last executing test programs: 3m32.741080859s ago: executing program 4 (id=6353): openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 3m6.23933135s ago: executing program 4 (id=6359): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x8c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xb, 0x4b}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000050}, 0x4004010) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb3f66d6361dbb7d553b4e92155", 0x39}], 0x1}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000003380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003340)={&(0x7f0000001000)={0x2314, r0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x78}}}}, [@NL80211_ATTR_TID_CONFIG={0x218, 0x11d, 0x0, 0x1, [{0x200, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x72}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x32}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1e4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x9, 0x2, 0x6, 0x4, 0x10, 0x33a]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x89}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x9, 0xfa21, 0x5, 0x2, 0x7, 0x101, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xce55, 0x7, 0x4278, 0x7fff, 0x2, 0x7, 0x3, 0x1000]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x5, 0x9, 0x2, 0x449f, 0x7328, 0x6, 0x200]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x4, 0x6, 0x3, 0x6, 0xd, 0x3aa]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x3, 0x4, 0xf, 0x6, 0x9, 0x7, 0x2]}}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8c, 0xbd2, 0x9, 0x7, 0x8, 0x7, 0x1ff, 0xda]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4f5, 0x5, 0x5, 0x8, 0x42b9, 0x4, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8, 0xd, 0x9, 0x3, 0x8000, 0x2, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0xe29, 0x7, 0x39, 0xa, 0x1, 0x8, 0x6]}}]}, @NL80211_BAND_5GHZ={0xd8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x16, 0x1b, 0x30, 0x12, 0x1, 0x4, 0x1, 0x348963ffbdb1190f, 0x65979277b7620fc9, 0x16, 0x6c, 0x5, 0x1, 0x4, 0x1b, 0x12, 0x7, 0x2, 0x12, 0x48, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0x3, 0x400, 0x800, 0x5, 0x6, 0xe]}}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x3}, {0x3, 0x9}, {0x7, 0x7}, {0x0, 0x9}, {0x3, 0x4}, {0x4, 0xa}, {0x5, 0x9}, {0x6, 0xa}, {0x3, 0x4}, {0x6, 0x4}, {0x6, 0x8}, {0x5, 0xa}, {0x2, 0x1}, {0x3, 0x2}, {0x6, 0x7}, {0x6, 0x7}, {0x7, 0x3}, {0x1, 0x2}, {0x1}, {0x5, 0x2}, {0x2, 0x4}, {0x6, 0x8}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xffff, 0x3, 0x3ff, 0x8001, 0x40, 0xb, 0x8a]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0xf, 0xa1, 0x7, 0x4, 0x2, 0x2, 0xc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x7, 0x4}, {0x4, 0x9}, {0x1, 0x7}, {0x7}, {0x5, 0x3}, {0x3, 0x2}, {0x0, 0x3}, {0x2, 0x5}, {0x3, 0x8}, {0x3, 0xa}, {0x2, 0x8}, {0x0, 0x8}, {0x0, 0xa}, {0x5, 0x3}, {0x5, 0x5}, {0x0, 0x6}, {0x5, 0x7}, {0x0, 0x7}, {0x4, 0x7}, {0x5, 0x7}, {0x6, 0x9}, {0x2, 0x1}, {0x3, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x8}, {0x0, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x7, 0x1}, {0x3, 0x7}, {0x6, 0x4}, {0x7}, {0x0, 0x1}, {0x1, 0x4}, {0x3, 0x8}, {0x7, 0x5}, {0x7, 0x5}, {0x3, 0xa}, {0x4, 0x4}, {0x2, 0x3}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x2}, {0x7, 0xa}, {0x1, 0x7}, {0x5, 0x6}, {0x6, 0x5}, {0x5, 0x6}, {0x1, 0x7}, {0x7, 0x2}, {0x6, 0x7}, {0x0, 0x2}, {0x5, 0x3}, {0x7, 0x5}, {0x6, 0x2}, {0x7}, {0x7, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x194, 0x11d, 0x0, 0x1, [{0xa8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x74, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x641e, 0xc, 0x9, 0x9, 0x86, 0x9, 0x4, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x9, 0x16, 0x18, 0x9, 0x0, 0x6, 0x2, 0x7, 0x4]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x48, 0x3, 0x76, 0xb, 0x30, 0x30, 0x9, 0x1b, 0x36, 0x60, 0x9, 0xb, 0x3, 0x18, 0x1b, 0x36, 0x5]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xb}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x57}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x53}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000001}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x400}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x93}]}]}, @NL80211_ATTR_TID_CONFIG={0x320, 0x11d, 0x0, 0x1, [{0x230, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xac, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7, 0x63b, 0x7, 0x3, 0xfff, 0x2]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x0, 0xa}, {}, {0x5, 0x1}, {0x0, 0x7}, {0x3, 0x3}, {0x2, 0x1}, {0x2, 0x8}, {0x0, 0x2}, {0x7, 0x6}, {0x0, 0x2}, {0x3, 0x2}, {0x6, 0x3}, {0x6}, {0x4, 0x7}, {0x7, 0x1}, {0x1, 0x9}, {0x4, 0x9}, {0x6, 0x8}, {0x2, 0x3}, {0x6, 0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x3}, {0x7, 0x6}, {0x1, 0x3}, {0x6, 0x2}, {0x7, 0x5}, {0x5, 0x7}, {0x0, 0x6}, {0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x2, 0x2}, {0x0, 0x2}, {0x3, 0x1}, {0x2, 0x7}, {}, {0x1, 0x9}, {0x1, 0x7}, {0x3, 0x8}, {0x3, 0x6}, {0x1, 0xa}, {0x3, 0x8}, {0x5}, {0x6, 0x7}, {0x5}, {0x2, 0x4}, {0x2, 0x6}, {0x4, 0x9}, {0x1, 0x6}, {0x3, 0x5}, {0x5, 0x2}, {0x4, 0x4}, {0x7, 0x1}, {0x2, 0x4}, {0x2, 0x6}, {0x7, 0x3}, {0x3, 0x5}, {0x0, 0x1}, {0x6, 0x6}, {0x0, 0x7}, {0x7, 0x1}, {0x5, 0x2}, {0x1, 0x5}, {0x4}, {0x0, 0x9}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x3, 0x17, 0x4, 0x12, 0x6c, 0x6c, 0x12, 0x12, 0x12, 0x18, 0x0, 0x60, 0x3, 0x1b, 0x6c, 0x24, 0x18, 0x18, 0x30, 0x33, 0x6c, 0x30, 0x24, 0x5, 0x2, 0x3, 0x16, 0x48, 0x18, 0x6, 0x48, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb4c, 0x6, 0x3d, 0xfff8, 0x4, 0x8, 0x0, 0xb]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x178, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1000, 0x6, 0x1400, 0x40, 0xa, 0x1, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5d, 0x6, 0xf, 0x5, 0x1, 0x8000, 0x2, 0xa3]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x1}, {0x4, 0x9}, {0x6, 0x7}, {0x0, 0x7}, {0x4, 0x9}, {0x5, 0x6}, {0x0, 0x6}, {0x0, 0x3}, {0x1, 0x6}, {0x6, 0xa}, {0x6, 0x2}, {0x6, 0xa}, {0x0, 0x1}, {0x6}, {0x3, 0x3}, {0x1}, {0x6, 0xa}, {0x1, 0x9}, {}, {0x3, 0x9}, {0x3, 0xa}, {0x3, 0xa}, {0x7, 0x6}, {0x7, 0x6}, {0x0, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x43, 0x2, 0x4, 0x2, 0xb, 0x2, 0xe51]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x9, 0x5, 0x6, 0x7000, 0xd, 0xa, 0x7]}}]}, @NL80211_BAND_2GHZ={0xb8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0xa, 0xffff, 0x0, 0x8, 0xba5, 0xa399]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x82, 0x6, 0x0, 0x10, 0x8, 0x4d1, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb2c7, 0xf179, 0x4, 0x8, 0x4, 0x8, 0x4, 0x7]}}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x6, 0x6}, {0x1, 0x6}, {0x1, 0x2}, {0x0, 0x9}, {0x5, 0x1}, {0x0, 0xa}, {0x7, 0x4}, {0x6}, {0x0, 0x8}, {0x3, 0x2}, {0x6, 0x1}, {0x1, 0x9}, {0x1, 0x1}, {0x3, 0x9}, {0x7, 0x11}, {0x7, 0xa}, {0x5, 0x9}, {0x4, 0x1}, {0x0, 0x1a}, {0x2, 0x3}, {0x5, 0x9}, {0x6, 0x9}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0x8}, {0x2, 0x8}, {0x2, 0x5}, {0x3, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x6, 0x9}, {0x5, 0x5}, {0x6, 0x2}, {0x6, 0x4}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x7}, {0x6, 0x5}, {0x4}, {0x6, 0xa}, {0x2, 0x1}, {0x7, 0x6}, {0x6, 0x5}, {0x2, 0x9}, {0x2, 0x7}, {0x3, 0x5}, {0x0, 0xa}, {0x6, 0x7}, {0x1, 0x3}, {0x7, 0x2}, {0x1, 0x3}, {0x0, 0x17}, {0x6, 0x9}, {0x1, 0x2}, {0x3, 0x5}, {0x1, 0x9}, {0x4, 0x7}, {0x1, 0x4}, {0x1, 0x3}, {0x7, 0x3}, {0x1, 0x1}, {0x2, 0x3}, {0x4, 0x5}, {0x4}, {0x7, 0x8}, {0x0, 0x3}, {0x1, 0x3}, {0x6, 0x8}, {0x2, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x101, 0x5, 0x606d, 0x0, 0x5, 0x3, 0x2]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0xe0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x18, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xb0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x4, 0x2, 0x1, 0x5, 0x8000, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8000, 0xfff8, 0x8, 0xfff, 0x4a, 0x365, 0xfffd]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x5, 0x5, 0x6, 0xff00, 0x6, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xa, 0x4c3, 0x6, 0x7, 0x9, 0x2, 0x7]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x48, 0x60, 0x1, 0x3, 0x5, 0xb, 0x3, 0x48, 0x3, 0x1b, 0x4, 0x9, 0x2, 0x0, 0x6]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4015, 0xe, 0xfff, 0x1, 0x3ff, 0x5, 0xc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x12}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c4, 0x11d, 0x0, 0x1, [{0x184, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3000000000000000}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x17}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x20, 0x2, [{0x3, 0x5}, {0x6, 0x7}, {0x2, 0x1}, {0x2, 0x5}, {0x7, 0x7}, {0x1, 0xa}, {0x4}, {0x2, 0x8}, {0x7, 0x9}, {0x3, 0x9}, {0x7, 0x7}, {0x7, 0x7}, {0x4, 0x2}, {0x0, 0x1}, {0x2, 0x8}, {0x2, 0x6}, {0x7}, {0x0, 0x5}, {0x5, 0x6}, {0x2, 0x5}, {0x1, 0x7}, {0x6, 0x2}, {0x3, 0x2}, {0x0, 0x1}, {}, {0x3, 0x4}, {0x0, 0x6}, {0x7, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1ff, 0x6, 0x7f, 0x55e, 0x5, 0x6, 0x4]}}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x1, 0x2}, {0x1, 0x2}, {0x7, 0xa}, {0x7, 0x8}, {0x4, 0x1}, {0x1, 0x3}, {0x6, 0xa}, {0x3, 0xa}, {0x3, 0x1}, {0x5, 0xa}, {0x5}, {0x2, 0x6}, {0x0, 0x6}, {0x2, 0x3}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x8}, {0x6, 0x6}, {0x2, 0x6}, {0x7, 0x8}, {0x3, 0xa}, {0x2, 0x5}, {0x5, 0xa}, {0x7, 0x9}, {0x5, 0x3}, {0x5}, {0x1, 0x1}, {0x0, 0x8}, {0x2, 0x7}, {0x3, 0x6}, {0x3, 0x7}, {0x3, 0x8}, {0x0, 0x8}, {0x4, 0x5}, {0x3, 0x5}, {0x1, 0x8}, {0x5}, {0x3, 0x8}, {0x2}, {0x3, 0x6}, {0x3, 0xa}, {0x7, 0x8}, {0x1, 0x3}, {0x3, 0x8}, {0x0, 0x4}, {0x0, 0x7}, {0x1, 0x1}, {0x2}, {0x3, 0x9}, {0x5, 0x6}, {0x2, 0x1}, {0x1, 0x7}, {0x3, 0xa}, {0x1, 0x1}, {0x0, 0x8}, {0x4, 0xa}, {0x1, 0x5}, {0x0, 0x8}, {0x4, 0x5}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x4}, {0x2, 0x3}]}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0xf20, 0xb, 0x2, 0xff, 0x6, 0x7, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x5, 0x36, 0x2, 0x3, 0x60, 0xb2ef3dc64e20c814, 0x4, 0x1, 0x9, 0x60]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa1, 0x8, 0xa, 0x401, 0x8000, 0xd7, 0x6, 0xd]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x2, 0x9}, {0x0, 0x6}, {0x7, 0x5}, {0x6, 0x7}, {0x2, 0x6}, {0x4, 0xa}, {0x2, 0xa}, {0x2, 0x8}, {0x1}, {0x3, 0x4}, {0x4}, {0x7}, {0x6, 0x7}, {0x0, 0x9}, {0x3, 0x5}, {0x1, 0x3}, {0x6}, {}, {0x1, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x7, 0x9}, {0x0, 0x2}, {0x6, 0x9}, {0x6, 0xa}, {0x5, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x4, 0x6}, {0x3, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x3, 0x5}, {0x4, 0x3}, {0x0, 0x7}, {0x3, 0x3}, {}, {0x3, 0x1}, {0x2, 0x9}, {0x1, 0x1}, {0x7, 0x7}, {0x7, 0x6}, {0x5}, {0x3, 0x8}, {0x2, 0x3}, {0x2, 0x4}, {0x7, 0x3}, {0x5, 0x9}, {0x1, 0x6}, {0x6, 0x7}, {0x1, 0xa}, {0x1, 0x7}, {0x2, 0x2}, {0x0, 0x8}, {0x5, 0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x6, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb7}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0xcb8, 0x11d, 0x0, 0x1, [{0x1b4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x16c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x50, 0x2, [{0x2, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x1, 0x9}, {0x5, 0x9}, {0x3, 0x4}, {0x1, 0xa}, {0x3, 0x8}, {0x6, 0x2}, {0x2, 0x6}, {0x0, 0x9}, {0x5, 0x3}, {0x7, 0x8}, {0x5, 0x4}, {0x2, 0x1}, {0x6, 0x2}, {0x3}, {0x1, 0xa}, {0x1, 0xa}, {0x6, 0x5}, {0x6, 0x4}, {0x5, 0x8}, {0x5, 0x7}, {0x7, 0x7}, {0x0, 0x4}, {0x6, 0x3}, {0x5, 0x1}, {0x3, 0xa}, {0x7, 0x5}, {0x3}, {0x4, 0x3}, {0x4, 0x5}, {0x7, 0x3}, {0x5, 0x4}, {0x6, 0x1}, {0x2, 0x3}, {0x7}, {0x2, 0x4}, {0x2, 0x8}, {0x7, 0x8}, {0x5, 0x7}, {0x0, 0x4}, {0x4, 0x5}, {0x5, 0xa}, {0x6, 0xa}, {0x3, 0x4}, {0x6, 0x8}, {0x1, 0xa}, {0x1, 0x8}, {0x6, 0x2}, {0x0, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x6}, {0x0, 0x8}, {0x6, 0x1}, {0x0, 0x5}, {0x1, 0x9}, {0x3, 0x7}, {0x1, 0x1}, {0x0, 0x6}, {0x0, 0x8}, {0x4, 0x5}, {0x6, 0x3}, {0x7, 0x2}, {0x7, 0x4}, {0x4, 0x8}, {0x6, 0x4}, {0x0, 0x9}, {0x4, 0x7}, {0x0, 0x9}, {0x3, 0x6}, {0x5, 0x8}, {0x2, 0x4}, {0x5, 0x3}, {0x5, 0x8}]}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xc539, 0x81, 0x200, 0x9, 0x5, 0x3, 0x6]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0x401, 0x8, 0xa2, 0xb0, 0xf1bb, 0xc]}}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x31, 0x2, [{0x1, 0x9}, {0x6, 0x6}, {0x3, 0x2}, {0x1, 0x5}, {0x6, 0x5}, {0x0, 0x4}, {0x7, 0x1}, {0x0, 0xa}, {0x7, 0x4}, {0x0, 0x4}, {0x0, 0x10}, {0x5, 0x9}, {0x2, 0x4}, {0x0, 0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x7, 0x9}, {0x7, 0xa}, {0x5, 0x5}, {0x2, 0x6}, {0x6, 0x9}, {0x3, 0x3}, {0x6, 0x9}, {0x6, 0x9}, {0x6}, {0x5, 0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x3}, {0x1, 0x6}, {0x2}, {0x5, 0x5}, {0x7}, {0x7, 0x8}, {0x6, 0x4}, {0x0, 0x4}, {0x4, 0xa}, {0x5}, {0x0, 0x5}, {0x4, 0x2}, {0x7, 0xa}, {0x1, 0x3}, {0x1, 0x9}, {0x5, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x2, 0x2, 0x5, 0xffff, 0xb9f7, 0x4, 0x1000]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0xb, 0x4, 0x3, 0x5, 0x12, 0x1, 0x1b, 0x66, 0x6c, 0x60, 0x9, 0x1, 0x5, 0x24, 0x1, 0xb, 0x9, 0x60, 0x5, 0xb, 0x23, 0x1b]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x6, 0x8}, {0x3, 0x8}, {0x4, 0x9}, {0x7, 0x9}, {0x0, 0x2}, {0x5, 0x8}, {0x0, 0x4}, {0x1, 0x6}, {0x5, 0xa}, {0x3, 0x7}, {0x2, 0x2}, {0x2}, {0x6, 0x4}, {0x2, 0x6}, {0x5, 0x4}, {0x6, 0x6}, {0x4, 0xa}, {0x5, 0x6}, {0x4, 0xa}, {0x2, 0x7}, {0x2, 0x6}, {0x6, 0x4}, {0x1, 0x2}, {0x1, 0xa}, {0x7, 0x2}, {0x2, 0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x6, 0x2}, {0x1, 0x4}, {0x3, 0x6}, {0x6}, {0x2, 0x7}, {0x1, 0x1}, {0x7}, {0x4, 0x5}, {0x6, 0x2}]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x3, 0x3}, {0x4, 0xa}, {0x7, 0x7}, {0x7, 0x2}, {0x3, 0x2}, {0x1, 0x3}, {0x2, 0xa}, {0x7, 0x6}, {0x0, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd8e, 0x2, 0x0, 0x6, 0x3, 0x0, 0x3ff, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe3}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xcc}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10000}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1c}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x240, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x609c}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x220, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0x1fdd, 0xb69, 0x2, 0x400, 0x9, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x8001, 0x2, 0xfffa, 0x5, 0x1, 0x5, 0x9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7fff, 0x5, 0x9, 0x2d3, 0x7fff, 0xbde]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x6, 0x60, 0x1, 0x30, 0x1b, 0x0, 0x5e, 0x30, 0x5, 0x16, 0x1b, 0x1b, 0x24, 0x2, 0x9, 0x6]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x16, 0x24, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x5, 0x9}, {0x2, 0x1}, {0x4, 0x2}, {0x1, 0x5}, {0x7, 0x1}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x24, 0x48, 0x0, 0xf1d5f6a39def6882, 0x2, 0xc, 0x48, 0xb, 0x1b, 0x69, 0xc, 0x0, 0x12, 0x1b, 0x18, 0xc, 0x1, 0x16, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3, 0x2, 0xc, 0x7ff, 0x1, 0x4, 0x100]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffe, 0x2, 0x6, 0xe, 0x9, 0xc5, 0x5c6, 0x1]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x2, 0x81, 0xff, 0x5, 0x9, 0x9, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0xffff, 0x0, 0xfe9f, 0x4, 0x5, 0x1]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x4d, 0xc, 0x1b, 0x30, 0x9, 0x6, 0x16, 0x13, 0x9, 0x6c, 0x3, 0x2, 0x24, 0x12, 0x4, 0x12, 0x1b, 0x24, 0x48]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x0, 0x5}, {0x3, 0x7}, {0x6, 0x9}, {0x0, 0x7}, {0x7, 0x4}, {0x1, 0x9}, {0x7, 0x7}, {0x6, 0x7}, {0x7}, {0x4, 0x5}, {0x5, 0x7}, {0x3, 0x8}, {0x7, 0x3}, {0x1, 0x4}, {0x3, 0x2}, {0x0, 0x5}, {0x4, 0x3}, {0x5, 0xa}, {0x4, 0x3}, {0x4, 0x7}, {0x6}, {0x2, 0x9}, {0x7, 0x2}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x4, 0x9, 0x16, 0x0, 0x1, 0x63, 0x1b, 0x18, 0x1b, 0x12, 0x18, 0xc, 0x2, 0x48, 0x3, 0x60, 0x12, 0x30, 0x3, 0x3d, 0x30, 0xc, 0x1b, 0x1b]}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x10, 0x5, 0x0, 0xf29, 0x81, 0x1, 0x1]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6c]}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0xf463, 0x6f0f, 0x1, 0xa, 0x7, 0x6, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0xdb, 0xd]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x0, 0x7}, {0x3, 0x3}, {0x4, 0x5}, {0x6, 0x4}, {0x2, 0x5}, {0x4}, {0x1, 0xa}, {0x1, 0x8}, {0x1, 0x7}, {0x1, 0x8}, {0x7, 0x9}, {0x0, 0x4}, {0x0, 0x8}, {0x7, 0x9}, {0x7, 0x2}, {0x1, 0x4}, {0x6, 0x7}, {0x5, 0x5}, {0x5, 0x5}, {0x3, 0x2}, {0x5, 0x8}, {0x7, 0xa}, {0x2}, {0x0, 0x9}, {0x7, 0x1}, {0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x1, 0x3}, {0x6, 0x3}, {0x6, 0x1}, {0x3, 0xa}, {0x0, 0x5}, {0x0, 0x8}, {0x0, 0x4}, {0x2, 0x1}, {0x3, 0x8}, {0x3, 0x6}, {0x1, 0x3}, {0x6, 0x7}, {0x3, 0x2}]}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x3, 0x18, 0x3, 0x1b, 0x66, 0x26, 0x48, 0x16, 0x18, 0x0, 0xb, 0x2, 0x1, 0x1b, 0x60, 0x1d, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x58}]}, {0x564, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x314, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x6}, {0x0, 0x4}, {0x1, 0x6}, {0x3, 0x7}, {0x2, 0x4}, {0x1, 0x4}, {0x5, 0x2}, {0x2, 0x5}, {0x7, 0x2}, {0x0, 0x6}, {0x3, 0x7}, {0x3, 0xa}, {0x1, 0x4}, {0x0, 0x3}, {0x6}, {0x2}, {0x5, 0x5}, {0x4, 0x9}, {0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x8001, 0x4, 0x5, 0x8, 0xfa75, 0x8, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xb0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8000, 0x0, 0xe, 0x80, 0x2, 0x9d, 0x13]}}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x3, 0x6}, {0x3}, {0x6, 0x6}, {0x0, 0x8}, {0x4, 0x1}, {0x0, 0x3}, {0x4, 0x9}, {0x2, 0x2}, {0x7, 0x3}, {0x1, 0x9}, {0x3, 0x8}, {0x0, 0x1}, {0x2, 0x9}, {0x2, 0x7}, {0x0, 0x4}, {0x2, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x336a, 0x2, 0x1, 0x5, 0x9, 0x4c90, 0xe, 0x4a6]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xaa6, 0x4, 0xfffa, 0xfff, 0xb3, 0x4, 0x3, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa24, 0x8001, 0x9, 0x1, 0xf40c, 0x5, 0x8, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x5, 0x2eda, 0x8, 0x10, 0x2c00, 0x200]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x18, 0x24, 0xc, 0x36, 0x9, 0x24, 0x6c, 0xb, 0x48, 0x1, 0xc, 0x30, 0x65, 0x1b, 0x12, 0x6f, 0x1, 0x9, 0x16, 0x16, 0x5, 0x3, 0x60]}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa4, 0x8, 0xb, 0x7, 0x3, 0x0, 0x6, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0x7fff, 0x2, 0x4, 0x8, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x9, 0x36, 0x2, 0xb, 0x2, 0x60, 0x18, 0x6c, 0x6c, 0x5, 0x12, 0xb, 0x24, 0x3, 0x1, 0x48, 0x30, 0x60, 0xc, 0x5, 0x6c, 0xb, 0x1, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0xd0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4b, 0x2, [{0x0, 0x3}, {0x6}, {0x6, 0x8}, {0x1, 0x9}, {0x5, 0x5}, {0x3, 0x6}, {0x7, 0x1}, {0x1}, {0x2, 0x5}, {0x4, 0x1}, {0x1, 0xa}, {0x0, 0x9}, {0x5, 0x3}, {0x7, 0x9}, {0x4, 0xa}, {0x1, 0x6}, {}, {0x3, 0x8}, {0x3, 0x5}, {0x5, 0x2}, {0x4, 0x7}, {0x0, 0x2}, {0x1, 0x4}, {0x1, 0x3}, {0x3, 0xa}, {0x0, 0x2}, {0x0, 0x4}, {0x0, 0xa}, {0x1}, {0x3, 0x8}, {0x3, 0x5}, {0x2, 0x6}, {0x0, 0x4}, {0x4, 0x6}, {0x3}, {0x5, 0x7}, {0x3}, {0x6, 0x6}, {0x6, 0x1}, {0x7, 0x9}, {0x0, 0x8}, {0x6}, {0x3, 0x5}, {0x0, 0x5}, {0x0, 0x3}, {0x7, 0x1}, {0x6, 0x7}, {0x1, 0x8}, {0x7, 0x1}, {0x6, 0x9}, {0x1, 0x3}, {}, {0x0, 0x5}, {0x0, 0x3}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0xa}, {0x0, 0x4}, {0x7, 0x9}, {0x1, 0x5}, {0x2, 0xa}, {0x7, 0x1}, {0x4, 0x8}, {0x4, 0x2}, {0x7, 0x3}, {0x1, 0x3}, {0x7, 0x7}, {0x0, 0xa}, {0x3, 0x2}, {0x7, 0x1}, {0x2, 0x9}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xb, 0x48, 0x6c, 0x1b, 0x18, 0x1b, 0x6c, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x4, 0x3, 0x588a, 0x31, 0x4, 0xd55, 0x5]}}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x1, 0x2}, {0x7, 0x8}, {0x4, 0x2}, {0x2}, {0x5, 0x1}, {0x1, 0x9}, {0x2, 0x4}, {0x1, 0x2}, {0x1, 0xa}, {0x5, 0xa}, {0x2, 0x7}, {0x7, 0x9}, {0x6, 0x3}, {0x2, 0x1}, {0x0, 0x2}, {0x0, 0xa}, {0x7, 0x2}, {0x2, 0x7}, {0x6, 0x1}, {0x3, 0x7}, {0x4, 0x6}, {0x7, 0x2}, {0x6, 0x9}, {0x7, 0x4}, {0x5, 0x6}, {0x2, 0x7}, {0x3}, {0x3, 0x9}, {0x5, 0x2}, {0x7, 0x2}, {0x4, 0x6}, {0x3, 0x8}, {0x4}, {0x2, 0x7}, {0x7, 0x9}, {0x2, 0x6}, {0x4, 0xa}, {0x2, 0x6}, {0x7, 0x2}, {0x1, 0x9}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x6}, {0x3}, {0x2, 0x6}, {0x1, 0xa}, {0x1, 0xa}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0xa}, {0x2, 0x5}, {0x0, 0x2}, {0x6, 0x7}, {0x5, 0x7}, {0x6, 0x1}, {0x2, 0x8}, {0x4}, {0x5, 0x4}, {0x5, 0x9}, {0x0, 0x2}, {0x1, 0x9}, {0x2, 0x1}, {0x5, 0x7}, {0x6, 0x4}, {0x2, 0x3}, {0x2}, {0x5, 0x1}, {0x3, 0xa}, {0x1, 0x9}, {0x7, 0x1}, {0x5, 0x4}, {0x4, 0x9}, {0x3, 0x6}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x5, 0xc, 0x18, 0x6c, 0x36, 0x1b, 0x12, 0x1, 0xb, 0x3, 0x30]}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x401, 0xfffc, 0x3ff, 0xfffb, 0xe, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1, 0xfff8, 0x1, 0x20, 0x6, 0x9, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x74, 0x6c, 0x18, 0x1, 0x30, 0x16, 0xb, 0x3, 0x5, 0x36, 0x24, 0xb, 0x7c, 0xb, 0x1, 0xd, 0x12, 0xc, 0x24, 0x4, 0x5, 0x60, 0x2, 0x69]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x18, 0x1b, 0xb, 0xc]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x10}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x21c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x8001, 0x4, 0xfff8, 0x7d5b, 0x6be, 0x4, 0xa816]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x4, 0x5}, {0x0, 0x8}, {0x1, 0x7}, {0x1}, {0x5, 0x4}, {0x6, 0x2}, {0x1, 0x8}, {0x0, 0x2}, {0x3, 0x8}, {0x4, 0x3}, {0x6, 0x2}, {0x1}, {0x3}, {0x5, 0x7}, {0x7, 0x4}, {0x5, 0x3}, {0x0, 0x3}, {0x3, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x5, 0x9}, {0x6}, {0x1, 0x6}, {0x7, 0x7}, {0x0, 0x7}, {0x1, 0x5}, {0x7, 0x2}, {0x3, 0xa}, {0x1, 0xa}, {0x2, 0x9}, {0x6, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x5, 0x6}, {0x6, 0x1}, {0x1, 0x5}, {0x0, 0x2}, {0x6, 0x4}, {0x1, 0x6}, {0x3, 0x4}, {}, {0x0, 0x9}, {0x3, 0x2}, {}, {0x3, 0x1}, {0x1, 0x6}, {0x6, 0x1}, {0x1, 0x4}, {0x1, 0x5}, {0x4, 0x3}, {0x1, 0x7}, {0x7, 0x8}, {0x6, 0x5}, {0x6, 0x7}, {0x1, 0x8}, {0x3, 0x9}, {0x1, 0x4}, {0x1, 0x1}, {0x0, 0x8}, {0x0, 0x6}, {0x0, 0x8}, {0x1, 0x1}, {0x5, 0x2}, {0x4}, {}]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x5, 0x4}, {0x3, 0x1}, {0x5, 0x5}, {0x4, 0x3}, {0x1, 0x6}, {0x5, 0x3}, {0x4, 0x7}, {0x0, 0x5}, {0x1, 0x9}, {0x0, 0x6}, {0x3, 0x2}, {0x0, 0x8}, {0x4, 0x9}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0x7}, {0x0, 0x4}, {0x1, 0x3}, {0x4, 0x1}, {0x4}, {0x1, 0x5}, {0x0, 0x3}, {0x5, 0x8}, {0x1, 0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0xa}, {0x4}, {0x7}, {0x3, 0x8}, {0x2, 0x7}, {0x4, 0x4}, {0x1, 0x2}, {0x2, 0x7}, {0x2, 0x1}, {0x5, 0x2}, {0x1, 0xa}, {0x1, 0x6}, {0x3, 0xa}, {0x3, 0x5}, {0x6}, {0x4, 0x3}, {0x0, 0xa}, {0x1}, {0x4, 0x8}, {0x4, 0x8}, {0x4, 0x8}, {0x7, 0x9}, {}, {0x0, 0x8}, {0x1, 0x1}, {0x1, 0x5}, {0x1, 0x5}, {0x6, 0xa}, {0x1}, {0x7}, {0x6, 0x9}, {0x4, 0x7}, {0x0, 0x1}, {0x2, 0x7}, {0x2, 0x7}, {0x3, 0x9}, {0x2, 0x8}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x133, 0x40, 0x5, 0x800, 0x6, 0xfff4, 0x5, 0x7]}}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xc, 0x9, 0x5, 0x7f, 0x7, 0x9, 0x9]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xac9, 0x1, 0x3e23, 0x7fff, 0x40, 0x2, 0x2, 0x9a]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x8001, 0x7, 0x9, 0x6, 0x2, 0x8001, 0x3]}}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x44, 0x2, [{0x1}, {0x1, 0x3}, {0x5, 0x3}, {0x2, 0x1}, {0x2, 0x5}, {0x2, 0x6}, {0x5, 0x3}, {0x6, 0xa}, {0x3, 0x9}, {0x7}, {0x0, 0x5}, {0x1, 0x3}, {0x4, 0x9}, {0x6, 0x9}, {0x0, 0x6}, {0x7, 0x1}, {0x0, 0x4}, {0x7}, {0x6, 0x1}, {0x1, 0x7}, {0x4, 0x4}, {0x7, 0x8}, {0x6, 0x2}, {0x6}, {0x2}, {0x4, 0x7}, {0x0, 0x9}, {0x2, 0x1}, {0x3, 0x9}, {0x2, 0x2}, {0x6, 0x1}, {0x2, 0x5}, {0x4, 0x3}, {0x3, 0x1}, {0x5, 0x6}, {0x3, 0x8}, {0x0, 0x5}, {0x7, 0x6}, {0x6, 0x2}, {0x2, 0xa}, {0x0, 0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x4, 0x1}, {0x7, 0x5}, {0x6, 0x9}, {0x0, 0x8}, {0x1, 0x1}, {0x5, 0x7}, {0x5, 0x5}, {0x0, 0x1}, {0x4}, {0x6, 0x7}, {0x5, 0x5}, {0x7, 0x2}, {0x7, 0xa}, {0x6, 0x1}, {0x6, 0x3}, {0x3, 0x2}, {0x5, 0x6}, {0x7, 0x3}, {0x7, 0x6}, {0x0, 0x4}, {0x2}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x1b, 0x4, 0x6c, 0x1, 0x2, 0x3, 0xc, 0xb, 0x4, 0x36, 0x18, 0xb, 0x24, 0x5, 0x30, 0x6, 0x5, 0x6, 0x24, 0x1, 0x5, 0x6, 0x48, 0x48, 0x60, 0x1, 0x24, 0x3, 0x60, 0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffd, 0x0, 0x0, 0x9, 0xb, 0x1, 0xff, 0x11f0]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x5, 0x9}, {0x4, 0x5}, {0x6, 0x8}, {0x6, 0x6}, {0x0, 0x6}, {0x7, 0x3}, {0x0, 0x4}, {0x3, 0x5}, {0x7, 0x8}, {0x4, 0x5}, {0x1}, {0x3, 0xa}, {0x7, 0xa}, {0x4, 0x5}, {0x1, 0x2}, {0x5, 0x9}, {0x3, 0x9}, {0x5, 0x7}, {0x0, 0x9}, {0x7, 0x4}, {0x3, 0x6}, {0x0, 0x9}, {0x2, 0x3}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x0, 0x8}, {0x3, 0x9}, {0x3, 0xa}, {}, {0x3}, {0x7, 0x3}, {0x3, 0xa}, {0x4, 0x5}, {0x4, 0x8}, {0x3, 0x4}, {0x4, 0xa}, {0x7, 0x8}, {0x6, 0xa}, {0x6, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2e, 0x4, 0x6, 0x8000, 0x9, 0x9, 0x1ff, 0x8000]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x94}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}]}, {0x1b4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x15}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf3}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x17c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x6, 0x4}, {0x0, 0x8}, {0x3, 0x3}, {0x0, 0xa}, {0x1, 0x6}, {0x1, 0x7}, {0x5, 0x4}, {0x0, 0x1}, {0x1, 0x2}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x3}, {0x0, 0x6}, {0x7, 0x5}, {0x1, 0x3}, {0x0, 0x8}, {0x2, 0xa}, {0x1, 0x3}, {0x0, 0x4}, {0x1, 0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x4}, {0x3, 0x6}, {0x3}, {0x1, 0x8}, {0x3, 0x3}, {0x6, 0x1}, {0x4, 0x7}, {0x7, 0xa}, {0x2, 0x8}, {0x3, 0x9}, {0x6, 0x2}, {0x3, 0x8}, {0x3, 0xa}, {0x2, 0x1}, {0x5, 0x1}, {0x7, 0x3}, {0x2, 0x9}, {0x2, 0x8}, {0x3}, {0x7, 0x5}, {0x5, 0x4}, {0x3, 0x2}, {0x6}, {0x1, 0x3}, {0x7, 0xa}, {0x0, 0xa}, {0x1, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x0, 0x8}, {0x2, 0x2}, {0x2, 0x4}, {0x4, 0x2}, {0x1, 0x2}, {0x1}, {0x3, 0x1}, {0x5, 0x5}, {0x2, 0x2}, {0x5, 0x8}, {0x1, 0x2}, {0x2, 0x2}, {0x3}, {0x7, 0x3}, {0x0, 0x4}, {0x1, 0x9}, {0x5}, {0x2, 0x8}, {0x0, 0x7}, {0x7, 0x3}, {0x2, 0x3}, {0x1, 0x9}, {0x2, 0x3}, {0x4, 0x2}, {0x3, 0x2}, {0x0, 0xa}, {0x7, 0x5}, {0x1, 0x5}, {0x7, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xf, 0x0, 0x6, 0x3, 0x7f, 0xfff1, 0x7]}}]}, @NL80211_BAND_6GHZ={0xc8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x73, 0x4, 0x7, 0xd, 0x10, 0x3, 0x4]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1, 0x24, 0x66, 0x9, 0x6c, 0x19, 0x6, 0x6c, 0x48, 0xb, 0x3, 0x6c, 0xb, 0xb, 0x5, 0x12, 0x48, 0x6c, 0xc, 0x12, 0x48]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x0, 0xa}, {0x6, 0x7}, {0x5, 0x7}, {0x6, 0x1}, {0x3, 0x4}, {0x1}, {0x2, 0x6}, {0x4, 0x5}, {0x0, 0x6}, {0x1, 0x1}, {0x2, 0x2}, {0x1, 0x9}, {0x3, 0xa}, {0x0, 0x5}, {0x2, 0x5}, {0x2, 0x5}, {0x2, 0x7}, {0x1, 0x8}, {0x0, 0x3}, {0x4, 0x5}, {0x6}, {0x5, 0x9}, {0x1, 0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x6, 0x6}, {0x5}, {0x0, 0x6}, {0x6, 0x8}, {0x5, 0x4}, {0x5, 0x7}, {0x2, 0x6}, {0x3, 0x1b}, {0x6, 0xa}, {0x1, 0x2}, {0x5, 0x8}, {0x7, 0x6}, {0x3, 0x1}, {}, {0x6, 0x3}, {0x4, 0x7}, {0x7, 0x8}, {0x5, 0x2}, {0x2, 0x9}, {0x3, 0x8}, {0x0, 0xa}, {0x5, 0x4}, {0x2, 0x5}, {0x5, 0x5}, {0x4, 0x2}, {0x2, 0xa}, {0x5, 0x7}, {0x0, 0x9}, {0x1, 0x6}, {0x7}, {0x0, 0x8}, {0x3}, {0x3, 0x6}, {0x6, 0x5}, {0x2, 0x8}, {0x7}, {0x3, 0x4}, {0x6, 0x5}, {0x2, 0x7}, {0x6, 0x4}, {0x4, 0x6}, {0x1, 0x3}, {0x7}, {0x4, 0x2}, {0x4, 