last executing test programs: 3.579828164s ago: executing program 0 (id=743): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x28}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0) write$cgroup_pid(r7, &(0x7f0000000000), 0xffffff98) splice(r3, 0x0, r7, 0x0, 0x80, 0x4) write(r5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x8, 0x0, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x7, 0xfffff214}}) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) 2.836801887s ago: executing program 1 (id=753): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000030000000000000010000000cd0000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) recvmmsg(r1, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{0xfffffffffffffffd}], 0x1}, 0x9}], 0x2, 0x20, 0x0) 2.674589049s ago: executing program 4 (id=755): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079100000000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2.596606782s ago: executing program 3 (id=756): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6bcd41fd8"}}, 0x48}}, 0x410) sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1, 0x0, 0x3, {}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "44478438da5cbd75"}}, 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x503, 0x70bd29, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xf100}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x90) 2.525703288s ago: executing program 0 (id=757): ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000002c0)={{}, 0x0, 0x0, @inherit={0x48, &(0x7f0000019400)=ANY=[]}, @devid}) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x8, 0x1, 'SET\x00'}, @NFTA_TARGET_INFO={0xc, 0x3, "02b51112d439c592"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xfea1}}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) read(r2, &(0x7f0000000080)=""/177, 0xb1) 2.520927782s ago: executing program 1 (id=758): socket$nl_route(0x10, 0x3, 0x0) 2.342687224s ago: executing program 4 (id=759): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8931, &(0x7f00000000c0)={'dummy0\x00', @ifru_hwaddr=@broadcast}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0800080005000600000014000000450a0014006600000b899078643cd4f354534373b3f8dce9c90795d78712629fd3"], 0x22) 2.222012406s ago: executing program 1 (id=761): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x2c, 0x68, 0x1, 0xfffffffc, 0xfffffffe, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_FDB={0x4}, @NHA_ID={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 2.153263862s ago: executing program 0 (id=762): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x5, 0x4) r1 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00', 0x7}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8400, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'netdevsim0\x00', 0x400}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@void, {0x8100, 0x6, 0x1, 0x1}}, {@x25={0x805, {0x0, 0x4b, 0x5, "74709db02aab246260772deb0f705f082f"}}}}, &(0x7f0000000180)={0x1, 0x2, [0xc32, 0x504, 0x372, 0x87c]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x15, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, @jmp={0x5, 0x1, 0x6, 0x7, 0x0, 0xfffffffffffffff8, 0xffffffffffffffff}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000000}, @generic={0x5, 0x0, 0x9, 0xa, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x100, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x4, 0x99a, 0x16}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000340)=[r1, 0x1, 0x1], &(0x7f0000000380)=[{0x1, 0x2, 0x2, 0x5}, {0x5, 0x4, 0x6, 0x5}, {0x4, 0x1, 0x8, 0x7}, {0x2, 0x3, 0xc, 0x2}, {0x5, 0x3, 0x8, 0x5}], 0x10, 0xb}, 0x94) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0xf503, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r6, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x1d, 0x2, @l2={'eth', 0x3a, 'dvmrp1\x00'}}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000000600)) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000680), r5) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r7, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockopt$inet6_buf(r1, 0x29, 0xcc, &(0x7f0000000780)=""/59, &(0x7f00000007c0)=0x3b) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000800)={'vlan1\x00', @remote}) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x4004100) r8 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet(r0, &(0x7f0000000940)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) getsockopt$IP_SET_OP_GET_BYINDEX(r5, 0x1, 0x53, &(0x7f0000000980)={0x7, 0x7, 0x3}, &(0x7f00000009c0)=0x28) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dc, &(0x7f0000000a00)="9fa3424fffb00af19282ea8febda5e7fc06960f2ac7b5d8138efc024921db2e124b4af1c5f9ebea0c318f35ffa6a4099cfcf1a615862733189e8d7b67391a36892e9a59d2c95b94883235245b09106a1e45b5c2b83e3e7f283bbac423203ab3a4f6e8a0647dfe94940c462945a886708c9a6253922b9bb626ee37dded0309bc80e619965d6f8cb09372399b9113ca81e3b13bf3943b24f") r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b00), r5) sendmsg$DEVLINK_CMD_TRAP_GET(r9, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000b40)={0x1ac, r10, 0x50bff99aeca8c2b4, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4080}, 0x880) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000dc0), r8) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000ec0)={&(0x7f0000000d80), 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x44, r11, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x9, 0x6]}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8c}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x50) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r9) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14, r12, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x4048000) 2.069655002s ago: executing program 3 (id=763): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=@allocspi={0x148, 0x16, 0x401, 0xfffffffd, 0x0, {{{@in=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x20000000, 0x33}, @in=@broadcast, {0x4, 0xfffffffffffffffe, 0x5}, {0x4, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x3}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x8, 0xfffffffd}, [@migrate={0x50, 0x1b, [{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private2, 0x3c, 0x2, 0x0, 0x3502, 0xa}]}]}, 0x148}}, 0x4808) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket(0x10, 0x3, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=@allocspi={0x148, 0x16, 0x401, 0xfffffffd, 0x0, {{{@in=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x20000000, 0x33}, @in=@broadcast, {0x4, 0xfffffffffffffffe, 0x5}, {0x4, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x3}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x8, 0xfffffffd}, [@migrate={0x50, 0x1b, [{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private2, 0x3c, 0x2, 0x0, 0x3502, 0xa}]}]}, 0x148}}, 0x4808) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) (async) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) 1.995860485s ago: executing program 4 (id=764): sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}}, 0x240040c0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8}]}}}]}, 0x3c}}, 0x0) 1.710517473s ago: executing program 2 (id=766): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b040400000000002000128008000100736974001400028008000200c00002000600080003"], 0x40}}, 0x0) 1.676456838s ago: executing program 3 (id=767): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r3, 0x5, 0x74bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000019c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, r1, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x35}}}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x8}, {0x7, 0x4}, {0xa, 0x2}], "90a6d21ce03beaa0"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x22, 0x2}, {0x73, 0x5}, {0x8, 0x7}], "c701582f01fa4997"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x6}, {0x5, 0x1}, {0xe, 0x7}, {0xd, 0x3}, {0x7f}, {0x5, 0x7}, {0x8, 0x7}, {0x6, 0x7}, {0xb, 0x6}, {0x0, 0x6}], "cb759faa8f6a9e65"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x93, 0x2}, {0x0, 0x7}, {0x2, 0x2}, {0xef, 0x1}, {0x4, 0x7}, {0x81, 0x6}, {0x97, 0x4}, {0xc, 0x2}, {0x7, 0x2}, {0x8, 0x1}, {0x7, 0x5}, {0x10}, {0x4c, 0x1}, {0x4, 0x3}, {0x62, 0x7}, {0xb, 0x4}, {0x7f, 0x37}, {0x6, 0x2}, {0xe, 0x3}, {0x9e}], "81f3c9a287ed8eee"}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x2}}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x4, 0x4}}, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r8 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x890b, &(0x7f0000000000)) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r7, 0x1}, 0x1c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000001980)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001940)={&(0x7f0000001740)={0x1d0, r13, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x194, 0x2a, [@ht={0x2d, 0x1a, {0x2, 0x2, 0x2, 0x0, {0x8001, 0x42, 0x0, 0x3db, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x1, 0x67, 