]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0xc, 0xb, 0x60, 0x1b, 0x30, 0x3, 0x9, 0x48, 0x1b, 0x3, 0x24, 0x19, 0x7f, 0x48, 0x2, 0x30, 0x8, 0x1b, 0x1e, 0xc, 0x2, 0x12]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x48, 0x36, 0x6c, 0x2c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x401, 0x8, 0x1, 0x3, 0x7fff, 0x4, 0xab]}}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xbd, 0x4, 0x6, 0x18, 0x9, 0x9bc, 0x6a, 0x10]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x5, 0x24, 0x3, 0x5c, 0x16, 0x6, 0x16, 0x24, 0x3, 0x6, 0xc, 0x48, 0x16, 0x36, 0x3, 0x48, 0x48, 0x60, 0x9, 0xb, 0x30, 0x48, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7162, 0x4, 0x239, 0x9, 0xffff, 0x3, 0x2, 0xf000]}}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{}, {0x0, 0x5}, {0x4}, {0x2, 0xa}, {}, {0x6, 0x7}, {0x6, 0x8}, {0x2}, {0x7, 0x5}, {0x3, 0x1}, {0x1, 0x6}, {0x4, 0x2}, {0x7, 0xa}, {0x1, 0x8}, {0x2, 0x2}, {0x0, 0x7}, {0x7, 0x2}, {0x4}, {0x5, 0x8}, {0x5, 0x4}, {0x2, 0x9}, {0x4, 0x1}, {0x6, 0x3}, {0x4, 0xa}, {0x3, 0x9}, {0x4, 0x1}, {}, {0x4, 0x6}, {0x5, 0x1}, {0x5, 0x7}, {0x3}, {0x0, 0x2}, {0x4, 0x4}, {0x3, 0x5}, {0x1, 0x2}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0xb, 0x4, 0x48, 0x4d, 0xb, 0x18, 0x9, 0x9, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0x2, 0x66, 0x4, 0x5, 0x80, 0x6, 0xe]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5a3d, 0x4, 0x5, 0x5, 0x1c00, 0x1, 0x892]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x5, 0x5}, {0x3, 0x1}, {0x4, 0x4}, {0x1, 0xa}, {0x5, 0x7}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x5}, {0x7, 0x8}, {0x3, 0x4}, {0x5, 0x3}, {0x5, 0xa}, {0x1, 0x3}, {0x2, 0x8}, {0x4, 0x9}, {0x6, 0x5}, {0x6, 0x9}, {0x4, 0x8}, {0x3, 0x1}, {0x4, 0x8}, {0x1, 0x6}, {0x0, 0x8}, {0x2, 0x4}, {0x5, 0x9}, {0x6, 0x3}, {0x7, 0x4}, {0x3, 0x9}, {0x1, 0x1f}, {0x4, 0x2}, {0x5, 0x7}, {0x1, 0x5}, {0x6, 0x1}, {0x5, 0x4}, {0x6, 0x7}, {0x6, 0x6}, {0x1, 0x3}, {0x0, 0x6}, {0x1, 0x6}, {0x5, 0x3}, {0x0, 0x1}, {0x3, 0x9}, {0x4, 0x1}, {0x2, 0x6}, {0x5, 0x7}, {0x2, 0x8}, {0x5, 0x9}, {0x2, 0xa}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x98}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdc}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe0}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xeb2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x3f0, 0x11d, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x20}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8b}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfa}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000000000000000}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x40}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x2d0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1d}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2ac, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xd, 0x7fff, 0x4, 0x1, 0xfffb, 0x3, 0x2]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0x2}, {0x7, 0x1}, {0x6, 0x4}, {0x6, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x1, 0x5}, {0x3, 0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0xa}, {0x0, 0x8}, {0x4, 0xa}, {0x7, 0x9}, {0x4}, {0x2, 0x2}, {0x2, 0x3}, {0x0, 0x7}, {0x7, 0x9}, {0x1, 0x2}, {0x4, 0x9}, {0x2, 0x2}, {0x0, 0xa}, {0x1, 0x7}, {0x6, 0x7}, {0x3}, {0x7, 0x3}, {0x4, 0x5}, {0x3, 0xa}, {0x1, 0xa}, {0x5, 0x1}, {0x0, 0x8}, {0x6}, {0x5}, {0x3, 0x5}, {0x1, 0x7}, {0x1, 0x9}, {0x6, 0x1}, {0x4, 0x9}, {0x7, 0x3}, {0x6, 0x5}, {0x0, 0x3}, {0x1, 0x4}, {0x3, 0x7}, {0x4, 0x7}, {0x7, 0x3}, {0x3, 0x1}, {0x1}, {0x6, 0x3}, {0x1, 0x6}, {0x2, 0x3}, {0x2, 0x2}, {0x0, 0xa}, {0x1, 0x5}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x30, 0x60, 0x9, 0xb, 0x60, 0x0, 0x30, 0x16]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x18, 0x16, 0x18, 0x24, 0x93eb54d0cbecc52, 0x48]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x37, 0x2, [{0x6, 0x7}, {0x0, 0x8}, {0x6, 0x3}, {0x7, 0x6}, {0x1, 0x8}, {0x6, 0x5}, {0x0, 0x1}, {0x4, 0x7}, {0x5, 0x7}, {0x6, 0x5}, {0x5, 0x8}, {0x1, 0x8}, {0x1, 0x8}, {0x7, 0x5}, {0x1, 0xa}, {0x6, 0x8}, {0x1, 0x7}, {0x4, 0x7}, {0x7, 0x9}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x3}, {0x5, 0x9}, {0x1, 0x5}, {0x7, 0xa}, {0x1, 0x7}, {0x6, 0x2}, {0x1, 0x4}, {0x5, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x0, 0x1}, {0x7, 0x8}, {0x0, 0x9}, {0x3, 0x5}, {0x1, 0x4}, {0x0, 0x9}, {0x3, 0xa}, {0x0, 0x8}, {0x2, 0x1}, {0x1, 0x3}, {0x6, 0x6}, {0x6, 0x5}, {0x1}, {0x6, 0x6}, {0x6, 0x6}, {0x1, 0x8}, {0x6, 0x8}, {0x0, 0x2}, {0x4, 0x9}, {0x1, 0x4}]}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x6, 0x9}, {0x0, 0x2}, {0x4, 0x7}, {0x3, 0x4}, {0x0, 0x9}, {0x1, 0x5}, {0x7, 0x7}, {0x5, 0x5}, {0x1, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0xbd7d, 0x3, 0xfff9, 0x8, 0x2, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x51e, 0x8, 0x9, 0x2, 0x5, 0x80, 0x4]}}]}, @NL80211_BAND_2GHZ={0xf0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4a, 0x2, [{0x3, 0x8}, {0x6, 0x6}, {0x5, 0x2}, {0x1, 0x9}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0x1}, {0x0, 0x5}, {0x7, 0x6}, {0x2, 0x5}, {0x2, 0xa}, {0x7, 0x4}, {0x6, 0x6}, {0x4, 0x5}, {0x4}, {0x0, 0x1}, {0x2, 0x3}, {0x5, 0xa}, {0x5}, {0x7, 0x3}, {0x7, 0x8}, {0x7, 0x1}, {0x0, 0x8}, {0x2, 0x4}, {0x4, 0x2}, {0x3, 0x1}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x3}, {0x6, 0x1}, {0x4, 0x2}, {0x1, 0x9}, {0x5, 0x8}, {0x0, 0x5}, {0x6}, {0x3, 0x6}, {0x1}, {0x0, 0x2}, {0x5, 0xa}, {0x1, 0x6}, {0x6, 0x3}, {0x1, 0x3}, {0x2, 0x3}, {0x6, 0x1}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0xa}, {0x0, 0x6}, {0x4, 0x4}, {0x2, 0x9}, {0x5, 0x5}, {0x3, 0x7}, {0x1, 0x8}, {0x7, 0x6}, {}, {0x7, 0x5}, {0x2, 0x6}, {0x4, 0x9}, {0x3}, {0x6, 0x7}, {0x2, 0x3}, {0x2, 0x4}, {0x1, 0x5}, {0x0, 0x9}, {}, {0x2, 0x4}, {0x1, 0x5}, {0x0, 0x5}, {0x1, 0x6}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0xba4a, 0x8, 0x200, 0xed00, 0x2, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x1, 0x6}, {0x0, 0x6}, {0x0, 0x9}, {0x3, 0x6}, {0x0, 0x2}, {0x6, 0x9}, {0x1, 0x3}, {0x0, 0x9}, {0x0, 0x9}, {0x0, 0x9}, {0x7, 0x8}, {0x5, 0x2}, {0x4, 0xa}, {0x1, 0x2}, {0x0, 0x9}, {0x1, 0xa}, {0x2, 0x3}, {0x6, 0x4}, {0x7, 0x1}, {0x7, 0x4}, {0x1, 0x2}, {0x6, 0x7}, {0x0, 0x4}, {0x2, 0x5}, {0x7}, {0x3, 0x4}, {0x7, 0x9}, {0x3, 0x5}, {0x5, 0x5}, {0x0, 0x8}, {0x7, 0x6}, {0x3}, {0x6, 0x1}, {}, {0x2, 0x4}, {0x3}, {0x3, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0x1ff, 0x6, 0x3, 0x4, 0x5, 0x1a98]}}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x0, 0x3}, {0x3, 0x6}, {0x6, 0x3}, {0x3, 0x6}, {0x3, 0x9}, {0x3, 0x1}, {0x5}, {0x1}, {0x4, 0x5}, {0x5, 0x5}, {0x5, 0x5}, {0x0, 0x8}, {}, {0x0, 0x3}, {0x1, 0x6}, {0x1, 0x2}, {0x3, 0x8}, {0x4}, {0x6, 0x8}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x5}, {0x7, 0x3}, {0x7, 0x3}, {0x1, 0x8}, {0x6, 0x5}, {0x4, 0x3}, {0x2, 0x9}, {0x1, 0x9}, {0x0, 0x1}, {0x2, 0x7}, {0x0, 0x4}, {0x2, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x0, 0x5}, {0x6}, {0x6, 0x5}, {0x4, 0x7}, {0x7, 0x6}, {0x5, 0x8}, {0x1, 0x6}, {0x0, 0x3}, {0x4, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4b, 0x2, [{0x0, 0x2}, {0x7, 0x7}, {0x4, 0xa}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x7, 0xa}, {0x1, 0x9}, {0x7, 0x9}, {0x2, 0x3}, {0x2, 0x6}, {0x7, 0xa}, {0x0, 0x3}, {0x7, 0x4}, {0x4, 0x1}, {0x0, 0x3}, {0x5, 0x7}, {0x6, 0x2}, {0x0, 0x7}, {0x1, 0x6}, {0x2, 0x8}, {0x6, 0x1}, {0x3, 0x9}, {0x7}, {0x5}, {0x4, 0x1}, {0x7, 0x1}, {0x3}, {0x7, 0x9}, {0x2, 0x6}, {0x0, 0x5}, {0x5, 0x8}, {0x7, 0xa}, {0x6, 0x3}, {0x4, 0xa}, {0x2, 0x3}, {0x4, 0x7}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x2}, {0x6, 0x6}, {0x1, 0x3}, {0x4, 0x4}, {0x7, 0x3}, {0x0, 0xa}, {0x1, 0x9}, {0x1, 0x9}, {0x1, 0x2}, {0x4}, {0x6, 0xa}, {0x7}, {0x1, 0x4}, {0x0, 0xa}, {0x1, 0x3}, {0x0, 0x4}, {0x1, 0x2}, {0x1, 0x5}, {0x1, 0x9}, {0x2, 0x7}, {0x0, 0x9}, {0x4, 0x8}, {0x1, 0x5}, {0x2, 0x2}, {0x0, 0x6}, {0x1, 0x8}, {0x2, 0x3}, {0x0, 0x6}, {}, {0x2, 0xa}, {0x3, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x43a, 0x7, 0x8, 0x0, 0x4116, 0x400, 0x5, 0x6]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x48, 0x36, 0x3, 0x18, 0x6, 0x2]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfff, 0x7fff, 0x7, 0x8, 0xa, 0x1, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x60}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x58}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xee}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x17}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x90, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x30}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffffa204}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc7}]}]}, @NL80211_ATTR_TID_CONFIG={0x30, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x33d}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}]}, @NL80211_ATTR_TID_CONFIG={0x420, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xad}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x56}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x906}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x63}]}, {0x3c0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x260, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x4, 0x6, 0x48, 0x6, 0x18, 0x12, 0x4, 0x48, 0x9, 0x1, 0x0, 0x48, 0xb, 0x9, 0x2b, 0xb, 0x1a, 0x48, 0x3, 0x6, 0x6, 0x4]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x200, 0xfbff, 0x8a, 0xfffe, 0x6, 0x9, 0x200]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x3, 0x7, 0x5, 0x8000, 0xfffa, 0x3, 0x7]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x0, 0x1}, {0x2, 0xa}, {0x5, 0x1}, {0x5, 0x2}, {0x3, 0x6}, {0x2, 0x5}, {0x1, 0x1}, {0x4, 0xa}, {0x6, 0x4}]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x1}, {0x3, 0xa}, {0x7, 0xa}, {0x7, 0x7}, {0x4, 0x6}, {0x6, 0x6}, {0x1}, {0x4, 0xa}, {}, {0x4, 0x2}, {0x4, 0x3}, {0x5, 0xa}, {0x7, 0xa}, {0x4, 0x4}, {0x0, 0x1}, {0x3, 0x5}, {0x1, 0x2}, {0x6, 0xa}, {0x4, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x4, 0x5}, {0x2, 0x1}, {0x1, 0xa}, {0x6, 0x9}, {0x1, 0x8}, {0x7, 0x2}, {}, {0x3, 0x9}, {0x5, 0x11}, {0x6}, {0x3, 0x3}, {0x0, 0x7}, {0x0, 0x7}, {0x1, 0x8}, {0x3, 0x8}, {0x2, 0x6}, {0x6, 0x6}, {0x0, 0xa}, {0x0, 0x5}, {0x2, 0x6}, {0x0, 0x6}, {0x1, 0x6}, {0x6, 0x4}, {0x1, 0x6}, {0x0, 0x3}, {0x3, 0xa}, {0x7, 0x1}, {0x4, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3ff, 0x1, 0x81, 0x0, 0x4, 0x1, 0x3]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8, 0x6, 0x800, 0x9, 0x9, 0x40, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0x0, 0x7, 0x8, 0x1ff, 