0x4}, {0x2, 0x8}, {0x7, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x18, 0x24, 0x1, 0x4, 0x16, 0x1b, 0x30, 0x12, 0x16, 0x60]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x4, 0x1, 0x0, 0xf800, 0x2, 0x0, 0x7]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1, 0xc, 0x7a, 0x60, 0x16, 0x9]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x400, 0x1, 0x4, 0x9, 0x0, 0x0, 0xb2]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x120, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x1, 0x2, 0xff, 0x101, 0xa599, 0x81, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x3, 0x6}, {0x7, 0x9}, {0x0, 0x1}, {0x6, 0x1}, {0x6, 0x2}, {0x4, 0x3}, {0x0, 0x8}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0xa}, {0x7, 0x7}, {0x4, 0x6}, {0x5}, {0x4}, {0x5, 0x2}, {0x4, 0x1}, {0x6, 0x1}, {0x0, 0x8}, {0x5, 0x4}, {0x0, 0x1}, {0x0, 0x3}, {0x1, 0x2}, {}, {0x0, 0x1}, {0x2, 0x4}, {0x6, 0x6}, {0x3, 0x1}, {0x6, 0x1}, {0x1, 0x8}, {0x1, 0x6}, {0x7, 0x4}, {0x2, 0x3}, {0x7, 0x2}, {0x2, 0x7}, {0x0, 0x3}, {0x3, 0x7}, {0x2, 0x8}, {0x1, 0x2}, {0x1, 0x6}, {0x1, 0x2}, {0x6, 0x5}, {0x3, 0x7}, {0x7, 0x2}, {0x1, 0x3}, {0x4, 0x3}, {0x1, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x0, 0x6}, {0x0, 0x9}, {0x5, 0x4}, {0x1, 0x5}, {0x4, 0x5}, {0x4, 0x9}, {0x7, 0x8}, {0x6, 0x1}, {0x7, 0x9}, {0x4}, {0x5, 0x2}, {0x1, 0x8}, {0x0, 0xa}, {0x1, 0xa}, {0x0, 0x6}, {0x6, 0x2}, {0x5, 0x1}, {0x7}, {0x1}, {0x2}, {0x0, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x192, 0x5b, 0x7, 0x200, 0x8, 0x3, 0x3, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x48, 0x36, 0xa03aa1eb23ca829, 0x16, 0x4, 0x9, 0x48, 0x60, 0x3, 0x24, 0x5, 0x60, 0x9, 0x4, 0xc, 0x3, 0x78, 0x6c, 0x1, 0x24, 0x0, 0x12, 0x48, 0x60, 0x1b, 0x1b, 0x4]}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x40, 0x2, [{0x6, 0x1}, {0x5, 0x6}, {0x0, 0x6}, {0x7, 0x4}, {0x0, 0x9}, {0x7, 0x7}, {0x7, 0x9}, {0x5, 0x3}, {0x4, 0x1}, {0x3, 0x8}, {0x2, 0x6}, {0x1, 0x6}, {0x3, 0x8}, {0x4, 0x5}, {0x5, 0x1}, {0x6, 0x9}, {0x6, 0x2}, {0x4, 0x8}, {0x5, 0x4}, {0x2, 0x2}, {0x1, 0x8}, {0x3, 0x4}, {0x6, 0x1}, {0x5, 0x6}, {0x4, 0x8}, {0x2, 0x7}, {0x2, 0x4}, {0x2, 0x2}, {0x1, 0x3}, {0x4, 0x1}, {0x6, 0x3}, {0x7, 0xa}, {0x5, 0x1}, {0x2, 0x5}, {0x0, 0xa}, {0x3, 0x7}, {0x4, 0x5}, {0x3, 0xa}, {0x2, 0x1}, {0x0, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x2, 0x9}, {0x7, 0x7}, {0x1, 0x8}, {0x3}, {0x4, 0x6}, {0x6, 0x4}, {0x6}, {0x4}, {0x3}, {0x2, 0x5}, {0x4, 0xa}, {0x6, 0x1}, {0x2, 0x8}, {0x5, 0x1}, {0x2, 0x6}, {0x4, 0x4}, {0x0, 0x2}, {0x0, 0xa}]}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0xffff, 0x1, 0x6, 0x6, 0x4, 0x18e0, 0x8001]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x448, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6f}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7f}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x35}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x3c8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x80}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x40, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x5, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x3, 0x4}, {0x2, 0x2}, {0x0, 0x5}, {0x2, 0x4}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x1}, {0x5, 0x8}, {0x0, 0x3}, {0x6, 0xa}, {0x5, 0x2}, {0x6, 0x2}, {0x4, 0x8}, {0x4, 0x6}, {0x1, 0x3}, {0x6, 0x1}, {0x0, 0x9}, {0x5, 0x4}, {0x2, 0x2}, {0x2, 0x5}, {0x0, 0x3}, {0x7, 0x2}, {0x4, 0x5}, {0x5, 0x5}, {0x2, 0x1}, {0x2, 0x4}, {0x5, 0xa}, {0x2, 0x2}, {0x0, 0x3}, {0x0, 0x9}, {0x5, 0x1}, {0x2, 0x4}, {0x4, 0xa}, {0x6, 0x7}, {0x4, 0x5}, {0x0, 0x1}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x368, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb780, 0x2, 0xe52, 0x2, 0xa, 0x0, 0x7fff, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x1f, 0x4, 0xff, 0x8, 0xf, 0xf07f]}}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x4, 0x3}, {0x6, 0xa}, {0x3, 0x7}, {0x6, 0x6}, {0x4, 0x2}, {0x1, 0x8}, {0x3, 0x6}, {0x1, 0x1}, {0x6, 0x9}, {0x2, 0x4}, {0x4, 0x8}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x6}, {0x3, 0x5}, {0x1, 0x4}, {0x3, 0x3}, {0x2, 0xa}, {0x5, 0x8}, {0x6, 0x1}, {0x6, 0x5}, {0x5, 0x5}, {0x7}, {0x4}, {0x3}, {0x1, 0x3}, {0x5, 0x6}, {0x7, 0x9}, {0x5, 0x4}, {0x2, 0x5}, {0x2}, {0x1, 0x8}, {0x5, 0x4}, {0x1, 0x6}, {0x3, 0x6}, {0x5}, {0x6, 0x3}, {0x6, 0x9}, {0x2, 0x3}, {0x0, 0x9}, {0x2, 0x5}, {0x7, 0x7}, {0x6, 0x1}, {0x0, 0x7}, {0x2, 0x7}, {0x6, 0x4}, {0x7, 0x7}]}]}, @NL80211_BAND_60GHZ={0x118, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x401, 0x4, 0x7f, 0x10, 0x0, 0x5, 0x9]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x2, 0x5}, {0x5, 0x9}, {0x1}, {0x1, 0x2}, {0x0, 0x4}, {0x2, 0x2}, {0x4, 0xa}, {0x5, 0x4}, {0x6, 0x4}, {0x2, 0xa}, {0x7, 0x4}, {0x1}, {0x6, 0x7}, {0x0, 0xa}, {0x5, 0x1}, {0x6, 0x2}, {0x1, 0x2}, {0x0, 0x7}, {0x0, 0x5}, {0x0, 0xa}, {0x2, 0x8}, {0x0, 0x5}, {0x0, 0xa}, {0x7, 0x1}, {0x4, 0x6}, {0x0, 0x8}, {0x0, 0x1}, {0x0, 0x6}, {0x6, 0x9}, {0x3, 0x6}, {0x2, 0x8}, {0x2, 0xa}, {0x0, 0x2}, {0x5, 0x3}, {0x7, 0x3}, {0x5, 0x6}, {0x7, 0x9}, {0x5, 0x8}, {0x1}, {0x1, 0x1}, {0x5, 0x4}, {0x6, 0x8}, {0x5, 0x6}, {0x0, 0x5}, {0x0, 0x8}, {0x3, 0x3}, {0x6, 0x3}, {0x3, 0x9}, {0x5, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x23, 0x9, 0x8, 0x83fa, 0xfffb, 0xf, 0x7f, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xfffe, 0x6, 0xf1d, 0x8, 0x5711, 0x992d, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x4dc0, 0x2, 0x8, 0x7, 0x25, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0xf6, 0x10, 0x0, 0x101, 0xceb, 0x8001, 0x3]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6c, 0x16, 0x16, 0x12, 0x5, 0x30, 0x17, 0xb]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x6}, {0x5, 0x1}, {0x0, 0x4}, {0x7, 0x9}, {0x7, 0x4}, {0x3, 0x6}, {0x6, 0x1}, {0x2, 0x3}, {0x4, 0x2}, {0x2, 0x4}, {0x1, 0x1}, {0x1, 0x9}, {0x1, 0x8}, {0x1, 0x3}, {0x5, 0x8}, {0x3, 0x3}, {0x0, 0x3}, {0x2, 0x7}, {0x4, 0x2}, {0x5, 0x6}, {0x5, 0x9}, {0x5, 0x5}, {0x3, 0x9}, {0x5, 0x3}, {0x4, 0x3}, {0x1, 0x7}, {0x4, 0xa}, {0x2}, {0x3, 0xa}, {0x4}, {0x0, 0x6}, {0x1, 0x1}, {0x6, 0x4}, {0x7, 0x7}, {0x3, 0x6}, {0x7, 0x9}, {0x7, 0xa}, {0x2, 0xa}, {0x2, 0x1}, {0x6, 0x8}, {0x5, 0x9}, {0x6, 0x2}, {0x0, 0x7}, {0x4, 0x8}, {0x0, 0x3}, {0x1, 0x6}, {0x7, 0x3}, {0x4, 0x2}, {0x0, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x6, 0xa}, {0x1, 0x6}, {0x0, 0x4}, {0x0, 0x4}, {0x2, 0x1}, {0x3, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x0, 0x10, 0xfff, 0x3, 0x80, 0x8, 0x7]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x24, 0x2, 0x4, 0x2, 0x16, 0x1b, 0x6, 0x69, 0x60, 0x1b, 0x24, 0x16, 0x0, 0x60, 0x18, 0x5, 0x6, 0x24]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0xc8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x3, 0x8}, {0x0, 0x1}, {0x3}, {0x7}, {0x2, 0x3}, {0x0, 0x5}, {0x1, 0x3}, {}, {0x7, 0x6}, {0x0, 0x7}, {0x4, 0x7}, {0x4, 0x9}, {0x3, 0x7}, {0x5, 0x8}, {0x3}, {0x2, 0x7}, {0x5, 0x7}, {0x1, 0x6}, {0x0, 0xa}, {0x6, 0x4}, {0x5, 0x9}, {0x5, 0x9}, {0x1, 0x2}, {0x7, 0xa}, {0x6, 0x6}, {0x0, 0xa}, {0x6, 0x9}, {0x0, 0x8}, {0x4, 0x1}, {0x6, 0x7}, {0x2, 0x8}, {0x7, 0x7}, {0x1, 0x6}, {0x7, 0xa}, {0x3, 0x5}, {0x7, 0x3}, {0x1, 0x3}, {0x2, 0x9}, {0x2, 0x3}, {0x5, 0x6}, {0x0, 0x6}, {0x4, 0x5}, {0x1, 0x5}, {0x3, 0x4}, {0x6, 0x5}, {0x5}, {0x2, 0xa}, {0x2, 0x9}, {0x2, 0x7}, {0x5, 0x6}, {0x7, 0x7}, {0x5, 0x9}, {0x4, 0x4}, {0x1, 0x9}, {0x1}, {0x0, 0x6}, {0x4, 0x2}, {0x4, 0x4}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x36, 0x2, 0x18, 0x12, 0x9, 0x30, 0x6, 0x16, 0x48, 0x16, 0x4, 0xc, 0x4d, 0x2, 0x8e0027f6fedfc061, 0x1b, 0x4, 0x18, 0x30, 0x6]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x2, 0x2, 0x10, 0x1000, 0x8, 0x6]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x1, 0x6}, {0x3, 0x3}, {0x6, 0x7}, {0x5, 0x5}, {0x6, 0xa}, {0x7, 0xa}, {0x0, 0x7}, {0x1, 0xa}, {0x6, 0x4}, {0x0, 0x8}, {0x1, 0x1}, {0x0, 0x3}, {0x1, 0x2}, {0x3, 0x1}, {0x4, 0xa}, {0x3, 0x6}, {0x5, 0x1}, {0x7, 0xa}, {0x0, 0x7}, {0x6}, {0x2, 0x6}, {0x5}, {0x5, 0x8}, {0x1, 0x5}, {0x5, 0x7}, {0x3, 0xa}, {0x7, 0x1}, {0x6, 0x3}, {0x1, 0x6}, {0x5}, {0x7, 0x4}, {0x1, 0x3}, {0x6, 0x6}, {0x2, 0x9}, {0x1, 0xa}, {0x4, 0x3}, {0x7, 0xa}, {0x0, 0x5}, {0x5, 0x6}, {0x1, 0x4}, {0x7, 0x6}, {0x5, 0x2}, {0x1, 0x3}, {0x1, 0x4}, {0x1, 0x5}, {0x3, 0x3}, {0x5, 0x4}, {0x0, 0x4}, {0x0, 0x4}, {0x5, 0x7}, {}, {0x3, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x7, 0x7, 0xf1a, 0x1, 0x1, 0x0, 0x800]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x7}, {0x6, 0x1}, {0x2, 0x1}, {0x4, 0x7}, {0x3, 0x8}, {0x0, 0x8}, {0x2, 0x9}, {0x3, 0x2}, {0x1, 0x6}, {0x1}, {0x5, 0x1}, {0x4, 0xa}, {0x1, 0x6}, {0x3, 0x2}, {0x1, 0xa}, {0x1}, {0x3, 0x3}, {0x4, 0x8}, {0x2, 0x6}, {0x3}, {0x6, 0x5}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x6}, {0x6, 0x7}, {0x1, 0xa}, {0x6, 0x8}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x3}, {0x5, 0x4}, {0x7, 0x8}, {0x2, 0x4}, {0x4, 0x7}, {0x4, 0x2}, {0x1, 0x5}, {0x3, 0x3}, {0x6, 0x2}, {0x3, 0x1}, {0x6, 0xa}, {0x7}, {0x7, 0x9}, {0x0, 0x8}, {}, {0x6, 0x1a}, {0x2, 0x7}, {0x5, 0x7}, {0x7, 0x3}, {0x7, 0xa}, {0x2, 0x7}, {0x1}, {0x1, 0x8}, {0x5, 0x3}, {0x5, 0x3}, {0x1, 0x3}, {0x7, 0x6}, {0x1}, {0x3, 0xa}, {0x0, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x0, 0xa}, {0x6, 0x7}, {0x7, 0x3}, {0x3, 0x9}, {0x5, 0x3}, {0x3, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x3, 0x8, 0x6, 0x8, 0x0, 0x7f, 0xffff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x0, 0xc, 0x36, 0x24, 0xc, 0x9, 0x24, 0x1]}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x3ff, 0x2, 0xff9a, 0x3, 0x400, 0x3, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x60, 0x16, 0x6, 0x2e, 0x5, 0x9, 0x60, 0x0, 0x2e, 0x12]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x520, 0x11d, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x200}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x38, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9b, 0x9, 0x10, 0xfffe, 0x4, 0xd, 0x9, 0xcb]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3a3a, 0x2, 0xe, 0x8, 0xa, 0x4, 0xfffb, 0x101]}}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x20}]}, {0x19c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe3}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x14c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x60, 0x30, 0x9, 0x48, 0x60, 0x3, 0x2, 0x4, 0x5, 0x48, 0x12, 0x1b, 0x18, 0x3, 0x18, 0x6c, 0x60, 0x30, 0x24, 0x1, 0x36, 0x30, 0x2, 0x4, 0x2, 0x60, 0x48, 0x30, 0x1, 0x6c, 0x30]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x73f5, 0xf22f, 0x1, 0x4928, 0x7, 0x2]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x7}, {0x5, 0x9}, {0x1, 0xa}, {0x4, 0x5}, {0x1, 0x5}, {0x7}, {}, {0x3, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x2, 0x1000, 0x8001, 0x1ff, 0x9, 0x80, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x5, 0x9, 0x37d, 0x1, 0x9, 0x6, 0x9]}}]}, @NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x3, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x6, 0x8}, {0x3, 0x6}, {0x5, 0x5}, {0x0, 0x8}, {0x7, 0x4}, {0x7, 0x1}, {0x1, 0x3}, {0x1}, {0x0, 0xa}, {0x1, 0x8}, {0x4, 0x3}, {0x5, 0x3}, {0x3, 0x7}, {0x1, 0x7}, {0x6, 0x7}, {0x1, 0x3}, {0x0, 0x7}, {0x4, 0x5}, {0x5, 0x8}, {0x7}, {0x1, 0x9}, {0x1, 0x4}, {0x2, 0x6}, {0x5, 0x5}, {0x0, 0x6}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x8}, {0x0, 0x4}, {0x7, 0x5}, {0x5, 0x6}, {0x6, 0x1}, {0x4, 0x5}, {0x5}, {0x6, 0x4}, {0x4, 0x1}, {0x6, 0x9}, {0x3}, {0x1, 0x4}, {0x6, 0xa}, {0x7, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x7, 0xa}, {0x1}, {0x1}, {0x1, 0x2}, {0x4, 0x6}, {0x5}, {0x4, 0xa}, {0x5, 0x7}, {0x2, 0x3}, {0x7, 0x7}, {0x3, 0x5}, {0x1}, {0x5, 0x9}, {0x5, 0x3}, {0x0, 0x6}, {0x6, 0x5}, {0x7, 0x6}, {0x6, 0x9}, {0x3, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5, 0xa, 0x4, 0x6, 0x6, 0x4, 0xd]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7d, 0x4, 0x5, 0x5, 0x0, 0x6, 0x2, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x3, 0xb, 0xb, 0x2, 0x5, 0x1b, 0x4, 0x48, 0x5, 0xb, 0x16, 0x9, 0x1, 0x9, 0x3, 0x1, 0x0, 0x24, 0x1b]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6, 0x16, 0x5f, 0x18, 0x5, 0x1, 0x48, 0x4, 0x9, 0x30, 0x18, 0x4, 0x1b, 0x5, 0x1b, 0x60, 0x24, 0x48, 0x9, 0x18, 0x12, 0x60, 0x9, 0x48, 0x2, 0x6c]}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x30}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x65}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x22}]}, {0x2b8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x2ac, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xe, 0x6, 0x41de, 0x2, 0x9, 0x6, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x12, 0x0, 0x5, 0x80, 0x3, 0x6, 0x8, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x5, 0x9, 0xa03c, 0x5914, 0x8, 0x5, 0xf]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x24, 0x4, 0x12, 0x2, 0x60, 0x4, 0x1, 0x18, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xf, 0xa, 0x400, 0x7c, 0x7, 0xb74b, 0x5]}}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x7, 0xa}, {0x4, 0x5}, {0x0, 0x3}, {0x2}, {0x3, 0x8}, {0x5}]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x12, 0x230, 0x4, 0xc, 0x401, 0x0, 0x4]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x12, 0x1, 0xb, 0xb, 0x16, 0xb, 0x3, 0x1b, 0x1, 0x0, 0x18, 0x0]}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x3, 0x3}, {0x1, 0xa}, {0x7, 0x9}, {0x4, 0x2}, {0x0, 0x9}, {0x6, 0x9}, {0x4, 0x9}, {0x0, 0x4}, {0x1, 0x3}, {0x6}, {0x4, 0xa}, {0x4, 0x4}, {0x0, 0xa}, {0x4, 0xa}, {0x1, 0x2}, {0x3, 0x1}, {0x2, 0x9}, {0x1, 0x2}, {0x5, 0x4}, {0x6, 0x1}, {0x4, 0x9}, {0x0, 0x6}, {0x3, 0xa}, {0x5, 0x6}, {0x1, 0x1}, {0x6, 0xa}, {0x5, 0xa}]}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x5, 0x4, 0x7, 0xc000, 0x7, 0x160]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x0, 0x4}, {0x4}, {0x1, 0x6}, {0x0, 0x4}, {0x5, 0x3}, {0x1, 0x9}, {0x7, 0x7}, {}, {0x7, 0x3}, {0x2, 0x6}, {0x6, 0x4}, {0x1, 0x6}, {0x3, 0x3}, {0x3, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x0, 0x4}, {0x1, 0x5}, {0x0, 0xa}, {0x7, 0x4}, {0x4, 0x3}, {0x6, 0x1}, {0x0, 0x5}, {0x7, 0x5}, {0x6, 0x2}, {0x0, 0x1}, {0x6, 0xa}, {0x5, 0x8}, {0x0, 0x1}, {0x0, 0x8}, {0x4}, {0x5, 0xa}, {0x2, 0x4}, {0x0, 0x4}, {0x1, 0x8}, {0x3, 0x5}, {0x3, 0x6}, {0x1, 0x7}, {0x4, 0x7}, {0x7, 0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x9, 0x1b, 0x48, 0x48, 0x60, 0x4]}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x16, 0x18, 0x6, 0x3, 0x6, 0xb, 0x48, 0x855ab61726be113c, 0x36, 0x1b, 0x6c, 0x6, 0x48, 0x16, 0x1, 0x1, 0x4, 0x4, 0x6, 0x4, 0x60, 0xc, 0x2, 0x18, 0x4, 0x6c, 0x30, 0x30, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xc, 0x4, 0x4, 0x2450, 0x7, 0x5, 0xfffc]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xd86, 0x8, 0xc, 0x3, 0x10, 0x5a14, 0x7]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x9, 0x7, 0x4, 0xf, 0x2, 0xfffa, 0xf5c6]}}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0x5}, {0x6, 0xa}, {0x1, 0x8}, {0x0, 0x7}, {0x4, 0xa}, {0x2}, {0x2, 0x7}, {0x6, 0x5}, {0x2, 0xa}, {0x5, 0x9}, {0x6, 0x6}, {0x3, 0x7}, {0x1, 0x6}, {0x0, 0x4}, {0x1, 0x5}, {0x5, 0x7}, {0x7, 0xa}, {0x1, 0x3}, {0x1, 0x5}, {0x6, 0x7}, {0x5, 0x1}, {0x3, 0x9}, {0x7, 0x5}, {0x5, 0x6}, {0x1, 0x5}, {0x5, 0x5}, {0x4, 0x2}, {0x7, 0x8}, {0x1, 0x2}, {0x4, 0x7}, {0x4, 0x4}, {0x1, 0x9}, {0x0, 0x8}, {0x1, 0x8}, {0x0, 0x2}, {0x5, 0x4}, {0x2, 0x7}, {0x1, 0x9}, {0x1, 0x8}, {0x0, 0x7}, {0x6, 0x7}, {0x1, 0x6}, {0x3, 0x5}, {0x2, 0x1}, {0x3, 0x2}, {0x3, 0x2}, {0x7, 0x5}, {0x6, 0x8}, {0x5, 0x3}, {0x7, 0x3}, {0x0, 0xa}, {0x2, 0xa}, {0x0, 0x8}, {0x4, 0x5}, {0x2, 0x7}, {0x3, 0x1}, {0x1, 0x2}, {0x0, 0x4}, {0x1}, {0x1, 0x9}, {0x0, 0x6}, {0x1, 0x7}, {0x1, 0x2}, {}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x9, 0x18, 0x6c, 0xb, 0x9, 0x6c, 0x18, 0xc, 0x1b, 0x9, 0x6, 0x9, 0x48, 0x4, 0x2, 0x6, 0x9, 0x63, 0xb, 0x66, 0x4, 0x16, 0x1, 0x16, 0x24, 0x1b, 0x5, 0x3, 0x0]}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x16, 0xc, 0x24, 0x23, 0x36, 0x36, 0x1b, 0x1, 0x6, 0x2, 0x4, 0x7, 0x16, 0x24, 0x4, 0x4, 0x30, 0x3, 0x36, 0x24, 0x6c, 0x12, 0x4, 0x60, 0x6, 0xf, 0x16, 0x1, 0x3]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x6d, 0x325d, 0x4, 0x1, 0x6, 0xc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0xa7, 0x1, 0x1, 0x6, 0x1, 0x23a, 0xfff]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x1, 0x8}, {0x7, 0x4}, {0x7, 0x8}, {0x5, 0x9}, {0x4, 0x8}, {0x5, 0x2}, {0x6, 0xa}, {0x6, 0x4}, {0x2, 0x4}, {0x3}, {0x7}, {0x7, 0x3}, {0x6, 0x3}, {0x1, 0xa}, {0x3, 0x5}, {0x5}, {0x6, 0x8}, {0x4, 0x1}, {0x0, 0x5}, {0x5, 0x1}, {0x0, 0x5}, {0x0, 0x1}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x1bc, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x1ac, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4377}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x5, 0x1, 0x60, 0x1b, 0x48, 0x60, 0xc, 0x4, 0x24, 0x6c, 0x60, 0x0, 0x24, 0x24, 0xc, 0x16, 0x78, 0x3]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x48, 0x6c, 0x6c, 0x36, 0x30, 0x6c, 0xb, 0x6c, 0x2, 0xc, 0x48, 0x1, 0x30, 0x4, 0x30, 0x6, 0x9, 0xb]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x16, 0x1, 0x16, 0x18, 0x24, 0x4, 0x6, 0x6, 0x18, 0x1b, 0x0, 0xc, 0x36, 0x2, 0x0, 0x9, 0x12, 0x48, 0x60, 0x1, 0x2, 0x48, 0x2e, 0x6c, 0x48, 0x0, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0x100, 0x3ff, 0x101, 0x7, 0x0, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3cc, 0xf, 0xfffb, 0x4, 0xfff8, 0xd8f, 0x5561, 0x81]}}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3, 0x2, 0xf25, 0x0, 0xfbc5, 0x3d6, 0xaef]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x4, 0x3}, {0x1, 0x2}, {0x2, 0x1}, {0x1, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x0, 0x8}, {0x7, 0x5}, {0x5}, {0x3, 0x2}, {0x1}, {0x0, 0x3}, {0x5, 0x2}, {0x6, 0x4}, {0x1, 0x7}, {0x1, 0x8}, {0x7, 0x4}, {0x7, 0xa}, {}, {0x7, 0x6}, {0x6}, {0x7}, {0x6, 0x5}, {0x1, 0x8}, {0x5, 0x3}, {0x2, 0x1}, {0x2, 0x3}, {0x6, 0x1}, {0x0, 0x6}, {0x3, 0x3}, {0x5, 0x5}, {0x7, 0x3}, {0x4, 0x3}, {0x7, 0x5}, {0x4, 0x9}, {0x6, 0x2}, {0x5, 0x6}, {0x7, 0x6}, {0x2, 0x6}, {0x1, 0x9}, {0x3, 0x8}, {0x3, 0x1}, {0x5, 0x8}, {0x7, 0x3}, {}, {0x5, 0x2}, {0x0, 0xa}, {0x3, 0x3}, {0x2, 0xa}, {0x6, 0x3}, {0x1, 0xa}, {0x5, 0x5}, {0x2, 0x5}, {0x0, 0x2}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x15}, {0x4, 0xa}, {0x5, 0x3}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x7, 0x6, 0xfffb, 0x400, 0xfffa, 0xaa]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x4, 0x7fff, 0x0, 0x3ff, 0x1, 0x8, 0xfff8]}}]}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa9, 0x5, 0x6, 0x9, 0x0, 0x800, 0x0, 0xcc81]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x1, 0x4}, {0x6, 0x3}, {0x7, 0x1}, {0x7, 0x3}, {0x2, 0x8}, {0x6, 0x9}, {}, {0x5, 0xa}, {0x7, 0x9}, {0x0, 0x9}, {0x6, 0x4}, {0x4, 0x9}, {0x7, 0x6}, {0x6, 0x2}, {0x3, 0x7}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0xa}, {0x2, 0x4}, {0x6, 0x8}, {0x7, 0x1}, {0x4, 0x9}, {0x6, 0xa}, {0x2, 0xa}, {0x0, 0x1}, {0x4, 0x9}, {0x0, 0x1}, {0x1, 0x2}, {0x0, 0x2}, {0x1, 0x5}, {0x7, 0x6}, {0x1, 0x2}, {0x4, 0x9}, {0x5, 0x3}, {0x4, 0xa}, {0x0, 0x5}, {0x3, 0x9}, {0x0, 0x1}, {0x0, 0xa}]}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x7, 0x3}, {0x5, 0x7}, {0x4, 0xa}, {0x7, 0x6}, {0x6, 0x9}, {0x6, 0x6}, {0x0, 0x6}, {0x4}, {0x0, 0x8}, {0x3}, {0x3, 0x5}, {0x2, 0x5}, {0x0, 0x8}, {0x1, 0xa}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0x7}, {0x2, 0x4}]}, @NL80211_TXRATE_GI={0x5}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x288, 0x11d, 0x0, 0x1, [{0x248, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x234, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x5, 0x8}, {0x6, 0x4}, {0x2, 0x1}, {0x6, 0x7}, {0x0, 0x5}, {0x0, 0x3}, {0x3, 0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x12, 0x48, 0x20, 0x5, 0x24, 0x6c, 0x12, 0x48, 0x12, 0x30, 0x48, 0xc, 0x2, 0x12, 0x36, 0x52, 0x6c, 0xb, 0x48, 0x1b, 0x36, 0xb, 0x60, 0x5, 0x3, 0x48, 0x5, 0x18, 0x29, 0x6c]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x4, 0x4}, {0x1, 0x9}, {0x3, 0x5}, {0x3, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x200, 0x2, 0x0, 0x1, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0xa, 0xf, 0x2, 0x3250, 0x1, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x88e4, 0x2, 0x8, 0xffff, 0x3, 0x1ff, 0xb70, 0x80]}}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1b, 0x48, 0x12, 0x5d78350f48700b74, 0x48, 0x24, 0x2, 0xc, 0xb, 0x48, 0xc, 0xc, 0x60, 0x6, 0x6c, 0x3, 0x2, 0x2, 0x1, 0x6, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x7, 0x7, 0x8, 0x1, 0x2, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0x0, 0x10, 0x8000, 0x1, 0x4, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0x4, 0x4, 0x8, 0x6, 0xfffd, 0xff]}}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1e, 0x2, [{0x4, 0x7}, {0x0, 0x7}, {0x0, 0x1}, {0x4, 0x7}, {0x7, 0x8}, {0x6}, {0x2, 0x4}, {0x4, 0x3}, {0x7, 0x2}, {0x4, 0x9}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x8}, {0x5, 0x4}, {0x1, 0x3}, {0x1, 0x7}, {0x0, 0x9}, {0x5, 0x7}, {0x0, 0x3}, {0x4, 0x9}, {0x4}, {0x7, 0x8}, {0x0, 0x3}, {0x0, 0x1}, {0x4, 0xa}, {0x3, 0x6}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0x5, 0x48, 0xb, 0x12, 0xc, 0x48, 0x1, 0x16, 0x9, 0x48, 0x1b, 0x2, 0x55ee6fc2582af4fb, 0x1, 0x1b, 0x5, 0x48, 0x9, 0x4, 0x0, 0x16, 0x3, 0x24, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x3, 0xfffe, 0x1, 0xc6, 0x7, 0x7ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2ef, 0x5, 0x3, 0x400, 0x1, 0x9, 0x4, 0x51e]}}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0xec65, 0x4, 0x5, 0x4, 0x6, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x5ac, 0x88, 0xfff, 0x2, 0x200, 0xb9, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3de3, 0x6b3f, 0x4, 0xffff, 0x0, 0x8001, 0xf, 0xffff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4f, 0x500, 0xfff, 0x7, 0x7, 0x0, 0xbf4]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x6, 0x8}, {0x6, 0xa}, {0x0, 0xa}, {0x0, 0x8}, {0x3, 0x8}, {0x1, 0x5}, {0x0, 0x7}, {0x7, 0x2}, {0x2, 0x2}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x1, 0x5}, {0x0, 0x8}, {0x1, 0x4}, {0x3, 0x5}, {0x4, 0x4}, {0x1, 0x2}, {0x4, 0x7}, {0x0, 0x5}, {0x0, 0x1}, {0x5, 0x4}, {0x7, 0x4}, {0x6, 0x4}, {0x0, 0x9}, {0x6, 0x5}, {0x7, 0x3}, {0x4, 0x6}, {0x1, 0x7}, {0x2, 0x9}, {0x5, 0x3}, {0x1, 0xa}, {0x2, 0x7}, {}, {0x5, 0xa}, {0x4, 0x8}, {}, {0x3, 0x2}, {0x2, 0x7}, {0x0, 0x1}, {0x6, 0x3}, {0x1, 0x7}, {0x3, 0xa}, {0x0, 0x4}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x10, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x10}]}]}]}, 0x2314}, 0x1, 0x0, 0x0, 0x40000}, 0x80) bind$l2tp6(r4, &(0x7f0000000040)={0xa, 0x0, 0x6ea6, @local, 0x5}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)={0x38, r0, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@void, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 3m6.235619903s ago: executing program 4 (id=6364): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x118, r1, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x100, 0xc, 0x0, 0x1, [{0x4}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeabf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6cb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x36d1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5f85}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc385}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2687}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc5b2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaac0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe73d}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd77c}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72ceabe7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc0ab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52368604}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd14e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x232e0848}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33ffecf1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7f88}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x98f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x185d}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9bf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x152a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4674}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6723c5e3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39b6cd44}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x655e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6357}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb523}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb407}]}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x200050c4}, 0x80) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000240), 0x4) shutdown(r2, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r3, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4c050) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40020}, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'macvlan1\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x68, r3, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x1}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x7}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0xd}, @IEEE802154_ATTR_FRAME_RETRIES={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x6c, r6, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x80) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r5) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x50, r7, 0x1, 0x4, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TXQ_PARAMS={0x1c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x401}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x9}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x7f}]}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0xa30b}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x5}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x1}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0xffffffa9}]}, 0x50}}, 0x400c080) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_RADAR_DETECT(r5, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r8, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xb, 0x46}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x101}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x81}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000084) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b80), r0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000bc0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000c00)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000c40)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f0000000d00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x3c, r9, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x50) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x1, &(0x7f0000000d40)=""/131, &(0x7f0000000e00)=0x83) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000e40)={0x0, 0xea60}, 0x10) socket$kcm(0x29, 0x0, 0x0) sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f0000001100)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000ec0)={0x1e8, r8, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0xd8, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x71d}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xe}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffff8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xd}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7ff}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xc}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf24}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x883e}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6b42}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x10001}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}]}]}, @NL80211_ATTR_REG_RULES={0x2c, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7fff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xe}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1d}, @NL80211_ATTR_REG_RULES={0xc0, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xe1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7b}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xd8e800}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xbf7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x118}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xe1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xec000000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fffffff}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x28e7}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xcc}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4a}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3f2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}]}]}, @NL80211_ATTR_DFS_REGION={0x5}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4c000}, 