0xd}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_id={0x72, 0x6}, @channel_switch={0x25, 0x3, {0x0, 0x5, 0x6}}, @perr={0x84, 0xee, {0x4, 0xe, [{{}, @device_a, 0xfffffffe, @void, 0x29}, {{}, @device_b, 0x46, @void, 0x3f}, {{0x0, 0x1}, @broadcast, 0x1d, @value, 0x2c}, {{}, @device_b, 0x0, @void, 0x19}, {{}, @broadcast, 0x5, @void, 0x2d}, {{0x0, 0x1}, @device_b, 0x10000, @value, 0xe}, {{0x0, 0x1}, @device_a, 0x5, @value=@broadcast, 0x3a}, {{0x0, 0x1}, @device_b, 0x2, @value=@broadcast, 0x3d}, {{0x0, 0x1}, @device_a, 0x9, @value, 0x2}, {{}, @device_a, 0x7fff, @void, 0x26}, {{0x0, 0x1}, @device_a, 0x4, @value=@device_b, 0x37}, {{0x0, 0x1}, @broadcast, 0x2, @value, 0x36}, {{0x0, 0x1}, @broadcast, 0xe, @value=@device_b, 0x26}, {{0x0, 0x1}, @broadcast, 0x100, @value=@device_b, 0x35}]}}, @channel_switch={0x25, 0x3, {0x0, 0x2c}}, @preq={0x82, 0x6d, {{0x1, 0x0, 0x1, 0x0, 0x1}, 0x7e, 0x0, 0xf, @device_b, 0x5, @value=@broadcast, 0x60, 0x9, 0x7, [{{0x1}, @device_a, 0x8}, {{0x1}, @device_a, 0x2}, {{}, @device_b, 0x8}, {{0x1, 0x0, 0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_a, 0x955}, {{}, @broadcast, 0x3}, {{}, @device_b, 0x9}]}}]}, @NL80211_ATTR_IE={0x25, 0x2a, [@prep={0x83, 0x1f, {{}, 0x4e, 0x9, @device_a, 0x5f1508d3, @void, 0x0, 0x4, @device_a, 0xe30}}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x40000011}, 0x24000000) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0500fcffffff000000000600000008000300", @ANYRES32=r12, @ANYBLOB='\b\x00'/12], 0x28}}, 0x4000080) sendmsg$NL80211_CMD_TESTMODE(r6, &(0x7f0000001700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000000440)={0x1144, r11, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x6d}}}}, [@NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x29, 0x45, "cd248c51eb53c3783fd5d9d434ac5c62ae0d527218fa1e5ebd9032b4ddc846cd587652edec"}, @NL80211_ATTR_TESTDATA={0xf3, 0x45, "6258aecdacb5f2118fcec555d4e466b84deb6540582ddb345a1d3af2d42b4095a5084771be9b853fcb2da090418ae28550194906027a98562399f79b4f0e563af1962d3e5c1730c14aebfde984c64dbad840d02a803f65ba0181994b8cd9f44e367cd27b847177f2a6da3aaacde8b9603cec57bc9b2929785715d2fcafffd035e8b8dcbf0780965b9091107e6e85d8ab2e570afcb895ca4f60088731d1d1a03759eb434d46e2f1246368409bc599ad36c60e5ede88f1c0dea723c31bb8039c53347ffbe53f53b84b2f9df817ba29a18b81fcb1098841c82516f953beb4eb8f3042d79b2b614048d8d1bef59f89169f"}]}, 0x1144}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$nl_route(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000006a000769000200000000000000000005"], 0x18}}, 0x0) 1.634310785s ago: executing program 1 (id=768): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f0000000080)={0x8, 'veth1_to_bond\x00', {'ip6gre0\x00'}, 0x5}) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd42, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) (async, rerun: 32) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001240)={r6, &(0x7f00000001c0), &(0x7f0000001200)=@tcp, 0x1}, 0x20) (async) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x3c, r3, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x40014) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (rerun: 32) recvmmsg(r8, &(0x7f0000003940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe90}}], 0x1, 0x41, 0x0) (async) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001a000000070021006161000005009200000000003400228004000080"], 0x58}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001340)={&(0x7f0000000340)={0xfa0, r7, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1b}}}}, [@NL80211_ATTR_TID_CONFIG={0x470, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x324, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xc4, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xebdf, 0x1, 0x1, 0x400, 0x98e2, 0x7, 0xc1, 0xfffd]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6d6f, 0x100, 0x8, 0x6, 0x3, 0x5, 0x0, 0x8]}}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x7}, {0x7, 0x6}, {0x7, 0x2}, {0x6, 0x3}, {0x1, 0x1}, {0x0, 0x7}, {0x3, 0x8}, {0x7}, {0x3, 0x2}, {0x7, 0x2}, {0x1, 0x6}, {0x5, 0x5}, {0x0, 0x4}, {0x4, 0xa}, {0x0, 0xa}, {0x1, 0x7}, {0x5}, {0x6, 0x4}, {0x5, 0x2}, {0x3, 0xa}, {0x6, 0x2}, {0x1, 0x7}, {0x7, 0x2}, {0x5, 0x9}, {0x3, 0xa}, {0x3, 0x2}, {0x6, 0x2}, {0x4, 0x2}, {0x1, 0x6}, {0x1, 0x6}, {0x0, 0x9}, {0x6, 0x1}, {0x1, 0x3}, {0x7, 0x9}, {0x5, 0x5}, {0x7, 0x7}, {0x0, 0x8}, {0x4, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x77, 0x24, 0x16]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x12, 0x60, 0x60, 0x16, 0x5, 0x6, 0x10, 0x16, 0x4, 0x3, 0x36, 0xc, 0x5, 0x16, 0x30, 0xb, 0x24, 0x16, 0x60, 0x55, 0x2, 0xb, 0x7, 0x5, 0x60, 0x4, 0x5, 0x2, 0x4, 0x1b, 0x5, 0xb]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0x5, 0x8, 0x8, 0x1, 0x1c, 0xf]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfffa, 0xce5a, 0x3, 0x4, 0x5, 0x1, 0x9]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x2, 0x6, 0xda06, 0x7, 0xffff, 0x3ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0x7, 0x9, 0x401, 0x6, 0x1000, 0x799]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xb, 0x101, 0x6, 0x2, 0x2, 0x9, 0x2]}}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x46, 0x8, 0x9, 0x9, 0x26b1, 0x7, 0x67]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc000, 0x3, 0x7, 0x8, 0x2, 0x99eb, 0x2, 0x8001]}}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x4}, {0x0, 0x8}, {0x1, 0x2}, {0x6, 0x1}, {0x1, 0x1}, {0x6, 0xa}, {0x1, 0x6}, {0x2, 0x5}, {0x4, 0xa}, {0x4, 0x9}, {0x0, 0x9}, {0x1, 0x6}, {0x4}, {0x6, 0x7}, {0x5, 0x9}, {0x4, 0x5}, {0x7, 0x6}, {0x2}, {0x1, 0x1}, {0x2, 0xa}, {0x1, 0x1}, {0x0, 0x3}, {0x1, 0xa}, {0x1, 0x3}, {0x0, 0x1}, {0x4, 0x5}, {0x6, 0x1}, {0x0, 0x9}, {0x0, 0x4}, {0x0, 0x2}, {0x2, 0x4}, {0x4}, {0x0, 0x3}, {0x6, 0x6}, {0x7, 0x7}, {0x7}, {0x2, 0x3}, {0x7, 0x5}, {0x0, 0x8}, {0x1, 0xa}, {0x5, 0x5}, {0x4, 0x3}, {0x7, 0x7}, {0x0, 0x8}, {0x6, 0x8}, {0x7, 0x6}, {0x0, 0x7}, {0x2, 0x2}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x8}, {0x4, 0x9}, {0x6, 0x2}]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x1, 0x6}, {0x6, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x8, 0x3ff, 0x81, 0xf775, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x4, 0x9}, {0x1, 0x2}, {0x3, 0x7}, {0x2, 0x2}, {0x7, 0x1}, {0x2, 0x9}, {0x4, 0x2}, {0x7, 0x1}, {0x1, 0xa}, {0x6}, {0x3}, {0x6}, {0x4, 0x4}, {0x3, 0xa}, {0x2, 0x5}, {0x1, 0x1}, {0x5, 0x4}, {0x1, 0x4}, {0x3, 0x8}, {0x3, 0x8}, {0x0, 0x1}, {0x7, 0x7}, {0x2, 0x8}, {0x6}, {0x4, 0xa}, {0x5, 0x1}, {0x0, 0x8}, {}, {0x7, 0x9}, {0x0, 0x4}, {0x6, 0x9}, {0x4, 0xa}, {0x3}, {0x2, 0x9}, {0x3, 0xa}, {0x7, 0x8}, {0x5, 0x3}, {0x0, 0x4}, {0x0, 0x9}, {0x0, 0x5}, {0x1}, {0x1, 0x1}, {0x0, 0x8}, {0x3, 0x6}, {0x4}, {0x2, 0x9}, {0x1, 0x4}, {0x4, 0x8}, {0x1, 0x8}, {0x0, 0xa}, {0x3}, {0x1, 0x9}, {0x2}, {0x1}, {0x1, 0x6}, {0x5, 0xa}, {0x0, 0x8}, {0x7, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {}, {0x1, 0xa}, {0x5, 0x6}, {0x7, 0xa}, {0x6, 0x2}, {0x1, 0x7}, {0x0, 0x6}, {0x3, 0x5}, {0x1, 0x3}, {0x5, 0x5}, {0x0, 0x4}, {0x1, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0xd28b, 0x8, 0xfe6, 0x10, 0x13, 0xa95f, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x74}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xac, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x3, 0x30, 0xc, 0x2, 0x16, 0x2, 0xc, 0x6, 0x4, 0x30, 0x30, 0x48, 0x16, 0x12, 0x36, 0x4, 0x12, 0x5, 0xc, 0x36, 0x7, 0x24, 0x1, 0x1, 0x1, 0x16, 0x30, 0x36]}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x2}, {0x4, 0x6}, {0x3, 0x4}, {0x4, 0x1}, {0x4, 0xa}, {0x2, 0x3}, {0x0, 0x6}, {0x0, 0x4}, {0x6, 0x4}, {0x6, 0xa}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0xa}, {0x0, 0x8}, {0x6, 0x5}, {0x1, 0x8}, {0x6, 0x8}, {0x0, 0x4}, {0x7, 0xa}, {0x0, 0x1}, {0x1, 0x6}, {0x0, 0x4}, {0x1, 0x2}, {0x0, 0x8}, {0x1}, {0x4}, {0x2, 0x4}, {0x6, 0x1}, {0x3, 0x5}, {0x1}, {0x0, 0x4}, {0x5, 0x1}, {0x0, 0x3}, {0x6, 0x5}, {0x6, 0x7}, {0x6}, {0x7, 0x9}, {0x1, 0x5}, {0x0, 0x4}, {0x4, 0xa}, {0x2, 0x7}, {0x1, 0x5}, {0x2}, {0x1, 0x5}, {0x6, 0x7}, {0x1, 0x9}, {0x6, 0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x9}, {0x4, 0x5}, {0x6, 0x9}, {0x1, 0x8}, {0x0, 0x4}, {0x6, 0x2}, {0x6, 0x8}, {0x0, 0x4}, {0x5, 0x3}, {0x0, 0x1}, {0x7, 0x7}, {0x0, 0x9}, {0x7, 0x7}, {0x3, 0x4}, {0x0, 0x4}, {0x4, 0x1}, {0x0, 0x9}, {0x4, 0x5}, {0x0, 0x4}, {0x5, 0x9}, {0x6, 0x3}, {0x6, 0x3}, {0x6, 0x1}, {0x1, 0x2}, {0x1, 0x7}, {}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x4}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd0}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xca}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xc8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x7c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x64, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x8, 0xa, 0x1, 0x1, 0xf, 0x8880, 0xd]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x2, 0xfff, 0x0, 0xa75f, 0xd, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x2471, 0x4, 0xfffb, 0x9, 0x8, 0x1, 0x9c]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe6e, 0x8000, 0x1, 0x700, 0xfff8, 0x400, 0x8, 0x100]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5c}]}]}, @NL80211_ATTR_TID_CONFIG={0x7e0, 