0x9, 0x2]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x19, 0x6, 0x9, 0x0, 0x4, 0x6b5, 0xfe]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4e, 0x2, [{0x1, 0x2}, {0x2, 0x4}, {0x0, 0x7}, {0x0, 0xa}, {0x1, 0x9}, {0x3, 0x7}, {0x1, 0x1}, {0x4, 0x5}, {0x6, 0x2}, {0x1, 0x1}, {0x1, 0x7}, {0x3, 0x2}, {0x2, 0x5}, {0x7, 0x1b}, {0x0, 0x4}, {0x2, 0x4}, {0x0, 0x7}, {0x0, 0x4}, {0x0, 0x7}, {0x1, 0x7}, {0x1, 0x3}, {0x1, 0x5}, {0x6, 0x5}, {0x3, 0x2}, {0x6, 0x3}, {0x6, 0x6}, {0x7, 0x5}, {0x2, 0x7}, {0x7, 0x8}, {0x5, 0x9}, {0x2, 0x6}, {0x7, 0x8}, {0x1, 0x5}, {0x6}, {0x5, 0x3}, {0x1, 0x6}, {0x3}, {0x5, 0x2}, {0x1, 0x2}, {0x7, 0x5}, {0x6, 0x9}, {0x1, 0xa}, {0x5, 0x9}, {0x5, 0x9}, {0x0, 0x7}, {0x4, 0x7}, {0x1, 0xa}, {0x5, 0x1}, {0x0, 0x8}, {0x4, 0x7}, {0x4, 0x9}, {0x3, 0x3}, {0x2, 0x1}, {0x4}, {0x0, 0x9}, {0x6, 0x3}, {0x4, 0x5}, {0x4, 0x1}, {0x1, 0x9}, {0x0, 0x1}, {0x1, 0x4}, {0x2, 0x7}, {0x5, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x7, 0x7}, {0x0, 0x1}, {0x4, 0x7}, {0x4, 0x2}, {0x1}, {0x2, 0x2}, {0x4, 0x2}, {0x3, 0x8}, {0x3, 0x5}]}]}, @NL80211_BAND_6GHZ={0xd8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x7, 0x4b2, 0x6, 0x800, 0x1ff, 0xff, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0xa}, {0x1, 0x5}, {0x6, 0x9}, {0x0, 0x5}, {0x5, 0x2}, {0x5, 0x5}, {0x0, 0x1}, {0x5, 0x3}, {0x4, 0x2}, {0x0, 0x8}, {0x7, 0x5}, {0x2}, {0x1, 0x4}, {0x0, 0x12}, {0x6}, {0x2, 0x9}, {0x3, 0xa}, {0x2, 0x8}, {0x1}, {0x6, 0x8}, {0x3, 0x7}, {0x4}, {0x1, 0x3}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x2}, {0x1, 0x3}, {0x3, 0x6}, {0x2}, {0x7, 0xa}, {0x6, 0xa}, {0x1, 0x4}, {0x6, 0x5}, {0x1, 0x4}, {0x6, 0x3}, {0x6, 0x4}, {0x5, 0x7}, {0x2, 0xa}, {0x2}, {0x5, 0x7}, {0x3, 0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x2}, {0x0, 0x8}, {0x3, 0x9}, {0x7, 0x4}, {0x6, 0x1}, {0x3, 0x4}, {0x1, 0x6}, {0x6, 0x2}, {0x0, 0x7}, {0x1, 0x6}, {0x3, 0x5}, {0x3, 0x1}, {0x6, 0x5}, {0x0, 0x9}, {0x1, 0x9}, {0x1, 0xa}, {0x7, 0x5}, {0x1, 0x9}, {0x1, 0x4}, {0x1, 0xa}, {0x7, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x7, 0xfff0, 0x8, 0x7, 0x4, 0xf4fe, 0x973]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xfffd, 0xe, 0xe, 0x3, 0x8, 0x1ff]}}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x3, 0x5}, {0x3, 0x4}, {0x7, 0x3}, {0x4, 0x9}, {0x1}, {0x0, 0x2}, {0x4}, {0x7, 0x2}, {0x1, 0x9}, {0x1}, {0x4, 0x9}, {0x3, 0x2}, {0x2, 0x1}, {0x3, 0x3}, {0x0, 0x2}, {0x4, 0x7}, {0x7, 0x3}, {0x5, 0x4}, {0x7, 0x6}, {0x4, 0x8}, {0x7, 0x9}, {0x5, 0x3}, {0x3, 0x8}, {}, {0x1, 0x5}, {0x1, 0x6}, {0x5, 0xa}, {0x2, 0x4}, {0x3, 0x7}, {0x5, 0x7}, {0x5, 0x3}, {0x3, 0x2}, {0x0, 0x6}, {0x3, 0xa}, {0x7, 0x3}, {0x4, 0x3}, {0x4, 0x9}, {0x0, 0x1}, {0x1, 0x6}, {0x6, 0x6}, {0x4}, {0x1, 0x2}, {0x4, 0x6}, {0x1, 0x5}, {0x1, 0x8}, {0x7, 0x4}, {0x5, 0x1}, {0x6, 0xa}, {0x5, 0x3}, {0x0, 0x4}, {0x0, 0x5}, {0x1, 0x8}, {0x1, 0x8}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xaf}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x148, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8000, 0x265, 0x9, 0x2, 0x8, 0x1, 0x9]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xb, 0x8, 0x0, 0xfff0, 0x80, 0xe4b3, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xbe8, 0x4, 0x200, 0x3d, 0x4, 0x9c, 0x3, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x7, 0xa}, {0x4, 0x4}, {0x2, 0x7}, {0x1, 0xa}, {0x7, 0x5}, {0x1, 0x9}, {0x2, 0x1}, {0x5, 0x6}, {0x0, 0x7}, {0x2, 0x2}, {0x4, 0x7}, {0x3, 0x2}, {0x7, 0x4}, {0x0, 0x5}, {0x3}, {0x5, 0x2}, {}, {0x1, 0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x4}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x4}, {0x7, 0x7}, {0x5, 0x3}, {0x2, 0x2}, {0x3, 0x3}, {0x7, 0x4}, {0x4, 0x8}, {0x0, 0x3}, {}, {0x0, 0xa}, {0x2, 0x6}, {0x0, 0x2}, {0x3, 0x5}, {0x1, 0x6}, {0x0, 0x7}, {0x7, 0x5}, {0x7, 0xa}, {0x6}, {0x4, 0x2}, {0x2, 0x5}, {0x1, 0xa}, {0x3, 0x7}, {0x3, 0x6}, {0x2, 0x4}, {0x0, 0x4}, {0x1}, {0x6, 0x9}, {0x5, 0xa}, {0x1, 0x7}, {}, {0x0, 0x5}, {0x1, 0x2}, {0x6, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x489, 0xf, 0x4ac, 0xfffe, 0x4, 0x9, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0xd7, 0x2000, 0x0, 0xa, 0x14, 0xf061]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1, 0x36, 0x3, 0x1d, 0x30, 0x3, 0x1b, 0x78ae0868f808a3f, 0x30, 0x6, 0x60, 0x5, 0x1, 0x12, 0x48, 0x1b, 0x5, 0x12]}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0xc, 0x6c, 0x1, 0xc, 0x4, 0x533461f2c00ffde8, 0x36, 0x1, 0x16, 0x5, 0xbbf363f018d1a809, 0x2e, 0xb, 0x1, 0x60, 0x4, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8, 0x28, 0x9, 0x2, 0x8, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x24, 0x2, 0x725, 0xfff7, 0x307, 0x4, 0xb, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}]}]}, 0x19d0}, 0x1, 0x0, 0x0, 0x800}, 0x4014)
r5 = socket(0xa, 0x5, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008844}, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_triestat\x00')
preadv(r6, &(0x7f0000000340)=[{&(0x7f0000000180)=""/204, 0xcc}], 0x1, 0x7f, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000))

743.360634ms ago: executing program 1 (id=3093):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40810}, 0x20000000)

646.791538ms ago: executing program 1 (id=3094):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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")
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffff6, 0x2)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x398, 0x0, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@ip={@private, @private, 0x0, 0x0, 'bond_slave_1\x00', 'geneve1\x00'}, 0x0, 0x220, 0x248, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x0, 0x39, 0x0, 0x0, 0x80000000, 0x3}}}, @common=@inet=@hashlimit1={{0x58}, {'veth0_to_batadv\x00', {0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'ip6erspan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3f8)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0x0, 0x100f, 0x1, @discrete={0x2, 0x7fff}})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="05007cd6e1bee61e2aba0600000008000300", @ANYRES32=r5, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="05002abd7000000000002e00000008000300", @ANYRES32=r5, @ANYBLOB="0a000200d516010000000045000000"], 0x30}}, 0x0)
r6 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
accept4(r6, 0x0, 0x0, 0x0)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockname(r7, 0x0, &(0x7f0000000ec0))
write$uinput_user_dev(r0, &(0x7f0000000180)={'syz1\x00', {0x3, 0xa, 0x0, 0xfff7}, 0x38, [0xffff, 0x8, 0x7, 0xe9, 0x4, 0x6, 0x7, 0x10, 0x2, 0x950c, 0x1298, 0x8, 0x2, 0x5506fd78, 0x8000, 0xffffffa2, 0x9, 0x1, 0x8, 0x401, 0x8, 0x3, 0x3, 0x222, 0x1, 0xde, 0x10000, 0x4, 0x5, 0xbf7, 0xfffffffe, 0x200, 0x3, 0x4, 0xa, 0x7, 0x0, 0x9, 0x101, 0x1, 0x8, 0x2, 0x9, 0x4, 0x7, 0x4, 0xa, 0x0, 0x635dfebb, 0x0, 0x8, 0xd, 0x3, 0x7, 0x5, 0x0, 0x0, 0xae, 0x4, 0xfffffff7, 0x5, 0x3, 0x2, 0xfffffff9], [0x7, 0x7, 0x7, 0xb, 0xdd6, 0x6, 0x5, 0x7fff, 0x7, 0x52263b86, 0x0, 0x3, 0x5ce3, 0xfffffff7, 0xf, 0x3, 0x4, 0x200, 0xa66, 0xb0, 0x6, 0x8, 0x20000, 0x45, 0xffffffff, 0x0, 0x2, 0x3, 0x7, 0x10000003, 0x6, 0x2b86, 0x139d3, 0x9, 0x385a, 0x3ff8, 0x5, 0x1, 0x4, 0xffffffff, 0x8, 0x4, 0x1, 0x8, 0x4, 0xfffff305, 0x622e, 0x2, 0xf4f4, 0x8, 0x2, 0x36, 0x2, 0x92, 0x0, 0x7, 0xfff, 0xfffffff9, 0x7, 0x1cd4, 0x5a26, 0x17, 0x80000001, 0x9], [0x204, 0x8000, 0x40002e, 0x23, 0x14b, 0x2, 0x200, 0x0, 0x2, 0x80000000, 0x1, 0x6, 0x51d, 0x5, 0x5, 0xa1, 0x6, 0x0, 0x4, 0x1, 0x7, 0x7, 0x2, 0xe000001, 0xacd, 0xbc, 0x7, 0x9, 0x40, 0xc, 0x7, 0x6, 0xa, 0x5, 0x7, 0xb7, 0x401, 0x9, 0x3, 0x4, 0x4, 0x81, 0x5, 0x7, 0xfff, 0xdb91, 0xfffffffc, 0xd, 0x58cf, 0x1, 0x519eb04a, 0xfffffffb, 0xdd7, 0x4c, 0x200ffff, 0x6, 0x7fffffff, 0x4, 0x401, 0x7eedff86, 0x0, 0x1, 0x1, 0xc7be], [0x7, 0x5d90, 0x3fe0, 0x1, 0x200, 0x101, 0x101, 0x4, 0x99, 0x7287, 0x8003, 0x5, 0x7, 0xdfe, 0xe, 0x7, 0x101, 0x5, 0x8, 0x4000200, 0x1, 0x5365, 0x6, 0x8, 0x7, 0x2, 0x5, 0xbfff8004, 0xe, 0x3, 0x1, 0xda, 0x4, 0x6f8, 0xfcf, 0x8, 0x80008, 0x2, 0x6, 0x10001, 0x3919, 0x2, 0x1000, 0x7, 0x0, 0x80000000, 0xb, 0xc33, 0x7, 0x7, 0x3, 0xc2e, 0x8, 0x2, 0x0, 0x1, 0x7fff, 0xffffffff, 0x31, 0x7fffffff, 0xff, 0x1ff, 0x3, 0x2d]}, 0x45c)
socket(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d131, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x100000})

639.494838ms ago: executing program 2 (id=3095):
socket$unix(0x1, 0x5, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='cgroup\x00', 0x0, &(0x7f0000000380)='source')
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local})
openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd)
futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0)
futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0)
r1 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x4000)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SNDCTL_DSP_RESET(r3, 0x80044dff, 0x1000000000000)

638.339538ms ago: executing program 5 (id=3096):
openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x80000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c00000000020104000000000000000002000000240002801400018008000100e000000208000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200000000000c0002800500010000000000300001802c000180140001"], 0x8c}}, 0x0)

451.489318ms ago: executing program 2 (id=3097):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x0)
accept(r0, 0x0, 0x0)

0s ago: executing program 4 (id=3098):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
syz_mount_image$exfat(&(0x7f0000000700), &(0x7f00000001c0)='./file0\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x5, 0x1501, &(0x7f0000002a80)="$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")
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03296804268c989e14f088a8", 0x0, 0x542, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

 local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  336.719324][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  337.199307][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  337.201095][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  337.613105][T10481] 9pnet_virtio: no channels available for device syz
[  339.599326][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  339.600978][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  339.602686][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  339.919378][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  339.921036][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  339.999874][T10486] netlink: 'syz.4.1820': attribute type 3 has an invalid length.