0x800) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f00000013c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001380)={&(0x7f0000001180)={0x200, 0x2, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT={0x1cc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010100}}}]}, @CTA_EXPECT_NAT_TUPLE={0xc8, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}]}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASK={0x10, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x20080}, 0x20000000) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001440), r5) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x3c, r13, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x57}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x75}]}]}, 0x3c}}, 0x80) 3m6.012075512s ago: executing program 4 (id=6369): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@gettfilter={0x44, 0x2e, 0x1, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r2, {0xe, 0x10}, {0x0, 0xfff1}, {0x0, 0x8}}, [{0x8, 0xb, 0xa}, {0x8, 0xb, 0xe}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0x7ff}]}, 0x44}}, 0x4041080) 3m5.425701034s ago: executing program 4 (id=6371): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xa, 0xfff3}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0) (async) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x380, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3e0) (async) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="2c107f2559cf245b4796ac74aa29c8f0a2007c3584da320beab55485972da5f2ed05794ffd7387928a77565d4200a88de68d8279758a52c7a0cf536cf75832ae6f602c664a474aa52273c7202985f5b64f85bcfcb2682f267293e1ae050afd8cff414e157b4d03e3f6429cbad8f3cb1115e2308527242151ecb864049612297e2c964de2c0538673ec999e67344480773bde27986242efce", 0x98}], 0x1, 0x0, 0x0, 0x2c}, 0x40004) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) (async) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000080), 0x12) close(r3) recvfrom$inet6(r1, &(0x7f0000000180)=""/102, 0x66, 0x2000, &(0x7f0000000340)={0xa, 0x4e24, 0xa, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1c) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) syz_emit_ethernet(0x76, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x0) 3m4.843377575s ago: executing program 4 (id=6375): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r2, 0x6, 0xd, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r1, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$XFS_IOC_GET_RESBLKS(r5, 0x80105873, &(0x7f00000001c0)) r6 = socket(0x400000000010, 0x3, 0x0) write(r6, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r8], 0x68}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r10, 0x411, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x40084) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) r11 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r11, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5414}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x24000084) 2m49.740512746s ago: executing program 32 (id=6375): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r2, 0x6, 0xd, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r1, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$XFS_IOC_GET_RESBLKS(r5, 0x80105873, &(0x7f00000001c0)) r6 = socket(0x400000000010, 0x3, 0x0) write(r6, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r8], 0x68}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r10, 0x411, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x40084) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) r11 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r11, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5414}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x24000084) 2m39.976799576s ago: executing program 5 (id=6464): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010007112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600080000000c0003000800170004"]}, 0x58}}, 0x0) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfdef) close(r4) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003a80)=""/4101, 0x1005}], 0x1}, 0x2101) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000ac0)={0x0, 0x57, &(0x7f0000000a80)={&(0x7f00000000c0)={0x1c, r1, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x404c010}, 0x4000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x78}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 2m39.56166471s ago: executing program 5 (id=6530): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x1000000, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4) sendmmsg(r0, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)="ef8a561e07173f1a4d", 0x9}], 0x1}}], 0x4000000000001cc, 0x20040891) 2m32.658293544s ago: executing program 2 (id=6607): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x4024, 0x40a38}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x8040}]}}}]}, 0x3c}}, 0x8000002) (async) socket$igmp6(0xa, 0x3, 0x2) 2m32.594445078s ago: executing program 2 (id=6609): r0 = socket(0x1e, 0x5, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000340)={'nat\x00', 0x62, "c9acf5c6135f367c56349f9aa537c583d2374775fe0565320b181b0f20dc4d4504f823d3cdf86ad73f424cf9f8a5f8bb1c9def95df1bec57ed74b47e1339210483e388d817d1160103999705af7f7aa9ec81fee228a2f9124e466fbfa5ee9678c021"}, &(0x7f0000000440)=0x86) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000000010504000000000000000002000000040018802400018014000180010000000000000008000200e00000010c00028005000100880000001c000f80080002400000000008000140000000000800034000000000"], 0x58}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f00000000c0)={r5, r5, 0x7, 0x2, &(0x7f0000000040)='9f', 0xe, 0x4, 0x8, 0x9, 0x3, 0x3, 0x2, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="0008000010003b150000008000dcdf25000000579aa237a3bcc9a3f3c6d4584efc224f72ca39c95168b90bf19ed46060af9c4677dd35525d75b6cd3f179549b711b33b81799080e02ce2050c497d17f4f7148e785ce9bf9547dc376361ea76296f213da6505b771029a883d98b3904", @ANYRES32=0x0, @ANYBLOB="14000000808900001c001280090001007866726d000000000c0002800800020001000000"], 0x3c}}, 0x40000) 2m31.915050406s ago: executing program 2 (id=6615): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x17}, @local, 0xe, 0x9}}) (async) splice(0xffffffffffffffff, &(0x7f0000000000)=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x6, 0x1, 0x0, 0x20000000) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 2m31.74048621s ago: executing program 2 (id=6618): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xfffffe5c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x401}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x4, 0xd, 0xd9, 0xd}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5) 2m31.029307088s ago: executing program 2 (id=6627): r0 = socket(0x1e, 0x4, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) recvmmsg(r1, &(0x7f0000009e00)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)=""/51, 0x33}], 0x1}, 0x8}], 0x1, 0x20, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000040)="4c00000011002914001100020004040002000400200000", 0x17) sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8008001}, 0x4800) 2m30.773905723s ago: executing program 2 (id=6629): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002700090025bd5cb881f28a200fd40000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x5d}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe1b, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd81}, 0x48) 2m24.50357377s ago: executing program 33 (id=6530): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x1000000, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4) sendmmsg(r0, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)="ef8a561e07173f1a4d", 0x9}], 0x1}}], 0x4000000000001cc, 0x20040891) 2m15.702190772s ago: executing program 34 (id=6629): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002700090025bd5cb881f28a200fd40000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x5d}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe1b, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd81}, 0x48) 1m54.300141842s ago: executing program 7 (id=6905): r0 = socket(0xa, 0x80003, 0xfffffffd) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1f8, 0x0, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xfffffffffffffd88}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2e}, 0x4, 0x1}}}, {{@arp={@rand_addr=0x64010102, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0xffff, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x20}, @local, 0xffffffff, 0xff000000, 0xe, 0x0, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, {@mac=@broadcast, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x0, 0x7, 0x7fff, 0x8, 0x8, 0x401, 'vlan1\x00', 'macvtap0\x00', {}, {0xff}, 0x0, 0x10}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x426) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) 1m53.848401945s ago: executing program 7 (id=6909): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000600)={0x0, @in={0x2, 0x4e23, @broadcast}, @phonet={0x23, 0x2, 0x5, 0xe}, @qipcrtr={0x2a, 0x3, 0x4000}, 0x3, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000280)='vlan1\x00', 0x6, 0x5, 0xfaa}) socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8}]}}]}, 0x3c}}, 0x20008000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x5, &(0x7f00000006c0)=@raw=[@call={0x85, 0x0, 0x0, 0x7b}, @call={0x85, 0x0, 0x0, 0xaf}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @ldst={0x1, 0x2, 0x6, 0x0, 0x3, 0x1, 0x8}], 0x0, 0x4, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) socket$kcm(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0x5, 0xb, 0x14, 0xd}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) sendmsg$802154_dgram(r5, &(0x7f0000000cc0)={0x0, 0x48, &(0x7f0000000040)={&(0x7f00000002c0)="05000000b92ba9e375f3d5a1fc0751577daff448fb417eb76377c3075661e57f6a1ad88443faf85a902e03e4c4e68c258b10a733e428ae2cd65cf9e52e6a23541f4bc6970df209050bf052c6624effea5f1e99ad3d96ed78ff3f524af2c90d5643d563b4f469a937cccad6efa449da086721a42a6616eb56afdf6e1e977964a59a007754d9a22bf26ddb67fb3cd24af531bb3a42a0532ff51473993bd4fb62b7fae1a02f982796fe3df1f080196ff1db13e62950561bf6330ce41dde70f59450a43a0e5678b45689b989d46e9e242cc89f34cd04c4e22e5cc1f1035c5010fd47be95ca79f9a85bf56011d8397d00"/253, 0x1}}, 0x20000855) recvfrom(r4, &(0x7f0000000100)=""/23, 0x17, 0x120, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r8) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x4008054) recvmmsg(r0, &(0x7f0000004600)=[{{&(0x7f0000000580)=@tipc, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/252, 0xfc}, {&(0x7f0000000a40)=""/71, 0x47}, {&(0x7f0000004800)=""/4098, 0x1002}, {&(0x7f0000001e40)=""/153, 0x99}], 0x5, &(0x7f0000001f80)=""/12, 0xc}, 0x3ff}, {{&(0x7f0000001fc0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000000bc0)=""/218, 0xda}, {&(0x7f0000000d00)=""/29, 0x1d}, {&(0x7f0000002040)=""/244, 0xf4}, {&(0x7f0000002140)=""/54, 0x36}, {&(0x7f0000002180)=""/219, 0xdb}, {&(0x7f0000000ac0)=""/49, 0x31}], 0x6, &(0x7f0000002500)=""/207, 0xcf}, 0x4}, {{&(0x7f0000002600)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000002680)=""/237, 0xed}, {&(0x7f0000002780)=""/163, 0xa3}, {&(0x7f0000002840)=""/188, 0xbc}, {&(0x7f0000002900)=""/90, 0x5a}, {&(0x7f0000002980)=""/208, 0xd0}, {&(0x7f0000002a80)=""/169, 0xa9}, {&(0x7f00000031c0)=""/214, 0xd6}], 0x7, &(0x7f0000002cc0)=""/136, 0x88}, 0x3}, {{&(0x7f0000002d80)=@nfc_llcp, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002e00)=""/162, 0xa2}], 0x1, &(0x7f0000002f00)=""/42, 0x2a}, 0xf6c}, {{&(0x7f0000002f40)=@phonet, 0x80, &(0x7f00000003c0)=[{&(0x7f0000002fc0)=""/62, 0x3e}, {&(0x7f0000003000)=""/100, 0x64}], 0x2, &(0x7f00000030c0)=""/86, 0x56}, 0x92}, {{&(0x7f0000003140)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000002340)=""/250, 0xfa}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000004300)=@llc, 0x80, &(0x7f00000045c0)=[{&(0x7f0000000b00)=""/81, 0x51}, {&(0x7f0000004400)=""/218, 0xda}, {&(0x7f0000000e40)=""/148, 0x94}], 0x3}, 0xe}], 0x7, 0x10100, &(0x7f00000047c0)) 1m51.974444158s ago: executing program 7 (id=6923): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007002e3a2f2f140002"], 0x44}, 0x1, 0x1000000, 0x0, 0xc4}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x380, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {0x100000000000000}, [@common=@inet=@socket2={{0x28}, 0x2}, @common=@ttl={{0x28}, {0x2, 0x4}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e23, 0x4e20], [0x4e23, 0x4e21], 0x5, 0x10, 0x1a7, 0x1}}, @common=@icmp={{0x28}, {0x0, "54e9", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x4, 0x6, 0x2, 0x4, 0x6], 0x6, 0x4}, {0x1, [0x1, 0x2, 0x1, 0x1, 0x2, 0x4], 0x3, 0x7}}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0xff}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x8, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 1m51.898835386s ago: executing program 7 (id=6924): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES16], 0x0, 0x34}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000cf413aa7bfd8041fceb778f31c09da9ab06d94e94a05d7f1f15e4d542301629885a7856bd366198ec1a56397aeda769f8b0658ba057233c2f84fb7a8dab82a89a7f6a608932c6810dc3b330f272ff620801ff4b984ca1511b75b995fd5293e294f3dd1bf"], &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x3, 0x1}, 0x8}, 0x94) r3 = accept(0xffffffffffffffff, &(0x7f0000000340)=@qipcrtr, &(0x7f0000000400)=0x80) ioctl$FICLONE(r3, 0x40049409, r1) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r4, r4, 0x19, 0x0, @val=@netfilter={0x0, 0x0, 0x6, 0x20}}, 0x20) 1m51.666043948s ago: executing program 7 (id=6929): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001c00010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000a000100aaaaaaaaaaaa000008000f000084e1dca97190c19652be62000000"], 0x30}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r3, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002a80)={0x114, 0x23, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x102, 0xf2, 0x0, 0x1, [@typed={0xf, 0x18, 0x0, 0x0, @str='}:.\x9c[\xc8\\#\'}\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x48000}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x78, &(0x7f0000000100)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x92, @dev={0xfe, 0x80, '\x00', 0x27}, 0x800}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, @in6={0xa, 0x4e21, 0x3, @remote, 0x9}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x8}}, @in={0x2, 0x4e24, @broadcast}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000200)={r6, 0x1ff}, &(0x7f0000000240)=0x8) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fe3000", 0x10, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ni={0x4e8ef1decde2b390, 0x0, 0x0, 0x1, 0x2, 0xa6f}}}}}}, 0x0) getsockopt$bt_hci(r4, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x4) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x140, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000001}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x9}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x7fffffff}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x81}, {0x8}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1ff}, {0x6, 0x11, 0xc}, {0x8, 0x13, 0x6e70bcfe}, {0x5}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4}, 0x4009) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e5000000000000007910480000000000790438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) setsockopt(r0, 0xc, 0xffffffff, &(0x7f0000000340)="9fbaedcbabf1ba05c9d6b35d7d2c49f1bc09a8db140dc57b8faaf1d432cccfce1f5eefa67538ab2004b32d67309b50802bb85e94da5c9f630b4780c70924da0eb55512bb660e42a821455775b8114b250704ac1a15e0a83ee7b8ad6b1fecc3421f1ee71d2c99362402b6ea78af151e4e4a2d3d64559769ae776a8d7fadc03cf596b3543e0beca5f3dfff093587bc5d1ebcabe4cd4fe769fa70bbc067aefdb8613354e2dab2c3e947852e6bee40cbcab0f751f7b580959c65435cc1b183235b787094f2ca09440a93ba5cdda21e265ef6de5e18ff1dd544e5c5b7163ca9c1b95793684fc77eede33a56003c3207fd", 0xee) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) 1m51.085131912s ago: executing program 7 (id=6932): r0 = socket$netlink(0x10, 0x3, 0x14) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000340)={r0, &(0x7f0000000200)='siw\x00', 0x103000, &(0x7f0000000240)={@_ha_fsid={[0x40, 0x48]}, {0x2, 0x8, 0x40, 0x400}}, 0x9, &(0x7f0000000280), &(0x7f0000000300)=0x27d036b1}) (async) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x810, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040054}, 0x1) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)={0x88, 0x1403, 0x1, 0x2, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'hsr0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x5}, 0x180) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x2b, 0x63, 0x0, 0x1, 0x1, @local, @private1, 0x8, 0x1, 0x10000, 0x9}}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1m36.013751744s ago: executing program 35 (id=6932): r0 = socket$netlink(0x10, 0x3, 0x14) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000340)={r0, &(0x7f0000000200)='siw\x00', 0x103000, &(0x7f0000000240)={@_ha_fsid={[0x40, 0x48]}, {0x2, 0x8, 0x40, 0x400}}, 0x9, &(0x7f0000000280), &(0x7f0000000300)=0x27d036b1}) (async) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x810, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040054}, 0x1) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)={0x88, 0x1403, 0x1, 0x2, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'hsr0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x5}, 0x180) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x2b, 0x63, 0x0, 0x1, 0x1, @local, @private1, 0x8, 0x1, 0x10000, 0x9}}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 5.125724289s ago: executing program 0 (id=7798): bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x3}, 0xe) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r5, r4, 0x2f, 0x0, 0x0, @void, @value=r5}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="2f0000001400000004"], 0x20) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000001c000180060007000200000008000300ac1414aa080006000e000000c36ce5a897c86cae9b11ed8a293c678b93b7e7fe62fb380afa12a20dbe5f0df0cc986e8fe4b70edcbaba74c3b5e7610e1607fbe189977bbc9e78a0e664e8c7abe15394191cb5d8543487b9f02ead5cadc073a42861c3f40d1b4281df"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf93f301}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000100)={0x1d, r6}, 0x10) sendmmsg$sock(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000003000)="0100000003000000640000000000000000000000000000000000000000000000000000000000000002000000000000000100000001000000010000000100"/72, 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000003200)="0100000003000000640000000000000000000000000000000000000000000000000000000000000000000000000000000200000001000000", 0x38}], 0x1}}], 0x2, 0x0) syz_emit_ethernet(0x414, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r8, 0x0, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x0, 0x400, 0x1, 0x4}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x800) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = socket(0x8, 0x5, 0x3) read$alg(r10, &(0x7f0000000200)=""/14, 0xe) connect$inet(r9, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="d25248fae384904c0000001000010027bd700402d6df2500000000", @ANYRES32=r13, @ANYBLOB="984e0600c16a01002c001280110001006272696467655f736c617665000000001400058005002000000000000500210001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) 3.430682981s ago: executing program 3 (id=7805): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x20, 0x10, 0xb13, 0x0, {{0x5, 0x4, 0x3, 0x4, 0x14, 0x68, 0x0, 0x0, 0x29, 0x0, @broadcast, @broadcast}}}}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r6, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r11, r9, 0x25, 0x2, @val=@netfilter={0x2, 0x3, 0x102018}}, 0x20) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r9, {0x10, 0x7}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x80}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000600)={'wg1\x00'}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0xd8, r3, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x8}, @ETHTOOL_A_LINKINFO_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x7c}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xd}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x81}, @ETHTOOL_A_LINKINFO_HEADER={0x4}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmsg$FOU_CMD_ADD(r0, 0x0, 0x4000000) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x270, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x244, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x80, 0x8, 0xe, 0x8, 0x2}}, @TCA_RED_STAB={0x104}, @TCA_RED_EARLY_DROP_BLOCK={0x8}, @TCA_RED_PARMS={0x14, 0x1, {0x2785, 0xfffffff7, 0xffff, 0xe, 0x3, 0xe, 0x2}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x41}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x270}}, 0x0) 2.229413696s ago: executing program 0 (id=7807): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0xf5, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xb4}}, 0x0) 2.180308269s ago: executing program 3 (id=7809): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000002040)=0xe5, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000002040)=0xe5, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x14, 0x5a, 0x1}, 0x14}}, 0x0) 2.014699953s ago: executing program 0 (id=7811): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x24040850) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x1, 0x9, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x16}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000007d00000300000a800000001b0a010100000000000000000a00000a0900010073797a31000021000c00024000000000000000022c0004"], 0xc8}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) 1.924758431s ago: executing program 3 (id=7812): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000070000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.841339517s ago: executing program 1 (id=7815): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv4={0x800, @igmp={{0x7, 0x4, 0x1, 0x8, 0x24, 0x67, 0x4, 0x3, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, {[@cipso={0x86, 0x8, 0x3, [{0x0, 0x2}]}]}}, {0x17, 0x5, 0x0, @broadcast}}}}}, 0x0) (async) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv4={0x800, @igmp={{0x7, 0x4, 0x1, 0x8, 0x24, 0x67, 0x4, 0x3, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, {[@cipso={0x86, 0x8, 0x3, [{0x0, 0x2}]}]}}, {0x17, 0x5, 0x0, @broadcast}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10018}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x3}]}, 0x28}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) r2 = socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)={0x6c, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x4a, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb08002c00001c0000000001010000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e8f67a6eae8c74bb6d88367cdb0c8571c"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x6c}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="59cf0000000010000000080000001400018006000100020000000800050003"], 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) (async) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="59cf0000000010000000080000001400018006000100020000000800050003"], 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) sendmmsg$inet6(r2, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x404c851) (async) sendmmsg$inet6(r2, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x404c851) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0xffff) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000240), 0x3) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000180)={r0, &(0x7f0000000000)='-\x00', 0x100, &(0x7f0000000080)={@align=0x5, {0xfffd, 0x8000, 0x0, 0x41}}, 0x4, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0xfffffffe}) setsockopt$inet_sctp_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000001c0)={0xa7d, 0x4, 0x3, 0x300}, 0x8) openat$cgroup_ro(r2, &(0x7f0000000280)='pids.events\x00', 0x0, 0x0) 1.831186825s ago: executing program 0 (id=7816): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x10}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c810}, 0x80) pipe(0x0) 1.772038739s ago: executing program 3 (id=7817): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x31}, 0x90) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x304}, "64466153dba9e6ef", "18d5ea9a5de15ed909daa5a26bf5e6b1c844c44cf6697ca9a8ce56c4d81cc1fe", "d3b1bf3e", "967318ce6c68bbc8"}, 0x38) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x2400c0f0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x23}, [@ldst={0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) 1.502136051s ago: executing program 3 (id=7818): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) close(r0) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000340)={{0x2, 0x0, @rand_addr=0x64010101}, {0x6, @broadcast}, 0x4a, {0x2, 0x0, @private=0xa010101}, 'syz_tun\x00'}) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004500002400000000001188aca105000000000000000001000017c1001090ce9a000000d4"], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c00098008000140000000010800084000000001140000001100210000"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000000000000000050000010100000000000000000a0000060900020073797a31000000e8451719555a59041a000900010073797a31000000e01400038010000080bcf3ecc963684fe99e23604218c0ea51bde3ada65029ff1ac18a3220be52a56418301b1e1089a1eea4f1f6ce8c3cb1dd6b6d082dabfa4f492ee40f80d7fb905cad09725561aeebc4834d00fc18e040ee12c9ae921f5d3cf1e726be8c2420397442d73eb542d0ca4bf21b7c3debebd5c6fec74435c166b344bc8976a0ac1b2e0f7c7be16f20e5c85526"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x40) 1.497799482s ago: executing program 1 (id=7820): r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) 1.328814262s ago: executing program 0 (id=7822): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x38}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000200)="11223344", 0x4, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=@delchain={0x1b8, 0x65, 0x400, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x184, 0x2, [@TCA_BPF_ACT={0x180, 0x1, [@m_skbmod={0x17c, 0x18, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x1, 0x1, 0x0, 0xab6d}, 0xa}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="addd8ec7b991"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="c42d89d0476d"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6e2, 0x6, 0x3, 0x7fa80, 0x7}, 0xc}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}]}, {0xd9, 0x6, "0c5720b707e41992f7d3e03eb0a83101ab1330a7c10ee2be34aa729f8f7f65d3fd4b0a3be1976c3538da2fa427f5a41285ad8376e443f0471df1a6abb6bf6be48dac58dd2b082bacfab3bcd53757683c1c0d212191fa3f0ec2d327fed0b2eab4bc9a2c74b4134ca0c5a9c1d5271da9a31296bde60257f2440d5e2a30e4e80d2148172961982fa14afb0c1e46c90998b87dcb9fe848ca94cccb28a2548a07b4f6c66706c6972ec9af1e162134eaa471dae8349e2457250eb954363e269d1ff96cfe0d1ff0455bc96168072b0c7f2371622ccdc3d34c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003ac0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.234211193s ago: executing program 1 (id=7823): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x401) listen(r1, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) shutdown(r1, 