0x11d, 0x0, 0x1, [{0x18c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x40}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x54, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x6, 0x1}, {0x3, 0x7}, {0x1, 0x6}, {0x5, 0x9}, {0x4, 0x7}, {0x6, 0x4}, {0x5, 0x2}, {0x3, 0x7}, {0x0, 0x9}, {0x7, 0x6}, {0x3, 0xa}, {0x5, 0x2}, {0x3, 0x8}, {0x6, 0x7}, {0x6, 0x7}, {0x4, 0x4}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0xa}, {0x5, 0x4}, {}, {0x7, 0x8}, {0x3, 0x3}, {0x4, 0x1}, {0x5, 0x4}, {0x6, 0x7}, {0x0, 0x1}, {}, {0x7, 0x7}, {0x4, 0x7}, {0x6, 0x7}, {0x2}, {0x2, 0x2}, {0x2, 0x1}, {0x0, 0x9}, {0x5, 0x8}, {0x1, 0x5}, {0x6, 0x9}, {0x2, 0x1}, {0x2}, {0x6, 0x5}, {0x2, 0x2}, {0x1, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfb}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x26, 0x4, 0x5, 0x8, 0x43b3, 0x1ff, 0xfff7]}}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x9}, {0x0, 0x9}, {0x1, 0x3}, {0x2, 0x8}, {0x6, 0xa}, {0x0, 0x4}, {0x5, 0x9}, {0x3, 0x6}, {}, {0x6, 0x4}, {0x4, 0x9}, {0x7, 0x6}, {0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x1, 0x8}, {0x6}, {0x5}, {0x1, 0x3}, {0x3, 0x6}, {0x6, 0x3}, {0x6, 0x5}, {0x1, 0x1}, {0x1, 0x2}, {0x0, 0x3}, {0x5, 0x6}, {0x2, 0x8}, {0x1, 0xa}, {0x1, 0xa}, {0x1, 0x1}, {0x1, 0x6}, {0x2, 0x6}, {0x5, 0x8}, {0x2, 0x2}, {0x1, 0x3}, {0x6}, {0x3, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x6, 0x8000, 0x8cf6, 0x8, 0x8, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x1, 0x3, 0x19a, 0x2, 0xfff, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0x9, 0x8000, 0x7, 0x0, 0x7, 0x5]}}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x0, 0x1b, 0x4, 0x60, 0x1b, 0x16, 0x9, 0x2, 0x48, 0x2, 0xb, 0x6c, 0x4, 0x9, 0x6, 0x4, 0x6, 0x3, 0x8, 0x60, 0x30]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x6, 0x8}, {0x4, 0x9}, {0x7}]}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0x6, 0xb, 0x36, 0x2, 0x5e, 0x4, 0x9, 0x6, 0x2, 0x1, 0x18, 0x9, 0x48, 0x1, 0x4, 0x6, 0x6, 0x30, 0x12, 0x18, 0x1b, 0x48, 0x24, 0x60, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6d}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7b}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000001}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5b}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x33f}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xae}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x104, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xaf}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xb0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x36, 0x48, 0x48, 0x36, 0x5, 0x3, 0x30, 0x6, 0x12, 0x1b, 0xc, 0x9, 0x6c, 0x1b, 0x2, 0x0]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x65, 0x24, 0xb, 0x1, 0x62d20746f00255da, 0x6, 0xc, 0x11, 0x1, 0xc, 0x6c, 0x24, 0xb, 0x60, 0x9, 0x48, 0x3, 0x153c463520cca593]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x5, 0xa}, {0x6, 0x9}, {0x0, 0x6}, {0x0, 0x8}, {0x6, 0x8}, {0x0, 0x7}, {0x0, 0x8}, {0x6, 0x9}, {0x4}, {0x2, 0x7}, {0x0, 0x1}, {0x1, 0x5}, {0x1, 0x3}, {0x0, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x907, 0x81, 0x692, 0x66a, 0x2398, 0xe, 0x3, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x8, 0x819, 0x400, 0x0, 0x5, 0x4, 0x7f80]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbf67, 0x9, 0x80, 0x5, 0x9a, 0x1, 0x9, 0xffff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xce5b, 0x5, 0x9d0a, 0x7, 0x1844, 0x8001, 0x3, 0xfff9]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffffc0}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x63}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x488, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3a}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffffc}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfa}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x440, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x15dc, 0x3c78, 0x30, 0x7b23, 0x1, 0xf8, 0x7fff, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x2, 0x0, 0x3ff, 0x1, 0x9, 0x28a3, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x8, 0x1, 0x2, 0x5, 0x7, 0x1, 0x6]}}]}, @NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x0, 0x8}, {0x0, 0x4}, {0x1, 0x6}, {0x4, 0xa}, {0x7, 0xa}, {0x7, 0x8}, {0x1, 0x3}, {0x1, 0x6}, {0x0, 0xa}, {0x0, 0x1}, {0x7, 0x6}, {0x6, 0xa}, {0x5, 0x8}, {0x2, 0x2}, {0x5, 0x2}, {0x4, 0x8}, {0x5, 0x3}, {0x6}, {0x5, 0xa}, {0x6, 0xa}, {0x2, 0xa}, {0x5, 0x7}, {0x6, 0x4}, {0x0, 0xa}, {0x7, 0x1}, {0x4, 0x4}, {0x2, 0x5}, {0x5, 0x4}, {0x4, 0x8}, {0x2, 0x2}, {0x2}, {0x5, 0x9}, {0x5, 0x5}, {0x0, 0x7}, {0x0, 0x5}, {0x0, 0x9}, {0x0, 0x6}, {0x4, 0x5}, {0x3, 0x2}, {0x2, 0x6}, {0x3, 0x9}, {0x0, 0x8}, {0x1, 0x8}, {0x0, 0x4}, {0x1, 0xa}, {0x1, 0x5}, {0x7, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0x7, 0x800, 0x2, 0x6, 0xda, 0x400]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xef, 0x1, 0x5, 0xa0, 0x3, 0x9, 0x3ff, 0x34]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x4, 0x1}, {0x5, 0x1}, {0x7, 0x2}, {0x7, 0x4}]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x3, 0x9}, {0x5, 0x3}, {}, {0x1, 0x5}, {0x3, 0x7}, {0x1, 0x2}, {0x5, 0x4}, {0x2, 0x2}, {0x5, 0x3}, {0x5, 0x6}, {0x7, 0x1}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x5, 0x7}, {0x7, 0xa}, {0x5, 0x8}, {}, {0x3}, {0x6, 0x1}, {0x6, 0x2}, {0x1}, {0x3}, {0x5, 0xa}, {0x4, 0xa}, {0x7, 0x8}, {0x5, 0xa}, {0x7, 0xa}, {0x0, 0x7}, {0x2}, {0x7, 0x8}, {0x6, 0x9}, {0x1, 0x8}, {0x1, 0x7}, {0x6, 0x6}, {0x0, 0x9}, {0x2, 0x7}, {0x2, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0x4, 0x9400, 0xfff, 0x8, 0x1, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x2e5, 0x7ff, 0x9, 0x4, 0x2, 0x1000]}}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x5, 0xa}, {0x6}, {0x4, 0x9}, {0x1}, {0x1, 0x7}, {0x1, 0x9}, {0x1, 0x4}, {0x1, 0x4}, {0x0, 0x4}, {0x3, 0x8}, {0x7}, {0x5, 0x3}, {0x5, 0x9}, {0x3, 0x8}, {0x5, 0x3}, {0x0, 0xa}, {0x1}, {0x0, 0x9}, {0x4, 0xa}, {0x5, 0x8}, {0x5, 0x7}, {0x5, 0x4}, {0x7, 0x9}, {0x2}, {0x1, 0xa}, {0x7, 0x3}, {0x5, 0x1}, {0x1, 0x9}, {0x0, 0x2}, {0x1, 0x9}, {0x1, 0x7}, {0x3, 0x7}, {0x6, 0x6}, {0x3, 0x4}, {0x0, 0x1}, {0x1}, {0x4}, {0x6, 0x4}, {0x0, 0x9}, {0x4, 0x4}, {0x6, 0x2}, {0x2, 0x3}]}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x6, 0x8105fb0dca2354a0, 0x1b, 0x12, 0x18, 0x30, 0x6, 0x1, 0x1, 0x30, 0x60, 0x3, 0x30, 0x1b, 0x48, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x3, 0x0, 0x5, 0x7, 0x2, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x48, 0xb, 0x3, 0x9, 0xb, 0x5, 0x6, 0x30, 0x9, 0xb, 0x30, 0xb, 0x2, 0x11, 0x36, 0x6c, 0x30, 0x70, 0x36, 0x9, 0x16, 0x30, 0x1, 0x16, 0xb, 0x3, 0x12, 0xb, 0x24, 0x72, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0xd8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1, 0x7, 0x8, 0xff2, 0x7, 0x8, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x5, 0xa}, {0x3, 0x4}, {0x1, 0x5}, {0x3, 0x1}, {0x0, 0x4}, {0x0, 0x2}, {0x3}, {0x0, 0xa}, {0x2, 0x6}, {0x3}, {0x7, 0x1}, {0x7, 0x5}, {0x1, 0x6}, {0x3, 0x5}, {0x7, 0x2}, {0x0, 0x2}, {0x1, 0x6}, {0x3, 0x5}, {0x0, 0xa}, {0x3, 0x7}, {0x1, 0x7}, {0x4, 0x2}, {0x0, 0x1}, {0x3, 0x7}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x3}, {0x2, 0x8}, {0x1, 0x2}, {0x7, 0x6}, {0x6, 0x8}, {0x4, 0x5}, {0x3, 0x3}, {0x1, 0xa}, {0x5}, {0x6, 0x4}, {0x6, 0x5}, {0x6, 0x7}, {0x1, 0x4}, {0x1}, {0x2, 0x4}, {0x5, 0x8}, {0x2, 0x8}, {0x1, 0x3}, {0x5, 0xa}, {0x2, 0x9}, {0x0, 0x4}, {0x4, 0xa}, {0x2, 0x9}, {0x1, 0x4}, {0x7, 0x8}, {0x5, 0x6}, {0x3, 0x6}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x6}, {0x4, 0x3}, {0x1, 0x7}, {0x2, 0x5}, {0x4, 0x8}, {0x3, 0x5}, {0x5}, {0x3, 0x3}, {0x4}, {0x5, 0x2}, {0x0, 0x5}, {0x6, 0x8}, {0x4, 0x5}, {0x7, 0x6}, {0x2, 0x5}, {0x6, 0x4}, {0x0, 0x3}, {0x7, 0x5}, {0x0, 0x1}, {0x2, 0x4}, {0x5, 0x1}, {0x4, 0x8}, {0x3, 0x3}, {0x5, 0x9}, {0x0, 0x9}, {0x6, 0x5}, {0x2}, {0x4, 0xa}, {0x0, 0x4}, {0x4, 0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x4, 0xa}, {0x3, 0x3}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0xa}, {0x4, 0x6}, {0x0, 0x1}, {0x7, 0x9}, {0x1, 0x6}, {0x5, 0x1}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x1}, {0x7, 0x5}, {0x2, 0x7}, {0x4, 0x8}, {0x1, 0x2}, {0x0, 0x4}, {0x5, 0x6}, {0x4, 0x3}, {0x1, 0x5}, {0x1, 0x5}, {0x1, 0x5}, {0x5, 0xa}, {0x5, 0x6}, {0x0, 0x7}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x1, 0xc, 0x9, 0x24, 0x1d, 0x60, 0x60, 0xb, 0x30, 0x1b, 0x18, 0x1f, 0x1e, 0x2, 0x2, 0x36, 0x36, 0x16, 0x5, 0x36, 0x6, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x10, 0x177, 0x8000, 0x3fd, 0xff2a, 0x1, 0x6]}}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x2, 0x34a, 0x6b2d, 0xa4c5, 0x5, 0xf4, 0x3]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x2, 0x4, 0xe, 0x6c, 0x16, 0x1b, 0x14, 0x48, 0x9, 0xb, 0x1, 0xd, 0x0, 0x16, 0x25]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xfffd, 0x1000, 0xffff, 0x7, 0x1200, 0xfff7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0xa9f, 0xbb5, 0x8000, 0x3, 0x80, 0xf1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xffff, 0x3, 0x4, 0x2, 0x1, 0x120, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x4, 0x80, 0x101, 