[  340.001483][T10486] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1820'.
[  340.559321][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  340.561100][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  340.765064][T10504] block device autoloading is deprecated and will be removed.
[  340.979056][T10387] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  340.982183][T10387] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  340.985693][T10387] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  340.988597][T10387] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  341.096530][T10511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1826'.
[  343.213603][T10525] 9pnet_virtio: no channels available for device syz
[  344.239367][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  344.239373][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  344.239508][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  344.793331][T10559] fuse: Bad value for 'fd'
[  345.279297][    C0] net_ratelimit: 2 callbacks suppressed
[  345.279311][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  345.281950][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  345.392197][T10558] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.494232][T10571] 9pnet_virtio: no channels available for device syz
[  345.531349][T10558] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.652935][T10558] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.683944][ T4328] Bluetooth: hci5: unexpected event for opcode 0x080f
[  345.780461][T10558] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.910108][T10558] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  345.913159][T10558] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  345.916631][T10558] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  345.919529][T10558] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  347.839318][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  347.840943][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  348.123050][T10631] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.291873][T10631] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.338294][T10631] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.439717][T10631] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.678935][T10630] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  348.719530][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  348.721000][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  348.722576][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  349.759341][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  349.761020][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  349.847091][ T4328] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  349.850844][ T4328] Bluetooth: hci5: Injecting HCI hardware error event
[  349.852791][ T4328] Bluetooth: hci5: hardware error 0x00
[  351.764049][T10708] siw: device registration error -23
[  351.766150][T10708] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  351.835904][T10631] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  351.838912][T10631] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  351.839451][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  351.841926][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  351.841935][T10631] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  351.846487][T10631] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  351.890247][T10715] 9pnet_virtio: no channels available for device syz
[  352.079633][ T4328] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  352.719370][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  352.720933][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  352.722433][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  353.340169][T10749] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1901'.
[  353.343470][T10749] overlayfs: failed to clone lowerpath
[  353.585404][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  353.587045][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  354.951831][T10756] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.051677][T10756] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.123198][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  355.124869][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  355.215201][T10756] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.332697][T10756] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.754995][T10756] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  355.781299][T10756] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  355.806819][T10756] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  355.829529][T10756] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  356.526872][T10792] process 'syz.0.1912' launched '/dev/fd/5/./file1' with NULL argv: empty string added
[  356.793980][T10797] netlink: 'syz.0.1916': attribute type 10 has an invalid length.
[  358.273330][T10823] siw: device registration error -23
[  358.329387][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  358.331089][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  358.332733][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  358.334274][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  358.335802][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  359.849301][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  359.850861][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  360.313236][T10840] netlink: 'syz.0.1929': attribute type 10 has an invalid length.
[  360.975876][T10845] binder: 10844:10845 IncRefs 0 refcount change on invalid ref 0 ret -22
[  361.419053][T10861] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1931'.
[  361.420945][T10861] netlink: 'syz.1.1931': attribute type 1 has an invalid length.
[  361.422165][T10861] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1931'.
[  361.653090][T10872] netlink: 'syz.0.1942': attribute type 10 has an invalid length.
[  361.999430][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  362.001166][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  363.199410][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  363.204959][T10911] 9pnet_virtio: no channels available for device syz
[  363.477287][T10917] binder: 10916:10917 IncRefs 0 refcount change on invalid ref 0 ret -22
[  363.748201][T10922] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1955'.
[  363.749958][T10922] netlink: 'syz.2.1955': attribute type 1 has an invalid length.
[  363.751152][T10922] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1955'.
[  363.999409][    C1] net_ratelimit: 2 callbacks suppressed
[  363.999419][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  364.001912][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  364.204127][T10935] netlink: 'syz.1.1962': attribute type 10 has an invalid length.
[  364.421336][ T4328] Bluetooth: Frame is too long (len 12, expected len 4)
[  364.994732][T10950] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1967'.
[  365.507215][T10965] netlink: 'syz.5.1973': attribute type 10 has an invalid length.
[  366.130690][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  366.132298][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  366.788040][T11001] netlink: 'syz.0.1985': attribute type 10 has an invalid length.
[  366.866223][T11007] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1981'.
[  366.875020][T11007] netlink: 'syz.2.1981': attribute type 1 has an invalid length.
[  366.881540][T11007] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1981'.
[  367.119317][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  367.121197][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  367.122660][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  367.599309][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  367.600946][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  368.351326][T11033] 9pnet_virtio: no channels available for device syz
[  368.541163][ T4328] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  368.543476][ T4328] CPU: 1 PID: 4328 Comm: kworker/u5:4 Not tainted syzkaller #0
[  368.544726][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026
[  368.546309][ T4328] Workqueue: hci4 hci_rx_work
[  368.547077][ T4328] Call trace:
[  368.547596][ T4328]  dump_backtrace+0x1c0/0x1ec
[  368.548362][ T4328]  show_stack+0x2c/0x3c
[  368.549032][ T4328]  __dump_stack+0x30/0x40
[  368.549718][ T4328]  dump_stack_lvl+0xf4/0x15c
[  368.550492][ T4328]  dump_stack+0x1c/0x5c
[  368.551097][ T4328]  sysfs_create_dir_ns+0x244/0x264
[  368.551828][ T4328]  kobject_add_internal+0x598/0xb08
[  368.552576][ T4328]  kobject_add+0x140/0x20c
[  368.553220][ T4328]  device_add+0x3f0/0xf90
[  368.553829][ T4328]  hci_conn_add_sysfs+0xbc/0x1c8
[  368.554564][ T4328]  le_conn_complete_evt+0xcc8/0x1244
[  368.555298][ T4328]  hci_le_conn_complete_evt+0x114/0x3f4
[  368.556175][ T4328]  hci_le_meta_evt+0x2c0/0x4a0
[  368.557045][ T4328]  hci_event_packet+0x6b8/0xf18
[  368.557891][ T4328]  hci_rx_work+0x328/0xa84
[  368.558609][ T4328]  process_one_work+0x7f8/0x13a4
[  368.559426][ T4328]  worker_thread+0x8c4/0xfec
[  368.560196][ T4328]  kthread+0x250/0x2d8
[  368.560868][ T4328]  ret_from_fork+0x10/0x20
[  368.563076][ T4328] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  368.565331][ T4328] Bluetooth: hci4: failed to register connection device
[  368.953898][ T4320] Bluetooth: Frame is too long (len 12, expected len 4)
[  369.356750][T11052] netlink: 'syz.1.2000': attribute type 4 has an invalid length.
[  369.376504][T11052] netlink: 'syz.1.2000': attribute type 4 has an invalid length.
[  369.390250][T11054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  369.391997][T11054] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  369.406998][T11057] netlink: 'syz.1.2002': attribute type 10 has an invalid length.
[  369.771557][T11064] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2003'.
[  369.781422][T11064] netlink: 'syz.1.2003': attribute type 1 has an invalid length.
[  369.783798][T11064] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2003'.
[  369.919320][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  369.920963][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  370.394448][T11093] 9pnet_virtio: no channels available for device syz
[  370.396693][T11092] netlink: 'syz.1.2013': attribute type 10 has an invalid length.
[  371.039458][T11104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  371.047807][T11104] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  371.169379][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  371.171180][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  371.172723][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  371.405334][T11115] device syzkaller0 entered promiscuous mode
[  371.493252][T11119] netlink: 'syz.1.2024': attribute type 10 has an invalid length.
[  371.693087][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[  371.694348][ T2061] ieee802154 phy1 wpan1: encryption failed: -22
[  371.861345][T11128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2027'.
[  372.239370][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  372.241307][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  372.704538][T11149] netlink: 'syz.5.2035': attribute type 10 has an invalid length.
[  373.188153][T11163] 9pnet_virtio: no channels available for device syz
[  373.999327][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  374.000941][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  374.708125][T11189] netlink: 'syz.0.2047': attribute type 10 has an invalid length.
[  374.959321][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  374.961024][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  374.962544][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  374.992654][T11204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  374.996424][T11204] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  375.729148][T11223] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2057'.
[  375.819513][T11228] 9pnet_virtio: no channels available for device syz
[  375.919309][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  375.920957][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  376.167588][T11237] lo speed is unknown, defaulting to 1000
[  376.446326][ T4320] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  376.447953][ T4320] CPU: 1 PID: 4320 Comm: kworker/u5:1 Not tainted syzkaller #0
[  376.449184][ T4320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026
[  376.450962][ T4320] Workqueue: hci3 hci_rx_work
[  376.451732][ T4320] Call trace:
[  376.452249][ T4320]  dump_backtrace+0x1c0/0x1ec
[  376.452986][ T4320]  show_stack+0x2c/0x3c
[  376.453646][ T4320]  __dump_stack+0x30/0x40
[  376.454406][ T4320]  dump_stack_lvl+0xf4/0x15c
[  376.455256][ T4320]  dump_stack+0x1c/0x5c
[  376.455954][ T4320]  sysfs_create_dir_ns+0x244/0x264
[  376.456951][ T4320]  kobject_add_internal+0x598/0xb08
[  376.457888][ T4320]  kobject_add+0x140/0x20c
[  376.458588][ T4320]  device_add+0x3f0/0xf90
[  376.459363][ T4320]  hci_conn_add_sysfs+0xbc/0x1c8
[  376.460180][ T4320]  le_conn_complete_evt+0xcc8/0x1244
[  376.461045][ T4320]  hci_le_conn_complete_evt+0x114/0x3f4
[  376.461917][ T4320]  hci_le_meta_evt+0x2c0/0x4a0
[  376.462714][ T4320]  hci_event_packet+0x6b8/0xf18
[  376.463503][ T4320]  hci_rx_work+0x328/0xa84
[  376.464192][ T4320]  process_one_work+0x7f8/0x13a4
[  376.465001][ T4320]  worker_thread+0x8c4/0xfec
[  376.465745][ T4320]  kthread+0x250/0x2d8
[  376.466370][ T4320]  ret_from_fork+0x10/0x20
[  376.468162][ T4320] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  376.470520][ T4320] Bluetooth: hci3: failed to register connection device
[  377.141223][T11250] netlink: 'syz.1.2065': attribute type 10 has an invalid length.
[  377.223930][T11254] xt_hashlimit: size too large, truncated to 1048576
[  377.332351][T11258] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2068'.
[  377.493110][T11265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  377.500285][T11265] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  377.838348][ T4320] Bluetooth: Frame is too long (len 12, expected len 4)
[  377.919306][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  377.921150][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  378.072713][T11270] device syzkaller0 entered promiscuous mode
[  378.272525][T11278] netlink: 'syz.2.2076': attribute type 10 has an invalid length.
[  378.639343][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  378.641043][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  378.642689][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  379.843551][ T4320] Bluetooth: Frame is too long (len 12, expected len 4)
[  379.880313][T11315] netlink: 'syz.4.2087': attribute type 10 has an invalid length.
[  380.621147][T11323] binder: 11320:11323 IncRefs 0 refcount change on invalid ref 0 ret -22
[  380.628813][T11321] binder: 11320:11321 got transaction to invalid handle, 1
[  380.642067][T11321] binder: 11321:11320 cannot find target node
[  380.643073][T11321] binder: 11320:11321 transaction call to 0:0 failed 138/29201/-22, size 88-0 line 3045
[  380.654963][ T4371] binder: undelivered TRANSACTION_ERROR: 29201
[  381.919344][    C0] net_ratelimit: 3 callbacks suppressed
[  381.919358][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  381.921859][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  383.039333][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  383.041114][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  383.042685][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  383.371373][ T4320] Bluetooth: Frame is too long (len 12, expected len 4)
[  383.608463][T11403] netlink: 'syz.2.2103': attribute type 10 has an invalid length.