0x0) r2 = socket$inet(0x2, 0x3, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x14, &(0x7f00000001c0)="1f00d10000000000", 0x8) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}}) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) 1.164543636s ago: executing program 8 (id=7824): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0xe72, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3fad77b7b3f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x18, 0x32, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 1.12510953s ago: executing program 6 (id=7825): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x4000}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0xd) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf2501"], 0x18}}, 0x0) recvmmsg(r4, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001640)=""/4082, 0xff2}], 0x1}, 0x2}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x4000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r2}, 0x38) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000000540)="ebe3a0e9796cfd164781f4a75803e2beae083bf71c1926aa00000000000000000000000000000000b6fe459fbafabdee72432b1f756f9e896b105cf1d67bcee88baad5d8421ed7c38ff0dcb33e9e9fb911ed2037d5335bfee3f86f4177c5b90ae9410942f712bab2e9b02dc3bccd420b37205c89171912b3daa481339808", 0x7e}, {&(0x7f00000018c0)="a28e9a0da959ea4cd4052081c0348153345782dcac84111789ac4e39e0687733ceeeb3fd015438dac306c1ce7b2b050010b50afb6794947b06d4aeaf5381dadf01765b6b24441c433a1b6e50311140d8fabb46bfeed45dc8da78bf3d086db702f5b076c987dd0605169fcb7aa080821a4967", 0x72}], 0x2, 0x0, 0x0, 0x20048044}], 0x1, 0x400c800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000007c0)=""/89, 0x59}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f00000002c0)=""/231, 0xe7}], 0x3}, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x11}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x5c, 0x24, 0x3fe3aa0262d8c783, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x2c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x5fb, 0x4, 0x5, 0x5, 0x10, 0xc, 0x5}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x34004, 0x0, 0xffffffff, 0x0, 0x1}}]}}]}, 0x5c}}, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x13, 0x0, 0xfffffffd}}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x380000}, &(0x7f0000000100)=0x8) 1.065175807s ago: executing program 1 (id=7826): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="ff02186dfd000000000000000000000000040000", @ANYRES32=r1, @ANYBLOB="08000200ac1414aa"], 0x20}, 0x1, 0x0, 0x0, 0x871ac4b32833d133}, 0x4008000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000080)={'vlan0\x00', 0x2000}) 1.015996818s ago: executing program 8 (id=7827): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000090000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 827.557173ms ago: executing program 3 (id=7828): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000240)={&(0x7f0000000280)=""/14, 0x214000, 0x800, 0x8}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000100)='espintcp\x00', 0x9) listen(r2, 0x5) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB="980200001000050000000000000000007f0000010000000000001200000000007f0000010000000000000000000000001f90ffff1f90ffff02002020000000003cfdfe528e76ebc6", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="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"/592], 0x298}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="b80000001300050000000000000000007f0000010000000000000000000000007f00000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000008000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000100"/103], 0xb8}}, 0x40) r4 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r4, &(0x7f0000000800)={0x2, 0x1f90, @loopback}, 0x10) accept(r2, 0x0, 0x0) sendto(r4, &(0x7f0000000900)='testpayload', 0xb, 0x0, 0x0, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r5, 0x8030942b, &(0x7f00000002c0)={0x0, {0x10, 0x9, 0xffff, 0x3, 0x7}}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYRES8=r5, @ANYBLOB="e010e12acc5de7074c039cf101f262a83fd339a9ecbbb37049b19bbaad648c8878cd3fb54ec9000c6ef20ddcd4467ab42ae3c67aa5cdfefe8ed6606136e2b83d8ca2698cfe93e5781b4e825939f7a506d6e29d943c8945f85452b2f61d4b0851b5fef3d718111225e6da2b6faead4999773870f565a30a282c5533ad20e7b0ab370a748336a14ab5239992e9889f5ec5ade1c18ee7c94cd89a34514ef3025d", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x0) syz_emit_ethernet(0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd608a27f2000f2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000e"], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00010000000000000000008180000000000000000000001400010000000000000000000000ffffe000dd22"], 0x30}}, 0x0) sendmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x12, r0, 0x180000000) 750.729974ms ago: executing program 8 (id=7829): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061114c000000000085000000090000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x0, 0x0, 0x7}]}}, 0x0, 0x26}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000180)={r7, @in={{0x2, 0x4e23, @empty}}, 0xfffffffc, 0x5, 0x4, 0xfffffff8, 0xb, 0x9, 0xf}, &(0x7f0000000000)=0x9c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000000)={r7, 0xd4b3}, &(0x7f0000000040)=0x8) 747.599463ms ago: executing program 0 (id=7830): setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000580)="b19ccccf84f531d9ec4cda81a3ef2ca8", 0x10) sendmmsg$alg(r2, &(0x7f0000001bc0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}], 0x1, 0x24041091) recvmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/262, 0x106}], 0x1}, 0x3886d42165142a48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x48) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmmsg(r4, &(0x7f0000003040)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2001, 0x0) poll(&(0x7f00000003c0)=[{r3, 0x8080}], 0x1, 0x80000001) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000080a010000000000000000000a0000000900010073797a3100"], 0x68}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) 701.948905ms ago: executing program 6 (id=7831): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x4e21, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[], 0x30}}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @remote, 0x9}, 0x1c) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xfffffffd, @mcast1={0xff, 0x7}, 0xc}}, {{0xa, 0x4e20, 0x8a, @remote, 0x1000}}}, 0x108) close(r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x40, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x40}}, 0x0) 685.52183ms ago: executing program 1 (id=7832): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="620ac4ff00000000711036000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) r7 = socket(0xa, 0x5, 0x0) getsockopt$inet6_int(r7, 0x29, 0x38, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001000030427bd70000000010000000000", @ANYRES32=0x0, @ANYBLOB="46040900000000002400128009000100766c616e000000001400028006000100010000000600050088a8000008000500", @ANYRES32=r6, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={r0, 0x2, 0x2, 0x3}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000580)={'sit0\x00', &(0x7f00000004c0)={@broadcast, 0x1, 0x0, 0x80, 0x0, [{@broadcast}, {@remote}, {@empty}, {@remote}, {@multicast1}, {@private}, {@multicast1}, {@multicast1}]}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010f9edf8d990e76c31c78cbdfff3d57d0a38d3d9f3f43e3420d196203a1d3a95908a30c642c9d8626a1dc75d6f96c8edf4c42f28d9fe34266bb612a56ce9321dd5b4007f6af7754456a4d988d2fd25349174f1"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4e00}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd26, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x84) 482.543812ms ago: executing program 8 (id=7833): r0 = socket$netlink(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080005000000000008000300640000000c000700e803ffe400000000", 0x68, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000480)={0xffff1a47, 0x40000000, 0x10000, 0x9, 0x9}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061114c000000000085000000090000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x48) 397.843699ms ago: executing program 6 (id=7834): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x20, 0x10, 0xb13, 0x0, {{0x5, 0x4, 0x3, 0x4, 0x14, 0x68, 0x0, 0x0, 0x29, 0x0, @broadcast, @broadcast}}}}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r6, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r11, r9, 0x25, 0x2, @val=@netfilter={0x2, 0x3, 0x102018}}, 0x20) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r9, {0x10, 0x7}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x80}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000600)={'wg1\x00'}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0xd8, r3, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x8}, @ETHTOOL_A_LINKINFO_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x7c}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xd}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x81}, @ETHTOOL_A_LINKINFO_HEADER={0x4}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmsg$FOU_CMD_ADD(r0, 0x0, 0x4000000) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01e927bd7000"], 0x1c}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x270, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x244, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x80, 0x8, 0xe, 0x8, 0x2}}, @TCA_RED_STAB={0x104}, @TCA_RED_EARLY_DROP_BLOCK={0x8}, @TCA_RED_PARMS={0x14, 0x1, {0x2785, 0xfffffff7, 0xffff, 0xe, 0x3, 0xe, 0x2}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x41}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x270}}, 0x0) 305.277621ms ago: executing program 1 (id=7835): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 195.093198ms ago: executing program 8 (id=7836): r0 = socket(0x2, 0x3, 0x1) getsockopt$MRT(r0, 0x0, 0xd0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), r1) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000007c0)={0x30, r2, 0xc0f, 0x70bd2c, 0x7, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x7}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) 165.693622ms ago: executing program 6 (id=7837): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'veth1_to_batadv\x00', @broadcast}) 45.596193ms ago: executing program 6 (id=7838): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000011c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0xc554}]}}}]}, 0x3c}, 0x1, 0xba01, 0x0, 0x44844}, 0x0) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x141000, &(0x7f0000000080)={@_ha_fsid={[0x3, 0x7]}, {0x5, 0x2bb, 0x3, 0x5}}, 0xfffffffb, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x2}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711091ff0000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 18.196343ms ago: executing program 6 (id=7839): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1}, &(0x7f00000003c0), &(0x7f0000000240)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x447, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000200e014000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1}, &(0x7f00000003c0), &(0x7f0000000240)='%ps \x00'}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x447, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000200e014000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) 0s ago: executing program 8 (id=7840): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff}) openat$cgroup_ro(r2, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r1, 0x1, 0x2000000, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x91}, {0x6, 0x16, 0x2}, {0x5}}]}, 0x54}}, 0x0) kernel console output (not intermixed with test programs): 935.220157][T31167] wg0 speed is unknown, defaulting to 1000 [ 935.584262][T31308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6398'. [ 935.954082][T31315] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 936.373419][ T5284] 8021q: adding VLAN 0 to HW filter on device eth2 [ 936.596855][T14073] hsr_slave_0: left promiscuous mode [ 936.597816][T14073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 936.597841][T14073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 936.625780][T14073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 936.625807][T14073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 936.854285][T31353] netlink: 'syz.3.6407': attribute type 3 has an invalid length. [ 936.975694][ T3311] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 937.020928][T29101] Bluetooth: hci1: command tx timeout [ 937.043928][T31353] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 937.495522][T14073] team0 (unregistering): Port device team_slave_1 removed [ 937.511691][T31369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6409'. [ 937.557010][T14073] team0 (unregistering): Port device team_slave_0 removed [ 937.836975][T14073] team0 (unregistering): Port device dummy0 removed [ 937.945201][ T5284] 8021q: adding VLAN 0 to HW filter on device eth3 [ 938.097587][T31381] netlink: 1088 bytes leftover after parsing attributes in process `syz.2.6411'. [ 938.126866][T31381] netlink: 1088 bytes leftover after parsing attributes in process `syz.2.6411'. [ 938.385455][T31372] raw_sendmsg: syz.3.6410 forgot to set AF_INET. Fix it! [ 938.606902][T31167] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.607663][T31167] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.607857][T31167] bridge_slave_0: entered allmulticast mode [ 938.642510][T31167] bridge_slave_0: entered promiscuous mode [ 938.651631][T31167] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.651797][T31167] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.651973][T31167] bridge_slave_1: entered allmulticast mode [ 938.655553][T31167] bridge_slave_1: entered promiscuous mode [ 938.984829][T14073] IPVS: stop unused estimator thread 0... [ 939.007708][T31167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.040240][T31167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.098750][T29101] Bluetooth: hci1: command tx timeout [ 939.252508][T31167] team0: Port device team_slave_0 added [ 939.255721][T31167] team0: Port device team_slave_1 added [ 939.336537][T31167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 939.336557][T31167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.336587][T31167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 939.398651][T31167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 939.398672][T31167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.398702][T31167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 939.532521][T31167] hsr_slave_0: entered promiscuous mode [ 939.533674][T31167] hsr_slave_1: entered promiscuous mode [ 939.534481][T31167] debugfs: 'hsr0' already exists in 'hsr' [ 939.534503][T31167] Cannot create hsr debugfs directory [ 939.535155][T31416] tipc: Started in network mode [ 939.535187][T31416] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 939.535429][T31416] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 939.535972][T31416] tipc: Enabled bearer , priority 10 [ 939.789088][T31430] netlink: 216 bytes leftover after parsing attributes in process `syz.2.6421'. [ 939.789152][T31430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6421'. [ 939.835174][T31430] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20004 [ 940.077072][ T5284] 8021q: adding VLAN 0 to HW filter on device eth4 [ 940.358671][T31448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6425'. [ 940.437614][T31448] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6425'. [ 940.439079][ T49] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 940.439128][ T49] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 940.439167][ T49] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 940.439223][ T49] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 940.446366][T31448] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 940.446428][T31448] IPv6: NLM_F_CREATE should be set when creating new route [ 940.648627][ T988] tipc: Node number set to 1 [ 941.178929][T29101] Bluetooth: hci1: command tx timeout [ 941.336661][T31487] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 941.354688][T31487] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 941.705127][T31501] netlink: Failed to add  helper -22 [ 941.705192][T31501] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 942.768781][T31547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6442'. [ 943.070903][T31167] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 943.121625][T31167] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 943.126527][T31167] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 943.167395][T31167] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 943.176567][T31167] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 943.206755][T31167] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 943.208094][T31167] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 943.246467][T31167] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 943.600976][T31167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 943.651845][T31167] 8021q: adding VLAN 0 to HW filter on device team0 [ 943.706356][T14073] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.706472][T14073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 943.785396][T14070] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.785518][T14070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 944.836179][T31627] ip6t_hbh: too many supported opts specified [ 944.846884][T31629] Unknown options in mask 4 [ 945.126796][T31167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 945.267929][T31167] veth0_vlan: entered promiscuous mode [ 945.290461][T31167] veth1_vlan: entered promiscuous mode [ 945.350342][T31167] veth0_macvtap: entered promiscuous mode [ 945.386831][T31167] veth1_macvtap: entered promiscuous mode [ 945.528198][T31167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 945.672760][T31167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 945.858982][T31664] Bluetooth: MGMT ver 1.23 [ 945.859027][T31664] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 945.909855][T14076] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.910849][T14076] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.918206][T14076] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.918250][T14076] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.065857][T31670] netlink: 'syz.2.6462': attribute type 3 has an invalid length. [ 946.246294][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.246325][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.507769][T31680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6463'. [ 946.507800][T31680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6463'. [ 946.585921][T14070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.585948][T14070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.904624][ T5641] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 946.925432][ T5641] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 946.945859][ T5641] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 946.958802][ T5641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 946.962465][ T5641] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 949.104812][T29101] Bluetooth: hci2: command tx timeout [ 949.264664][T31690] wg0 speed is unknown, defaulting to 1000 [ 949.934376][T31690] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.934581][T31690] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.934735][T31690] bridge_slave_0: entered allmulticast mode [ 949.936695][T31690] bridge_slave_0: entered promiscuous mode [ 949.966975][T31690] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.967085][T31690] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.967285][T31690] bridge_slave_1: entered allmulticast mode [ 949.971705][T31690] bridge_slave_1: entered promiscuous mode [ 950.027228][T31690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 950.044670][T31690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 950.121692][T31690] team0: Port device team_slave_0 added [ 950.125110][T31690] team0: Port device team_slave_1 added [ 950.171538][T31690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 950.171559][T31690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 950.171587][T31690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 950.173173][T31690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 950.173189][T31690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 950.173219][T31690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 950.309854][T31690] hsr_slave_0: entered promiscuous mode [ 950.313475][T31690] hsr_slave_1: entered promiscuous mode [ 950.314294][T31690] debugfs: 'hsr0' already exists in 'hsr' [ 950.314317][T31690] Cannot create hsr debugfs directory [ 950.471818][T31780] veth1_to_bond: entered allmulticast mode [ 951.178444][ T5630] Bluetooth: hci4: command 0x0406 tx timeout [ 951.178553][ T5630] Bluetooth: hci2: command tx timeout [ 951.202168][T31779] veth1_to_bond: left allmulticast mode [ 951.419790][T31735] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 951.495236][T31690] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 951.581695][T31690] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 951.583097][T31690] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 951.612098][T31690] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 951.647556][T31690] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 951.672541][T31690] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 951.673499][T31690] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 951.698027][T31690] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 951.991122][T31808] bond0: invalid NS target ff00:: specified for addition [ 951.991157][T31808] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 952.080668][T31690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 952.115325][T31690] 8021q: adding VLAN 0 to HW filter on device team0 [ 952.144965][T24067] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.145096][T24067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 952.194497][T14057] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.194635][T14057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 952.259514][T31811] netlink: 'syz.1.6488': attribute type 21 has an invalid length. [ 952.259571][T31811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6488'. [ 952.291759][T31811] netlink: 'syz.1.6488': attribute type 21 has an invalid length. [ 952.291786][T31811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6488'. [ 952.396495][T31816] batadv_slave_0: entered promiscuous mode [ 952.425578][T14070] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 952.428238][ T49] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 952.444548][T14076] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 952.444680][T14076] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 952.477694][T31816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6489'. [ 952.549769][T31816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 952.753707][T31816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 952.916772][T31836] netlink: 'syz.3.6491': attribute type 4 has an invalid length. [ 953.155020][T31849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6495'. [ 953.259060][T29101] Bluetooth: hci2: command tx timeout [ 953.405001][T31855] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6497'. [ 953.481335][T31860] netlink: 'syz.0.6499': attribute type 1 has an invalid length. [ 953.677852][T31690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 953.967417][T31889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6504'. [ 953.980408][T31891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6504'. [ 954.033471][T31891] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6504'. [ 954.496357][T31690] veth0_vlan: entered promiscuous mode [ 954.504403][T31905] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6510'. [ 954.531586][T31690] veth1_vlan: entered promiscuous mode [ 954.687211][T31690] veth0_macvtap: entered promiscuous mode [ 954.704354][T31690] veth1_macvtap: entered promiscuous mode [ 954.785827][T31690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 954.840675][T31690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 955.031340][T31913] bond1 (unregistering): Released all slaves [ 955.070004][T14076] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.070113][T14076] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.070154][T14076] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.070195][T14076] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.152966][T31926] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6515'. [ 955.190978][T31919] debugfs: '1ùà^!' already exists in 'ieee80211' [ 955.225164][T31930] team0: Device gtp0 is up. Set it down before adding it as a team port [ 955.341269][T29101] Bluetooth: hci2: command tx timeout [ 955.714766][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 955.714794][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 955.805030][T14076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 955.805057][T14076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.237547][T31966] openvswitch: netlink: Duplicate or invalid key (type 0). [ 956.367436][T31968] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 956.890872][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031371000: rx timeout, send abort [ 956.981911][T31994] ip6t_srh: unknown srh invflags 4000 [ 957.015110][T31994] sctp: [Deprecated]: syz.1.6534 (pid 31994) Use of int in max_burst socket option. [ 957.015110][T31994] Use struct sctp_assoc_value instead [ 957.393026][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031371000: abort rx timeout. Force session deactivation [ 957.397217][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c1af400: rx timeout, send abort [ 957.457341][T31784] Bluetooth: hci2: command tx timeout [ 957.517026][T32020] netlink: 'syz.0.6540': attribute type 1 has an invalid length. [ 957.604574][T32024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6542'. [ 957.604602][T32024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6542'. [ 957.897279][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c1af400: abort rx timeout. Force session deactivation [ 958.184341][T32041] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 958.395154][T32045] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6550'. [ 959.716609][T32101] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6566'. [ 959.716639][T32101] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6566'. [ 959.750818][T32110] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6566'. [ 959.750860][T32110] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6566'. [ 959.818716][T32074] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 960.013323][T32119] vlan2: entered allmulticast mode [ 960.013351][T32119] bond0: entered allmulticast mode [ 960.013370][T32119] bond_slave_0: entered allmulticast mode [ 960.013389][T32119] bond_slave_1: entered allmulticast mode [ 960.056870][T32120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6569'. [ 960.446129][T32134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6574'. [ 960.446187][T32134] netlink: 'syz.2.6574': attribute type 1 has an invalid length. [ 960.446209][T32134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6574'. [ 960.446565][T32134] netlink: 'syz.2.6574': attribute type 1 has an invalid length. [ 960.632950][T32137] block nbd3: Unsupported socket: should be TCP or UNIX. [ 960.770950][T32145] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 962.759460][T32233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 