0x3, 0x3, 0xc, 0x1c81]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1, 0x5, 0x18, 0x16, 0x28, 0x5, 0x6, 0x1, 0x16, 0x36, 0x24, 0x6c, 0x60, 0xc, 0x2, 0x1, 0x4, 0x1b, 0x11, 0x16, 0x12, 0x1b, 0x36, 0x22, 0x4, 0x4]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff9d, 0xfff, 0x0, 0x0, 0x7, 0xc3, 0x8, 0xa]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x6, 0x3ff, 0x2, 0x8000, 0x4, 0x0, 0xfff9]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x3, 0x7}, {0x2, 0x6}, {0x1, 0xa}, {0x6, 0x7}, {0x0, 0x1}, {0x5, 0x8}, {0x0, 0x9}, {0x6, 0x8}, {0x7, 0x8}, {0x3, 0x9}, {0x0, 0x5}, {0x7}, {0x3, 0x6}, {0x6, 0x9}, {0x6, 0xa}, {0x5, 0x1}, {0x1, 0x9}, {0x2, 0xa}, {0x1}, {0x1, 0x8}, {0x3, 0x9}, {0x1, 0x1}, {0x6, 0x1}, {0x1, 0xa}, {0x6, 0x5}, {0x1, 0x1}, {0x0, 0x3}, {0x6, 0x7}, {0x5, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x7}, {0x2}, {0x3, 0xa}]}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x10, 0xffc0, 0x2, 0x8, 0x7a38, 0x5a, 0x6]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x3, 0x5}, {0x5, 0x7}, {0x2, 0xa}, {0x4, 0x2}, {0x1, 0xa}, {0x2, 0x6}, {0x3, 0x4}, {0x6, 0x5}, {0x5, 0xa}, {0x6, 0x6}, {0x3, 0x5}, {0x2, 0x8}, {0x1, 0x7}, {0x5}, {0x6, 0x2}, {0x3}, {0x7, 0x5}, {0x5, 0x9}, {0x6, 0x7}, {0x0, 0x1}, {0x6, 0x2}, {0x2, 0xa}, {0x0, 0x5}, {0x1, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x0, 0x2}, {0x3, 0xa}, {0x7, 0x1}, {0x0, 0x7}, {0x4, 0x5}, {0x6, 0x5}, {0x0, 0x7}, {0x7, 0x9}, {0x6, 0x1}, {0x1, 0x9}, {0x6, 0x3}, {0x7, 0x1}, {0x6}, {0x5, 0xa}, {0x1, 0x5}, {0x4, 0x7}, {0x2, 0x6}, {0x0, 0x2}, {0x2}, {0x5, 0x4}, {0x1, 0x3}, {0x0, 0x1}, {0x2, 0xa}]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x0, 0x4}, {0x1, 0x3}, {0x5, 0x2}, {0x7, 0x4}, {0x6, 0xa}, {0x6, 0x2}, {0x6, 0x3}, {0x0, 0x7}, {0x2, 0xa}, {0x1, 0x7}, {0x3, 0x2}, {0x6, 0xa}, {0x5, 0x8}, {0x7, 0x1}, {0x5, 0x2}, {0x4, 0x3}, {0x1, 0x8}, {0x6}, {0x7, 0x1}, {0x2, 0xa}, {0x5, 0x6}, {0x4, 0x7}, {0x4, 0x2}, {0x5, 0x1}, {0x6, 0x5}, {0x7, 0x9}, {0x4, 0x2}, {0x1, 0x9}, {0x6, 0x9}, {0x1, 0x2}, {0x5}, {0x4, 0x4}, {0x0, 0x8}, {0x3, 0x9}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0x7}, {0x7, 0xa}, {0x3, 0x6}, {0x1, 0x3}, {0x5, 0xa}, {0x4, 0xa}, {0x2, 0x2}, {0x2, 0x1}, {0x1, 0x7}, {0x5, 0x4}, {0x3, 0xa}, {0x7, 0x5}, {0x1}, {0x6, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x16, 0xb6c4, 0x8, 0x7, 0x7f63, 0x0, 0xa]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x31}]}]}, @NL80211_ATTR_TID_CONFIG={0x330, 0x11d, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x83}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x92}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x62}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8f}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x69}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xaf}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x234, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb8}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe355}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x60}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1ec, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x4, 0xf8, 0xc9, 0x1, 0x9, 0xda, 0xfa]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2d, 0x6, 0x3, 0x6, 0x1, 0x2, 0x8, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7da, 0x1, 0x8, 0x802e, 0x7, 0x0, 0x3]}}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x2, 0xa}, {0x0, 0x4}, {0x4, 0x9}, {0x0, 0x4}, {0x4, 0x4}, {0x5, 0x2}, {0x2, 0x5}, {0x7, 0x5}, {0x3, 0x1}, {0x0, 0x9}, {0x2, 0x7}, {0x1, 0x6}, {0x2, 0x7}, {0x7, 0x4}, {0x1, 0x6}, {0x2, 0x2}, {0x5, 0x2}, {0x1, 0x7}, {0x4, 0x5}, {0x6, 0x1}, {}, {0x1, 0x9}, {0x2, 0x4}, {0x0, 0x2}, {0x2, 0x8}, {0x3, 0x4}, {0x7, 0x6}, {0x3, 0x8}, {0x1, 0x6}, {0x5, 0x6}, {0x4, 0x6}, {0x1, 0x9}, {0x7, 0x7}, {0x6, 0xa}, {0x1, 0x7}, {0x2, 0x3}, {0x2, 0x4}, {0x0, 0x8}, {0x3, 0x6}, {0x0, 0x1}, {0x0, 0x1}, {0x7, 0xa}, {0x0, 0x6}, {0x5, 0x9}, {0x2, 0x1}, {0x6, 0x5}, {0x4, 0x2}, {0x5, 0xa}, {0x0, 0x6}, {0x4}, {0x0, 0x3}, {0x3, 0xa}, {0x7, 0xa}, {0x7, 0x2}, {0x1, 0x6}]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x2, 0x6}, {0x1, 0x3}, {0x0, 0x2}, {0x0, 0x9}, {0x1, 0x5}, {0x1, 0x4}, {0x7, 0xa}, {0x5, 0x8}, {0x3, 0x5}, {0x3, 0x3}, {0x5, 0xa}, {0x1, 0x3}, {0x3, 0x9}, {0x7, 0x2}, {0x4, 0x2}, {0x5, 0x6}, {0x6, 0x7}, {0x3, 0x9}, {0x2, 0x9}, {0x1, 0x7}, {}, {0x6, 0x7}, {0x2, 0x3}, {0x0, 0xa}, {0x2, 0x3}, {0x3, 0x3}, {0x7, 0x8}, {0x6, 0x9}, {0x2, 0x2}, {0x0, 0x8}, {0x6, 0x7}, {0x6, 0xa}, {}, {0x0, 0x4}, {0x1, 0x6}, {0x0, 0x4}, {0x1, 0x4}, {0x2, 0x8}, {0x0, 0x2}, {0x2, 0x4}, {0x1, 0x7}, {0x5, 0x5}, {0x2, 0x9}, {0x7, 0x3}, {0x6, 0x2}, {0x1, 0xa}, {0x3, 0x7}, {0x3, 0x8}, {0x0, 0x1}]}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x0, 0x1, 0x400, 0x1, 0x101, 0xde6f, 0x95a]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x6, 0x3, 0x4465, 0x8878, 0x3, 0x0, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xaa, 0x10, 0x800, 0x3ff, 0xee, 0x2, 0xe, 0x2]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x6}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x24, 0x24, 0xb, 0x5, 0x1b, 0x48, 0xc, 0x6c, 0x24, 0x24, 0x12, 0x48, 0x3, 0x6, 0x48, 0x5, 0x5, 0x6c, 0xc, 0x3, 0x6, 0x36, 0x6936aa9cca6e3685, 0x36, 0x18, 0x76, 0x6c, 0x1, 0x3, 0x9]}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x4, 0x305847da0edf4fc4, 0x4, 0x3, 0xb, 0x3, 0x6c, 0x6c, 0x6, 0x9, 0x4, 0x0, 0x2, 0x6c, 0x30, 0x6, 0x0, 0x0]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x0, 0x6}, {0x3, 0x3}, {0x5, 0x4}, {0x3, 0x3}, {0x6, 0x7}, {0x1, 0x8}, {0x0, 0x7}, {0x7, 0x9}, {0x2, 0x5}, {0x1}, {0x0, 0x4}, {0x1, 0x7}, {0x6, 0x5}, {0x6, 0x4}, {0x4}, {0x7, 0x5}, {0x2, 0xa}, {0x0, 0x7}, {0x7, 0x3}, {0x2, 0x2}, {0x0, 0x4}, {}, {0x1, 0xa}, {}, {0x4, 0x9}, {0x1, 0x9}, {0x7}, {0x3, 0x1}, {0x4, 0xa}, {0x0, 0x5}, {0x4, 0x2}, {0x6, 0x8}, {0x3, 0xa}, {0x6, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x92e, 0x6, 0x0, 0xd, 0x9, 0x7e, 0x827]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3c6, 0x0, 0x19, 0x9, 0x9, 0x3, 0x0, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb14, 0x7, 0x8, 0x3, 0x3, 0x2, 0x4, 0xe]}}, @NL80211_TXRATE_HE_GI={0x5}]}]}]}, {0x4}]}]}, 0xfa0}}, 0x4004010) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="240100004100010029bd70000400000003000000040047800c010180080110800401088000012680080062", @ANYRES32=r0, @ANYBLOB], 0x124}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 1.403840804s ago: executing program 2 (id=769): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c8f0}, 0x4890) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c8f0}, 0x4890) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800b00010072656a656374000014000200080001400000009205000200000000000900010073797a30000000000900020073797a32"], 0x7c}}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f00000005c0)="bad330fbc93f8b78040000ea0756a85d86dd", 0x5ea, 0x4041, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069000c00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) 1.399634363s ago: executing program 4 (id=770): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='&'], 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000600)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa2186dd6000318e00383a01fe8e880000000000000000000000000001348d28ba5ea538c60f7ee14bbf2ab08fff020000000000000000000000000001020190780400000060000006da340400200100"/111], 0x0) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x71bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0x9}, {0x1, 0xc}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xf3f, 0x70bd2a, 0x25dddbbd, {0x0, 0x0, 0x0, r6, {0x2, 0x3da48c8682330ab8}, {0x0, 0x1}, {0x7, 0xfffa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200058c0}, 0x4880) r7 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000440)={0x2c, 0xc, r6, 0x6, r7}, 0x10) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000180)=0x3) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r11, @ANYBLOB="16fd5b0006006500b00000003e9aa0f742c093f76363326759a1d28f93ab6fcacd80a30ec494c5ec1b6042edd60bc519b1a6c8f94c979786bea0eed836833ccd25a9f9998cbb6f24871bb2aa21f58bb08e176ee500f68475696cfeb8d0b91579046e998fee05b2c30bf6cc56b8d073390d79f45cbd8cf4e92115234f2b3426acda187c53f59cc23487ba7ff3341119468be4e5d72ec2eeac3e684af12f42eceb7c0d7bd812641f"], 0x28}}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00012abd7000fedbdf253000000008000300", @ANYRES32=r11, @ANYBLOB="0c009900000000005700004e35e10e5d000600360023000000060036003a0000000600360041000000060036003c000000060036003a000000060036003d000000"], 0x58}, 0x1, 0x0, 0x0, 0x400c4}, 0x8080) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r12) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r12, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r15, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) 1.346591184s ago: executing program 1 (id=771): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000040000000000000000079120cde0000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2, @ANYBLOB="0a0001"], 0x48}}, 0x0) 1.298284726s ago: executing program 0 (id=772): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe1b, &(0x7f0000000240)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x24040842) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYBLOB="c5397ac4d58e81f3c6d4033f464cf9f8c11064ba410e81a74990a3cce956720ac8b46f3b191aa0d0f2e45340e51403f69df5eec45655833eb93281d9172b84e2a81d417915002bd658dacc039bac1b112bf9b2dfd5f570e3ad15f1803ec0604d8ee3635a8b707a63a2384050b175472bf5cc5356af36b3508ece1b2ce5c4b0f87685688436de2cb45f025ab9be35a35ab75c068d51de05349eb0a5b90375369f4b58fecdf84ca2f1", @ANYBLOB="0c0002"], 0x24}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f00000005c0)={'syztnl1\x00', r5, 0x8, 0x8000, 0x4, 0x5, {{0x16, 0x4, 0x0, 0x3, 0x58, 0x66, 0x0, 0x6, 0x2f, 0x0, @multicast1, @multicast1, {[@timestamp_addr={0x44, 0x3c, 0x1a, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1e}}, {@local, 0x6}, {@loopback, 0x18800}, {@private=0xa010100, 0x6a71}, {@local, 0x73898198}, {@private=0xa010101, 0x1}]}, @timestamp={0x44, 0x8, 0xad, 0x0, 0x9, [0x3]}]}}}}}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$packet(0x11, 0x2, 0x300) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) socketpair(0xa, 0x5, 0x9, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x4800, 0x0) (async, rerun: 32) socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) (async) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r12 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r12, 0x11, 0x67, &(0x7f0000000000)=0xfffffffa, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x0, r13}, 0x32) (async, rerun: 64) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e00000010000000060000000f00000000000000", @ANYRES32=r7, @ANYBLOB="0800000000a6eb9fda1bd87995a318866d4bff93", @ANYRES32=r2, @ANYRES32, @ANYBLOB="04000000050000000200"/28], 0x50) (async) r15 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000880)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000140)={0x20, 0x0, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_ZONE={0x6}, @CTA_NAT_DST={0x4}]}, 0x20}}, 0x40000) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(r15, 0x84, 0x11, &(0x7f0000000480)={r16, 0x4236}, &(0x7f0000000500)=0x8) sendmmsg(r6, &(0x7f0000000340)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd85, r14}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='A', 0x1}], 0x1}}, {{&(0x7f0000000080)=@nfc_llcp={0x27, 0x0, 0x5, 0x6, 0xb, 0x6, "f5a25e37cb54d07bbb4f745263aeda0288cd084cdf68650902c992169197882f566c952a3da82099d2cc891ac6eb9744bbfbaed7ad08273135c50e821ac4c7", 0x18}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000001c0)=[{0x90, 0x101, 0x6, "b1bf6b6dd25c5d1358d95ee042da9163596b8b763fc60aec05da290d2b8ef1178bc74229c1fad9f55b523820386559f05508e96476e432c38f4bfc6c60b09d3efa99af265d265701d371c6896c4b83f49abc561389fb23d57616161a5deeba0575bde463bdd508297eb506348684b7b0c70e4cc5692003b8000000000000"}, {0xc0, 0x10f, 0xffff, "7daf0e2c13ededbab42c9897e4ab9eae9dc76f2d44ae231c88c5f765b157c79f425c50576eca9453b1dcaae0174f9a1408f89aa01b703559388af86472388931700ae1cc8c57dfc83ffc0e7b2ea19ebd9abb13c7d147303eb4f46aa936000340f33cea7e62455013ef3a5c918cc39fc7f275da5dd216cc62331685c1e2095177ec59218dfd277950b56d3f44da4c409291d914901dc83cd950b1543c2313083077c894e1180020ed620342"}], 0x150}}], 0x2, 0x0) 1.291061968s ago: executing program 3 (id=773): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x70bd2b, 0x2, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x2, 0xffe, {@ip4=@loopback}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@ipv6_newroute={0x30, 0x18, 0x8, 0x70bd25, 0x25dfdbfd, {0xa, 0x20, 0x14, 0x6, 0xfe, 0x1, 0xff, 0x1}, [@RTA_MULTIPATH={0xc, 0x9, {0x0, 0x2a, 0x2, r2}}, @RTA_EXPIRES={0x8, 0x17, 0x6}]}, 0x30}}, 0x0) 1.053595793s ago: executing program 3 (id=774): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2, 0xdd}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e000000000000000380000007000000030000ca75ffffff00000000000000002e"], &(0x7f0000000040)=""/249, 0x46, 0xf9, 0x6}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x718}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}], [{}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0xfc, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@TCA_STAB={0xd8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x7f, 0x2, 0x7, 0x2, 0x2, 0x6, 0x8}}, {0x14, 0x2, [0x9, 0x3, 0x3, 0xfffc, 0x2, 0xef71, 0x76, 0x9]}}, {{0x1c, 0x1, {0x4, 0x96, 0x5, 0xff, 0x2, 0x7a60, 0x7fff, 0x5}}, {0xe, 0x2, [0x3, 0x7, 0x2004, 0x6, 0x8000]}}, {{0x1c, 0x1, {0xd6, 0x4, 0x4, 0x2, 0x0, 0x0, 0xfff, 0xffffffffffffff2c}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x0, 0x2d, 0x8, 0x2, 0x8090, 0xfffffffe, 0x4}}, {0xc, 0x2, [0x6, 0x4, 0x1, 0x8]}}, {{0x1c, 0x1, {0x2, 0x9, 0x10, 0x7, 0x1, 0x40, 0x1, 0x8}}, {0x14, 0x2, [0x7, 0x0, 0x8000, 0x33, 0x1ff, 0x7, 0x8, 0x5]}}]}]}, 0xfc}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000bc0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, 0x0, {0x9, 0x7}, {}, {0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@updsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in6=@loopback, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff, 0x5}, {0x0, 0xfffffffffffffffd, 0x1900000000000000}, {}, 0x0, 0x0, 0xa, 0x4, 0x80}, [@algo_auth_trunc={0x8d, 0x14, {{'sm3\x00'}, 0x208, 0x0, "a8841ff973ad4a7ffa45a84ae2540cfadba6d51b9b26bae4ce7c99365983d06d1ccd6bb6054247be71e404b434ebca103d267b7b4d5886028daf42a66adf39ff27"}}]}, 0x180}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="20002abd7000fedbdf2510000000100001800c0007004c00000016000000080005000e0000000800870059040000"], 0x34}, 0x1, 0x0, 0x0, 0x20008100}, 0x20048800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r5) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r6, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xea}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x9c, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf95}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x280080c0}, 0x4880) r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xa, 0x200000000000014f, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYRESHEX], &(0x7f0000000140)='GPL\x00', 0x9, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a}, 0x94) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x64, r8, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x48c0}, 0xc040) syz_genetlink_get_family_id$smc(&(0x7f0000000240), r0) r9 = socket$inet6(0xa, 0x3, 0xfa) setsockopt$inet6_int(r9, 0x29, 0x3e, &(0x7f00000000c0)=0x3, 0x4) sendto$inet6(r9, 0x0, 0xfffffffffffffd2f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r10, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x4) ioctl$BTRFS_IOC_LOGICAL_INO(r7, 0xc0389424, &(0x7f00000000c0)={0x0, 0x38, '\x00', 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 1.051435973s ago: executing program 0 (id=775): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) (async) r3 = socket$kcm(0x2, 0xa, 0x2) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r6], 0x68}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r1, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0xfdcd, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x1c, 0x63, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e26, 0x4e20, 0x8}}}, 0x2a) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1035}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0x6, 0x1, 0x0, 0x1, [{0x8, 0x3, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010029bd70000000000000000000", @ANYRES32=r7, @ANYBLOB="94010200140001001c0012800b0200006d616373656300000c00028005000d41540000005dec182c95482095a8b04476d9135d573f34edbe"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 936.163168ms ago: executing program 1 (id=776): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3a, 0x8, 0x2}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000008000000700f82800"], 0x48) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0) (async) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="2c4954bea8d9fa54afed7dfbfb1f37b0ae1447a7d2000000", @ANYBLOB="0f8d310d82c7fd5afa5e55256965dcd0c153d6e289a55bebb5b2218d7d1fc2f540b4c129a688b4ab21e8deaaae7255041fdeef3fe166e7725735a387b8eb63106cf8e2152bd7bdfffcd56359f2dfd286b2c7754a858417b6a406c664f2575f9e76267810", @ANYRESHEX=r0, @ANYBLOB="4f2f865cd0f7883ca4c4f1ffdab2fa01", @ANYBLOB, @ANYRES64=0x0], 0x20) 798.78017ms ago: executing program 2 (id=777): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd0, &(0x7f0000000600), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="74b1ad4d70bc3e199b80c5b35a187f8e73eddb5f826445b1e0b4187606000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 612.802265ms ago: executing program 4 (id=778): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYRES32], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x77) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xffffffffffdfffff, 0x0, 0x10, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wg2\x00', 0x0}) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000004c0)={0xffffffffffffffff}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f0000000680)={&(0x7f0000000580)=""/18, 