[  383.919298][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  383.921008][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  386.799544][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  386.801304][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  387.722941][T11452] netlink: 'syz.2.2118': attribute type 10 has an invalid length.
[  387.971153][ T4320] Bluetooth: Frame is too long (len 12, expected len 4)
[  388.879585][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  388.881269][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  389.199351][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  389.201057][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  389.202708][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  389.292348][  T111] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  389.342960][T11487] netlink: 'syz.1.2129': attribute type 10 has an invalid length.
[  389.474637][  T111] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  389.476122][  T111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.477376][  T111] usb 1-1: Product: syz
[  389.478044][  T111] usb 1-1: Manufacturer: syz
[  389.478767][  T111] usb 1-1: SerialNumber: syz
[  389.483218][  T111] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  389.487435][  T111] usb 1-1: Direct firmware load for ath9k_htc/htc_9271-1.4.0.fw failed with error -2
[  389.489079][  T111] usb 1-1: Falling back to sysfs fallback for: ath9k_htc/htc_9271-1.4.0.fw
[  389.845413][T11498] netlink: 'syz.5.2130': attribute type 1 has an invalid length.
[  389.878549][T11498] device bond1 entered promiscuous mode
[  389.883572][T11498] 8021q: adding VLAN 0 to HW filter on device bond1
[  389.999373][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  390.001111][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  390.381590][T11513] device syzkaller0 entered promiscuous mode
[  391.239340][ T4320] Bluetooth: Frame is too long (len 12, expected len 4)
[  391.477994][ T4823] usb 1-1: USB disconnect, device number 7
[  391.501153][T11527] netlink: 'syz.1.2141': attribute type 10 has an invalid length.
[  392.481628][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  392.483327][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  392.729300][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  393.095615][ T4320] Bluetooth: Frame is too long (len 12, expected len 4)
[  393.781716][T11581] netlink: 'syz.2.2155': attribute type 10 has an invalid length.
[  396.528809][    C1] net_ratelimit: 3 callbacks suppressed
[  396.528823][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  396.531228][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  396.532821][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  396.534422][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  396.763264][T11628] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  396.919512][T11631] netlink: 'syz.2.2167': attribute type 10 has an invalid length.
[  397.199798][T11637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2169'.
[  398.639392][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  398.641111][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  398.736450][T11663] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2174'.
[  399.679334][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  399.680997][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  399.979525][T11687] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2184'.
[  400.079332][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  400.081029][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  401.143043][T11696] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2186'.
[  401.796310][T11712] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2191'.
[  401.999327][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  402.001051][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  403.279327][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  403.281119][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  403.282609][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  403.919299][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  403.921002][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  404.276620][T11743] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2199'.
[  404.285257][T11743] netlink: 'syz.5.2199': attribute type 1 has an invalid length.
[  404.294006][T11743] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2199'.
[  404.668615][T11749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  404.681616][T11749] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  405.491973][T11765] loop5: detected capacity change from 0 to 7
[  405.502607][T10526] Dev loop5: unable to read RDB block 7
[  405.503770][T10526]  loop5: unable to read partition table
[  405.505091][T10526] loop5: partition table beyond EOD, truncated
[  405.529922][T11765] Dev loop5: unable to read RDB block 7
[  405.530861][T11765]  loop5: unable to read partition table
[  405.532630][T11765] loop5: partition table beyond EOD, truncated
[  405.545843][T11765] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  406.409296][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  406.411156][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  406.802878][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  407.033697][T11780] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2213'.
[  407.647790][T11786] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2215'.
[  407.649341][T11786] netlink: 'syz.4.2215': attribute type 1 has an invalid length.
[  407.650536][T11786] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2215'.
[  407.849294][    C1] net_ratelimit: 2 callbacks suppressed
[  407.849307][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  407.851896][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  407.932287][T11798] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2218'.
[  410.074160][T11819] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2224'.
[  410.159511][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  410.161286][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  410.719309][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  410.721030][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  410.722567][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  411.955870][T11846] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2232'.
[  412.239447][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  412.241191][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  413.040866][T11872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2242'.
[  414.298439][T11902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2253'.
[  414.319404][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  414.321025][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  414.799324][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  414.801159][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  414.802765][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  415.635497][T11926] Non-string source
[  416.479393][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  416.480979][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  417.203646][T11945] 8021q: adding VLAN 0 to HW filter on device bond2
[  418.319305][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  418.321046][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  418.719345][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  420.632454][T11987] 8021q: adding VLAN 0 to HW filter on device bond2
[  420.650838][T11987] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  420.653526][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  421.039538][    C1] net_ratelimit: 2 callbacks suppressed
[  421.039551][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  421.042273][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  422.159304][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  422.161124][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  422.375651][T12014] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2284'.
[  422.377164][T12014] netlink: 'syz.2.2284': attribute type 1 has an invalid length.
[  422.378563][T12014] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2284'.
[  423.839317][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  423.840865][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  423.842326][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  424.283314][T12061] 8021q: adding VLAN 0 to HW filter on device bond2
[  424.649318][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  424.651132][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  426.313523][T12098] device syzkaller0 entered promiscuous mode
[  426.441870][T12100] 8021q: adding VLAN 0 to HW filter on device bond3
[  426.639347][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  426.641105][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  427.679329][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  427.681067][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  427.682727][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  427.832490][T12130] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2318'.
[  428.341171][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  428.342746][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  428.682939][T12138] 8021q: adding VLAN 0 to HW filter on device bond4
[  428.753580][T12144] device syzkaller0 entered promiscuous mode
[  428.951713][T12147] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2325'.
[  430.559370][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  430.561106][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  431.679396][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  431.681093][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  431.682581][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  432.159325][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  432.161071][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  432.753049][T12218] netlink: 'syz.1.2346': attribute type 1 has an invalid length.
[  432.795059][T12218] 8021q: adding VLAN 0 to HW filter on device bond1
[  432.796772][T12222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2341'.
[  433.122588][ T2061] ieee802154 phy1 wpan1: encryption failed: -22
[  433.368236][T12224] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.428249][T12224] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.512040][T12224] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.577697][T12218] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  433.639861][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  433.658704][T12224] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.907130][T12224] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  433.910270][T12224] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  433.913347][T12224] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  433.916379][T12224] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  434.360227][T12261] netlink: 'syz.2.2360': attribute type 1 has an invalid length.
[  434.380973][T12261] 8021q: adding VLAN 0 to HW filter on device bond3
[  434.455555][T12266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2362'.
[  434.639319][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  434.641083][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  435.759346][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  435.761022][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  435.762514][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  437.013238][T12302] netlink: 'syz.1.2372': attribute type 1 has an invalid length.
[  437.019012][T12302] 8021q: adding VLAN 0 to HW filter on device bond2
[  437.654194][T12338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2385'.
[  438.507847][T12355] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2392'.
[  438.509674][T12355] netlink: 'syz.4.2392': attribute type 1 has an invalid length.
[  438.510940][T12355] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2392'.
[  438.559314][    C0] net_ratelimit: 2 callbacks suppressed
[  438.559326][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  438.562124][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  438.803052][T12363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2393'.
[  439.311124][T12369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2396'.
[  439.679325][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  439.681095][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  439.682716][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  439.915481][T12385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2398'.
[  440.319369][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  440.321096][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  441.212266][T12408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2407'.
[  441.345376][T12409] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2406'.
[  441.346996][T12409] netlink: 'syz.1.2406': attribute type 1 has an invalid length.
[  441.348251][T12409] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2406'.
[  442.169309][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  442.170996][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  443.119304][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  444.559339][    C0] net_ratelimit: 1 callbacks suppressed
[  444.559351][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  444.561977][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  444.925637][T12470] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2424'.
[  444.927127][T12470] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2424'.
[  444.928352][T12440] loop0: detected capacity change from 0 to 40427
[  444.944324][T12470] netlink: 'syz.5.2424': attribute type 4 has an invalid length.
[  444.945650][T12470] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2424'.
[  444.948883][T12470] wlan1: mtu less than device minimum
[  444.971543][T12473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2421'.
[  444.977576][T12440] F2FS-fs (loop0): invalid crc value
[  444.997633][T12440] F2FS-fs (loop0): Found nat_bits in checkpoint
[  445.064880][T12440] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  445.172302][T12440] syz.0.2418: attempt to access beyond end of device
[  445.172302][T12440] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  446.318813][T12502] loop4: detected capacity change from 0 to 32768
[  446.357405][T12502] XFS (loop4): Mounting V5 Filesystem
[  446.639612][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  446.641290][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  446.743875][T12502] XFS (loop4): Ending clean mount
[  446.811672][T12502] XFS (loop4): Unmounting Filesystem
[  446.969322][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  446.971046][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  446.972581][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  447.679411][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  447.681183][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  447.831609][T12555] device geneve3 entered promiscuous mode
[  448.006276][T12563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2443'.
[  449.849403][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  449.851188][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  450.729382][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  450.731041][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  450.732583][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  450.734177][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  452.079315][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  452.081084][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  452.131288][T12643] netlink: 'syz.4.2466': attribute type 4 has an invalid length.
[  452.140707][T12643] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2466'.
[  452.147627][T12643] wlan1: mtu less than device minimum
[  452.225360][T12644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2464'.
[  452.333064][T12647] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.508154][T12647] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.585267][T12647] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.610340][  T111] usb 1-1: ath9k_htc: Firmware htc_9271.fw requested
[  453.611927][  T111] usb 1-1: Direct firmware load for htc_9271.fw failed with error -2
[  453.613169][  T111] usb 1-1: Falling back to sysfs fallback for: htc_9271.fw
[  453.691314][T12647] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.074811][T12647] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  454.080231][T12647] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  454.084295][T12647] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  454.087964][T12647] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  454.166602][T12679] loop0: detected capacity change from 0 to 128
[  454.853038][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  454.900569][T12679] loop0: detected capacity change from 128 to 1
[  454.907733][T12679] Dev loop0: unable to read RDB block 1
[  454.908774][T12679]  loop0: unable to read partition table
[  454.910252][T12679] loop0: partition table beyond EOD, truncated
[  454.911367][T12679] loop_reread_partitions: partition scan of loop0 (y‚Þ˜«Ý) failed (rc=-5)
[  454.952708][T12692] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  454.954975][T12692] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  455.119320][    C1] net_ratelimit: 1 callbacks suppressed
[  455.119332][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  455.121890][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  455.774491][T12716] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.912439][T12716] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.919315][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  455.921057][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  456.063150][T12716] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.106181][T12716] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.299515][T12716] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  456.307851][T12716] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  456.317369][T12716] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  456.327854][T12716] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  456.576863][T12723] Non-string source
[  456.580651][T12724] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  456.643151][    C1] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  457.124977][T12737] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2493'.
[  458.686215][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  458.688013][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  458.828081][T12761] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2500'.
[  458.853129][T12765] Non-string source
[  458.916983][T12766] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  459.119317][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  459.120979][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  460.399324][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  460.401068][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  461.147156][T12795] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2509'.
[  462.159314][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  462.161051][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  462.479376][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  462.481071][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  462.482583][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  463.010892][T12819] Non-string source
[  463.726391][T12841] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  463.727950][    C0] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  463.818216][T12842] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.947798][T12842] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.022494][T12842] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.111174][T12842] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.239299][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  464.506456][T12842] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  464.510175][T12842] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  464.513042][T12842] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  464.516009][T12842] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  464.567822][T12848] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2528'.
[  465.153738][T12855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2529'.
[  466.639314][    C0] net_ratelimit: 1 callbacks suppressed
[  466.639327][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  466.641894][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  466.729312][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  466.730843][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  466.732402][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  467.255496][ T4328] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  467.258039][ T4328] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  467.260376][ T4328] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  467.262070][ T4328] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  467.264058][ T4328] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  467.265519][ T4328] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  467.353135][T12891] lo speed is unknown, defaulting to 1000
[  467.456213][T12891] chnl_net:caif_netlink_parms(): no params data found
[  467.505481][T12891] bridge0: port 1(bridge_slave_0) entered blocking state
[  467.507970][T12891] bridge0: port 1(bridge_slave_0) entered disabled state
[  467.513816][T12891] device bridge_slave_0 entered promiscuous mode
[  467.518701][T12891] bridge0: port 2(bridge_slave_1) entered blocking state
[  467.521385][T12891] bridge0: port 2(bridge_slave_1) entered disabled state
[  467.525251][T12891] device bridge_slave_1 entered promiscuous mode
[  467.546447][T12891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  467.556595][T12891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  467.582268][T12891] team0: Port device team_slave_0 added
[  467.588779][T12891] team0: Port device team_slave_1 added
[  467.606162][T12891] batman_adv: batadv0: Adding interface: batadv_slave_0
[  467.611906][T12891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  467.620802][T12891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  467.628029][T12891] batman_adv: batadv0: Adding interface: batadv_slave_1
[  467.633165][T12891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  467.642759][T12891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  467.713130][T12891] device hsr_slave_0 entered promiscuous mode
[  467.752107][T12891] device hsr_slave_1 entered promiscuous mode
[  467.808375][T12891] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  467.809873][T12891] Cannot create hsr debugfs directory
[  467.820551][ T4329] infiniband syz1: set down
[  467.830890][T12899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2542'.