962.893666][T32240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 963.081240][T32249] __nla_validate_parse: 4 callbacks suppressed [ 963.081264][T32249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6604'. [ 963.188114][T32249] bond1: option xmit_hash_policy: invalid value (64) [ 963.200742][T32249] bond1 (unregistering): Released all slaves [ 963.292365][T32253] can: request_module (can-proto-0) failed. [ 963.566513][T32265] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6609'. [ 963.698791][ T5813] hid-generic 0005:0008:0009.0001: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 963.744718][T32270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6610'. [ 963.884385][T32275] netlink: 'syz.3.6611': attribute type 11 has an invalid length. [ 963.884410][T32275] netlink: 'syz.3.6611': attribute type 11 has an invalid length. [ 963.884425][T32275] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6611'. [ 963.976103][T32274] syzkaller0: entered promiscuous mode [ 963.976128][T32274] syzkaller0: entered allmulticast mode [ 963.976965][T32271] fido_id[32271]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci2/hci2:200/report_descriptor': No such file or directory [ 964.186092][T32277] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6612'. [ 964.257716][T32283] team0: Device ipvlan0 failed to register rx_handler [ 964.308109][T32287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6616'. [ 964.432301][T32291] veth1_to_bond: entered allmulticast mode [ 964.487355][T32291] veth1_to_bond: entered promiscuous mode [ 964.532130][T32294] bond1: option mode: invalid value (10) [ 964.537245][T32294] bond1 (unregistering): Released all slaves [ 964.614431][T32290] veth1_to_bond: left promiscuous mode [ 964.614638][T32290] veth1_to_bond: left allmulticast mode [ 964.672204][T32295] netlink: 'syz.2.6618': attribute type 1 has an invalid length. [ 964.672232][T32295] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6618'. [ 964.673757][T32295] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6618'. [ 965.069143][T32314] netlink: 'syz.1.6626': attribute type 1 has an invalid length. [ 965.117418][T32314] 8021q: adding VLAN 0 to HW filter on device bond1 [ 965.132971][T32316] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6625'. [ 965.132997][T32316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6625'. [ 965.181742][T32314] bond1: (slave dummy0): making interface the new active one [ 965.183202][T32314] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 965.187591][T32319] Bluetooth: hci0: unsupported parameter 5161 [ 965.187614][T32319] Bluetooth: hci0: unsupported parameter 8192 [ 965.187646][T32319] Bluetooth: hci0: unsupported parameter 5161 [ 965.187659][T32319] Bluetooth: hci0: unsupported parameter 8192 [ 965.479979][T32328] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 965.480654][T32328] team0: Device ipvlan2 is already an upper device of the team interface [ 965.952295][T32343] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 966.463533][T32358] netlink: 'syz.0.6642': attribute type 21 has an invalid length. [ 966.497037][T32358] bond2: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 966.510425][T32358] bond2 (unregistering): Released all slaves [ 967.507014][T32366] 8021q: VLANs not supported on ipvlan1 [ 968.908334][T32343] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 969.337306][T32391] __nla_validate_parse: 15 callbacks suppressed [ 969.337331][T32391] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6652'. [ 969.372290][T32391] IPv6: Can't replace route, no match found [ 969.372604][T32391] IPv6: Can't replace route, no match found [ 969.464207][T32406] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6655'. [ 969.780556][T32415] netlink: 'syz.3.6659': attribute type 3 has an invalid length. [ 969.932612][T32423] bridge1: entered promiscuous mode [ 969.932686][T32423] bridge1: entered allmulticast mode [ 969.935441][T32423] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6661'. [ 970.474764][T32447] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6667'. [ 970.534232][T32449] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6668'. [ 970.534252][T32449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6668'. [ 970.633878][T32452] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 971.126165][T32469] ip_tables: iptables: counters copy to user failed while replacing table [ 971.231891][T32475] netlink: 300 bytes leftover after parsing attributes in process `syz.0.6678'. [ 971.655911][T32475] wg0 speed is unknown, defaulting to 1000 [ 971.690641][T32480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6679'. [ 971.762441][T32482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6679'. [ 971.947719][T31784] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 971.963414][T31784] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 971.965189][T31784] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 971.967269][T31784] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 971.977212][T31784] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 973.104366][T32483] wg0 speed is unknown, defaulting to 1000 [ 973.501042][T32528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6690'. [ 973.820852][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.006623][T32538] netlink: 'syz.3.6694': attribute type 7 has an invalid length. [ 974.050234][T32484] wg0 speed is unknown, defaulting to 1000 [ 974.059604][T29101] Bluetooth: hci6: command tx timeout [ 974.467048][T32544] __nla_validate_parse: 4 callbacks suppressed [ 974.467071][T32544] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6697'. [ 974.467093][T32544] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6697'. [ 974.514247][T32547] pim6reg: entered allmulticast mode [ 974.862601][T29573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.864376][ T9597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.927700][T32563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6700'. [ 974.941989][T32563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6700'. [ 975.395973][T32583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6705'. [ 975.423446][T32484] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.423659][T32484] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.423820][T32484] bridge_slave_0: entered allmulticast mode [ 975.426140][T32484] bridge_slave_0: entered promiscuous mode [ 975.440065][T32484] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.440570][T32484] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.441083][T32484] bridge_slave_1: entered allmulticast mode [ 975.446440][T32484] bridge_slave_1: entered promiscuous mode [ 975.602451][T32484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 975.621065][T32484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 975.674757][T32484] team0: Port device team_slave_0 added [ 975.694913][T32484] team0: Port device team_slave_1 added [ 975.769789][T32484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 975.769810][T32484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 975.769839][T32484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 975.776170][T32484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 975.776189][T32484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 975.776220][T32484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 975.905151][T29573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.116755][T32484] hsr_slave_0: entered promiscuous mode [ 976.128084][T32484] hsr_slave_1: entered promiscuous mode [ 976.129233][T32484] debugfs: 'hsr0' already exists in 'hsr' [ 976.129256][T32484] Cannot create hsr debugfs directory [ 976.141130][T31784] Bluetooth: hci6: command tx timeout [ 976.156823][T32600] wlan0 speed is unknown, defaulting to 1000 [ 976.186095][T32600] wlan0 speed is unknown, defaulting to 1000 [ 976.187169][T32600] wlan0 speed is unknown, defaulting to 1000 [ 976.207747][T32600] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 976.207786][T32600] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 976.207830][T32600] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 976.275708][T32600] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 976.414420][T32600] wlan0 speed is unknown, defaulting to 1000 [ 976.439611][T32600] wlan0 speed is unknown, defaulting to 1000 [ 976.451690][T32600] wlan0 speed is unknown, defaulting to 1000 [ 976.513918][T32610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6713'. [ 976.529963][T32600] wlan0 speed is unknown, defaulting to 1000 [ 976.553168][T32610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6713'. [ 976.575494][T32600] wlan0 speed is unknown, defaulting to 1000 [ 976.577516][T32600] wlan0 speed is unknown, defaulting to 1000 [ 976.631995][ T9597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.680094][T32600] wlan0 speed is unknown, defaulting to 1000 [ 976.699149][T32600] wlan0 speed is unknown, defaulting to 1000 [ 976.738496][T32600] wlan0 speed is unknown, defaulting to 1000 [ 976.764091][T32600] wlan0 speed is unknown, defaulting to 1000 [ 976.809180][T32615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6715'. [ 976.810231][T32615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6715'. [ 976.940203][T29573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.086426][T32622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6717'. [ 977.136504][T32622] xfrm1: entered promiscuous mode [ 977.136530][T32622] xfrm1: entered allmulticast mode [ 977.154063][T32484] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 977.173652][T32484] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 977.177144][T32484] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 977.223341][T32484] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 977.237609][T32484] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 977.265641][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.303690][T32484] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 977.321352][T32484] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 977.337871][T32484] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 977.362976][T32632] FAULT_INJECTION: forcing a failure. [ 977.362976][T32632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 977.363014][T32632] CPU: 0 UID: 0 PID: 32632 Comm: syz.3.6719 Not tainted syzkaller #0 PREEMPT(full) [ 977.363041][T32632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 977.363057][T32632] Call Trace: [ 977.363068][T32632] [ 977.363078][T32632] dump_stack_lvl+0xe8/0x150 [ 977.363125][T32632] should_fail_ex+0x410/0x560 [ 977.363162][T32632] _copy_from_user+0x2d/0xb0 [ 977.363193][T32632] do_ip6t_set_ctl+0x74c/0xe30 [ 977.363325][T32632] ? rcu_is_watching+0x16/0xb0 [ 977.363357][T32632] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 977.363397][T32632] ? __mutex_unlock_slowpath+0x731/0x900 [ 977.363435][T32632] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 977.363474][T32632] nf_setsockopt+0x26f/0x290 [ 977.363504][T32632] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 977.363532][T32632] do_sock_setsockopt+0x17c/0x1b0 [ 977.363564][T32632] __x64_sys_setsockopt+0x13d/0x1b0 [ 977.363596][T32632] do_syscall_64+0x166/0x520 [ 977.363621][T32632] ? trace_irq_disable+0x3b/0x140 [ 977.363645][T32632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.363671][T32632] ? clear_bhb_loop+0x70/0xc0 [ 977.363700][T32632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.363724][T32632] RIP: 0033:0x7ff874b9e159 [ 977.363745][T32632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 977.363765][T32632] RSP: 002b:00007ff875aee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 977.363791][T32632] RAX: ffffffffffffffda RBX: 00007ff874e25fa0 RCX: 00007ff874b9e159 [ 977.363809][T32632] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 977.363822][T32632] RBP: 00007ff875aee090 R08: 0000000000000688 R09: 0000000000000000 [ 977.363838][T32632] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 977.363853][T32632] R13: 00007ff874e26038 R14: 00007ff874e25fa0 R15: 00007fff2cdd64d8 [ 977.363887][T32632] [ 977.794934][T32484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 977.836982][T32484] 8021q: adding VLAN 0 to HW filter on device team0 [ 977.876182][T14071] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.876301][T14071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 977.904084][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.915784][T14071] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.916137][T14071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 977.983525][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.036005][T32646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.188052][T32647] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.229710][T31784] Bluetooth: hci6: command tx timeout [ 978.795849][T32687] FAULT_INJECTION: forcing a failure. [ 978.795849][T32687] name failslab, interval 1, probability 0, space 0, times 0 [ 978.795887][T32687] CPU: 0 UID: 0 PID: 32687 Comm: syz.0.6730 Not tainted syzkaller #0 PREEMPT(full) [ 978.795913][T32687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 978.795926][T32687] Call Trace: [ 978.795936][T32687] [ 978.795945][T32687] dump_stack_lvl+0xe8/0x150 [ 978.795985][T32687] should_fail_ex+0x410/0x560 [ 978.796019][T32687] should_failslab+0xa8/0x100 [ 978.796053][T32687] __kvmalloc_node_noprof+0x176/0x820 [ 978.796082][T32687] ? xt_alloc_table_info+0x40/0xb0 [ 978.796182][T32687] ? xt_alloc_table_info+0x40/0xb0 [ 978.796218][T32687] xt_alloc_table_info+0x40/0xb0 [ 978.796247][T32687] do_ip6t_set_ctl+0x96b/0xe30 [ 978.796282][T32687] ? rcu_is_watching+0x16/0xb0 [ 978.796312][T32687] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 978.796353][T32687] ? __mutex_unlock_slowpath+0x731/0x900 [ 978.796389][T32687] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 978.796432][T32687] nf_setsockopt+0x26f/0x290 [ 978.796462][T32687] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 978.796490][T32687] do_sock_setsockopt+0x17c/0x1b0 [ 978.796524][T32687] __x64_sys_setsockopt+0x13d/0x1b0 [ 978.796560][T32687] do_syscall_64+0x166/0x520 [ 978.796587][T32687] ? trace_irq_disable+0x3b/0x140 [ 978.796611][T32687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.796636][T32687] ? clear_bhb_loop+0x70/0xc0 [ 978.796666][T32687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.796700][T32687] RIP: 0033:0x7f384e39e159 [ 978.796721][T32687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 978.796742][T32687] RSP: 002b:00007f384f19f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 978.796768][T32687] RAX: ffffffffffffffda RBX: 00007f384e625fa0 RCX: 00007f384e39e159 [ 978.796786][T32687] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 978.796801][T32687] RBP: 00007f384f19f090 R08: 0000000000000688 R09: 0000000000000000 [ 978.796816][T32687] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 978.796831][T32687] R13: 00007f384e626038 R14: 00007f384e625fa0 R15: 00007ffc5a1168f8 [ 978.796868][T32687] [ 979.051713][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.095586][T32484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 979.346612][T32691] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.347263][T32691] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.347404][T32691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 979.514003][T32712] __nla_validate_parse: 11 callbacks suppressed [ 979.514028][T32712] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6734'. [ 979.622610][T32715] netlink: 'syz.1.6735': attribute type 1 has an invalid length. [ 979.649394][T32712] bond2 (unregistering): Released all slaves [ 979.680105][T32717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6735'. [ 979.687630][T32697] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.688117][T32697] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.688215][T32697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 979.745601][T32715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6735'. [ 979.903072][T32722] netlink: 'syz.0.6737': attribute type 2 has an invalid length. [ 980.020068][T32724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6736'. [ 980.047144][T32722] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6737'. [ 980.064953][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.090998][T32724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6736'. [ 980.186865][T32484] veth0_vlan: entered promiscuous mode [ 980.308906][T31784] Bluetooth: hci6: command tx timeout [ 980.342538][T24068] smbdirect: ib_dev[syz0] removed [ 980.373549][T32733] FAULT_INJECTION: forcing a failure. [ 980.373549][T32733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 980.373590][T32733] CPU: 1 UID: 0 PID: 32733 Comm: syz.0.6740 Not tainted syzkaller #0 PREEMPT(full) [ 980.373619][T32733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 980.373635][T32733] Call Trace: [ 980.373646][T32733] [ 980.373658][T32733] dump_stack_lvl+0xe8/0x150 [ 980.373703][T32733] should_fail_ex+0x410/0x560 [ 980.373737][T32733] _copy_from_user+0x2d/0xb0 [ 980.373768][T32733] copy_from_sockptr_offset+0x66/0xa0 [ 980.373798][T32733] do_ip6t_set_ctl+0x99a/0xe30 [ 980.373832][T32733] ? rcu_is_watching+0x16/0xb0 [ 980.373865][T32733] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 980.373911][T32733] ? __mutex_unlock_slowpath+0x731/0x900 [ 980.373951][T32733] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 980.373998][T32733] nf_setsockopt+0x26f/0x290 [ 980.374031][T32733] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 980.374066][T32733] do_sock_setsockopt+0x17c/0x1b0 [ 980.374103][T32733] __x64_sys_setsockopt+0x13d/0x1b0 [ 980.374141][T32733] do_syscall_64+0x166/0x520 [ 980.374169][T32733] ? trace_irq_disable+0x3b/0x140 [ 980.374194][T32733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.374220][T32733] ? clear_bhb_loop+0x70/0xc0 [ 980.374252][T32733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.374278][T32733] RIP: 0033:0x7f384e39e159 [ 980.374301][T32733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 980.374321][T32733] RSP: 002b:00007f384f19f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 980.374346][T32733] RAX: ffffffffffffffda RBX: 00007f384e625fa0 RCX: 00007f384e39e159 [ 980.374363][T32733] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 980.374377][T32733] RBP: 00007f384f19f090 R08: 0000000000000688 R09: 0000000000000000 [ 980.374391][T32733] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 980.374405][T32733] R13: 00007f384e626038 R14: 00007f384e625fa0 R15: 00007ffc5a1168f8 [ 980.374442][T32733] [ 980.544566][T32735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6738'. [ 980.684051][T17209] wlan0 speed is unknown, defaulting to 1000 [ 980.720576][T32735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 980.778181][T32735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 980.866391][T32484] veth1_vlan: entered promiscuous mode [ 980.940635][ T9597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.050591][T29101] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 981.057908][T29101] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 981.066480][T29101] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 981.083109][T29101] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 981.085640][T29101] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 981.124224][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.210316][T32484] veth0_macvtap: entered promiscuous mode [ 981.216386][T32484] veth1_macvtap: entered promiscuous mode [ 981.313602][T32484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 981.386482][T32484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 981.571986][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.609097][T14062] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.609149][T14062] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.609188][T14062] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.823100][T32761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6748'. [ 981.846208][T14062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 981.846233][T14062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 981.925755][T32763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.038020][T32766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6748'. [ 982.048169][T32767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.090572][T14076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 982.090597][T14076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.149698][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.264813][T32767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.317466][ T313] x_tables: unsorted underflow at hook 1 [ 982.372807][T32763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.457443][T32767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.476421][T32767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.477159][T32767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.507179][ T316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6751'. [ 982.693127][T32762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.965585][ T329] netlink: 'syz.6.6680': attribute type 1 has an invalid length. [ 983.179456][T31784] Bluetooth: hci7: command tx timeout [ 983.214158][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.506014][ T352] netlink: 'syz.3.6757': attribute type 7 has an invalid length. [ 983.507177][ T352] syzkaller1: entered promiscuous mode [ 983.507201][ T352] syzkaller1: entered allmulticast mode [ 983.572730][ T349] syzkaller0: entered promiscuous mode [ 983.572757][ T349] syzkaller0: entered allmulticast mode [ 983.615680][T32744] wg0 speed is unknown, defaulting to 1000 [ 983.935797][ T359] No such timeout policy "s" [ 983.945253][ T359] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 984.636654][ T384] __nla_validate_parse: 6 callbacks suppressed [ 984.636679][ T384] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6766'. [ 984.765884][ T389] SET target dimension over the limit! [ 984.809256][ T391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6768'. [ 985.164420][T32744] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.164635][T32744] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.164786][T32744] bridge_slave_0: entered allmulticast mode [ 985.168653][T32744] bridge_slave_0: entered promiscuous mode [ 985.179694][T32744] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.180273][T32744] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.180688][T32744] bridge_slave_1: entered allmulticast mode [ 985.185462][T32744] bridge_slave_1: entered promiscuous mode [ 985.273160][T31784] Bluetooth: hci7: command tx timeout [ 985.314176][T32744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 985.317617][T32744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 985.392811][T32744] team0: Port device team_slave_0 added [ 985.395862][T32744] team0: Port device team_slave_1 added [ 985.444598][T32744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 985.444619][T32744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 985.444650][T32744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 985.447029][T32744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 985.447046][T32744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 985.447076][T32744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 985.888691][T32744] hsr_slave_0: entered promiscuous mode [ 985.894172][T32744] hsr_slave_1: entered promiscuous mode [ 985.896903][T32744] debugfs: 'hsr0' already exists in 'hsr' [ 985.896928][T32744] Cannot create hsr debugfs directory [ 986.323531][ T419] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6775'. [ 986.625009][ T426] batman_adv: batadv0: Adding interface: dummy0 [ 986.625031][ T426] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 986.625067][ T426] batman_adv: batadv0: Interface activated: dummy0 [ 986.995518][T14076] IPVS: starting estimator thread 0... [ 987.020779][ T5742] net_ratelimit: 31 callbacks suppressed [ 987.020811][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.080527][ T433] IPVS: using max 29 ests per chain, 69600 per kthread [ 987.347108][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.350560][T31784] Bluetooth: hci7: command tx timeout [ 987.653643][T32744] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 987.706153][T32744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 987.719624][T32744] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 987.746320][T32744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 987.756881][T32744] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 987.787459][T32744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 987.802262][T32744] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 987.837590][T32744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 988.261357][T32744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 988.277477][ T468] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6792'. [ 988.310256][ T469] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6793'. [ 988.344696][T32744] 8021q: adding VLAN 0 to HW filter on device team0 [ 988.369607][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.369740][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 988.379496][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.385051][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.385167][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 988.631766][ T473] netlink: 'syz.6.6795': attribute type 1 has an invalid length. [ 988.632492][ T473] netlink: 'syz.6.6795': attribute type 1 has an invalid length. [ 988.636879][T32744] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 988.705533][ T471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6794'. [ 988.828238][ T471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6794'. [ 988.982220][ T482] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6794'. [ 988.982255][ T482] netlink: 43 bytes leftover after parsing attributes in process `syz.3.6794'. [ 988.982274][ T482] netlink: 'syz.3.6794': attribute type 6 has an invalid length. [ 988.982290][ T482] netlink: 'syz.3.6794': attribute type 5 has an invalid length. [ 988.982306][ T482] netlink: 43 bytes leftover after parsing attributes in process `syz.3.6794'. [ 989.423861][T29101] Bluetooth: hci7: command tx timeout [ 989.440923][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.992640][T32744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 990.065643][T30691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.511508][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.740516][ T539] netlink: 'syz.1.6806': attribute type 1 has an invalid length. [ 990.740544][ T539] netlink: 'syz.1.6806': attribute type 2 has an invalid length. [ 990.742758][ T539] netlink: 'syz.1.6806': attribute type 1 has an invalid length. [ 990.742779][ T539] netlink: 'syz.1.6806': attribute type 2 has an invalid length. [ 990.942796][ T544] ipvlan2: entered allmulticast mode [ 990.942829][ T544] mac80211_hwsim hwsim69 wlan0: entered allmulticast mode [ 990.983874][ T544] batman_adv: batadv0: Adding interface: ipvlan2 [ 990.983895][ T544] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 990.983929][ T544] batman_adv: batadv0: Interface activated: ipvlan2 [ 991.164305][T32744] veth0_vlan: entered promiscuous mode [ 991.220450][T32744] veth1_vlan: entered promiscuous mode [ 991.369508][ T560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6814'. [ 991.408201][T32744] veth0_macvtap: entered promiscuous mode [ 991.423617][ T560] tipc: Started in network mode [ 991.423656][ T560] tipc: Node identity ac14142f, cluster identity 4711 [ 991.424256][ T560] tipc: Enabling of bearer rejected, failed to enable media [ 991.469642][T32744] veth1_macvtap: entered promiscuous mode [ 991.477625][ T560] macvtap0: entered