0x12, 0x0, &(0x7f00000005c0)=""/149, 0x95}}, 0x10) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@generic={&(0x7f00000007c0)='./file0\x00'}, 0x18) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000840)={0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_lsm={0x1d, 0x14, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4e7566d9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x4}, @map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0xfffffffe, 0xd4, &(0x7f0000000380)=""/212, 0x40f00, 0x20, '\x00', r3, 0x1b, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x3, 0x10, 0x5, 0x10001}, 0x10, r5, 0x0, 0x2, &(0x7f0000000b80)=[r6, r7, r8], &(0x7f0000000bc0)=[{0x1, 0x5, 0x8, 0x8}, {0x4, 0x4, 0x7, 0x4}], 0x10, 0x8}, 0x94) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000180)={r0, &(0x7f0000000080)=']\\\'--)@\x00', 0x147002, &(0x7f00000000c0)={@align=0x7f46, {0x4, 0xb, 0x1000, 0x7}}, 0x643f, &(0x7f0000000100), &(0x7f0000000140)=0x70b3}) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000001c0)="e20c512336016a7312c51407b5097bbe63ecc32fed575cd267f411e3f462ba9162f4907cbc75d844f13eeeee4b74cd79887cceace4941ee4ec77c52e31f02c3653e2a5f50d9ec4d60cadc43f928422df83fa48f32b6c3dee48cc36", 0x5b) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000054c0)=@newtfilter={0x2d54, 0x2c, 0x400, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x8, 0x10}, {0xfff3, 0x9}, {0xfff1, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xa0}}, @filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_FLOWER_INDEV={0x14, 0x2, 'pim6reg0\x00'}, @TCA_FLOWER_KEY_SCTP_SRC={0x6}, @TCA_FLOWER_KEY_UDP_DST_MASK={0x6}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e22}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xffffffff}]}}, @filter_kind_options=@f_fw={{0x7}, {0x2cc0, 0x2, [@TCA_FW_POLICE={0x854, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x8, 0x4, 0x9, 0x6, 0x2, 0x7fffffff, 0xfffffffe, 0x9, 0xe8, 0x9, 0x8, 0x4, 0x6, 0x6, 0x7097, 0x0, 0x8, 0x200, 0x9, 0x7fff, 0x64c9, 0x8, 0x4, 0x3, 0x1, 0x4, 0x8773, 0x100, 0x8, 0x8, 0x7, 0x4, 0x8, 0x5, 0x8, 0x4, 0x7, 0x4, 0x4, 0xff, 0x8, 0x9, 0x2, 0x6, 0xf, 0x2, 0x1, 0x7, 0x60, 0x9, 0x10, 0x6, 0x9, 0x4, 0x1000, 0x6, 0xfffffffc, 0x7, 0x81, 0x5, 0x0, 0x9, 0xffffffff, 0x3, 0x7fffffff, 0xd, 0x3, 0x7, 0x5, 0xeaa3fda, 0x2, 0xfffffff8, 0x1d4500, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x3, 0x2, 0xffff8000, 0x4, 0xffff0000, 0x65f1, 0x7, 0x1a, 0x9, 0x7f, 0xc, 0x1c0, 0x7fffffff, 0x7, 0xff, 0x7, 0x7, 0x6, 0x3, 0x40, 0x280000, 0x1, 0xfffffffd, 0x7fffffff, 0x6, 0x7fffffff, 0x97, 0x5, 0x4, 0x17, 0x24, 0x6, 0x3dad, 0xc6e5, 0x5, 0x5, 0xa6c, 0x6, 0x6, 0xd60b, 0x200, 0x6, 0x0, 0x5a68, 0x0, 0x4, 0x0, 0x3ff, 0x6, 0x5, 0x7, 0xa228, 0x1c5c, 0x7f, 0xd, 0x8, 0x0, 0x6, 0x80000000, 0x9, 0x5, 0xcb, 0x0, 0x5, 0x9, 0x401, 0x401, 0xfff, 0x4d, 0x1, 0x0, 0x3ff, 0x4, 0x3, 0xa0, 0x6, 0x9, 0xc9e, 0x1, 0x8, 0xcb9, 0xb6, 0x7f, 0xb375, 0xfffffffd, 0x10, 0x1, 0x8001, 0xfffffffe, 0x7fffffff, 0x7, 0x8001, 0x3, 0x3ff, 0xfffff8b0, 0x7, 0x4, 0x9, 0x4, 0x3, 0xd, 0x8, 0x9, 0x1, 0x8, 0x7, 0x10, 0x10000, 0x0, 0x5, 0x7, 0x5, 0xb, 0x4, 0x9cc, 0xc, 0x1, 0x0, 0x2, 0x6, 0xff, 0x5, 0xf7, 0xc40, 0x3, 0xfffffffa, 0xebda, 0x2, 0x4, 0x3, 0x7, 0x0, 0xd8, 0x2f3a, 0x0, 0x9, 0x1, 0x7, 0x3ff, 0x0, 0x9, 0x8, 0x40, 0xf60b, 0x28, 0xc, 0x5, 0x10, 0x3b0baa78, 0x9, 0x5, 0x80, 0x7fffffff, 0x8, 0x1000, 0x8001, 0x140, 0x0, 0x8, 0x400, 0x7, 0x7, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x8, 0x49, 0x3, 0x3ca0be80, 0x3, 0x9, 0x1, 0x0, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x101, 0x34e8, 0x18, 0x2, 0x8, 0x6, 0x7, 0x1800000, 0x4, 0x2, 0x10001, 0x5, 0xc00f, 0x7, 0xffff, 0x80000001, 0xfffffffc, 0x1, 0xc0, 0x7a, 0x3, 0x1d800000, 0x3, 0x4, 0x800, 0x1, 0x2, 0x2, 0x4, 0x9, 0x100, 0x40, 0x3, 0x6, 0x1000, 0x2, 0x415, 0x3, 0x800, 0x6, 0x7, 0x7, 0xfa61, 0xf, 0xffffffff, 0xfff, 0x9, 0x80000000, 0x9, 0x2, 0xc, 0xfc, 0x5, 0x80000000, 0xf, 0xff, 0x3, 0xf, 0x1, 0x34b, 0x400, 0x1, 0x9, 0x800, 0x9, 0x3, 0x0, 0x200, 0xffffff01, 0x101, 0x1, 0x5, 0x2624, 0x7, 0x34bdf9a6, 0xe6c, 0x6, 0x0, 0x1ff, 0x7f, 0xd, 0x101, 0x5ca7, 0x80000000, 0x8000, 0x5, 0xb665, 0xfb0, 0x4, 0x3, 0x1ff, 0x7, 0x9, 0xfffffff0, 0x3, 0xfffffff0, 0x5, 0x4, 0x7, 0x8, 0xfffffff9, 0x6, 0x4, 0x7, 0x38c, 0x9, 0xf, 0x9, 0x603, 0x7ff, 0x8, 0x7, 0x5, 0x86, 0x2, 0x0, 0x50, 0x10, 0x0, 0xd, 0x8, 0x2, 0x4, 0x0, 0x7f10, 0x8, 0x7fff, 0xaf, 0x2, 0x30, 0xfffffffb, 0x9, 0x7, 0x71, 0x8, 0x6, 0x8001, 0xa9, 0x1d, 0x5, 0xa, 0x7, 0x6, 0x0, 0x5, 0x10, 0x3, 0x80000001, 0x3, 0x999, 0xfffffffb, 0x6, 0x3, 0x8000, 0x3, 0x6, 0xc7, 0xfffffffe, 0xc1c, 0xc, 0xffffff01, 0x7fffffff, 0x6, 0x2, 0x7, 0x4, 0x9, 0x18f, 0x6, 0xd20, 0x8001, 0x4, 0x9, 0x3, 0x9, 0x70, 0x57, 0xc, 0x4, 0x8000, 0x3, 0x400, 0x7f, 0xf, 0x7, 0x2, 0x3, 0x0, 0x6, 0x5, 0x3, 0xfffffff0, 0xfffffffb, 0x6, 0x9a, 0x42c, 0xa26, 0x33e, 0xfff, 0xe, 0x2643, 0x6, 0x81, 0x0, 0x5, 0x400, 0x200, 0x5, 0xb, 0xd, 0x3fc0, 0x6, 0x9, 0xa, 0x1ff, 0xa, 0x4, 0x8ba, 0x6, 0x9, 0x1, 0x0, 0x4, 0x6, 0x9, 0x1ff, 0x78, 0x8, 0x73, 0x9, 0x7fffffff, 0x10000, 0x5, 0x3, 0x6, 0x8001, 0x6, 0x81, 0x1, 0x7fff, 0x6317, 0x667121df, 0x8, 0x28e, 0x3, 0xffff, 0x1000, 0x40, 0x4, 0x20eb, 0xffffffc0, 0x4, 0xc0c5, 0x80000001, 0xfffffff7, 0xd92f]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x753}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_AVRATE={0x8}]}, @TCA_FW_MASK={0x8, 0x5, 0x10000}, @TCA_FW_ACT={0x24c, 0x4, [@m_tunnel_key={0x120, 0x7, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xffff0000, 0x8, 0x8, 0x5, 0x7fffffff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x6}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}]}, {0xbc, 0x6, "5376ba193507ee96c6d0791000d2400c2134fbefe3cdb15e9bfeaea84bdaec20b26c8e6a60828c74a4ea7236a4a8195bba0b22533bd3f2df6ece9019fc1a966f5cfe17ef95559f4c7741be16f5893370337d30fc6289c01b80943249861c7ad04a70d874dc7338da94485647e626664149999a9bbda069ceea25c33128d11a3c6ff95b19214fbb210ec6e1c02bae9e29b200b5e98cc5048860c629d034250e76148272237dfeca6346668eef82e8332e05ee1c582a1865b9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ct={0x128, 0x12, 0x0, 0x0, {{0x7}, {0x4}, {0xfd, 0x6, "091537eab86bcc39fdb35a0fe8098e79022f21a801fec4910fef810429761e8deaef8e8f3d6dd2330a66403652393c00a3fef538f98f4e3f8a9b9a41842040733410ebe1fef212fa19340a90f3625596702d26c031da4d13ded2efd48489460fe7d25268cca7a4a8ee60ad2c6c239af665639e02192c604817987563d3775a8cdd44aa6a8ad736e2bbd8cb1fa4da7f2a2b14db23348d8dbc1784d05d50b9d4020c3c8b83dcf3ad3e2e5fd59bb23ee57823457186fabca014cfed24e29ad843b7fd3998437e33acba442c0b0bfb0b8d8b103e70c6013e5090e2ef0cec2a2ec88b533c12d6d38ee19c3f81d6db57a91e135043eec468a3bccae7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_virt_wifi\x00'}, @TCA_FW_ACT={0x21f0, 0x4, [@m_tunnel_key={0xb4, 0x8, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x400, 0xd8, 0x4, 0x2, 0x160e}, 0x1}}]}, {0x67, 0x6, "8ef2f393597d84ccf601cfabbb91a2e417238d2bc0e8c44b0bbb4262bdddf54f43f23c9caaf637a4aa234d274f2ce44ad3ffd12503d8b731ca1df665a0423d6540c38e4cb6cfd42e37dd3fb0e1f8ea77afcb1f4aedfe26d3fbdfdb0b9cd383fe2113f3"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_csum={0x68, 0x2, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x9, 0x6, 0x7, 0x21ef08ff}, 0x26}}]}, {0x1e, 0x6, "f2500e5ad19d0378b830398e0d2254dc6f69cda3febb5cc2af46"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x64, 0xe, 0x0, 0x0, {{0xf}, {0x4}, {0x33, 0x6, "3c3fa9ec709d3a718db1eac625cef43f445914c3992fbc2ff07fd54dce59a21924bce3f5945f112b538eb4e7bffb39"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x9b5d5aff7fafc6e, 0x463bdbad43fac572}}}}, @m_ct={0xd0, 0x1b, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0xa50}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_ACTION={0x6, 0x3, 0x7}, @TCA_CT_MARK={0x8, 0x5, 0x6}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0x6d, 0x6, "afd9752c98e64d5a0014c40da032b88b823e37b874baac931dd1007c8f2558fda85ff483162947e9a71ed675aae3605a7d758b3531403a1882d92d13ddacaf432cf7c95840b14223ddd2d781baa866ff11e6ddd938ba7f9d5eeb47b125dc3fd7e76d535559e0580a90"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0xdc, 0x4, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1000}]}, {0xa6, 0x6, "a7e058e09903b5d3e0366aece880c0bb53ddc093a003b3a235a66513045ea29b970dd53e6216843818f07e4fdbe8cdacc9de9950240a3b880e4c8fde9c58b43de233ca045b9d943e53c1b5f48141bbf397f86b55c61fd0ec5e8edbaccf2ef524f89e9b8b550477b20b800a81630344852967274c0ca5a846e0ae085ec0f5836c5cc296b4b98dab943a5922e6d2261143bfa4b6e5443939b579a813ad5c188bb60399"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x1a4, 0x15, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x465, 0x1, 0x5, 0x0, 0x4}, 0x401}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9fa, 0x4, 0x8, 0x99f, 0x5}, 0x401}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xad9, 0x3, 0x100, 0x5}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x5, 0x10000000, 0x3, 0x8}, 0xa}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7f, 0x2, 0x3, 0x40, 0x7}, 0x4}}]}, {0xe8, 