[  467.872642][ T4432] smc: removing ib device syz1
[  467.935616][ T4521] infiniband syz1: ib_query_port failed (-19)
[  467.993420][T12902] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  468.037180][T12891] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  468.133326][T12902] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  468.399376][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  468.401094][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  468.426737][T12891] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  468.497876][T12902] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  468.555540][T12902] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  468.725538][T12891] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  469.310469][ T4328] Bluetooth: hci1: command 0x0409 tx timeout
[  469.759300][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  469.761067][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  469.900329][T12902] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  469.903315][T12902] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  469.906228][T12902] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  469.909142][T12902] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  470.033840][T12891] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.112264][T12929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2552'.
[  470.125644][T12930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2550'.
[  470.719368][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  470.798191][T12891] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  470.886580][T12891] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  470.959195][T12891] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  471.421219][ T4328] Bluetooth: hci1: command 0x041b tx timeout
[  471.687793][T12891] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  472.655464][    C1] net_ratelimit: 2 callbacks suppressed
[  472.655477][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  472.658086][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  473.439322][ T4328] Bluetooth: hci1: command 0x040f tx timeout
[  473.786755][T12966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2562'.
[  473.838094][T12891] 8021q: adding VLAN 0 to HW filter on device bond0
[  473.842318][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  473.843806][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  473.847075][T12891] 8021q: adding VLAN 0 to HW filter on device team0
[  473.852435][T12958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  473.854132][T12958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  473.855689][T12958] bridge0: port 1(bridge_slave_0) entered blocking state
[  473.856833][T12958] bridge0: port 1(bridge_slave_0) entered forwarding state
[  473.861237][T12958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  473.862682][T12958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  473.864356][T12958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  473.865798][T12958] bridge0: port 2(bridge_slave_1) entered blocking state
[  473.866960][T12958] bridge0: port 2(bridge_slave_1) entered forwarding state
[  473.880947][T12958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  473.882814][T12958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  473.885049][T12958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  473.888383][T12958] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  473.901609][T12970] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.908634][T12958] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  473.913663][T12958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  473.915306][T12958] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  473.917319][T12958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  473.918834][T12958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  473.920887][T12958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  473.922448][T12958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  473.924945][T12891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  473.982185][T12970] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  474.039152][T12958] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  474.042581][T12958] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  474.047805][T12891] 8021q: adding VLAN 0 to HW filter on device batadv0
[  474.063796][T12970] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  474.067464][T12958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  474.069180][T12958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  474.079381][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  474.081154][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  474.093299][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  474.094922][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  474.096550][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  474.103652][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  474.107633][T12970] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  474.112999][T12891] device veth0_vlan entered promiscuous mode
[  474.117179][T12891] device veth1_vlan entered promiscuous mode
[  474.143498][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  474.145210][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  474.147103][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  474.148768][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  474.152701][T12891] device veth0_macvtap entered promiscuous mode
[  474.155724][T12891] device veth1_macvtap entered promiscuous mode
[  474.175311][T12891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  474.181418][T12891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  474.186259][T12891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  474.191769][T12891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  474.196826][T12891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  474.202216][T12891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  474.209182][T12891] batman_adv: batadv0: Interface activated: batadv_slave_0
[  474.214465][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  474.216233][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  474.218012][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  474.222014][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  474.224861][T12891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  474.227301][T12891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  474.232378][T12891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  474.237362][T12891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  474.242425][T12891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  474.247639][T12891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  474.255976][T12891] batman_adv: batadv0: Interface activated: batadv_slave_1
[  474.263003][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  474.264893][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  474.269947][T12970] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  474.274231][T12970] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  474.277102][T12970] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  474.280605][T12970] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  474.303121][T12891] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  474.304776][T12891] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  474.306416][T12891] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  474.316258][T12891] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  474.376172][ T4522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  474.377647][ T4522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  474.379044][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  474.394867][ T4522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  474.396356][ T4522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  474.397677][T12958] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  474.522991][T12988] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  474.531172][T12986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2565'.
[  474.603232][T12991] loop2: detected capacity change from 0 to 256
[  474.648783][T12991] FAT-fs (loop2): Directory bread(block 64) failed
[  474.652974][T12991] FAT-fs (loop2): Directory bread(block 65) failed
[  474.654146][T12991] FAT-fs (loop2): Directory bread(block 66) failed
[  474.655675][T12991] FAT-fs (loop2): Directory bread(block 67) failed
[  474.656781][T12991] FAT-fs (loop2): Directory bread(block 68) failed
[  474.657872][T12991] FAT-fs (loop2): Directory bread(block 69) failed
[  474.658938][T12991] FAT-fs (loop2): Directory bread(block 70) failed
[  474.661708][T12991] FAT-fs (loop2): Directory bread(block 71) failed
[  474.662875][T12991] FAT-fs (loop2): Directory bread(block 72) failed
[  474.663999][T12991] FAT-fs (loop2): Directory bread(block 73) failed
[  474.757534][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  474.759381][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  474.761013][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  475.427633][T13003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2569'.
[  475.429158][T13003] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  475.712325][ T4328] Bluetooth: hci1: command 0x0419 tx timeout
[  475.860528][T13003] batman_adv: batadv0: Removing interface: batadv_slave_0
[  475.895704][T13012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2572'.
[  476.159337][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  476.161033][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  477.354808][T13044] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  477.557176][T13049] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.583475][T13053] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  477.602361][T13049] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.712091][T13049] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.753833][T13049] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.795813][T13058] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2578'.
[  477.919395][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  477.921218][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  478.543878][T13071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2583'.
[  479.279345][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  479.280786][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  479.282004][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  480.175700][T13081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2585'.
[  480.252058][T13097] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  480.639324][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  480.640977][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  480.996487][T13116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2591'.
[  480.999658][T13116] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  481.321192][T13116] batman_adv: batadv0: Removing interface: batadv_slave_0
[  481.379778][T13129] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2594'.
[  482.409411][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  482.411181][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  483.279464][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  483.280885][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  484.026641][T13049] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  484.030248][T13049] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  484.034154][T13049] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  484.037255][T13049] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  484.144394][T13166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2601'.
[  484.319637][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  484.321388][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  484.485120][T13175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2606'.
[  486.559339][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  486.559460][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  486.561081][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  486.562524][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  486.723629][T13199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2612'.
[  487.166452][T13207] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  487.171061][    C0] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  488.379472][T13220] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2619'.
[  489.298093][T13234] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  489.301990][T13234] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  489.303561][T13234] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  489.304926][T13234] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  489.306459][T13234] device geneve3 entered promiscuous mode
[  489.668614][T13237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2624'.
[  489.700957][T13242] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  489.924280][T13243] loop4: detected capacity change from 0 to 256
[  489.925704][T13243] exfat: Deprecated parameter 'namecase'
[  489.926597][T13243] exfat: Deprecated parameter 'namecase'
[  489.999329][    C1] net_ratelimit: 2 callbacks suppressed
[  489.999352][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  490.002087][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  491.099387][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  491.101078][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  491.163568][T13243] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  491.332183][T13260] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2630'.
[  492.324870][T13277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2637'.
[  492.384146][T13278] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2635'.
[  492.809607][T13281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2636'.
[  493.316230][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  493.317947][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  493.361720][T13289] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2639'.
[  493.368277][T13287] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  493.407117][T13294] Non-string source
[  493.493183][T13299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2638'.
[  495.191991][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  495.192831][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  495.193720][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  495.199920][ T2061] ieee802154 phy1 wpan1: encryption failed: -22
[  495.292936][T13309] netlink: 'syz.5.2644': attribute type 1 has an invalid length.
[  495.349722][T13309] 8021q: adding VLAN 0 to HW filter on device bond5
[  496.638448][T13339] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  496.995814][T13343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2653'.
[  497.045386][T13344] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2650'.
[  497.248005][T13348] Non-string source
[  498.220667][T13365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2657'.
[  498.222946][T13365] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  498.487875][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  498.489692][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  498.490571][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  498.491495][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  498.492913][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  498.494275][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  498.950587][T13378] Non-string source
[  499.120594][T13379] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2661'.
[  499.970436][T13386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2664'.
[  500.030629][T13365] batman_adv: batadv0: Removing interface: batadv_slave_0
[  500.480772][T13390] netlink: 'syz.1.2665': attribute type 1 has an invalid length.
[  500.862310][T13400] Non-string source
[  501.350753][T13390] 8021q: adding VLAN 0 to HW filter on device bond3
[  501.448934][T13410] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  502.079310][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  502.081031][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  502.303887][T13424] Non-string source
[  502.399331][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  502.400856][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  502.659326][T13427] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2674'.
[  503.119349][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  503.121073][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  503.452479][T13434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2676'.
[  503.486969][T13437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2678'.
[  503.488605][T13437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2678'.
[  503.543169][T13441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2677'.
[  503.599851][T13445] netlink: 'syz.5.2680': attribute type 1 has an invalid length.
[  503.608052][T13445] 8021q: adding VLAN 0 to HW filter on device bond6
[  503.740397][T13457] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2683'.
[  505.170687][T13469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2685'.
[  505.311387][T13470] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2686'.
[  506.021523][T13480] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2689'.
[  506.356829][T13483] Non-string source
[  506.420370][T13485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2691'.
[  506.422214][T13485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2691'.
[  506.433471][T13490] netlink: 'syz.0.2692': attribute type 1 has an invalid length.
[  506.444261][T13490] 8021q: adding VLAN 0 to HW filter on device bond3
[  506.799344][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  506.800927][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  506.879455][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  506.881233][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  508.605250][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  508.606838][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  508.756872][T13509] 9pnet_virtio: no channels available for device syz
[  509.167493][T13522] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2700'.
[  509.857667][T13525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2701'.
[  510.015009][T13534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2705'.
[  510.034272][T13534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2705'.
[  510.039574][T13536] Non-string source
[  510.879296][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  510.880930][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  511.459959][T13556] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2710'.
[  512.639298][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  512.641066][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  512.879316][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  512.880952][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  512.882430][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  513.049336][T13569] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2714'.
[  514.373880][T13576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2717'.
[  514.380959][T13576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2717'.
[  514.398411][T13578] Non-string source
[  514.422150][T13576] netlink: 'syz.2.2717': attribute type 4 has an invalid length.
[  514.423500][T13576] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2717'.
[  514.441221][T13576] .`: renamed from bond0
[  514.479319][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  514.481050][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  515.051306][  T111] usb 1-1: no suitable firmware found!
[  515.055766][  T111] usb 1-1: ath9k_htc: Failed to get firmware htc_9271.fw
[  515.524000][T13587] netlink: 'syz.4.2720': attribute type 10 has an invalid length.
[  516.047987][ T4823] usb 1-1: ath9k_htc: USB layer deinitialized
[  516.416012][T13607] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2726'.
[  516.787571][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  516.789547][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  517.039380][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  517.040889][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  517.766431][T13618] netlink: 'syz.1.2731': attribute type 10 has an invalid length.
[  517.780857][T13619] Non-string source
[  517.865376][T13611] loop4: detected capacity change from 0 to 32768
[  517.897900][T13611] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.2728 (13611)
[  518.319312][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  518.321112][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  518.338652][T13622] Non-string source
[  518.417968][T13611] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  518.422169][T13611] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  518.423754][T13611] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  518.425665][T13611] BTRFS info (device loop4): use zstd compression, level 3
[  518.426986][T13611] BTRFS info (device loop4): using free space tree
[  518.894949][T13654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2736'.
[  518.896318][T13654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2736'.
[  518.911290][T13611] BTRFS info (device loop4): enabling ssd optimizations
[  518.914804][T13654] netlink: 'syz.0.2736': attribute type 4 has an invalid length.
[  518.916099][T13654] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2736'.
[  519.001736][T13654] wlan1: mtu less than device minimum
[  519.029361][T13646] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2734'.
[  519.036901][T13611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2728'.
[  519.183363][ T4328] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  519.187098][ T4328] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  519.188877][ T4328] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  519.193949][ T4328] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  519.512081][ T4328] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  519.514349][ T4328] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  519.555271][T13671] lo speed is unknown, defaulting to 1000
[  519.582578][ T4324] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  519.665836][T13671] chnl_net:caif_netlink_parms(): no params data found
[  519.786411][T13671] bridge0: port 1(bridge_slave_0) entered blocking state
[  519.793779][T13671] bridge0: port 1(bridge_slave_0) entered disabled state
[  519.802189][T13671] device bridge_slave_0 entered promiscuous mode
[  519.813731][T13671] bridge0: port 2(bridge_slave_1) entered blocking state
[  519.817745][T13671] bridge0: port 2(bridge_slave_1) entered disabled state
[  519.827520][T13671] device bridge_slave_1 entered promiscuous mode
[  519.865424][T13671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  519.877874][T13671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  519.952909][T13671] team0: Port device team_slave_0 added
[  519.955330][T13671] team0: Port device team_slave_1 added
[  519.972892][T13671] batman_adv: batadv0: Adding interface: batadv_slave_0
[  519.974111][T13671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  519.978185][T13671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  520.030716][T13688] netlink: 'syz.4.2742': attribute type 10 has an invalid length.