allmulticast mode [ 991.477654][ T560] veth0_macvtap: entered allmulticast mode [ 991.580590][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.612195][T32744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 991.667725][T32744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 991.745667][ T49] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.857930][T14070] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.858025][T14070] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.870507][ T49] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.178609][ T586] openvswitch: netlink: Missing key (keys=50, expected=80) [ 992.184302][T14071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.184326][T14071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.273442][T14063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.273468][T14063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.553642][ T596] wg0 speed is unknown, defaulting to 1000 [ 992.553723][ T596] wg0 speed is unknown, defaulting to 1000 [ 992.571562][ T596] wg0 speed is unknown, defaulting to 1000 [ 992.589963][ T596] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 992.590005][ T596] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 992.590048][ T596] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 992.657261][T29573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.715142][ T596] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 992.836476][ T596] wg0 speed is unknown, defaulting to 1000 [ 992.855712][ T596] wg0 speed is unknown, defaulting to 1000 [ 992.870804][ T596] wg0 speed is unknown, defaulting to 1000 [ 992.896275][ T596] wg0 speed is unknown, defaulting to 1000 [ 992.905427][ T596] wg0 speed is unknown, defaulting to 1000 [ 992.924404][ T596] wg0 speed is unknown, defaulting to 1000 [ 992.927317][ T603] netlink: 'syz.0.6827': attribute type 1 has an invalid length. [ 992.944258][ T596] wg0 speed is unknown, defaulting to 1000 [ 992.965791][ T596] wg0 speed is unknown, defaulting to 1000 [ 992.985478][ T596] wg0 speed is unknown, defaulting to 1000 [ 992.985713][ T605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6828'. [ 993.037570][ T604] netlink: 'syz.1.6826': attribute type 4 has an invalid length. [ 993.052453][ T604] xt_nfacct: accounting object `syz0' does not exist [ 993.088886][ T611] tap0: tun_chr_ioctl cmd 1074025676 [ 993.088911][ T611] tap0: owner set to 0 [ 993.106118][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.185107][ T596] wg0 speed is unknown, defaulting to 1000 [ 993.199872][ T596] wg0 speed is unknown, defaulting to 1000 [ 993.388672][ T617] tipc: Started in network mode [ 993.388720][ T617] tipc: Node identity ac141441, cluster identity 4711 [ 993.395909][ T617] tipc: Enabled bearer , priority 10 [ 993.557205][ T621] wireguard0: entered promiscuous mode [ 993.658947][T29573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.990792][ T645] netdevsim netdevsim6: Firmware load for './file0/../file0' refused, path contains '..' component [ 994.299219][T31784] Bluetooth: hci7: command tx timeout [ 994.508973][ T10] tipc: Node number set to 2886997057 [ 994.702378][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.848026][ T668] batman_adv: batadv0: Adding interface: syzkaller0 [ 994.848047][ T668] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 994.848081][ T668] batman_adv: batadv0: Interface activated: syzkaller0 [ 994.933970][ T668] netlink: 'syz.0.6841': attribute type 11 has an invalid length. [ 995.055953][ T668] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 995.095470][ T668] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 995.126991][ T668] bond0 (unregistering): Released all slaves [ 995.145856][ T676] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 995.147338][ T676] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 995.282120][ T665] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 995.360110][ T665] batman_adv: batadv0: Removing interface: syzkaller0 [ 995.412842][ T684] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6846'. [ 995.485488][ T690] netlink: 'syz.7.6849': attribute type 1 has an invalid length. [ 995.486153][ T687] netlink: 'syz.1.6847': attribute type 1 has an invalid length. [ 995.520451][ T679] team0: Device veth1_macvtap failed to register rx_handler [ 995.538100][ T688] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6847'. [ 995.714244][ T690] 8021q: VLANs not supported on vxcan0 [ 995.744343][T29573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.862390][ T702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.921737][ T704] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 996.106007][ T714] netlink: 'syz.0.6854': attribute type 3 has an invalid length. [ 996.106035][ T714] netlink: 'syz.0.6854': attribute type 1 has an invalid length. [ 996.133730][ T714] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6854'. [ 996.354034][ T720] netlink: 'syz.1.6855': attribute type 12 has an invalid length. [ 996.462184][ T723] netlink: 'syz.7.6858': attribute type 1 has an invalid length. [ 996.572049][ T731] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6860'. [ 996.614159][ T731] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6860'. [ 996.774189][ T736] veth1_macvtap: left promiscuous mode [ 996.974694][ T742] netlink: 'syz.7.6862': attribute type 4 has an invalid length. [ 997.047267][ T748] netlink: 'syz.0.6865': attribute type 1 has an invalid length. [ 997.261431][ T748] bond0: entered promiscuous mode [ 997.261855][ T748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 997.533997][ T768] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6868'. [ 997.761862][ T775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6870'. [ 997.761895][ T775] netlink: 'syz.3.6870': attribute type 3 has an invalid length. [ 997.816402][ T782] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6873'. [ 997.833066][ T10] net_ratelimit: 4 callbacks suppressed [ 997.833088][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.971327][ T784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.286724][ T796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6878'. [ 998.586718][ T807] vlan2: entered promiscuous mode [ 998.586743][ T807] hsr0: entered promiscuous mode [ 998.587022][ T807] vlan2: entered allmulticast mode [ 998.587039][ T807] hsr0: entered allmulticast mode [ 998.587054][ T807] hsr_slave_0: entered allmulticast mode [ 998.587071][ T807] hsr_slave_1: entered allmulticast mode [ 998.603476][ T807] FAULT_INJECTION: forcing a failure. [ 998.603476][ T807] name failslab, interval 1, probability 0, space 0, times 0 [ 998.603596][ T807] CPU: 1 UID: 0 PID: 807 Comm: syz.1.6881 Not tainted syzkaller #0 PREEMPT(full) [ 998.603668][ T807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 998.603703][ T807] Call Trace: [ 998.603742][ T807] [ 998.603766][ T807] dump_stack_lvl+0xe8/0x150 [ 998.603880][ T807] should_fail_ex+0x410/0x560 [ 998.603957][ T807] ? __alloc_skb+0x1db/0x7a0 [ 998.604030][ T807] should_failslab+0xa8/0x100 [ 998.604114][ T807] ? __alloc_skb+0x1db/0x7a0 [ 998.604176][ T807] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 998.604272][ T807] ? __alloc_skb+0x18d/0x7a0 [ 998.604344][ T807] ? __alloc_skb+0x1db/0x7a0 [ 998.604405][ T807] __alloc_skb+0x1db/0x7a0 [ 998.604438][ T807] netlink_sendmsg+0x5d4/0xb40 [ 998.604485][ T807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 998.604634][ T807] ? apparmor_socket_sendmsg+0x98/0x360 [ 998.604726][ T807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 998.604809][ T807] sock_sendmsg_nosec+0x13a/0x180 [ 998.604926][ T807] ____sys_sendmsg+0x54e/0x850 [ 998.605019][ T807] ? __pfx_____sys_sendmsg+0x10/0x10 [ 998.605124][ T807] ? import_iovec+0x73/0xa0 [ 998.605203][ T807] ___sys_sendmsg+0x2a5/0x360 [ 998.605278][ T807] ? __lock_acquire+0x747/0x2de0 [ 998.605353][ T807] ? __pfx____sys_sendmsg+0x10/0x10 [ 998.605533][ T807] ? __fget_files+0x2a/0x420 [ 998.605619][ T807] ? __fget_files+0x3a2/0x420 [ 998.605733][ T807] __x64_sys_sendmsg+0x1b1/0x290 [ 998.605825][ T807] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 998.605962][ T807] do_syscall_64+0x166/0x520 [ 998.606055][ T807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.606125][ T807] ? clear_bhb_loop+0x70/0xc0 [ 998.606206][ T807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.606267][ T807] RIP: 0033:0x7f4cb719e159 [ 998.606328][ T807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 998.606381][ T807] RSP: 002b:00007f4cb7fe4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 998.606462][ T807] RAX: ffffffffffffffda RBX: 00007f4cb7425fa0 RCX: 00007f4cb719e159 [ 998.606506][ T807] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000006 [ 998.606548][ T807] RBP: 00007f4cb7fe4090 R08: 0000000000000000 R09: 0000000000000000 [ 998.606582][ T807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 998.606622][ T807] R13: 00007f4cb7426038 R14: 00007f4cb7425fa0 R15: 00007ffd95c7e508 [ 998.606716][ T807] [ 998.876714][T29573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.027191][ T806] syzkaller0: entered promiscuous mode [ 999.027219][ T806] syzkaller0: entered allmulticast mode [ 999.181465][ T9597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.452358][ T5284] veth1_macvtap: entered promiscuous mode [ 999.457294][ T824] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 999.504527][ T819] xt_hashlimit: size too large, truncated to 1048576 [ 999.841160][ T834] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6887'. [ 999.850792][ T834] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6887'. [ 999.899070][T29573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.955314][ T838] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6889'. [ 999.969700][ T834] netlink: 'syz.6.6887': attribute type 83 has an invalid length. [ 1000.434872][ T848] bridge1: entered allmulticast mode [ 1000.507565][ T851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.834569][ T862] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6894'. [ 1000.834614][ T862] netlink: 'syz.6.6894': attribute type 7 has an invalid length. [ 1000.834630][ T862] netlink: 'syz.6.6894': attribute type 8 has an invalid length. [ 1000.940775][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.978125][ T871] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1001.886013][ T904] __nla_validate_parse: 3 callbacks suppressed [ 1001.886034][ T904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6904'. [ 1002.100561][ T904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6904'. [ 1002.146391][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.240830][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.505342][ T942] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1002.533530][ T939] netlink: 'syz.1.6911': attribute type 1 has an invalid length. [ 1002.533555][ T939] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6911'. [ 1002.533573][ T939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6911'. [ 1002.584383][ T946] netlink: 'syz.0.6913': attribute type 32 has an invalid length. [ 1002.584403][ T946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6913'. [ 1002.726171][ T946] bond2: option coupled_control: invalid value (6) [ 1002.747920][ T946] bond2 (unregistering): Released all slaves [ 1003.094680][ T973] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6916'. [ 1003.225525][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.444786][ T981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1003.556269][ T985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6920'. [ 1003.617247][ T985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6920'. [ 1004.133752][ T994] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1004.335962][T29573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.519720][ T999] bond2 (unregistering): Released all slaves [ 1004.733511][ T1023] sctp: [Deprecated]: syz.7.6929 (pid 1023) Use of int in maxseg socket option. [ 1004.733511][ T1023] Use struct sctp_assoc_value instead [ 1004.775578][ T1006] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6926'. [ 1004.775614][ T1006] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6926'. [ 1004.850646][ T1029] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1005.262114][ T9597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.393742][T29573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.776939][ T1079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1005.961004][ T1048] infiniband syz1: set active [ 1005.962312][ T1048] infiniband syz1: added team0 [ 1006.024797][ T1048] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1006.024842][ T1048] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1006.024887][ T1048] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1006.071618][ T9597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.171084][ T1048] RDS/IB: syz1: added [ 1006.172375][ T1048] smc: adding ib device syz1 with port count 1 [ 1006.172400][ T1048] smc: ib device syz1 port 1 has no pnetid [ 1006.482381][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.729449][ T1099] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1007.272400][ T1126] __nla_validate_parse: 1 callbacks suppressed [ 1007.272427][ T1126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6947'. [ 1007.359199][ T1119] tipc: Enabled bearer , priority 10 [ 1007.427329][ T1103] tipc: Resetting bearer [ 1007.499406][T29101] Bluetooth: hci5: command 0x0406 tx timeout [ 1007.567952][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.642289][ T1134] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6948'. [ 1007.796265][ T1141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6949'. [ 1008.324642][ T9597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.621381][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.666826][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.711761][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.349624][ T9597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.533168][ T1103] tipc: Disabling bearer [ 1011.745057][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.964000][ T1165] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1012.640513][ T1184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.642584][ T1184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.711074][ T1200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.711403][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.812338][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.902005][ T1184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1013.143388][ T1184] xfrm1: left promiscuous mode [ 1013.143413][ T1184] xfrm1: left allmulticast mode [ 1013.161627][ T1184] vlan2: left promiscuous mode [ 1013.161651][ T1184] hsr0: left promiscuous mode [ 1013.161868][ T1184] vlan2: left allmulticast mode [ 1013.161883][ T1184] hsr0: left allmulticast mode [ 1013.161898][ T1184] hsr_slave_0: left allmulticast mode [ 1013.161916][ T1184] hsr_slave_1: left allmulticast mode [ 1013.211036][ T3311] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1013.211075][ T3311] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.266980][ T1194] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6962'. [ 1013.406356][T14057] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1013.406396][T14057] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.406440][T14057] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1013.406470][T14057] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.406510][T14057] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1013.406540][T14057] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.834704][ T10] net_ratelimit: 2 callbacks suppressed [ 1013.834728][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.014751][ T1235] openvswitch: netlink: Missing key (keys=50, expected=80) [ 1014.385084][T30691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.562134][ T1259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.562534][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.562848][ T1259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.567350][T14062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.568433][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.657048][ T1259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.883535][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.814792][ T1307] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6984'. [ 1015.954429][ T1307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6984'. [ 1017.100779][ T1354] netlink: 112 bytes leftover after parsing attributes in process `syz.6.6995'. [ 1017.744602][T29101] Bluetooth: hci3: command 0x0406 tx timeout [ 1018.324425][ T1389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7004'. [ 1018.330055][ T1389] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1018.751772][ T1410] IPVS: set_ctl: invalid protocol: 11612 224.0.0.2:21 [ 1018.795710][ T1413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7010'. [ 1018.962672][ T1418] gretap0: entered promiscuous mode [ 1018.965446][ T1418] vlan2: entered promiscuous mode [ 1019.049183][T29573] net_ratelimit: 6 callbacks suppressed [ 1019.049205][T29573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.288896][ T1424] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1019.476379][ T1432] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1019.573839][ T1433] bridge0: port 3(vlan2) entered blocking state [ 1019.573962][ T1433] bridge0: port 3(vlan2) entered disabled state [ 1019.574134][ T1433] vlan2: entered allmulticast mode [ 1019.574153][ T1433] geneve0: entered allmulticast mode [ 1019.630695][ T1433] vlan2: entered promiscuous mode [ 1019.630721][ T1433] geneve0: entered promiscuous mode [ 1020.040200][ T1449] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7022'. [ 1020.042748][ T1449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7022'. [ 1020.101012][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.577931][ T1459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7026'. [ 1020.654335][ T1460] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1020.728920][T29101] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1020.734037][T29101] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1020.738020][T29101] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1020.753537][T29101] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1020.759327][T29101] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1020.785975][ T9597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.010484][ T1481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7030'. [ 1021.203956][T29573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.206685][ T1477] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7030'. [ 1021.300074][ T1489] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7031'. [ 1021.740837][ T9597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.219956][T29573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.340843][ T1514] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1022.451489][ T1521] v: renamed from veth0_vlan [ 1022.596025][ T1530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7040'. [ 1022.858387][ T1469] Bluetooth: hci0: command 0x0406 tx timeout [ 1022.938623][ T5641] Bluetooth: hci8: command tx timeout [ 1022.990834][ T1538] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7043'. [ 1023.167181][ T1543] netlink: 'syz.0.7044': attribute type 1 has an invalid length. [ 1023.306281][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.669701][ T1557] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002 [ 1023.808224][ T1463] wg0 speed is unknown, defaulting to 1000 [ 1023.813913][ T1463] wg0 speed is unknown, defaulting to 1000 [ 1024.098026][ T1571] __nla_validate_parse: 1 callbacks suppressed [ 1024.098049][ T1571] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7049'. [ 1024.153725][ T1571] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1024.178684][T14076] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.249424][ T1574] v: renamed from veth0_vlan (while UP) [ 1024.324239][ T1562] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7049'. [ 1024.504381][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.711359][ T1585] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7054'. [ 1024.731878][T14076] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.780826][ T9597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.924613][ T1591] netlink: get zone limit has 8 unknown bytes [ 1024.995836][ T1591] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1025.019775][ T5641] Bluetooth: hci8: command tx timeout [ 1025.126065][T14076] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.174130][ T1596] netlink: 292 bytes leftover after parsing attributes in process `syz.0.7057'. [ 1025.382145][ T1608] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7057'. [ 1025.509049][T14076] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.552477][T14070] IPVS: starting estimator thread 0... [ 1025.580352][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.659603][ T1615] IPVS: using max 26 ests per chain, 62400 per kthread [ 1025.906659][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.228159][ T1641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7065'. [ 1026.313540][ T1645] netlink: 140 bytes leftover after parsing attributes in process `syz.3.7068'. [ 1026.314565][ T1645] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7068'. [ 1026.351919][ T1643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7066'. [ 1026.619285][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.963298][ T1662] IPv6: sit1: Disabled Multicast RS [ 1027.043964][T14076] bridge_slave_1: left allmulticast mode [ 1027.043994][T14076] bridge_slave_1: left promiscuous mode [ 1027.044227][T14076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.086409][T14076] bridge_slave_0: left allmulticast mode [ 1027.086438][T14076] bridge_slave_0: left promiscuous mode [ 1027.086679][T14076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.099402][ T5641] Bluetooth: hci8: command tx timeout [ 1027.265781][ T1675] netlink: 'syz.6.7076': attribute type 11 has an invalid length. [ 1027.400716][ T1681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.400919][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.704750][T14076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1027.708068][T14076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1027.735092][T14076] bond0 (unregistering): Released all slaves [ 1027.855157][ T1697] dvmrp8: entered allmulticast mode [ 1027.887707][ T5284] v: left promiscuous mode [ 1027.972407][ T1690] netlink: 'syz.0.7075': attribute type 4 has an invalid length. [ 1027.972435][ T1690] netlink: 240 bytes leftover after parsing attributes in process `syz.0.7075'. [ 1028.164846][ T10] v: entered promiscuous mode [ 1028.188923][ T1705] netlink: 'syz.1.7079': attribute type 1 has an invalid length. [ 1028.453508][ T1463] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.453625][ T1463] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.454227][ T1463] bridge_slave_0: entered allmulticast mode [ 1028.471562][ T1463] bridge_slave_0: entered promiscuous mode [ 1028.501076][ T1463] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.501828][ T1463] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.502012][ T1463] bridge_slave_1: entered allmulticast mode [ 1028.521734][ T1463] bridge_slave_1: entered promiscuous mode [ 1028.743213][ T1463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1028.746677][ T1463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1028.940609][ T1463] team0: Port device team_slave_0 added [ 1028.994599][ T1463] team0: Port device team_slave_1 added [ 1029.179151][ T5641] Bluetooth: hci8: command tx timeout [ 1029.392010][ T1463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1029.392032][ T1463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1029.392062][ T1463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1029.483772][ T1463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1029.483793][ T1463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1029.483825][ T1463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1029.741162][ T10] net_ratelimit: 3 callbacks suppressed [ 1029.741186][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.878218][ T1757] xt_TCPMSS: Only works on TCP SYN packets [ 1029.886975][ T1757] __nla_validate_parse: 2 callbacks suppressed [ 1029.886999][ T1757] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7089'. [ 1029.887064][ T1757] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7089'. [ 1030.306712][ T1463] hsr_slave_0: entered promiscuous mode [ 1030.315695][ T1463] hsr_slave_1: entered promiscuous mode [ 1030.340940][ T1463] debugfs: 'hsr0' already exists in 'hsr' [ 1030.340966][ T1463] Cannot create hsr debugfs directory [ 1030.385321][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.537114][ T1785] netlink: 75 bytes leftover after parsing attributes in process `syz.1.7094'. [ 1030.544445][T14076] hsr_slave_0: left promiscuous mode [ 1030.559416][T14076] hsr_slave_1: left promiscuous mode [ 1030.560452][T14076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1030.560476][T14076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1030.596020][T14076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1030.596047][T14076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1030.644383][T14076] veth1_macvtap: left promiscuous mode [ 1030.658329][T14076] veth0_macvtap: left promiscuous mode [ 1030.658512][T14076] veth1_vlan: left promiscuous mode [ 1030.658588][T14076] veth0_vlan: left promiscuous mode [ 1030.785652][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.237273][T14076] team0 (unregistering): Port device team_slave_1 removed [ 1031.259470][T14076] team0 (unregistering): Port device team_slave_0 removed [ 1031.399601][T24068] smc: removing ib device syz1 [ 1031.546465][T24068] smbdirect: ib_dev[syz1] removed [ 1031.626574][ T5284] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1031.825134][T29573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.998517][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.000561][T14070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.001962][T29573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.004821][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.601484][ T1825] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7103'. [ 1032.601515][ T1825] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1032.863054][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.605170][ T1889] netlink: 'syz.6.7115': attribute type 10 has an invalid length. [ 1034.717759][ T1893] netlink: 'syz.6.7115': attribute type 10 has an invalid length. [ 1034.837195][ T1463] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1034.871389][ T1463] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1034.913578][ T5284] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1034.941592][T29573] net_ratelimit: 2 callbacks suppressed [ 1034.941616][T29573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.021167][ T9597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.090172][ T1902] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 1035.095435][ T1463] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1035.135198][ T1463] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1035.174931][ T1463] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1035.225544][ T1463] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1035.226568][ T1463] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1035.283039][ T1910] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7120'. [ 1035.313452][ T1463] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1035.463698][ T1908] sctp: [Deprecated]: syz.3.7119 (pid 1908) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1035.463698][ T1908] Use struct sctp_sack_info instead [ 1035.615438][ T1930] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7124'. [ 1035.766436][ T1935] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1035.886035][ T1463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1035.984554][T29573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.012434][ T1463] 8021q: adding VLAN 0 to HW filter on device team0 [ 1036.039613][T24067] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.039763][T24067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1036.101894][T24067] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.102044][T24067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1036.143268][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.567354][ T1960] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7130'. [ 1036.900887][ T1965] xt_cgroup: no path or classid specified [ 1037.025432][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.141801][ T1982] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7134'. [ 1037.352486][ T1983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7133'. [ 1038.001110][ T1998] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 1038.007037][ T1999] netlink: 260 bytes leftover after parsing attributes in process `syz.3.7136'. [ 1038.062545][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.071665][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.222478][ T5641] Bluetooth: hci8: command tx timeout [ 1038.470500][ T1463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1038.604446][ T5284] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1038.630714][ T2029] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 1039.098079][ T2035] netlink: 18 bytes leftover after parsing attributes in process `syz.3.7143'. [ 1039.102447][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.897348][ T2070] netlink: 168 bytes leftover after parsing attributes in process `syz.3.7152'. [ 1039.984756][ T9597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.266637][ T1463] veth0_vlan: entered promiscuous mode [ 1040.363173][ T1463] veth1_vlan: entered promiscuous mode [ 1040.655027][ T1463] veth0_macvtap: entered promiscuous mode [ 1040.683265][ T1463] veth1_macvtap: entered promiscuous mode [ 1040.866957][ T1463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1041.000300][ T1463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1041.099156][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.182208][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.261363][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.349488][T14070] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.350848][T14070] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.381806][T14057] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.383400][T14057] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.605446][ T2119] netlink: 'syz.1.7159': attribute type 64 has an invalid length. [ 1041.605470][ T2119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7159'. [ 1041.900973][ T5641] Bluetooth: hci0: command 0x0406 tx timeout [ 1042.084225][ T5284] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1042.166941][ T2130] netlink: 'syz.6.7162': attribute type 1 has an invalid length. [ 1042.224797][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.274581][T14076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.274611][T14076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1042.449214][ T2135] veth5: entered allmulticast mode [ 1042.507879][T24056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.507905][T24056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1043.017015][ T2161] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7024'. [ 1043.335914][ T2175] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 1043.517921][ T2180] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7171'. [ 1044.354873][ T2213] netlink: 144 bytes leftover after parsing attributes in process `syz.8.7181'. [ 1044.357028][ T2213] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7181'. [ 1044.410075][ T2211] syzkaller0: entered promiscuous mode [ 1044.410105][ T2211] syzkaller0: entered allmulticast mode [ 1044.429195][T24067] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1044.429684][T24067] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1044.430000][T24067] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1044.435510][ T1111] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1044.502679][ T1111] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1044.617598][ T2207] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1044.786169][ T2220] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7182'. [ 1044.877320][ T2225] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7182'. [ 1045.196840][ T2244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7187'. [ 1045.854275][ T2266] vlan1: entered promiscuous mode [ 1045.854304][ T2266] hsr0: entered promiscuous mode [ 1045.865403][ T2266] vlan1: entered allmulticast mode [ 1045.865427][ T2266] hsr0: entered allmulticast mode [ 1045.865469][ T2266] hsr_slave_0: entered allmulticast mode [ 1045.865537][ T2266] hsr_slave_1: entered allmulticast mode [ 1045.901122][ T2269] netlink: 1 bytes leftover after parsing attributes in process `syz.6.7192'. [ 1045.972211][ T2270] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 1046.025177][ T2272] syzkaller0: entered promiscuous mode [ 1046.025205][ T2272] syzkaller0: entered allmulticast mode [ 1046.682499][ T2292] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7200'. [ 1046.708077][ T2292] netlink: 768 bytes leftover after parsing attributes in process `syz.8.7200'. [ 1047.440100][ T2323] No such timeout policy "s" [ 1047.440122][ T2323] netlink: Failed to associated timeout policy 's' [ 1047.538923][ T2330] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7212'. [ 1047.646367][ T2336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7214'. [ 1047.717735][ T2339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7214'. [ 1047.791144][ T2336] xfrm1: entered promiscuous mode [ 1047.791171][ T2336] xfrm1: entered allmulticast mode [ 1048.035656][ T2344] C: renamed from lo [ 1048.044559][ T2344] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1048.127791][ T2344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7216'. [ 1048.544317][ T2354] xt_MASQUERADE: bad MAP_IPS. [ 1048.569584][ T2353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7218'. [ 1048.569671][ T2353] bridge_slave_1: left allmulticast mode [ 1048.571613][ T2353] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.594688][ T2353] bridge_slave_0: left allmulticast mode [ 1048.594726][ T2353] bridge_slave_0: left promiscuous mode [ 1048.594972][ T2353] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.638574][ T2357] Bluetooth: hci0: unsupported parameter 5135 [ 1048.638592][ T2357] Bluetooth: hci0: unsupported parameter 8192 [ 1048.638602][ T2357] Bluetooth: hci0: unsupported parameter 5135 [ 1048.638611][ T2357] Bluetooth: hci0: unsupported parameter 8192 [ 1048.857196][ T2357] vlan1: entered promiscuous mode [ 1048.857224][ T2357] hsr0: entered promiscuous mode [ 1048.865660][ T2357] vlan1: entered allmulticast mode [ 1048.865732][ T2357] hsr0: entered allmulticast mode [ 1048.865772][ T2357] hsr_slave_0: entered allmulticast mode [ 1048.865815][ T2357] hsr_slave_1: entered allmulticast mode [ 1048.912538][ T2359] 8021q: VLANs not supported on gre0 [ 1049.018698][ T5641] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1049.021485][ T1469] Bluetooth: hci0: command 0x0406 tx timeout [ 1049.111847][ T2363] syzkaller0: entered promiscuous mode [ 1049.111877][ T2363] syzkaller0: entered allmulticast mode [ 1049.149809][ T2380] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7226'. [ 1049.171341][ T2372] x_tables: duplicate underflow at hook 1 [ 1049.182030][ T2376] x_tables: duplicate underflow at hook 1 [ 1053.716658][ T2420] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7233'. [ 1053.732571][ T2425] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7233'. [ 1053.989581][ T2423] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7235'. [ 1053.989613][ T2423] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7235'. [ 1054.097739][ T2439] vlan2: entered promiscuous mode [ 1054.097767][ T2439] hsr0: entered promiscuous mode [ 1054.111946][ T2439] vlan2: entered allmulticast mode [ 1054.111969][ T2439] hsr0: entered allmulticast mode [ 1054.111985][ T2439] hsr_slave_0: entered allmulticast mode [ 1054.112003][ T2439] hsr_slave_1: entered allmulticast mode [ 1054.424546][ T2445] netlink: 'syz.8.7238': attribute type 1 has an invalid length. [ 1054.506142][ T2455] xt_nat: multiple ranges no longer supported [ 1054.533140][ T2455] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7240'. [ 1054.637061][ T2462] netlink: 'syz.3.7241': attribute type 1 has an invalid length. [ 1054.764242][ T2462] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1055.193973][ T2486] syzkaller0: entered promiscuous mode [ 1055.194010][ T2486] syzkaller0: entered allmulticast mode [ 1055.671536][ T2511] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7249'. [ 1056.145320][ T2549] netlink: 'syz.6.7254': attribute type 4 has an invalid length. [ 1056.145347][ T2549] netlink: 152 bytes leftover after parsing attributes in process `syz.6.7254'. [ 1056.213264][ T2549] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1056.313873][ T2553] netlink: 6 bytes leftover after parsing attributes in process `syz.8.7255'. [ 1056.964669][ T2597] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7264'. [ 1057.134462][ T2606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7265'. [ 1057.166810][ T2613] xt_socket: unknown flags 0x8 [ 1057.456201][ T2628] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058) [ 1057.471593][ T2628] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058) [ 1057.719334][ T2635] sctp: [Deprecated]: syz.3.7268 (pid 2635) Use of int in max_burst socket option deprecated. [ 1057.719334][ T2635] Use struct sctp_assoc_value instead [ 1057.808527][ T2634] tipc: Enabled bearer , priority 10 [ 1058.239685][ T2660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1058.255636][ T2660] 8021q: adding VLAN 0 to HW filter on device team0 [ 1058.277203][ T2660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1058.440516][ T2660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1058.467936][ T2660] veth1_to_hsr: entered promiscuous mode [ 1058.487656][ T2660] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1058.487695][ T2660] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1058.567025][ T2660] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1058.653842][T24056] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.653967][T24056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1058.686559][T24056] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.686741][T24056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1058.703398][ T5641] Bluetooth: hci1: command 0x0406 tx timeout [ 1059.175176][ T2713] Cannot find add_set index 46338 as target [ 1059.224130][ T2713] Cannot find add_set index 46338 as target [ 1059.629531][ T2732] netlink: 'syz.6.7286': attribute type 4 has an invalid length. [ 1059.657345][ T2741] xt_hashlimit: size too large, truncated to 1048576 [ 1060.057264][ T2760] __nla_validate_parse: 5 callbacks suppressed [ 1060.057289][ T2760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7290'. [ 1060.108082][ T2760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7290'. [ 1060.508599][ T2772] netlink: 80 bytes leftover after parsing attributes in process `syz.8.7292'. [ 1061.051045][ T2803] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7297'. [ 1061.413295][ T2816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7298'. [ 1061.413322][ T2816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7298'. [ 1062.028213][ T2825] can: request_module (can-proto-4) failed. [ 1062.112888][ T2870] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7304'. [ 1062.212681][ T2850] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7304'. [ 1062.268493][ T2855] can: request_module (can-proto-4) failed. [ 1062.742528][ T2888] netlink: 'syz.8.7309': attribute type 4 has an invalid length. [ 1062.744009][ T2891] netlink: 'syz.8.7309': attribute type 4 has an invalid length. [ 1062.822173][ T2897] xt_MASQUERADE: bad MAP_IPS. [ 1063.315744][ T2920] syzkaller0: entered promiscuous mode [ 1063.315772][ T2920] syzkaller0: entered allmulticast mode [ 1063.996598][ T2959] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7319'. [ 1064.025311][ T2959] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7319'. [ 1064.079158][ T2957] netlink: 'syz.1.7320': attribute type 11 has an invalid length. [ 1065.114336][ T3019] netlink: 'syz.6.7331': attribute type 2 has an invalid length. [ 1065.114359][ T3019] __nla_validate_parse: 3 callbacks suppressed [ 1065.114373][ T3019] netlink: 100 bytes leftover after parsing attributes in process `syz.6.7331'. [ 1065.847045][ T3047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7335'. [ 1065.873768][ T3052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7336'. [ 1065.876699][ T3047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7335'. [ 1065.988476][ T3054] veth0: entered promiscuous mode [ 1065.990681][ T3053] veth0: left promiscuous mode [ 1066.980183][ T3110] tls_set_device_offload_rx: netdev not found [ 1067.000865][ T3105] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1067.187595][ T3113] ip_tables: iptables: counters copy to user failed while replacing table [ 1067.199321][ T3113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7351'. [ 1067.586470][ T3137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7355'. [ 1067.672980][ T3125] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7354'. [ 1067.726487][ T3128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7355'. [ 1067.801036][ T3125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7354'. [ 1067.801080][ T3125] netlink: 'syz.3.7354': attribute type 7 has an invalid length. [ 1067.801097][ T3125] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7354'. [ 1068.386625][ T3166] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1068.596091][ T3175] syzkaller0: entered promiscuous mode [ 1068.596116][ T3175] syzkaller0: entered allmulticast mode [ 1068.874093][ T3192] tipc: Failed to remove unknown binding: 66,0,0/0:1307681409/1307681410 [ 1069.598813][ T3239] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1070.141624][ T3265] netlink: 'syz.3.7386': attribute type 1 has an invalid length. [ 1070.230306][ T3268] netlink: 'syz.0.7387': attribute type 5 has an invalid length. [ 1070.280990][ T3265] __nla_validate_parse: 9 callbacks suppressed [ 1070.281014][ T3265] netlink: 15004 bytes leftover after parsing attributes in process `syz.3.7386'. [ 1070.439820][ T3277] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7391'. [ 1070.734682][ T3287] batman_adv: batadv0: Adding interface: syzkaller0 [ 1070.734703][ T3287] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1070.734736][ T3287] batman_adv: batadv0: Interface activated: syzkaller0 [ 1070.812838][ T3290] netlink: 'syz.8.7396': attribute type 1 has an invalid length. [ 1071.021685][ T3290] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1071.089525][ T3301] bond1: (slave ip6erspan0): making interface the new active one [ 1071.092731][ T3301] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1071.765327][ T3336] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7404'. [ 1071.917283][ T3351] syzkaller0: entered promiscuous mode [ 1071.917309][ T3351] syzkaller0: entered allmulticast mode [ 1072.019386][ T3356] netlink: 'syz.3.7408': attribute type 1 has an invalid length. [ 1072.190795][ T3343] tipc: Started in network mode [ 1072.190830][ T3343] tipc: Node identity 9e4c66c89c93, cluster identity 4711 [ 1072.227617][ T3343] tipc: Enabled bearer , priority 0 [ 1072.264727][ T3340] tipc: Resetting bearer [ 1072.306293][ T3340] tipc: Disabling bearer [ 1072.414672][ T3356] bond3: entered promiscuous mode [ 1072.416320][ T3356] bond3: entered allmulticast mode [ 1072.417333][ T3356] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1072.590057][ T3365] erspan1: entered allmulticast mode [ 1072.641896][ T3365] bond3: (slave erspan1): making interface the new active one [ 1072.641946][ T3365] erspan1: entered promiscuous mode [ 1072.672381][ T3365] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 1073.303512][ T3396] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.306665][ T3392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1073.487170][ T3408] netlink: 'syz.6.7417': attribute type 10 has an invalid length. [ 1073.500524][ T3408] batman_adv: batadv0: Interface deactivated: dummy0 [ 1073.549488][ T3408] batman_adv: batadv0: Removing interface: dummy0 [ 1073.629720][ T3412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7418'. [ 1073.629747][ T3412] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7418'. [ 1073.651111][ T3408] team0: Port device dummy0 added [ 1074.197058][ T3439] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7425'. [ 1074.669220][ T3456] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7432'. [ 1074.669248][ T3456] netlink: 14 bytes leftover after parsing attributes in process `syz.8.7432'. [ 1074.735041][ T3460] netlink: 100 bytes leftover after parsing attributes in process `syz.3.7433'. [ 1074.749264][ T3460] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 1074.924218][ T3462] tipc: Enabling not permitted [ 1074.924255][ T3462] tipc: Enabling of bearer rejected, failed to enable media [ 1075.229885][ T3482] netlink: 'syz.6.7439': attribute type 4 has an invalid length. [ 1075.229913][ T3482] netlink: 17 bytes leftover after parsing attributes in process `syz.6.7439'. [ 1075.455421][ T3449] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1075.717630][ T3499] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 1075.718048][ T3499] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 1075.769249][ T3500] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1075.774366][ T3504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7445'. [ 1075.774395][ T3504] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7445'. [ 1075.944327][ T3512] netlink: 'syz.0.7448': attribute type 5 has an invalid length. [ 1075.944357][ T3512] netlink: 140 bytes leftover after parsing attributes in process `syz.0.7448'. [ 1076.099653][ T3520] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7447'. [ 1076.125254][ T3512] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7448'. [ 1076.393421][ T3531] netlink: 'syz.1.7450': attribute type 1 has an invalid length. [ 1076.589447][ T3531] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1076.708172][ T3540] netlink: 'syz.1.7450': attribute type 10 has an invalid length. [ 1076.708201][ T3540] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7450'. [ 1076.735844][ T3531] bond1: (slave dummy0): Releasing active interface [ 1076.825885][ T3531] bond2: (slave dummy0): Enslaving as a backup interface with an up link [ 1076.827547][T14060] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1076.856638][ T3540] dummy0: entered promiscuous mode [ 1076.891711][ T3540] bond2: (slave dummy0): Removing an active aggregator [ 1076.916596][ T3540] bond2: (slave dummy0): Releasing backup interface [ 1076.981621][ T3552] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.7455'. [ 1077.010790][ T3555] tap0: tun_chr_ioctl cmd 2148553947 [ 1077.012328][ T3555] xt_hashlimit: size too large, truncated to 1048576 [ 1077.565228][ T3570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7459'. [ 1077.565264][ T3570] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7459'. [ 1078.103413][T14060] bond20 (unregistering): (slave geneve4): Releasing active interface [ 1078.240006][T14060] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 1078.240030][T14060] wireguard0: left promiscuous mode [ 1078.241605][T14060] bond1 (unregistering): Released all slaves [ 1078.274735][T14060] bond2 (unregistering): Released all slaves [ 1078.292680][T14060] bond3 (unregistering): Released all slaves [ 1078.312219][T14060] bond4 (unregistering): Released all slaves [ 1078.344820][T14060] bond5 (unregistering): Released all slaves [ 1078.364300][T14060] bond6 (unregistering): Released all slaves [ 1078.383752][T14060] bond7 (unregistering): Released all slaves [ 1078.406580][T14060] bond8 (unregistering): Released all slaves [ 1078.422927][T14060] bond9 (unregistering): Released all slaves [ 1078.443318][T14060] bond10 (unregistering): Released all slaves [ 1078.469659][T14060] bond11 (unregistering): Released all slaves [ 1078.490374][T14060] bond12 (unregistering): Released all slaves [ 1078.508443][T14060] bond13 (unregistering): Released all slaves [ 1078.527327][T14060] bond14 (unregistering): Released all slaves [ 1078.550596][T14060] bond15 (unregistering): Released all slaves [ 1078.572358][T14060] bond16 (unregistering): Released all slaves [ 1078.596194][T14060] bond17 (unregistering): Released all slaves [ 1078.616756][T14060] bond18 (unregistering): Released all slaves [ 1078.645473][T14060] bond19 (unregistering): Released all slaves [ 1078.673764][T14060] bond20 (unregistering): Released all slaves [ 1078.691559][T14060] bond21 (unregistering): Released all slaves [ 1078.709214][T14060] bond22 (unregistering): Released all slaves [ 1078.856571][ T3577] tipc: Enabling of bearer rejected, failed to enable media [ 1079.188179][ T3583] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7462'. [ 1079.257381][ T3586] ip6gre1: entered promiscuous mode [ 1079.266630][T14060] tipc: Left network mode [ 1079.633623][ T3606] syzkaller1: entered promiscuous mode [ 1079.633650][ T3606] syzkaller1: entered allmulticast mode [ 1080.001012][ T3618] x_tables: duplicate underflow at hook 2 [ 1080.026118][ T3621] x_tables: duplicate underflow at hook 2 [ 1080.563687][ T3635] netlink: 'syz.8.7473': attribute type 13 has an invalid length. [ 1080.731313][ T1469] block nbd3: Receive control failed (result -107) [ 1080.866527][ T3650] __nla_validate_parse: 5 callbacks suppressed [ 1080.866551][ T3650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7478'. [ 1081.003464][ T3655] netlink: 'syz.6.7479': attribute type 4 has an invalid length. [ 1081.096418][ T3650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7478'. [ 1081.177079][ T3663] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7481'. [ 1081.192728][ T3658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7481'. [ 1081.216333][ T3650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7478'. [ 1081.217246][ T3650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7478'. [ 1081.217684][ T3650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7478'. [ 1081.462498][ T3673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7484'. [ 1081.489578][ T3673] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1081.490179][ T3673] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7484'. [ 1081.641648][ T3673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7484'. [ 1081.880065][ T3694] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1084.013101][ T3794] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.016137][ T3794] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.196840][ T3800] lo: entered promiscuous mode [ 1084.197459][ T3800] tunl0: entered promiscuous mode [ 1084.223073][ T3800] gre0: entered promiscuous mode [ 1084.570632][ T3800] erspan0: entered promiscuous mode [ 1084.596874][ T3800] ip_vti0: entered promiscuous mode [ 1084.881402][T14060] hsr_slave_0: left promiscuous mode [ 1084.888179][T14060] hsr_slave_1: left promiscuous mode [ 1084.953268][T14060] veth1_vlan: left promiscuous mode [ 1084.953389][T14060] veth0_vlan: left promiscuous mode [ 1085.042664][ T3835] netlink: 'syz.0.7515': attribute type 1 has an invalid length. [ 1085.042820][ T3834] netlink: 'syz.0.7515': attribute type 1 has an invalid length. [ 1085.444595][T14060] team0 (unregistering): Port device team_slave_1 removed [ 1085.467162][T14060] team0 (unregistering): Port device team_slave_0 removed [ 1085.731285][T14060] team0 (unregistering): Port device dummy0 removed [ 1085.792791][ T3832] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1085.903959][ T3835] bond2: entered promiscuous mode [ 1085.907213][ T3835] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1086.080842][ T3840] bond2: (slave bridge0): making interface the new active one [ 1086.080872][ T3840] bridge0: entered promiscuous mode [ 1086.082818][ T3840] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 1086.150010][ T3841] bond2: (slave bridge4): Enslaving as a backup interface with an up link [ 1086.162889][ T3854] x_tables: duplicate entry at hook 2 [ 1086.439133][ T3858] vlan4: entered promiscuous mode [ 1086.439159][ T3858] bridge0: entered promiscuous mode [ 1086.665288][T14060] IPVS: stop unused estimator thread 0... [ 1086.697086][ T3867] x_tables: unsorted underflow at hook 1 [ 1086.723009][ T3869] __nla_validate_parse: 36 callbacks suppressed [ 1086.723031][ T3869] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7525'. [ 1086.815866][ T3871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7526'. [ 1086.815892][ T3871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7526'. [ 1086.897966][ T3871] veth3: entered allmulticast mode [ 1086.922472][ T3875] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7528'. [ 1086.922503][ T3875] netlink: 14 bytes leftover after parsing attributes in process `syz.8.7528'. [ 1087.354632][ T3889] netlink: 2 bytes leftover after parsing attributes in process `syz.8.7533'. [ 1087.549314][ T3900] netlink: 'syz.3.7537': attribute type 1 has an invalid length. [ 1087.795004][ T3916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7541'. [ 1088.335944][ T3946] netlink: 232 bytes leftover after parsing attributes in process `syz.8.7550'. [ 1088.591979][ T3957] syzkaller1: entered promiscuous mode [ 1088.592005][ T3957] syzkaller1: entered allmulticast mode [ 1088.708696][ T3965] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7556'. [ 1088.759249][ T3971] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7556'. [ 1089.311412][ T3999] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1089.316945][ T3999] bond3 (unregistering): Released all slaves [ 1089.429264][ T5641] Bluetooth: hci2: command 0x0406 tx timeout [ 1089.545836][ T4030] x_tables: unsorted entry at hook 4 [ 1089.558067][ T4021] Bluetooth: MGMT ver 1.23 [ 1090.572225][ T4083] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 1091.126176][ T4108] netlink: 'syz.1.7594': attribute type 21 has an invalid length. [ 1091.281061][ T4111] openvswitch: netlink: Message has 24 unknown bytes. [ 1092.068636][ T4152] netlink: 'syz.1.7607': attribute type 3 has an invalid length. [ 1092.219963][ T4156] __nla_validate_parse: 5 callbacks suppressed [ 1092.219989][ T4156] netlink: 84 bytes leftover after parsing attributes in process `syz.6.7608'. [ 1092.352928][ T4160] netlink: 'syz.3.7610': attribute type 1 has an invalid length. [ 1092.436012][ T4170] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7612'. [ 1092.523554][ T4161] macvlan2: entered promiscuous mode [ 1092.523579][ T4161] macvlan2: entered allmulticast mode [ 1092.550022][ T4161] bond5: entered promiscuous mode [ 1092.644481][ T4161] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1092.680190][ T4161] bond5: left promiscuous mode [ 1092.753467][ T4180] netlink: 'syz.8.7614': attribute type 1 has an invalid length. [ 1092.975382][ T4180] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1092.996790][ T4192] netlink: 'syz.0.7616': attribute type 1 has an invalid length. [ 1093.041961][ T4192] netlink: 9 bytes leftover after parsing attributes in process `syz.0.7616'. [ 1093.100967][ T4196] xt_nfacct: accounting object `syz0' does not exist [ 1093.125593][ T4169] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7611'. [ 1094.538659][ T5641] Bluetooth: hci6: command 0x0406 tx timeout [ 1096.297481][ T4185] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1096.315029][ T4192] 0·: renamed from hsr0 (while UP) [ 1096.326758][ T4192] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 1096.568993][ T4213] dvmrp0: entered allmulticast mode [ 1096.664669][ T4226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1096.760033][ T4226] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1096.771808][T24067] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.771923][T24067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1096.823932][T24067] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.824050][T24067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1096.886157][ T4230] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1096.951530][ T4239] pim6reg1: entered promiscuous mode [ 1096.951554][ T4239] pim6reg1: entered allmulticast mode [ 1096.973458][ T4239] tipc: Failed to remove unknown binding: 66,0,0/1:2365174880/2365174881 [ 1096.973654][ T4239] tipc: Failed to remove unknown binding: 66,0,0/1:2365174880/2365174881 [ 1097.061221][ T4242] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7628'. [ 1097.181689][ T4250] netlink: 'syz.1.7630': attribute type 10 has an invalid length. [ 1097.542103][ T4266] pimreg: entered allmulticast mode [ 1097.593230][ T4266] pimreg: left allmulticast mode [ 1097.593359][ T4266] dvmrp8: left allmulticast mode [ 1097.666842][ T4270] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7636'. [ 1097.667096][ T4270] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7636'. [ 1097.714126][ T4274] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 1097.905363][ T4284] tipc: Enabling of bearer rejected, already enabled [ 1097.926079][ T4287] tipc: Enabling of bearer rejected, already enabled [ 1097.999074][ T4290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7643'. [ 1098.000106][ T4290] ip_tables: iptables: counters copy to user failed while replacing table [ 1098.220277][ T4301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7646'. [ 1098.362603][ T4310] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 1098.362639][ T4310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1098.875175][ T4326] bond6: option packets_per_slave: invalid value (18446744073709551615) [ 1098.875208][ T4326] bond6: option packets_per_slave: allowed values 0 - 65535 [ 1098.906342][ T4326] bond6 (unregistering): Released all slaves [ 1099.070589][ T4340] netlink: 'syz.6.7661': attribute type 21 has an invalid length. [ 1099.070617][ T4340] netlink: 156 bytes leftover after parsing attributes in process `syz.6.7661'. [ 1099.285406][ T4347] 8021q: VLANs not supported on syzkaller1 [ 1099.316306][T24067] IPVS: starting estimator thread 0... [ 1099.346788][ T4353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7663'. [ 1099.398866][ T4354] IPVS: using max 26 ests per chain, 62400 per kthread [ 1099.514077][ T4353] vlan4: entered promiscuous mode [ 1099.600470][ T4355] netlink: 'syz.3.7665': attribute type 12 has an invalid length. [ 1100.827938][ T4383] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7673'. [ 1100.991459][ T4394] netlink: 'syz.3.7671': attribute type 8 has an invalid length. [ 1101.246987][ T4405] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7680'. [ 1101.247228][ T4404] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7680'. [ 1101.274997][ T4404] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7680'. [ 1101.296579][ T4405] tc_dump_action: action bad kind [ 1101.296836][ T4404] tc_dump_action: action bad kind [ 1101.375610][ T4408] bond3: option xmit_hash_policy: invalid value (64) [ 1101.384941][ T4408] bond3 (unregistering): Released all slaves [ 1101.559674][ T4411] bond3: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 1101.587716][ T4411] bond3 (unregistering): Released all slaves [ 1101.705418][ T4418] dvmrp0: entered promiscuous mode [ 1102.024438][ T4439] vlan0: entered promiscuous mode [ 1102.357426][ T4451] netlink: 'syz.8.7692': attribute type 2 has an invalid length. [ 1102.690468][ T4468] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1102.945129][ T4476] xt_hashlimit: size too large, truncated to 1048576 [ 1103.577245][ T4514] __nla_validate_parse: 39 callbacks suppressed [ 1103.577270][ T4514] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7707'. [ 1104.036293][ T4531] netlink: 220 bytes leftover after parsing attributes in process `syz.1.7713'. [ 1104.049745][ T4528] Bluetooth: MGMT ver 1.23 [ 1104.783472][ T4557] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7721'. [ 1104.924250][ T4561] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.955569][ T4566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7723'. [ 1105.372842][ T4589] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7730'. [ 1105.673755][ T4606] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7734'. [ 1105.830457][ T4612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7736'. [ 1105.830622][ T4612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1105.950097][ T4612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1105.974658][ T4619] netlink: 'syz.1.7737': attribute type 1 has an invalid length. [ 1105.974683][ T4619] netlink: 5120 bytes leftover after parsing attributes in process `syz.1.7737'. [ 1106.127704][ T4622] syzkaller0: entered promiscuous mode [ 1106.127734][ T4622] syzkaller0: entered allmulticast mode [ 1106.144335][ T4626] x_tables: unsorted underflow at hook 3 [ 1106.145783][ T4626] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7737'. [ 1106.375716][ T4633] netlink: 'syz.8.7740': attribute type 1 has an invalid length. [ 1106.375740][ T4633] netlink: 'syz.8.7740': attribute type 2 has an invalid length. [ 1106.434903][ T4636] netlink: 'syz.8.7740': attribute type 1 has an invalid length. [ 1106.434928][ T4636] netlink: 'syz.8.7740': attribute type 2 has an invalid length. [ 1106.481109][ T4637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7742'. [ 1106.547912][ T4637] bond3: Invalid ad_actor_system MAC address. [ 1106.547930][ T4637] bond3: option ad_actor_system: invalid value (1) [ 1106.573075][ T4637] bond3 (unregistering): Released all slaves [ 1106.766436][ T4640] netlink: 'syz.6.7743': attribute type 1 has an invalid length. [ 1107.454035][ T4682] erspan0: entered promiscuous mode [ 1107.717698][ T4691] netlink: 'syz.1.7759': attribute type 1 has an invalid length. [ 1107.775373][ T4691] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1107.792706][ T4693] netlink: 'syz.8.7760': attribute type 10 has an invalid length. [ 1107.793565][ T4694] netlink: 'syz.8.7760': attribute type 10 has an invalid length. [ 1107.796331][ T4693] bond2: (slave veth0_to_bond): Releasing backup interface [ 1107.824375][ T4693] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1107.851775][ T4698] bond3: (slave geneve4): making interface the new active one [ 1107.853872][ T4698] bond3: (slave geneve4): Enslaving as an active interface with an up link [ 1107.876007][ T3311] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.043570][ T1111] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.044436][ T1111] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.044486][ T1111] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.206981][ T4715] openvswitch: netlink: Missing key (keys=50, expected=80) [ 1108.416344][ T4721] netlink: 'syz.8.7770': attribute type 1 has an invalid length. [ 1108.494083][ T4721] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1108.534363][ T4732] tc_dump_action: action bad kind [ 1108.580735][ T4737] bond3: (slave geneve3): making interface the new active one [ 1108.583336][ T4737] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 1108.677406][ T4740] __nla_validate_parse: 6 callbacks suppressed [ 1108.677429][ T4740] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7775'. [ 1108.822741][ T4748] vlan3: entered promiscuous mode [ 1108.822770][ T4748] hsr0: entered promiscuous mode [ 1108.823050][ T4748] vlan3: entered allmulticast mode [ 1108.823068][ T4748] hsr0: entered allmulticast mode [ 1108.823083][ T4748] hsr_slave_0: entered allmulticast mode [ 1108.823100][ T4748] hsr_slave_1: entered allmulticast mode [ 1109.086990][ T4754] ip6t_srh: unknown srh invflags 4000 [ 1109.189310][ T4762] netlink: 132 bytes leftover after parsing attributes in process `syz.8.7782'. [ 1109.432419][ T4771] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7783'. [ 1109.726452][ T4769] bond2: entered promiscuous mode [ 1109.752409][ T4769] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1109.882490][ T4771] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1109.884307][ T4771] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1109.884335][ T4771] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1109.931808][ T4776] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7784'. [ 1110.053110][ T4771] bond2: (slave wireguard0): making interface the new active one [ 1110.053139][ T4771] wireguard0: entered promiscuous mode [ 1110.054783][ T4771] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 1110.245498][ T4784] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1110.313710][ T4791] IPVS: length: 148 != 24 [ 1110.452534][ T4791] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7787'. [ 1110.654004][ T4806] netlink: 292 bytes leftover after parsing attributes in process `syz.6.7792'. [ 1110.654038][ T4806] netlink: 292 bytes leftover after parsing attributes in process `syz.6.7792'. [ 1110.708456][ T4799] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7791'. [ 1110.831697][ T4018] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1111.262476][ T4840] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7799'. [ 1112.821991][ T4875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7805'. [ 1113.686995][ T4809] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1114.066171][ T4887] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7810'. [ 1114.068012][ T4887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7810'. [ 1114.150275][ T4891] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7811'. [ 1114.311874][ T4894] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7813'. [ 1114.739471][ T4926] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7819'. [ 1115.017182][ T4940] tc_dump_action: action bad kind [ 1115.086296][ T4942] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7825'. [ 1115.377512][ T4953] netlink: 424 bytes leftover after parsing attributes in process `syz.3.7828'. [ 1115.483421][ T4963] validate_nla: 3 callbacks suppressed [ 1115.483446][ T4963] netlink: 'syz.1.7832': attribute type 1 has an invalid length. [ 1115.531444][ T4963] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1115.566918][ T4967] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7830'. [ 1115.680684][ T4965] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7828'. [ 1115.710826][ T4963] macvtap1: entered allmulticast mode [ 1115.790624][ T4981] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7834'. [ 1116.131131][ T4999] netlink: 'syz.6.7839': attribute type 2 has an invalid length. [ 1116.131155][ T4999] netlink: 'syz.6.7839': attribute type 8 has an invalid length. [ 1116.140795][ T32] INFO: task syz.5.6530:31981 blocked for more than 143 seconds. [ 1116.140869][ T32] Not tainted syzkaller #0 [ 1116.140910][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1116.140936][ T32] task:syz.5.6530 state:D stack:27200 pid:31981 tgid:31979 ppid:31690 task_flags:0x400040 flags:0x00080002 [ 1116.142082][ T32] Call Trace: [ 1116.142119][ T32] [ 1116.142156][ T32] __schedule+0x17db/0x58f0 [ 1116.142375][ T32] ? __pfx___schedule+0x10/0x10 [ 1116.142485][ T32] ? schedule+0x90/0x2b0 [ 1116.142567][ T32] schedule+0x164/0x2b0 [ 1116.142648][ T32] schedule_preempt_disabled+0x13/0x30 [ 1116.142716][ T32] __mutex_lock+0x7c1/0x1550 [ 1116.142816][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1116.142892][ T32] ? nfsd_nl_version_get_doit+0x17c/0xd20 [ 1116.143076][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1116.143166][ T32] ? __nlmsg_put+0xef/0x1b0 [ 1116.143282][ T32] ? genlmsg_put+0x137/0x2e0 [ 1116.143371][ T32] nfsd_nl_version_get_doit+0x17c/0xd20 [ 1116.143500][ T32] ? __nla_parse+0x40/0x60 [ 1116.143593][ T32] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 1116.143676][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1116.143750][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1116.143839][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 1116.143944][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1116.144041][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 1116.144210][ T32] genl_rcv_msg+0x614/0x7a0 [ 1116.144303][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1116.144384][ T32] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 1116.144503][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1116.144597][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1116.144671][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1116.144815][ T32] ? down_read+0x2be/0x330 [ 1116.144914][ T32] genl_rcv+0x28/0x40 [ 1116.144979][ T32] netlink_unicast+0x7bd/0x940 [ 1116.145097][ T32] netlink_sendmsg+0x813/0xb40 [ 1116.145218][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1116.145341][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1116.145435][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1116.145522][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 1116.145647][ T32] ____sys_sendmsg+0x54e/0x850 [ 1116.145743][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1116.145854][ T32] ? import_iovec+0x73/0xa0 [ 1116.145958][ T32] ___sys_sendmsg+0x2a5/0x360 [ 1116.146032][ T32] ? __lock_acquire+0x747/0x2de0 [ 1116.146117][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 1116.146227][ T32] ? futex_wait+0x2a2/0x390 [ 1116.146430][ T32] ? __fget_files+0x2a/0x420 [ 1116.146514][ T32] ? __fget_files+0x3a2/0x420 [ 1116.146628][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 1116.146723][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1116.146847][ T32] do_syscall_64+0x166/0x520 [ 1116.146873][ T32] ? trace_irq_disable+0x3b/0x140 [ 1116.146896][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.146922][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1116.146949][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.146971][ T32] RIP: 0033:0x7faa42f9e159 [ 1116.146990][ ** replaying previous printk message ** [ 1116.146990][ T32] RSP: 002b:00007faa43deb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1116.147013][ T32] RAX: ffffffffffffffda RBX: 00007faa43225fa0 RCX: 00007faa42f9e159 [ 1116.147029][ T32] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000005 [ 1116.147043][ T32] RBP: 00007faa4303506b R08: 0000000000000000 R09: 0000000000000000 [ 1116.147056][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1116.147070][ T32] R13: 00007faa43226038 R14: 00007faa43225fa0 R15: 00007ffebf077978 [ 1116.147105][ T32] [ 1116.147120][ T32] INFO: task syz.2.6629:32321 blocked for more than 143 seconds. [ 1116.147137][ T32] Not tainted syzkaller #0 [ 1116.180263][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1116.180357][ T32] task:syz.2.6629 state:D stack:27200 pid:32321 tgid:32320 ppid:30854 task_flags:0x400140 flags:0x00080002 [ 1116.180580][ T32] Call Trace: [ 1116.180604][ T32] [ 1116.180645][ T32] __schedule+0x17db/0x58f0 [ 1116.180786][ T32] ? kasan_save_track+0x3e/0x80 [ 1116.180825][ T32] ? __pfx___schedule+0x10/0x10 [ 1116.180859][ T32] ? schedule+0x90/0x2b0 [ 1116.180885][ T32] schedule+0x164/0x2b0 [ 1116.180910][ T32] schedule_preempt_disabled+0x13/0x30 [ 1116.180935][ T32] __mutex_lock+0x7c1/0x1550 [ 1116.180967][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1116.180998][ T32] ? nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 1116.181030][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1116.181055][ T32] ? net_generic+0x1e/0x240 [ 1116.181089][ T32] ? net_generic+0x1e/0x240 [ 1116.181115][ T32] ? net_generic+0x1e/0x240 [ 1116.181139][ T32] ? net_generic+0x1e/0x240 [ 1116.181171][ T32] nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 1116.183757][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 1116.183870][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1116.183998][ T32] ? bpf_lsm_capable+0x9/0x20 [ 1116.184053][ T32] ? security_capable+0x7e/0x2c0 [ 1116.184840][ T5002] netlink: 'syz.6.7839': attribute type 2 has an invalid length. [ 1116.184884][ T5002] netlink: 'syz.6.7839': attribute type 8 has an invalid length. [ 1116.201617][ T32] genl_rcv_msg+0x614/0x7a0 [ 1116.201752][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1116.201803][ T32] ? __pfx_nfsd_nl_cache_flush_doit+0x10/0x10 [ 1116.201852][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1116.201889][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1116.201952][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1116.202119][ T32] ? down_read+0x2be/0x330 [ 1116.202214][ T32] genl_rcv+0x28/0x40 [ 1116.202278][ T32] netlink_unicast+0x7bd/0x940 [ 1116.202410][ T32] netlink_sendmsg+0x813/0xb40 [ 1116.202608][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1116.202725][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1116.202806][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1116.202885][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 1116.202984][ T32] ____sys_sendmsg+0x54e/0x850 [ 1116.203087][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1116.203195][ T32] ? import_iovec+0x73/0xa0 [ 1116.203344][ T32] ___sys_sendmsg+0x2a5/0x360 [ 1116.203433][ T32] ? __lock_acquire+0x747/0x2de0 [ 1116.203530][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 1116.203624][ T32] ? futex_wait+0x2a2/0x390 [ 1116.203805][ T32] ? __fget_files+0x2a/0x420 [ 1116.203892][ T32] ? __fget_files+0x3a2/0x420 [ 1116.204011][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 1116.204105][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1116.204248][ T32] do_syscall_64+0x166/0x520 [ 1116.204329][ T32] ? trace_irq_disable+0x3b/0x140 [ 1116.204392][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.204462][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1116.204538][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.204608][ T32] RIP: 0033:0x7f4aeed9e159 [ 1116.204663][ T32] RSP: 002b:00007f4aefd4b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1116.204736][ T32] RAX: ffffffffffffffda RBX: 00007f4aef025fa0 RCX: 00007f4aeed9e159 [ 1116.204796][ T32] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 1116.204839][ T32] RBP: 00007f4aeee3506b R08: 0000000000000000 R09: 0000000000000000 [ 1116.204894][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1116.204930][ T32] R13: 00007f4aef026038 R14: 00007f4aef025fa0 R15: 00007ffcf3853108 [ 1116.205033][ T32] [ 1116.231846][ T32] [ 1116.231846][ T32] Showing all locks held in the system: [ 1116.231863][ T32] locks held by pr/ttyS0/16: 3, last CPU#0: [ 1116.231882][ T32] #0: ffffffff8ec364b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 1116.231952][ T32] #1: ffffc90000007cc0 ((&app->join_timer)#2){+.-.}-{0:0}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 1116.232033][ T32] #2: ffff8880b8624408 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 1116.232095][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 1116.232111][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1116.232324][ T32] locks held by kworker/u8:12/3311: 3, last CPU#1: [ 1116.232387][ T32] #0: ffff888038bab140 ((wq_completion)bond1#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1116.232575][ T32] #1: ffffc9000e787c40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1116.232753][ T32] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf3/0x1820 [ 1116.233079][ T32] locks held by syslogd/4971: 1, last CPU#1: [ 1116.233132][ T32] #0: ffff888032db16f0 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x1e3/0xd70 [ 1116.233336][ T32] locks held by getty/5377: 2, on CPU#0: [ 1116.233379][ T32] #0: ffff8880361150a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1116.258551][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1116.258739][ T32] locks held by syz-executor/31167: 2, last CPU#1: [ 1116.258758][ T32] #0: ffff88802b5a8460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1116.258820][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: bpf_inode_storage_free+0x152/0x5c0 [ 1116.258972][ T32] locks held by syz.4.6375/31199: 2, on CPU#1: [ 1116.259032][ T32] #0: ffffffff902c3628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1116.259210][ T32] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 1116.259397][ T32] locks held by syz.5.6530/31981: 2, on CPU#1: [ 1116.259440][ T32] #0: ffffffff902c3628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1116.259606][ T32] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xd20 [ 1116.259771][ T32] locks held by syz.2.6629/32321: 2, on CPU#1: [ 1116.259809][ T32] #0: ffffffff902c3628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1116.259946][ T32] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 1116.260146][ T32] locks held by kworker/1:5/3013: 2, last CPU#1: [ 1116.260184][ T32] #0: ffff888037575540 ((wq_completion)wg-crypt-wg0#18){+.+.}-{0:0}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 1116.407676][ T32] #1: ffff8880b8724408 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 1116.407890][ T32] locks held by syz.3.7828/4968: 2, last CPU#1: [ 1116.407933][ T32] #0: ffff888012049d38 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 1116.408182][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1116.411385][ T32] locks held by syz.0.7830/4955: 4, on CPU#1: [ 1116.411605][ T32] #0: ffff8880589f4740 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 1116.411912][ T32] #1: ffffffff902c1648 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 1116.422937][ T32] #2: ffff88807becb8e0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x14b/0xe60 [ 1116.423115][ T32] #3: ffffffff8ed62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1116.423301][ T32] locks held by syz.6.7839/4999: 1, last CPU#1: [ 1116.423360][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: bpf_test_timer_enter+0xf9/0x260 [ 1116.423536][ T32] locks held by syz.8.7840/5000: 4, last CPU#1: [ 1116.423580][ T32] #0: ffff888079d0d588 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 1116.425339][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x140c/0x34b0 [ 1116.425540][ T32] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d1/0x2170 [ 1116.446513][ T32] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1116.446747][ T32] [ 1116.446767][ T32] ============================================= [ 1116.446767][ T32] [ 1116.446888][ T32] NMI backtrace for cpu 1 [ 1116.446941][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1116.447004][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1116.447046][ T32] Call Trace: [ 1116.447079][ T32] [ 1116.447111][ T32] dump_stack_lvl+0xe8/0x150 [ 1116.447197][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1116.447278][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1116.447418][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1116.447524][ T32] sys_info+0x135/0x170 [ 1116.447608][ T32] watchdog+0xfd7/0x1030 [ 1116.447694][ T32] ? watchdog+0x1c7/0x1030 [ 1116.447778][ T32] kthread+0x38b/0x480 [ 1116.447850][ T32] ? __pfx_watchdog+0x10/0x10 [ 1116.447902][ T32] ? __pfx_kthread+0x10/0x10 [ 1116.447967][ T32] ret_from_fork+0x514/0xb70 [ 1116.448055][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1116.448160][ T32] ? __switch_to+0xc89/0x1420 [ 1116.448247][ T32] ? __pfx_kthread+0x10/0x10 [ 1116.448314][ T32] ret_from_fork_asm+0x1a/0x30 [ 1116.448451][ T32] [ 1116.449732][ T32] Sending NMI from CPU 1 to CPUs 0: [ 1116.449870][ C0] NMI backtrace for cpu 0 [ 1116.449886][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 1116.449909][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1116.449921][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 1116.449954][ C0] Code: e8 fe 24 55 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ef 24 c5 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 1116.449972][ C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 1116.449990][ C0] RAX: 1ffffffff35a7400 RBX: 00000000000003fd RCX: 0000000000000000 [ 1116.450004][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 1116.450016][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1116.450029][ C0] R10: dffffc0000000000 R11: ffffffff8572a560 R12: dffffc0000000000 [ 1116.450044][ C0] R13: 0000000000000000 R14: ffffffff9ad3a0c0 R15: 0000000000000000 [ 1116.450057][ C0] FS: 0000000000000000(0000) GS:ffff888124cd1000(0000) knlGS:0000000000000000 [ 1116.450073][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1116.450087][ C0] CR2: 00007f6509d25ff8 CR3: 000000003a0b2000 CR4: 00000000003526f0 [ 1116.450104][ C0] Call Trace: [ 1116.450113][ C0] [ 1116.450123][ C0] wait_for_lsr+0x184/0x2f0 [ 1116.450146][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 1116.450178][ C0] serial8250_console_write+0xaa1/0x1200 [ 1116.450205][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1116.450224][ C0] ? __schedule+0x17f1/0x58f0 [ 1116.450253][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 1116.450285][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1116.450316][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 1116.450346][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 1116.450367][ C0] nbcon_kthread_func+0x679/0x880 [ 1116.450401][ C0] ? nbcon_kthread_func+0x163/0x880 [ 1116.450421][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1116.450445][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1116.450474][ C0] ? __kthread_parkme+0x199/0x1f0 [ 1116.450504][ C0] kthread+0x38b/0x480 [ 1116.450523][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1116.450541][ C0] ? __pfx_kthread+0x10/0x10 [ 1116.450560][ C0] ret_from_fork+0x514/0xb70 [ 1116.450580][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1116.450610][ C0] ? __switch_to+0xc89/0x1420 [ 1116.450638][ C0] ? __pfx_kthread+0x10/0x10 [ 1116.450657][ C0] ret_from_fork_asm+0x1a/0x30 [ 1116.450696][ C0] [ 1116.471722][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1117.647434][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1117.656564][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1117.666636][ T32] Call Trace: [ 1117.669942][ T32] [ 1117.672891][ T32] vpanic+0x56d/0xa60 [ 1117.677111][ T32] ? __pfx___schedule+0x10/0x10 [ 1117.682011][ T32] ? __pfx_vpanic+0x10/0x10 [ 1117.686557][ T32] panic+0xc5/0xd0 [ 1117.690309][ T32] ? __pfx_panic+0x10/0x10 [ 1117.694754][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 1117.700241][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 1117.705639][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1117.711832][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1117.718023][ T32] watchdog+0x1030/0x1030 [ 1117.722386][ T32] ? watchdog+0x1c7/0x1030 [ 1117.726831][ T32] kthread+0x38b/0x480 [ 1117.730930][ T32] ? __pfx_watchdog+0x10/0x10 [ 1117.735640][ T32] ? __pfx_kthread+0x10/0x10 [ 1117.740265][ T32] ret_from_fork+0x514/0xb70 [ 1117.744894][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1117.750041][ T32] ? __switch_to+0xc89/0x1420 [ 1117.754752][ T32] ? __pfx_kthread+0x10/0x10 [ 1117.759629][ T32] ret_from_fork_asm+0x1a/0x30 [ 1117.764450][ T32] [ 1117.768297][ T32] Kernel Offset: disabled [ 1117.772682][ T32] Rebooting in 86400 seconds..