0x6, "ba3af470bb653e6980acb781b561628ffe21d651224ca2a9bd6f8ebeddbde0ccc77d1eb7b74bbf1b296eaf0d79a31e38ffbe9b42b7e3db981d1678fc71fad38bc563bb03ef7032baf99941ab9994f366388d00b2005135be58015aa898153600d37bd4ae21fc06911fce03a9382cc4cb4dcc836b0f1e1f4155621839df910abf85675c5dfa20eb35db87fd34b13d668841962bc5790c5c96fcb6729c2690f651709d0260ca7b60b42b94043dc7743d93047b275f0b69208da5524b51b0cb367e6d6b910d0564fffd8de24df235d822ee6cd942ab2f2dc6de0fd9c300ae6ca1f9164f72e6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0xf8, 0x14, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}]}, {0x70, 0x6, "d25acbcb7d560d4b9d3d1896b655cea9360c4693772819201b87892c1fb606ceaa3971e31a09e661c8947fb7816f72ca4f9354198ee947c1ef2d55b1d73cf4de84e6e4826c1bd9271dedd49bf8b1d6be4822a07ae801ea35cbdc498873c3a310e6159a4ff9d4d4e554b37150"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_tunnel_key={0x158, 0xb, 0x0, 0x0, {{0xf}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x1, 0x0, 0x147}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4, 0x7, 0x0, 0x5, 0x7}, 0x2}}]}, {0xe0, 0x6, "f7b6d5fbe69d73acd4728adf50a458fc2d653299e44859c5bff2c5e57e686a22248aa68be6a6c5bd5816e137cfb51469ebeeef222b953f921d8d815cb8e519c2d19aaaa39e14a3280c6129731db9fd727d50e589d7e7eba26a87438cb2abb7c88ca6e2ea138be9ddd055199866467e5a2a5841bfbc3e63036eaa6d5347f92bff6de0358584d45bd21a05f1d8d907f8ec167351d5d0cb6c9519e7a8aa0f2bf3f70f50c29e719ff4c3f5a4c5e1bff0721eea9a3df912b64797b2d7cc1e67b5df407ccd886c3ba188956cb22c4a9eec79553db25ccfb497769ad1b6b92d"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x1acc, 0x2, 0x0, 0x0, {{0xb}, {0x19b0, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0xa}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0xcc1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe, 0x80000000, 0xf, 0x9, 0x2, 0x6, 0x4, 0x7fffffff, 0x4, 0x7, 0x2, 0x7, 0x6, 0x1, 0x8c, 0x7269, 0x8000, 0xfffffffb, 0xaf, 0x7, 0xe7, 0x4, 0x3, 0x4, 0x400, 0x5, 0xfffffffe, 0x4, 0x8, 0x3, 0x6, 0xfffffffa, 0xd3, 0x7, 0xfffffff5, 0xffffffc0, 0x40, 0x800, 0x5, 0x12512304, 0x800, 0xe063, 0x4, 0x9, 0x3, 0x7, 0x9, 0xd020, 0x9, 0x42d, 0xc, 0xdfeb, 0xfffff1ee, 0x8000, 0x1e, 0x515d7979, 0x7fffffff, 0x6, 0x9, 0xa4, 0x6, 0x2, 0x0, 0x2, 0x2, 0x1f, 0x7, 0x1000, 0x7, 0x2, 0x36, 0x8000, 0x54, 0x6, 0xb, 0xff, 0x6, 0x0, 0xd2, 0x5ac7, 0x7, 0x3c, 0x4, 0x9b, 0x2, 0x3ff, 0x2, 0x1ff, 0x1000, 0x0, 0x7, 0xc5f4, 0x4, 0x561, 0xa, 0x80e, 0x401, 0x6, 0x9387, 0x29, 0x40, 0x2, 0x1, 0x6, 0x0, 0x9, 0x8, 0x2, 0x3, 0x1, 0x10001, 0x6, 0x0, 0x4, 0xfff, 0x1, 0x7, 0x200, 0x0, 0xf, 0x9, 0x1, 0x7, 0x219, 0x7, 0xfffffff7, 0x4, 0x5, 0x80000000, 0x1, 0x2, 0x1, 0x4, 0x6, 0xa, 0x2, 0xfffffffa, 0x4, 0x6, 0x8, 0x0, 0x80000000, 0x10001, 0x26, 0x2, 0x9, 0x0, 0x80000000, 0x4, 0x2, 0x1ff, 0x3, 0x100, 0x3, 0x7fffffff, 0x1, 0x8, 0x2, 0x3, 0x70, 0x3, 0x100, 0x1ff, 0xb36a, 0x6, 0x3, 0xff, 0x3, 0x0, 0x2c1, 0xb, 0x3, 0xa81, 0x7, 0xff, 0x2, 0x0, 0x7, 0x2, 0x1, 0xff, 0xff, 0x3, 0x1ff, 0x1f, 0x81, 0x3, 0x6, 0xa6, 0x5, 0x4, 0x9, 0x2, 0x1, 0x5, 0xe4a, 0x40, 0x7, 0x1, 0x3b89, 0x3ff, 0x8, 0x8, 0x7, 0x7, 0x9, 0xbd5, 0x6, 0x6, 0xd, 0x17f, 0x2800000, 0x0, 0x5, 0x6, 0xf, 0x110, 0x200, 0x20, 0xc, 0x0, 0x10, 0x3a7, 0x24, 0x1c000, 0x401, 0x100, 0xfffff912, 0x8, 0x4, 0x4, 0xfffffffd, 0xffffffc4, 0x1, 0x9, 0x0, 0x80, 0x1, 0xcaf8, 0x80000001, 0xc8, 0x1, 0x59, 0x640, 0x6, 0x0, 0x9, 0x5, 0x8001, 0xfff, 0xf4, 0x8, 0x4, 0xac300000, 0xe, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x34bb3ba8, 0x80, 0x0, 0x0, 0x9, 0xa22, 0x5, 0x8, 0xe, 0x8000, 0x3, 0xd, 0x46, 0x200, 0x1, 0x9111, 0x8000, 0x3, 0x7, 0x8, 0x6, 0x401, 0x9, 0xb, 0x5, 0xffffff13, 0xa23b, 0x5, 0xffffffff, 0x1, 0x4000, 0x7, 0x5, 0x6, 0x8000, 0x5, 0x8, 0x1, 0x2, 0x3, 0x4, 0x1, 0x9, 0x27, 0x5, 0x0, 0xff, 0x1000, 0x5, 0x7fffffff, 0x401, 0x1fa2, 0x6, 0x1, 0x9, 0x0, 0x1a, 0xdf, 0x1, 0x6, 0x80000000, 0x5, 0x5, 0x7, 0x2c, 0x3, 0x8001, 0xa1a, 0x1, 0x80000000, 0xb1, 0x7, 0x80000001, 0x6, 0x9, 0xecc5, 0x800000, 0xc03, 0x2, 0x1ff, 0x80, 0x2, 0xfffffffe, 0x6, 0x1000, 0x0, 0x800, 0x3, 0x4, 0x9, 0x7fffffff, 0x401, 0x7, 0x7, 0x4, 0x3, 0x3, 0x8, 0xfc973fa, 0x7, 0x6, 0xe, 0x5, 0xfffffffa, 0x0, 0x3, 0xafe, 0x4, 0x6db176b9, 0x40, 0x5, 0x5, 0x5, 0x4, 0x8, 0x9, 0x4c61, 0x3, 0x6, 0xc, 0x3, 0x6, 0x6, 0x6, 0xfffffff7, 0x5, 0x7, 0xffff999b, 0x8001, 0xa9, 0xc, 0x0, 0x1, 0x2, 0x1010, 0x3, 0x1, 0x200, 0x5, 0x7, 0x6, 0x3, 0x92, 0x6ce9, 0xffff, 0x4, 0x6dcf3865, 0x2, 0x7, 0x8, 0x100000, 0x3, 0x200, 0x1, 0x6, 0x800, 0xf, 0x80000001, 0x1, 0xae, 0x1, 0x8, 0xd6, 0x3, 0xfffff03b, 0x2, 0x7fffffff, 0xfffffff8, 0x30, 0x8c05, 0xfffffff6, 0x484, 0x0, 0xc, 0x3c43, 0xf0000000, 0x6, 0x3ff, 0xfff, 0x0, 0x6, 0x4, 0x7d90, 0x400, 0x4, 0xfffffffe, 0x4, 0x9, 0x6, 0x3, 0x4, 0x2, 0x100, 0x1ff, 0x7fffffff, 0x169a0fe9, 0x0, 0x9bc0ee8, 0xff, 0x5, 0xffffffff, 0x2, 0x5, 0x7, 0x101, 0x4000, 0xf, 0x221, 0x4, 0x4944, 0x1000, 0xfffffe01, 0x5, 0xfffffffc, 0x6, 0xb0fe, 0x0, 0x9, 0x81, 0x80000001, 0x6, 0x8, 0x0, 0xe, 0x7fffffff, 0xed, 0x9, 0x1f, 0x2, 0x3, 0x7, 0xb, 0x8, 0x37d, 0x6, 0x80, 0x1, 0x5, 0x3, 0x3, 0x5d6, 0xe4, 0x8, 0x7, 0xe6, 0x10, 0x0, 0x7f, 0xff, 0x6, 0x1eb, 0x7, 0x5, 0x9, 0x4]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7fffffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7f}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7f, 0x5, 0xe, 0x8, 0x1ff, {0x9, 0x1, 0x2, 0x9, 0x7, 0x3}, {0x1, 0x0, 0x0, 0x9f60, 0x7, 0x5}, 0xef47, 0x1000, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x4, 0x9, 0x7, 0xe, 0x7, 0x3, 0x6, 0x1, 0x6b, 0x10001, 0x7000, 0x7ff, 0x2, 0x0, 0x401, 0x6, 0xfffffffd, 0x4, 0x6a, 0x4, 0xb, 0x7, 0x7, 0x6, 0x7, 0xc0000, 0x7, 0xfffffbff, 0x3800000, 0x3, 0x0, 0x7ff, 0x1, 0x6, 0xffffff6f, 0xffffffff, 0xd3, 0x0, 0x6, 0x3c, 0x9, 0x8, 0x1, 0x751, 0x100, 0x5, 0x10, 0x5, 0x1, 0x3, 0x8, 0xa, 0x5, 0x17, 0x80, 0x9, 0x7fffffff, 0x9, 0x3, 0x100, 0x5, 0x9, 0x0, 0x4, 0x2c, 0x400, 0x4ba, 0x10, 0x2, 0x3ff, 0x2, 0x9, 0x6, 0x8000, 0xc1d9bee, 0x5, 0x400, 0xef1, 0x8, 0x3, 0x7, 0x7, 0x2, 0xe, 0x6, 0x8, 0x3, 0x0, 0x737, 0xb, 0xe641, 0x6, 0xe128, 0x0, 0x9, 0x47ee, 0x8, 0x3, 0x1, 0x785, 0xbe1c, 0x9e, 0x40, 0x1, 0x81, 0x8, 0x0, 0x2c16, 0x3, 0x4, 0x4, 0x3, 0x7, 0xe1c, 0x5, 0xc, 0x7, 0x1ff, 0x8000, 0x3, 0x5, 0xeaf, 0x2, 0x400, 0x1, 0x907, 0x9, 0xe, 0x2, 0x2, 0x3, 0x0, 0x5, 0xffffb02a, 0xaa93, 0x1, 0x800, 0x7, 0x8000, 0x8, 0x8f, 0x6, 0x0, 0xb, 0x9, 0x7fff, 0x6, 0x3, 0xffffff3e, 0x0, 0x5, 0x3, 0x4, 0x23f, 0x9, 0x192, 0x6, 0x7, 0x5, 0xc7, 0x533, 0x9, 0x74a, 0x2302, 0x33d, 0x8000, 0x2400, 0x2, 0x2, 0x1, 0x10001, 0xde0, 0x101, 0x0, 0x2, 0xffffffff, 0x4, 0x9, 0x2, 0x3ff, 0x80000000, 0x101, 0x5, 0xa, 0x1, 0x0, 0x9, 0x3, 0x5, 0x7f, 0x5, 0x81, 0x7ff, 0x5e41, 0x2eb5, 0x3ca7b9e0, 0x7ff, 0x7, 0x0, 0x5, 0xb, 0x100, 0x1, 0x5, 0x7, 0xffffffff, 0x1, 0x7, 0x2, 0x8, 0xfffffffd, 0x9, 0x800, 0x0, 0x2, 0x3ff, 0xffffea0c, 0x101, 0xc, 0xa, 0x9, 0x9, 0x4, 0x9, 0x80000000, 0x5, 0x6, 0x1ff, 0x7ff, 0x78, 0x9, 0x1, 0xe, 0x3, 0x2, 0x1, 0x5, 0x4, 0x6, 0x0, 0x2, 0x3, 0x1, 0x2, 0xf, 0x1, 0xa, 0x1, 0x4, 0x2, 0x0, 0x6, 0x1, 0x5, 0x800]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffe, 0x20000000, 0x4, 0x3, 0x7, {0xa, 0x2, 0x2c00, 0x2, 0x1, 0xf5}, {0x8f, 0x2, 0x9, 0x5, 0x5, 0x6}, 0x5e, 0x2, 0x4}}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x7, 0xd1e6, 0x9, 0x0, {0xa5, 0x1, 0x9, 0x1, 0xe}, {0xa2, 0x0, 0x0, 0x1, 0x2, 0x35e}, 0x6, 0x1c82, 0x1}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffdb22}, @TCA_POLICE_RESULT={0x8, 0x5, 0x91}], [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x40, 0x43, 0x6, 0xed24, 0x3b, 0x5, 0x0, 0x4, 0x9, 0x0, 0x3, 0xd776, 0x8, 0xc, 0x401, 0x7, 0x3, 0x5, 0x8, 0x0, 0xfffff91e, 0x7fff, 0x7fffffff, 0x9, 0x0, 0x3, 0x8, 0x279e63de, 0x0, 0x5, 0x1, 0x3ff, 0x8, 0x2, 0xfffffff8, 0x3, 0x10, 0x8, 0x5, 0xffff21b9, 0x6, 0xdd38, 0x3, 0x8001, 0x40, 0x5, 0x7, 0x0, 0x7f, 0x7, 0x1c, 0x101, 0x1000, 0x4, 0x6, 0x8, 0xc16, 0x3, 0x2, 0x9, 0x4, 0x7fff, 0x6, 0x6, 0x1, 0x0, 0x3, 0x8000, 0x7, 0x40, 0x2, 0x9, 0x6, 0x6, 0x144cb1d2, 0xb, 0x0, 0x0, 0x3, 0x3, 0x80000001, 0x8, 0x3, 0xa, 0xb750, 0x8, 0x5, 0xa25, 0x2, 0x4, 0x5, 0x5, 0x6, 0x1, 0x4, 0x80000001, 0x3, 0x8, 0x400, 0xd, 0xd4, 0xffffff29, 0x9, 0x80, 0x3, 0x8, 0x1, 0x4, 0x401, 0x1, 0x6, 0x0, 0x2, 0x3, 0x1ff, 0xfffffffb, 0x8, 0x0, 0x3854, 0x5, 0x4, 0x10001, 0x5, 0x90, 0x8, 0x4, 0x101, 0x7, 0x5, 0x0, 0x8a6a, 0x4, 0x7, 0x800, 0x5, 0x1, 0x3, 0xfffffff7, 0x42bb, 0x8, 0x7, 0x8, 0xb, 0x2, 0xfffffff4, 0x9, 0x8, 0x13b5, 0x1, 0x4, 0x7fffffff, 0x0, 0x7f, 0x10000, 0xd, 0x6, 0x200, 0x6, 0xfffffffb, 0x4d, 0x1, 0xfffffffb, 0x6, 0x3, 0x8001, 0x5, 0x9, 0x100, 0x3ff, 0x8b, 0x8, 0x4, 0x8, 0xfff, 0x9d1, 0x40000000, 0x2, 0xd, 0x9, 0x63c00000, 0x7fff, 0x0, 0x67, 0x0, 0xd, 0x3, 0xa, 0x400, 0x8, 0x1, 0x835, 0x9, 0xd, 0x9, 0xcb4c, 0x7fff, 0x4, 0x3, 0x7, 0x80, 0x4671, 0x3, 0x1, 0x5, 0x4, 0x9, 0x3, 0x10000, 0x7, 0x2, 0x0, 0xffffff3e, 0x0, 0x7e, 0x3, 0x3, 0x9, 0xbbc, 0xb, 0x7, 0x0, 0x3ff, 0x2, 0x9, 0x1, 0x0, 0x1, 0x7, 0x8000, 0x2, 0xff, 0x6, 0x0, 0xbd, 0x4, 0xffffffff, 0xfffffffe, 0x2, 0x6, 0x8, 0x5, 0x1056, 0x7, 0x7, 0x10, 0x1ff, 0x4, 0x7, 0x1, 0xfffff800, 0xfc, 0x6, 0x1000000, 0x9, 0xd]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x6, 0xfffffff9, 0xb9e, 0x7, 0x3b, 0x5, 0xf078, 0x8, 0x12be, 0x8001, 0x1, 0x0, 0x9, 0x7, 0x9, 0x81, 0x47d5, 0x101, 0xbea, 0x1000, 0x180000, 0x8, 0x200, 0x6, 0x8, 0x9b32, 0x5b51, 0x8, 0x3, 0x0, 0x9, 0x5, 0x284c65b1, 