[  520.046381][T13671] batman_adv: batadv0: Adding interface: batadv_slave_1
[  520.054817][T13671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  520.068079][T13671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  520.165599][T13671] device hsr_slave_0 entered promiscuous mode
[  520.204145][T13671] device hsr_slave_1 entered promiscuous mode
[  520.224169][T13693] loop4: detected capacity change from 0 to 256
[  520.229858][T13693] exfat: Deprecated parameter 'namecase'
[  520.230987][T13693] exfat: Deprecated parameter 'namecase'
[  520.246283][T13693] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  520.249405][T13671] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  520.250918][T13671] Cannot create hsr debugfs directory
[  520.356198][T13671] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.413864][T13671] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.453323][T13671] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.492008][T13671] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.649333][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  520.651203][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  520.697403][T13671] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  520.731616][T13671] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  520.770814][T13671] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  520.839120][T13671] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  520.969345][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  520.970936][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  520.972452][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  520.980951][T13705] Non-string source
[  521.005358][T13671] 8021q: adding VLAN 0 to HW filter on device bond0
[  521.013486][T13355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  521.015111][T13355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  521.019700][T13671] 8021q: adding VLAN 0 to HW filter on device team0
[  521.022744][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  521.024376][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  521.026273][ T1595] bridge0: port 1(bridge_slave_0) entered blocking state
[  521.027390][ T1595] bridge0: port 1(bridge_slave_0) entered forwarding state
[  521.028883][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  521.036329][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  521.038216][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  521.545313][ T1595] bridge0: port 2(bridge_slave_1) entered blocking state
[  521.546663][ T1595] bridge0: port 2(bridge_slave_1) entered forwarding state
[  521.563360][ T4328] Bluetooth: hci3: command 0x0409 tx timeout
[  521.967793][T13714] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  521.974067][T13671] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  521.975570][T13671] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  522.569295][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  522.570938][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  522.611515][T13355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  522.629979][T13355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  522.631784][T13355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  522.636030][T13355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  522.640120][T13355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  522.642837][T13355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  522.644800][T13355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  522.646426][T13355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  522.648058][T13355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  522.651466][T13355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  522.653106][T13355] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  522.664459][T13355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  522.667622][T13716] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.734984][T13716] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.793574][T13716] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.808105][T13729] netlink: 'syz.0.2752': attribute type 10 has an invalid length.
[  522.862488][T13716] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.871860][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  522.873270][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  522.908854][T13671] 8021q: adding VLAN 0 to HW filter on device batadv0
[  522.924118][T13355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  522.925812][T13355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  522.960919][T13671] device veth0_vlan entered promiscuous mode
[  522.964148][T13671] device veth1_vlan entered promiscuous mode
[  522.972312][T13671] device veth0_macvtap entered promiscuous mode
[  522.975803][T13671] device veth1_macvtap entered promiscuous mode
[  522.979580][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  522.981900][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  522.983545][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  522.984887][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  522.986666][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  522.988617][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  522.990694][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  522.995560][T13671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  522.997367][T13671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  523.008078][T13671] batman_adv: batadv0: Interface activated: batadv_slave_0
[  523.016222][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  523.018074][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  523.021256][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  523.022908][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  523.025225][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  523.036269][T13671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  523.038123][T13671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  523.040555][T13671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  523.042423][T13671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  523.044167][T13671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  523.046147][T13671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  523.047876][T13671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  523.053084][T13671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  523.055528][T13671] batman_adv: batadv0: Interface activated: batadv_slave_1
[  523.057535][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  523.059109][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  523.063439][T13671] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  523.065039][T13671] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  523.066479][T13671] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  523.068200][T13671] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  523.084625][T13716] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  523.088129][T13716] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  523.091238][T13716] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  523.095259][T13716] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  523.136906][T13739] loop4: detected capacity change from 0 to 256
[  523.146000][T13739] exfat: Deprecated parameter 'namecase'
[  523.147631][T13739] exfat: Deprecated parameter 'namecase'
[  523.155221][T13355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  523.156698][T13355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  523.158093][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  523.166688][T13739] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  523.187677][ T4429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  523.189120][ T4429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  523.191025][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  523.599826][ T4328] Bluetooth: hci3: command 0x041b tx timeout
[  524.488555][T13763] netlink: 'syz.5.2762': attribute type 10 has an invalid length.
[  524.639381][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  524.641295][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  526.140606][ T4328] Bluetooth: hci3: command 0x040f tx timeout
[  526.170960][T13767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  526.173073][T13767] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  527.027174][T13776] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  527.146242][T13779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  527.148734][T13779] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  527.199709][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  527.201305][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  527.202884][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  527.204469][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  527.632122][T13780] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2766'.
[  527.894891][T13799] netlink: 'syz.5.2773': attribute type 10 has an invalid length.
[  528.192185][ T4320] Bluetooth: hci3: command 0x0419 tx timeout
[  528.249463][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  528.251153][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  530.507108][T13836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2783'.
[  530.639328][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  530.641048][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  530.642733][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  530.943697][T13835] netlink: 'syz.1.2784': attribute type 10 has an invalid length.
[  531.039597][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  531.040764][T13835] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  531.707347][T13852] Non-string source
[  532.799317][    C0] net_ratelimit: 1 callbacks suppressed
[  532.799330][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  532.802019][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  533.506867][T13877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2797'.
[  533.518795][T13877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2797'.
[  533.575556][T13880] netlink: 'syz.1.2797': attribute type 4 has an invalid length.
[  533.583583][T13880] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2797'.
[  533.618349][T13880] wlan1: mtu less than device minimum
[  533.782112][T13886] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  534.239579][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  534.241306][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  534.376082][T13888] loop1: detected capacity change from 0 to 32768
[  534.380840][T13888] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.2800 (13888)
[  534.385349][T13888] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  534.387409][T13888] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  534.389042][T13888] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  534.390964][T13888] BTRFS info (device loop1): use zstd compression, level 3
[  534.392254][T13888] BTRFS info (device loop1): using free space tree
[  534.406383][T13888] BTRFS info (device loop1): enabling ssd optimizations
[  534.431366][T13888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2800'.
[  534.602880][T13922] Non-string source
[  535.353843][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  535.355404][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  535.356990][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  535.391753][T13671] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  535.565448][   T27] audit: type=1326 audit(535.550:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13927 comm="syz.4.2807" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff84f77128 code=0x0
[  535.581423][T13928] infiniband syz1: set down
[  535.589274][T13928] infiniband syz1: added syz_tun
[  535.646315][T13928] RDS/IB: syz1: added
[  535.647016][T13928] smc: adding ib device syz1 with port count 1
[  535.648078][T13928] smc:    ib device syz1 port 1 has pnetid 
[  535.786474][T13941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2810'.
[  535.788586][T13941] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2810'.
[  535.798570][T13941] netlink: 'syz.5.2810': attribute type 4 has an invalid length.
[  535.803776][T13941] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2810'.
[  536.205745][T13941] wlan1: mtu less than device minimum
[  538.173503][T13964] Non-string source
[  538.719767][    C0] net_ratelimit: 2 callbacks suppressed
[  538.719780][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  538.722394][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  539.124784][T13973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2821'.
[  539.126238][T13973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2821'.
[  539.130116][T13973] netlink: 'syz.0.2821': attribute type 4 has an invalid length.
[  539.131229][T13973] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2821'.
[  539.155269][T13973] wlan1: mtu less than device minimum
[  539.369827][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  539.371429][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  539.448597][T13974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2820'.
[  539.457255][T13979] Non-string source
[  539.458757][T13977] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  540.159373][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  540.161248][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  541.142588][T13997] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2824'.
[  541.678467][T14004] loop1: detected capacity change from 0 to 32768
[  541.814113][T14004] XFS (loop1): Mounting V5 Filesystem
[  542.168651][T14004] XFS (loop1): Ending clean mount
[  542.173206][T14004] XFS (loop1): Quotacheck needed: Please wait.
[  542.375493][T14004] XFS (loop1): Quotacheck: Done.
[  542.674552][T13671] XFS (loop1): Unmounting Filesystem
[  542.823381][T14020] Non-string source
[  543.051854][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  543.053571][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  543.738302][T14029] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  543.811056][T14031] Non-string source
[  544.079390][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  544.081164][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  544.082657][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  544.436942][T14027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2835'.
[  544.507370][T14044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2834'.
[  544.508687][T14044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2834'.
[  544.511028][T14044] netlink: 'syz.1.2834': attribute type 4 has an invalid length.
[  544.512322][T14044] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2834'.
[  544.516067][T14044] wlan1: mtu less than device minimum
[  545.119517][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  545.121315][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  545.714148][T14063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  545.717024][T14063] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  545.728042][T14051] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2843'.
[  545.757971][T14065] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  545.903716][T14067] Non-string source
[  546.799334][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  546.801086][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  547.404820][T14082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  547.407204][T14082] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  547.520636][T14088] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2851'.
[  547.615643][T14092] Non-string source
[  547.656810][T14088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  547.658404][T14088] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  547.711702][T14099] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2857'.
[  547.718120][T14097] netlink: 'syz.5.2856': attribute type 10 has an invalid length.
[  547.759307][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  548.134568][T14087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2852'.
[  548.169200][T14107] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2859'.
[  548.598828][T14119] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  550.089312][    C1] net_ratelimit: 4 callbacks suppressed
[  550.089326][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  550.091896][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  552.707485][T14159] Non-string source
[  553.199661][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  553.201376][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  553.203013][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  554.239319][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  554.240935][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  554.450418][T14186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2872'.
[  554.542539][T14157] loop4: detected capacity change from 0 to 32768
[  554.551135][T14157] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.2870 (14157)
[  554.555481][T14157] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  554.557213][T14157] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  554.558818][T14157] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  554.561821][T14157] BTRFS info (device loop4): use zstd compression, level 3
[  554.562948][T14157] BTRFS info (device loop4): using free space tree
[  554.701874][T14220] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2876'.
[  554.714127][T14157] BTRFS info (device loop4): enabling ssd optimizations
[  554.805875][ T4324] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  555.006621][T14227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2878'.
[  555.008277][T14227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2878'.
[  555.010595][T14227] netlink: 'syz.4.2878': attribute type 4 has an invalid length.
[  555.011988][T14227] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2878'.
[  555.015106][T14227] wlan1: mtu less than device minimum
[  555.279314][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  555.280992][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  556.014424][ T2061] ieee802154 phy1 wpan1: encryption failed: -22
[  556.224721][T14242] binder: 14241:14242 tried to acquire reference to desc 0, got 1 instead
[  556.226627][T14242] binder: 14241:14242 sending u0000000000000003 node 146, cookie mismatch 0000000000000000 != 00000000000000f0
[  556.228780][T14242] binder: 14242:14241 translate binder failed
[  556.230193][T14242] binder: 14241:14242 transaction call to 14241:0 failed 144/29201/-22, size 72-24 line 3374
[  556.232775][ T4913] binder: undelivered TRANSACTION_ERROR: 29201
[  557.439325][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  557.441129][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  557.442500][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  557.460651][T14251] loop4: detected capacity change from 0 to 32768
[  557.495261][T14251] XFS (loop4): Mounting V5 Filesystem
[  557.611333][T14251] XFS (loop4): Ending clean mount
[  557.615631][T14251] XFS (loop4): Quotacheck needed: Please wait.
[  557.643601][T14251] XFS (loop4): Quotacheck: Done.
[  557.759401][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  557.761147][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  557.912466][T14268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2890'.
[  557.914294][T14268] netlink: 'syz.2.2890': attribute type 4 has an invalid length.
[  557.915504][T14268] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2890'.
[  558.008445][T14272] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2889'.
[  558.025745][ T4324] XFS (loop4): Unmounting Filesystem
[  558.106126][T14264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2888'.
[  558.172307][T14282] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  559.226149][T14306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2901'.
[  559.228161][T14306] netlink: 'syz.0.2901': attribute type 4 has an invalid length.
[  559.231765][T14306] wlan1: mtu less than device minimum
[  559.352808][T14308] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  559.389124][T14313] netlink: 'syz.0.2903': attribute type 10 has an invalid length.
[  559.654763][T14315] __nla_validate_parse: 2 callbacks suppressed
[  559.654774][T14315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2904'.
[  559.849130][T14326] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  559.849400][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  559.851849][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  559.953905][T14332] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2907'.
[  560.320538][T14338] netlink: 'syz.1.2911': attribute type 1 has an invalid length.
[  560.331758][T14338] 8021q: adding VLAN 0 to HW filter on device bond1
[  560.344029][T14342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2911'.
[  560.443474][T14344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2912'.
[  560.449125][T14344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2912'.
[  560.454493][T14344] netlink: 'syz.1.2912': attribute type 4 has an invalid length.
[  560.458860][T14344] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2912'.
[  560.472793][T14344] wlan1: mtu less than device minimum
[  561.039322][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  561.040994][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  561.042554][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  561.743489][T14352] netlink: 'syz.1.2914': attribute type 10 has an invalid length.
[  561.839342][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  561.840862][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  562.047894][T14359] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  562.284926][T14368] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  562.326763][T14363] loop4: detected capacity change from 0 to 32768
[  562.339365][T14363] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.2918 (14363)
[  562.343952][T14363] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  562.345666][T14363] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  562.347264][T14363] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  562.348968][T14363] BTRFS info (device loop4): use zstd compression, level 3
[  562.350286][T14363] BTRFS info (device loop4): using free space tree
[  562.382416][T14380] rdma_rxe: rxe_register_device failed with error -23
[  562.383801][T14380] rdma_rxe: failed to add syz_tun
[  562.436838][T14363] BTRFS info (device loop4): enabling ssd optimizations
[  562.555009][T14363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2918'.
[  562.618298][   T27] audit: type=1326 audit(562.600:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14378 comm="syz.5.2922" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb77128 code=0x0
[  562.627730][ T4324] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  562.750901][T14398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2924'.
[  562.752747][T14398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2924'.
[  562.754652][T14398] netlink: 'syz.4.2924': attribute type 4 has an invalid length.
[  562.756121][T14398] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2924'.
[  562.760801][T14398] wlan1: mtu less than device minimum
[  563.439367][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  563.440994][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  566.701315][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  566.703036][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  568.159374][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  568.161074][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  568.162199][T14436] 9pnet_virtio: no channels available for device syz
[  569.159940][T14430] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2932'.
[  569.318149][T14438] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  569.429149][T14442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2935'.
[  569.438055][T14442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2935'.
[  569.448260][T14442] netlink: 'syz.0.2935': attribute type 4 has an invalid length.
[  570.153300][T14442] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2935'.
[  570.167437][T14442] wlan1: mtu less than device minimum
[  570.239372][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  570.241384][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  570.243186][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  572.170386][T14462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2940'.
[  572.319321][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  572.320974][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  573.359321][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  573.361086][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  574.319324][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  574.320861][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  575.159121][T14499] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  576.319315][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  576.321139][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  576.595571][T14538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2953'.
[  576.643865][T14539] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  578.068027][T14553] Non-string source
[  578.438950][T14563] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  578.489374][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  578.491065][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  578.492532][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  578.493975][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  578.495541][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  578.664512][T14568] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.768909][T14568] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.817767][T14568] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.869868][T14568] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.132288][T14568] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  579.151471][T14568] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  579.164771][T14568] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  579.177581][T14568] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  579.519325][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  579.521086][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  582.168929][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  582.170597][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  582.319300][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  582.943851][T14593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2969'.
[  584.581722][    C0] net_ratelimit: 1 callbacks suppressed
[  584.581734][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  584.584395][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  584.655162][T14605] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  584.725145][T14607] Non-string source
[  587.064856][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  587.066540][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  588.087232][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  588.319312][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  588.321012][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  588.569915][T14642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2982'.
[  588.570059][T14642] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  588.780544][T14642] batman_adv: batadv0: Removing interface: batadv_slave_0
[  590.169480][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  590.171265][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  590.241057][T14664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2987'.
[  590.762510][T14672] Non-string source
[  591.439327][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  591.439336][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  591.439478][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  591.441082][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  591.445384][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  591.790438][T14686] Non-string source
[  591.882412][T14687] netlink: 87 bytes leftover after parsing attributes in process `syz.1.2995'.
[  592.187807][T14702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2998'.
[  592.954266][T14709] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  595.124781][T14720] Non-string source
[  595.186420][ T4320] Bluetooth: hci1: command 0x0406 tx timeout
[  596.079454][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  596.081324][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  596.159341][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  596.161049][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  596.162475][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  597.119330][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  597.697349][T14752] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  597.752313][T14752] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  597.812057][T14752] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  597.922723][T14752] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  598.045724][T14752] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  598.048881][T14752] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  598.051970][T14752] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  598.054957][T14752] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  598.371247][T14760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3014'.
[  598.460445][T14760] batman_adv: batadv0: Removing interface: batadv_slave_0
[  599.679405][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  599.681184][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  599.814262][T14779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3020'.
[  599.817976][T14779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3020'.
[  599.823059][T14779] netlink: 'syz.1.3020': attribute type 4 has an invalid length.
[  599.826570][T14779] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3020'.
[  599.861055][T14779] wlan1: mtu less than device minimum
[  599.892211][T14782] Non-string source
[  600.239337][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  600.595128][   T11] bond0: (slave wlan1): Releasing backup interface
[  601.439385][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  601.441000][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  601.442599][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  601.479133][T14804] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  601.518028][   T11] device hsr_slave_0 left promiscuous mode
[  601.554622][   T11] device hsr_slave_1 left promiscuous mode
[  601.659420][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  601.660827][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  601.662456][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  601.663718][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  601.665273][   T11] device bridge_slave_1 left promiscuous mode
[  601.668457][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  601.722525][   T11] device bridge_slave_0 left promiscuous mode
[  601.724138][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  603.279336][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  603.281072][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  603.359530][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  603.361291][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  603.411521][   T11] bond3 (unregistering): Released all slaves
[  604.080674][   T11] bond2 (unregistering): Released all slaves
[  604.960527][   T11] bond1 (unregistering): Released all slaves
[  605.439303][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  605.440873][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  605.442468][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  606.463046][   T11] team0 (unregistering): Port device team_slave_1 removed
[  606.559456][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  606.561215][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  606.660312][   T11] team0 (unregistering): Port device team_slave_0 removed
[  606.869890][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  607.109720][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  607.999309][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  608.000989][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  608.660336][   T11] bond0 (unregistering): Released all slaves
[  608.799307][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  608.800882][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  608.802475][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  608.975256][T14799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3024'.
[  609.028131][T14152] lo speed is unknown, defaulting to 1000
[  609.029208][T14823] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3030'.
[  609.084145][T14831] Non-string source
[  609.146419][T14828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3033'.
[  609.173411][T14828] netlink: 'syz.2.3033': attribute type 4 has an invalid length.
[  609.174689][T14828] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3033'.
[  610.261271][T14846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3035'.
[  610.288196][T14846] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3035'.
[  610.353130][T14857] netlink: 'syz.5.3040': attribute type 10 has an invalid length.
[  610.559354][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  610.561121][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  610.791661][T14861] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3041'.
[  610.977811][T14869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3042'.
[  612.159343][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  612.161155][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  612.162646][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  612.331345][T14876] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  612.424437][T14876] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  612.510764][T14876] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  612.546787][T14886] Non-string source
[  612.631565][T14876] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  612.879320][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  612.881184][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  612.922119][T14893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3049'.
[  612.923912][T14893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3049'.
[  612.927748][T14893] netlink: 'syz.4.3049': attribute type 4 has an invalid length.
[  612.931870][T14893] wlan1: mtu less than device minimum
[  612.954134][T14876] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  612.965428][T14876] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  612.981777][T14876] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  612.994215][T14876] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  613.147611][T14898] netlink: 'syz.0.3051': attribute type 10 has an invalid length.
[  613.909673][T14912] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  614.879313][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  614.880818][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  615.452413][T14933] Non-string source
[  615.743254][T14932] netlink: 'syz.2.3062': attribute type 10 has an invalid length.
[  615.748050][T14932] wlan1: mtu less than device minimum
[  615.750090][T14932] .`: (slave wlan1): Error -22 calling dev_set_mtu
[  615.999367][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  616.921280][T14951] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  617.395976][T14971] __nla_validate_parse: 1 callbacks suppressed
[  617.395987][T14971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3075'.
[  617.440068][ T2061] ieee802154 phy1 wpan1: encryption failed: -22
[  618.879389][    C1] net_ratelimit: 4 callbacks suppressed
[  618.879402][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  618.882011][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  619.397183][T14988] Non-string source
[  619.778659][T14985] netlink: 'syz.5.3076': attribute type 10 has an invalid length.
[  619.947336][T15012] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  619.999348][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  620.001035][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  620.002622][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  620.879397][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  620.881360][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  620.991903][T15046] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  621.076053][T15046] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  621.252357][T15046] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  621.292913][T15046] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  621.445183][T15046] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  621.448758][T15046] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  621.452931][T15046] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  621.456345][T15046] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  621.904549][T15058] netlink: 'syz.1.3090': attribute type 10 has an invalid length.
[  622.955646][T15065] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  623.085315][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  623.087079][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  623.103135][T15070] Non-string source
[  623.401804][T15078] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3096'.
[  623.403398][T15078] netlink: 'syz.5.3096': attribute type 1 has an invalid length.
[  623.404589][T15078] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3096'.
[  623.679331][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  623.797108][T15068] ------------[ cut here ]------------
[  623.798255][T15068] WARNING: CPU: 0 PID: 15068 at net/mac80211/chan.c:2017 ieee80211_link_release_channel+0x16c/0x19c
[  623.799995][T15068] Modules linked in:
[  623.800621][T15068] CPU: 0 PID: 15068 Comm: syz.1.3094 Not tainted syzkaller #0
[  623.801794][T15068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026
[  623.803319][T15068] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
[  623.804645][T15068] pc : ieee80211_link_release_channel+0x16c/0x19c
[  623.805643][T15068] lr : ieee80211_link_release_channel+0x16c/0x19c
[  623.806647][T15068] sp : ffff800021ce7100
[  623.807312][T15068] x29: ffff800021ce7100 x28: ffff0001050f9c80 x27: dfff800000000000
[  623.808605][T15068] x26: 1fffe00020a1f568 x25: 1fffe0001cbcf000 x24: ffff0001050fab42
[  623.809965][T15068] x23: 1fffe00020a1f2b5 x22: dfff800000000000 x21: 0000000000000000
[  623.811272][T15068] x20: ffff0001050fa228 x19: ffff0001050f95a8 x18: ffff800011b9bf60
[  623.812502][T15068] x17: 1fffe00033ea637e x16: ffff8000082d7db8 x15: 0000000000000000
[  623.813780][T15068] x14: 0000000000000001 x13: 1ffff0000439cdd0 x12: 0000000000080000
[  623.815089][T15068] x11: 00000000000334cf x10: ffff8000270ea000 x9 : ffff80001135d160
[  623.816493][T15068] x8 : 00000000000334d0 x7 : ffff80001135d060 x6 : 0000000000000000
[  623.817724][T15068] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082d05a8
[  623.819035][T15068] x2 : ffff0000c91bd340 x1 : 0000000000000000 x0 : 0000000000000000
[  623.820470][T15068] Call trace:
[  623.821044][T15068]  ieee80211_link_release_channel+0x16c/0x19c
[  623.822040][T15068]  ieee80211_link_stop+0x9c/0xc4
[  623.822890][T15068]  ieee80211_if_change_type+0x1d8/0xc68
[  623.823796][T15068]  ieee80211_change_iface+0x68/0x400
[  623.824594][T15068]  cfg80211_change_iface+0x718/0xf24
[  623.825475][T15068]  nl80211_set_interface+0x428/0x6fc
[  623.826313][T15068]  genl_family_rcv_msg_doit+0x204/0x308
[  623.827191][T15068]  genl_rcv_msg+0x44c/0x640
[  623.827939][T15068]  netlink_rcv_skb+0x218/0x3e8
[  623.828738][T15068]  genl_rcv+0x38/0x50
[  623.829456][T15068]  netlink_unicast+0x60c/0x814
[  623.830264][T15068]  netlink_sendmsg+0x6f4/0x9c0
[  623.831094][T15068]  ____sys_sendmsg+0x5c8/0x938
[  623.831864][T15068]  __sys_sendmsg+0x288/0x374
[  623.832621][T15068]  __arm64_sys_sendmsg+0x80/0x94
[  623.833502][T15068]  invoke_syscall+0x98/0x2b4
[  623.834231][T15068]  el0_svc_common+0x138/0x258
[  623.834913][T15068]  do_el0_svc+0x58/0x130
[  623.835629][T15068]  el0_svc+0x58/0x128
[  623.836304][T15068]  el0t_64_sync_handler+0x84/0xf0
[  623.837056][T15068]  el0t_64_sync+0x18c/0x190
[  623.837767][T15068] irq event stamp: 126254
[  623.838382][T15068] hardirqs last  enabled at (126253): [<ffff8000081fa554>] __cancel_work_timer+0x2c4/0x458
[  623.839831][T15068] hardirqs last disabled at (126254): [<ffff800011a33e5c>] el1_dbg+0x24/0x80
[  623.841158][T15068] softirqs last  enabled at (124860): [<ffff800011184ebc>] cfg80211_mgmt_registrations_update+0x444/0x840
[  623.842836][T15068] softirqs last disabled at (124858): [<ffff800011184b88>] cfg80211_mgmt_registrations_update+0x110/0x840
[  623.844494][T15068] ---[ end trace 0000000000000000 ]---
[  623.851508][T15084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3094'.
[  623.853095][T15068] ------------[ cut here ]------------
[  623.853929][T15068] wlan1: Failed check-sdata-in-driver check, flags: 0x0
[  623.855530][T15068] WARNING: CPU: 0 PID: 15068 at net/mac80211/driver-ops.c:315 drv_unassign_vif_chanctx+0x358/0x638
[  623.857200][T15068] Modules linked in:
[  623.857907][T15068] CPU: 0 PID: 15068 Comm: syz.1.3094 Tainted: G        W          syzkaller #0
[  623.859547][T15068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026
[  623.861160][T15068] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
[  623.862758][T15068] pc : drv_unassign_vif_chanctx+0x358/0x638
[  623.863759][T15068] lr : drv_unassign_vif_chanctx+0x358/0x638
[  623.864672][T15068] sp : ffff800021ce6fb0
[  623.865272][T15068] x29: ffff800021ce6fb0 x28: 0000000000000000 x27: ffff0001050f8c80
[  623.866488][T15068] x26: ffff0001050fa668 x25: dfff800000000000 x24: ffff0001050fa7b8
[  623.867894][T15068] x23: 0000000000000000 x22: ffff0000c3b47a00 x21: ffff0001050fa7b8
[  623.869185][T15068] x20: ffff800017bea000 x19: ffff0001050f8c80 x18: ffff800011b9bf60
[  623.870545][T15068] x17: 1fffe00033ea637e x16: ffff8000082d92bc x15: 0000000040000000
[  623.871847][T15068] x14: 0000000000000001 x13: 1fffe00033ea8a30 x12: 0000000000ff0100
[  623.873101][T15068] x11: ff0080000a8de2c4 x10: 0000000000000003 x9 : 1d37fb5ae3e66d00
[  623.874364][T15068] x8 : 1d37fb5ae3e66d00 x7 : ffff800008257984 x6 : 0000000000000000
[  623.875612][T15068] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000
[  623.876807][T15068] x2 : 0000000000000006 x1 : ffff800011b9da80 x0 : ffff80018a3bc000
[  623.877969][T15068] Call trace:
[  623.878487][T15068]  drv_unassign_vif_chanctx+0x358/0x638
[  623.879320][T15068]  ieee80211_assign_link_chanctx+0x140/0x82c
[  623.880269][T15068]  __ieee80211_link_release_channel+0x29c/0x55c
[  623.881177][T15068]  ieee80211_link_release_channel+0x130/0x19c
[  623.882249][T15068]  ieee80211_link_stop+0x9c/0xc4
[  623.883107][T15068]  ieee80211_if_change_type+0x1d8/0xc68
[  623.884084][T15068]  ieee80211_change_iface+0x68/0x400
[  623.884819][T15068]  cfg80211_change_iface+0x718/0xf24
[  623.885672][T15068]  nl80211_set_interface+0x428/0x6fc
[  623.886419][T15068]  genl_family_rcv_msg_doit+0x204/0x308
[  623.887239][T15068]  genl_rcv_msg+0x44c/0x640
[  623.887985][T15068]  netlink_rcv_skb+0x218/0x3e8
[  623.888719][T15068]  genl_rcv+0x38/0x50
[  623.889348][T15068]  netlink_unicast+0x60c/0x814
[  623.890129][T15068]  netlink_sendmsg+0x6f4/0x9c0
[  623.890906][T15068]  ____sys_sendmsg+0x5c8/0x938
[  623.891728][T15068]  __sys_sendmsg+0x288/0x374
[  623.892433][T15068]  __arm64_sys_sendmsg+0x80/0x94
[  623.893202][T15068]  invoke_syscall+0x98/0x2b4
[  623.893932][T15068]  el0_svc_common+0x138/0x258
[  623.894671][T15068]  do_el0_svc+0x58/0x130
[  623.895386][T15068]  el0_svc+0x58/0x128
[  623.896076][T15068]  el0t_64_sync_handler+0x84/0xf0
[  623.896868][T15068]  el0t_64_sync+0x18c/0x190
[  623.897627][T15068] irq event stamp: 126400
[  623.898362][T15068] hardirqs last  enabled at (126399): [<ffff800008257a18>] finish_lock_switch+0xb0/0x1c4
[  623.899982][T15068] hardirqs last disabled at (126400): [<ffff800011a33e5c>] el1_dbg+0x24/0x80
[  623.901450][T15068] softirqs last  enabled at (126370): [<ffff8000081ac394>] handle_softirqs+0xaec/0xc60
[  623.903025][T15068] softirqs last disabled at (126257): [<ffff800008020164>] __do_softirq+0x14/0x20
[  623.904502][T15068] ---[ end trace 0000000000000000 ]---
[  623.908256][T15068] ------------[ cut here ]------------
[  623.909132][T15068] wlan1: Failed check-sdata-in-driver check, flags: 0x0
[  623.917173][T15068] WARNING: CPU: 0 PID: 15068 at net/mac80211/driver-ops.h:156 ieee80211_vif_cfg_change_notify+0x21c/0x25c
[  623.918788][T15085] loop4: detected capacity change from 0 to 256
[  623.919074][T15068] Modules linked in:
[  623.920753][T15068] CPU: 0 PID: 15068 Comm: syz.1.3094 Tainted: G        W          syzkaller #0
[  623.922320][T15068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026
[  623.924036][T15068] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
[  623.925490][T15068] pc : ieee80211_vif_cfg_change_notify+0x21c/0x25c
[  623.926436][T15085] exfat: Deprecated parameter 'namecase'
[  623.926487][T15068] lr : ieee80211_vif_cfg_change_notify+0x21c/0x25c
[  623.928306][T15068] sp : ffff800021ce6fb0
[  623.928753][T15085] exfat: Deprecated parameter 'namecase'
[  623.928865][T15068] x29: ffff800021ce6fb0 x28: ffff800015220000 x27: ffff800015220384
[  623.931217][T15068] x26: ffff0000c3b47a20 x25: 0000000000000000 x24: dfff800000000000
[  623.932547][T15068] x23: 0000000000000000 x22: ffff0001050fa760 x21: ffff0000e5e78e80
[  623.933873][T15068] x20: ffff800017bea000 x19: ffff0001050f8c80 x18: ffff800011b9bf60
[  623.935179][T15068] x17: 1fffe00033ea637e x16: ffff8000082d92bc x15: 0000000040000000
[  623.936421][T15068] x14: 0000000000000001 x13: 1fffe00033ea8a30 x12: 0000000000ff0100
[  623.937723][T15068] x11: ff0080000a8de2c4 x10: 0000000000000003 x9 : 1d37fb5ae3e66d00
[  623.939072][T15068] x8 : 1d37fb5ae3e66d00 x7 : ffff800008257984 x6 : 0000000000000000
[  623.940434][T15068] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000
[  623.941708][T15068] x2 : 0000000000000006 x1 : ffff800011b9da80 x0 : ffff80018a3bc000
[  623.943067][T15068] Call trace:
[  623.943659][T15068]  ieee80211_vif_cfg_change_notify+0x21c/0x25c
[  623.944589][T15068]  ieee80211_assign_link_chanctx+0x6e8/0x82c
[  623.945610][T15068]  __ieee80211_link_release_channel+0x29c/0x55c
[  623.946679][T15068]  ieee80211_link_release_channel+0x130/0x19c
[  623.947620][T15068]  ieee80211_link_stop+0x9c/0xc4
[  623.948480][T15068]  ieee80211_if_change_type+0x1d8/0xc68
[  623.949456][T15068]  ieee80211_change_iface+0x68/0x400
[  623.950310][T15068]  cfg80211_change_iface+0x718/0xf24
[  623.951206][T15068]  nl80211_set_interface+0x428/0x6fc
[  623.952086][T15068]  genl_family_rcv_msg_doit+0x204/0x308
[  623.952982][T15068]  genl_rcv_msg+0x44c/0x640
[  623.953722][T15068]  netlink_rcv_skb+0x218/0x3e8
[  623.954498][T15068]  genl_rcv+0x38/0x50
[  623.955166][T15068]  netlink_unicast+0x60c/0x814
[  623.955961][T15068]  netlink_sendmsg+0x6f4/0x9c0
[  623.956738][T15068]  ____sys_sendmsg+0x5c8/0x938
[  623.957554][T15068]  __sys_sendmsg+0x288/0x374
[  623.958286][T15068]  __arm64_sys_sendmsg+0x80/0x94
[  623.959148][T15068]  invoke_syscall+0x98/0x2b4
[  623.959897][T15068]  el0_svc_common+0x138/0x258
[  623.960754][T15068]  do_el0_svc+0x58/0x130
[  623.961468][T15068]  el0_svc+0x58/0x128
[  623.962100][T15068]  el0t_64_sync_handler+0x84/0xf0
[  623.962977][T15068]  el0t_64_sync+0x18c/0x190
[  623.963770][T15068] irq event stamp: 126632
[  623.964523][T15068] hardirqs last  enabled at (126631): [<ffff800008257a18>] finish_lock_switch+0xb0/0x1c4
[  623.966300][T15068] hardirqs last disabled at (126632): [<ffff800011a33e5c>] el1_dbg+0x24/0x80
[  623.967832][T15068] softirqs last  enabled at (126624): [<ffff8000081ac394>] handle_softirqs+0xaec/0xc60
[  623.969512][T15068] softirqs last disabled at (126481): [<ffff800008020164>] __do_softirq+0x14/0x20
[  623.971022][T15068] ---[ end trace 0000000000000000 ]---
[  623.989846][T15068] ------------[ cut here ]------------
[  623.990710][T15068] WARNING: CPU: 1 PID: 15068 at net/mac80211/iface.c:113 ieee80211_recalc_idle+0x298/0x338
[  623.992296][T15068] Modules linked in:
[  623.992888][T15068] CPU: 1 PID: 15068 Comm: syz.1.3094 Tainted: G        W          syzkaller #0
[  623.994243][T15068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026
[  623.996096][T15068] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
[  623.997399][T15068] pc : ieee80211_recalc_idle+0x298/0x338
[  623.998436][T15068] lr : ieee80211_recalc_idle+0x298/0x338
[  623.999381][T15068] sp : ffff800021ce6fa0
[  624.000081][T15068] x29: ffff800021ce6fa0 x28: 0000000000000000 x27: ffff800015220000
[  624.001378][T15068] x26: ffff0000c3b47a20 x25: 0000000000000000 x24: dfff800000000000
[  624.002661][T15068] x23: 000000000000096c x22: 1fffe0001cbcf1d7 x21: dfff800000000000
[  624.004015][T15068] x20: 0000000000000000 x19: ffff0000e5e78e80 x18: ffff800011b9bf60
[  624.005222][T15068] x17: 1fffe00033ea637e x16: ffff8000082d7db8 x15: 0000000000000002
[  624.006439][T15068] x14: 0000000000000007 x13: 1ffff00002a44071 x12: 0000000000080000
[  624.007720][T15068] x11: 000000000007ffff x10: ffff8000270ea000 x9 : ffff800011295aec
[  624.009014][T15068] x8 : 0000000000080000 x7 : ffff800011235704 x6 : 0000000000000000
[  624.010436][T15068] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002
[  624.011795][T15068] x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000
[  624.013257][T15068] Call trace:
[  624.013884][T15068]  ieee80211_recalc_idle+0x298/0x338
[  624.014822][T15068]  ieee80211_del_chanctx+0x35c/0x70c
[  624.015732][T15068]  ieee80211_free_chanctx+0x250/0x334
[  624.016605][T15068]  __ieee80211_link_release_channel+0x3d4/0x55c
[  624.017617][T15068]  ieee80211_link_release_channel+0x130/0x19c
[  624.018637][T15068]  ieee80211_link_stop+0x9c/0xc4
[  624.019473][T15068]  ieee80211_if_change_type+0x1d8/0xc68
[  624.020413][T15068]  ieee80211_change_iface+0x68/0x400
[  624.021306][T15068]  cfg80211_change_iface+0x718/0xf24
[  624.022176][T15068]  nl80211_set_interface+0x428/0x6fc
[  624.022973][T15068]  genl_family_rcv_msg_doit+0x204/0x308
[  624.023760][T15068]  genl_rcv_msg+0x44c/0x640
[  624.024378][T15068]  netlink_rcv_skb+0x218/0x3e8
[  624.025024][T15068]  genl_rcv+0x38/0x50
[  624.025677][T15068]  netlink_unicast+0x60c/0x814
[  624.026451][T15068]  netlink_sendmsg+0x6f4/0x9c0
[  624.027190][T15068]  ____sys_sendmsg+0x5c8/0x938
[  624.027972][T15068]  __sys_sendmsg+0x288/0x374
[  624.028731][T15068]  __arm64_sys_sendmsg+0x80/0x94
[  624.029518][T15068]  invoke_syscall+0x98/0x2b4
[  624.030173][T15068]  el0_svc_common+0x138/0x258
[  624.030890][T15068]  do_el0_svc+0x58/0x130
[  624.031526][T15068]  el0_svc+0x58/0x128
[  624.032140][T15068]  el0t_64_sync_handler+0x84/0xf0
[  624.033037][T15068]  el0t_64_sync+0x18c/0x190
[  624.033757][T15068] irq event stamp: 126756
[  624.034468][T15068] hardirqs last  enabled at (126755): [<ffff800011a35e04>] exit_to_kernel_mode+0xcc/0xfc
[  624.035947][T15068] hardirqs last disabled at (126756): [<ffff800011a33e5c>] el1_dbg+0x24/0x80
[  624.037335][T15068] softirqs last  enabled at (126750): [<ffff8000081ac394>] handle_softirqs+0xaec/0xc60
[  624.038957][T15068] softirqs last disabled at (126635): [<ffff800008020164>] __do_softirq+0x14/0x20
[  624.040302][T15068] ---[ end trace 0000000000000000 ]---
[  624.063944][T15085] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  624.799321][    C1] net_ratelimit: 2 callbacks suppressed
[  624.799336][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  624.801862][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  626.479297][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  626.480918][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  627.369327][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  627.370992][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  627.372560][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  628.879303][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  628.880992][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  630.649304][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  630.651077][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.1
[  630.799488][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  630.801172][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  630.802732][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.1.0.1
[  632.889320][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1
[  632.891007][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1