0x8, 0xb, 0x9e03, 0x3, 0x1, 0x7, 0x6, 0x8, 0x8, 0x8, 0xffff, 0x0, 0x2, 0x8000, 0x101, 0xb, 0x8, 0x7, 0x6, 0x0, 0x401, 0x8, 0x0, 0x4450, 0x1, 0x3, 0xe78, 0x9, 0x9, 0xd, 0x2, 0x7, 0x10000, 0x7fff0000, 0x7, 0x9, 0x3ff, 0x3631, 0xfffffff0, 0xc, 0x6, 0x3, 0x9, 0x7, 0x2, 0x5, 0x200, 0x3, 0x0, 0x4, 0x4, 0x4, 0xba, 0x8, 0x10000, 0x3, 0x8, 0x101, 0x4, 0x9, 0x5, 0x10001, 0xfffffffc, 0x10001, 0x81, 0x9, 0x0, 0x8, 0x8, 0x7, 0x5, 0x9, 0x6, 0x40, 0x9, 0x7, 0x2, 0x8, 0x56, 0xfffffff7, 0x1, 0x0, 0x9, 0x200, 0x3ff, 0x3, 0x0, 0x1, 0x19b, 0xa, 0x2, 0xec, 0x0, 0xc60, 0x360, 0x3, 0x1, 0x7, 0x1, 0x1, 0x40000, 0x9a7b, 0x2, 0x8, 0x7, 0x101, 0xfffff001, 0x7f, 0x7, 0xfffffff8, 0x3, 0x432, 0x1, 0xfffffff8, 0x7, 0xfffffff7, 0x1, 0x0, 0x200, 0x3, 0x1, 0x9, 0x0, 0x6, 0x3, 0x1, 0x401, 0x2, 0x101, 0x7fff, 0x9, 0x4, 0x4, 0xd, 0x0, 0x5, 0x4, 0x80000001, 0x0, 0xf7b8, 0x5, 0x5, 0x0, 0x7, 0x7, 0x3, 0x9, 0x80000001, 0x1278, 0x1, 0xfffffff2, 0xffffffff, 0x4ca, 0x8001, 0x3, 0xffffffff, 0xe000000, 0x4, 0x7fff, 0x9, 0x9, 0x4, 0x6ce44659, 0x1, 0x2, 0x10, 0x2, 0x1, 0x8, 0x1, 0x77f, 0xfffffffc, 0xffffffff, 0x3ff, 0x82ff, 0x2, 0x7ff, 0xde, 0xb381, 0x6, 0xfbee, 0x3, 0x0, 0x2, 0x4, 0x80000001, 0x4, 0x5, 0x8000, 0x6, 0x9, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x0, 0x401, 0xd, 0x4, 0x2, 0x85b, 0x80000000, 0x2, 0x7, 0x9, 0x9, 0x8, 0x1, 0x2, 0x0, 0x9, 0x12, 0x0, 0x8, 0xe, 0x2, 0x8001, 0x5, 0x1, 0xfffffffd, 0x7f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x10000000, 0x7fffffff, 0x0, 0x2, {0x3, 0x0, 0x6, 0x800, 0x1a6, 0x5}, {0x8, 0x0, 0x5, 0x8, 0x81, 0x5}, 0x3, 0x9, 0x9}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0xffff, 0x7, 0x9, 0x2, 0x4, 0x4, 0x25, 0xfffeffff, 0x7fff, 0x33fb, 0xf, 0x5, 0x4, 0x956, 0x4, 0xe, 0x6, 0x8, 0xffff8001, 0x1, 0x8, 0x2, 0x0, 0xe, 0x1, 0x2, 0x1, 0x7fffffff, 0xfffffff3, 0x4, 0x10001, 0x800, 0x675, 0x93, 0x3, 0x0, 0x5, 0x30e11115, 0x7, 0x8, 0x5, 0x6, 0x743, 0xffff8001, 0x7, 0x1, 0x80000001, 0x9, 0x60000, 0x1, 0x2, 0x7, 0xe1, 0x8000, 0x1, 0x3, 0x4, 0x2, 0x7, 0x1000, 0x3ff, 0x200, 0x6, 0x10001, 0x0, 0x8, 0x3ff, 0x3, 0x6, 0xfffffffb, 0x8, 0xfff, 0x800, 0xff, 0x6, 0x8, 0xd, 0x6d, 0xcb1, 0x4, 0x9, 0x7, 0xb, 0x1ff, 0xfffffff7, 0xff, 0x5, 0x3, 0x3, 0x65237dd8, 0x0, 0x7ff, 0x9, 0xf67, 0xff, 0x400, 0x101, 0x1, 0x0, 0x9bdaaea5, 0x2, 0x3, 0x7fff, 0xfffffff7, 0x80, 0x8001, 0x35, 0x1, 0x7, 0x0, 0x8, 0x6, 0x9, 0xb, 0x401, 0x1, 0x100, 0x5, 0x0, 0x7, 0xfe1, 0x5, 0x8, 0x4, 0x8, 0xf51d, 0x41, 0xb, 0xff, 0x6, 0x3, 0xfff, 0x1, 0x9, 0x2ca4, 0x3e, 0x3, 0xfff, 0x2, 0x4, 0x9, 0x5, 0xd3, 0x9, 0xf, 0x100, 0x7, 0x6, 0xfe, 0xb16, 0x8, 0xaa9, 0xffff, 0x20, 0x0, 0x800, 0x3ff, 0x7000000, 0x923, 0x1000, 0xe308, 0x42, 0x4, 0xfffffffd, 0x8001, 0x1000, 0x8, 0x5, 0x9, 0x57, 0x4, 0x1, 0x6, 0x0, 0x9e, 0x3e, 0x9, 0x1, 0xc, 0x5, 0x7684667b, 0x2, 0x401, 0xfffffffb, 0x8, 0x200, 0x3, 0x6, 0xb, 0x1, 0x8, 0xffff, 0x9, 0x9, 0xffff08c0, 0x2, 0x81c, 0x2, 0x800, 0x0, 0x0, 0x7, 0x24c, 0x3, 0x0, 0x8, 0x9, 0x9, 0x1, 0xfff, 0x5, 0x6, 0xac5, 0x4, 0x99f, 0x609d39ed, 0x100, 0x0, 0x5, 0x7, 0x9, 0xb8, 0x2, 0x9, 0x1, 0x4, 0x18000000, 0x361, 0x4, 0x80000001, 0x0, 0x3, 0x2, 0x7, 0x5, 0x1, 0x6, 0x78, 0x5, 0x2, 0x9, 0x6, 0x6, 0x200000, 0x91, 0x8001, 0xfffffbff, 0x6, 0xc10, 0xb, 0x9, 0x8, 0x8, 0x2, 0x8dbd]}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}]]}, {0xf2, 0x6, "5089ce9080d3cacba8e32604fc270530a139792f0dc92b12e187daf8d840cd0136d6996ba6d0883da240057aebb20549a2b8d9b22e3adb9d62537941fc426df9be357df662ef7cdfeab3dba6fdc4f545102b21525f06b22d9c026b24dd11898b740f4b11cf7092c2914dc05129515e106d278030b45402315ba843c5f6cc79fb3167d80fb667081099c859257f8774ac3c3f8ac9f39ffb93c11f52e8da600b5a7e11e08098a88bc53658c7841558a44f09951834832aa31031265cf57638664466c00b2e9537f77e3a083e7f38f6aa11efd6c31c50147495fba92ddd6b5ee93b721f03330d47860f2337f4889356"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x48a1}, @TCA_FW_CLASSID={0x8, 0x1, {0x5, 0x6}}]}}]}, 0x2d54}}, 0x0) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001e00), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002180)={0xffffffffffffffff, 0xe0, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001ec0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5f, &(0x7f0000001f00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2b, &(0x7f0000001f80)=[{}, {}], 0x10, 0x10, &(0x7f0000000940), &(0x7f0000002000), 0x8, 0x6c, 0x8, 0x8, &(0x7f0000002040)}}, 0x10) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000021c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x50) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002700)={r15, &(0x7f0000000240), 0x0}, 0x20) r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002280)=@generic={&(0x7f0000002240)='./file0\x00', 0x0, 0x8}, 0x18) r17 = bpf$MAP_CREATE(0x0, &(0x7f00000022c0)=@base={0xa, 0x2, 0x10000, 0x9, 0x80, 0xffffffffffffffff, 0x3ff, '\x00', r10, 0xffffffffffffffff, 0x0, 0x5, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000023c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002340), &(0x7f0000002380)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000002500)={0x9, 0x27, &(0x7f00000007c0)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x889, 0x1000, &(0x7f0000000e00)=""/4096, 0x41000, 0x20, '\x00', r10, @cgroup_sock=0xd, r12, 0x8, &(0x7f0000001e40)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001e80)={0x5, 0xf, 0x2, 0x80000001}, 0x10, r13, 0xffffffffffffffff, 0x9, &(0x7f0000002400)=[r14, 0x1, r15, r16, r17, 0x1, r18], &(0x7f0000002440)=[{0x3, 0x5, 0x7, 0xb}, {0x1, 0x2, 0x6, 0x8}, {0x5, 0x4, 0x8, 0x1}, {0x2, 0x3, 0xe, 0x5}, {0x3, 0x4, 0xf, 0x3}, {0x3, 0x5, 0x10, 0xa}, {0x2, 0x5, 0xf, 0xb}, {0x2, 0x3, 0x0, 0xa}, {0x1, 0x1, 0x6, 0x8}], 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x18, 0x11, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000008000000000a90e000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100001000009500000000000000186900000e0000000000000081000000bf91000000000000b7020000030000008500000085000000b700000000000000950000000000000072023f6c0604119eecc4e1c8bf2a8997d4f9f159f72fe1d11a9a6680"], &(0x7f0000000d80)='syzkaller\x00', 0x1, 0x7a, &(0x7f0000000dc0)=""/122, 0x41000, 0x60, '\x00', r3, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r13, r4, 0x4, &(0x7f0000000e40)=[r7, r1], &(0x7f0000000e80)=[{0x0, 0x2, 0x9, 0x9}, {0x0, 0x4, 0x0, 0xe}, {0x5, 0x2, 0x1, 0x4}, {0x1, 0x5, 0x4, 0x4}], 0x10, 0x8001}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) 610.718228ms ago: executing program 0 (id=779): socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x6, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x427a7000) write$cgroup_devices(r2, 0x0, 0x6) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r2, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000080)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0xf5e, 0x0, 0x200003, 0x2, 0x2}) write$tun(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r9, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 512.980753ms ago: executing program 2 (id=780): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r1, &(0x7f0000000580)={&(0x7f00000006c0)={0x2, 0x4e21, @multicast2=0xe0000001}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000140)="970800000000000000008cc5fffff982", 0x10}, {&(0x7f0000000000)="74145fdae5ca0070777c079c", 0xc}], 0x2, &(0x7f0000000840)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @rand_addr=0x64010104}}}], 0x20}, 0x4044040) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="32931c27495911758c05c3468e4e56144d5e504f0592ab3e4e91eb6e05d4d3df7188f8ee4085fd2768eb0ff977acf6fe5c49a834c522bd4097aab3d9d87f4558567358e3f50977602d5894daedacdb48dcf56b0e369c82b00b261a9ef8783baf3db6d1d7b10c91e3fc517a4b479a6603c438f09a3b47902da1f213a90c7b7da8846b1189f3ef70750f65ac714f44e057cc9a7a8e8e718f19c95063110620c70aaef0ab11f615370783eb2fd2ac6320cb3b26194f"], 0xdc}}, 0x0) 397.919909ms ago: executing program 4 (id=781): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a84000000060a010400000000000000000a0000010900010073797a310000000058000480340001800c0001007061"], 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="55f93191b1db89ea05ffff0000000000000000", @ANYRES16=r4, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r3, @ANYBLOB="1c005e80080007005f0400000800060011a11100080005005c000000"], 0x38}}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, 0x0, 0x0, 0xba5a, 0x0, 0x0, 0x40f00, 0x11}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x48) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f00000001c0)=0x40, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r8) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmsg$unix(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/19, 0x13}], 0x1}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r5}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r5, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000b170241e00000000000000000000000000ac8ff115bd41466586b7bda710c61d5160bd3385928179d0d73ed0d195d963e7179a4b21f1bdb1c505747879dff3a63198019b42604133caa4ed004a37df96ae3173a48f3bebc92b2c391fdc712dab8897beb88ccb10959fa710a7f90b4ecb536108580d68ddcbd1c18a8a7da6c785dfa1470bd7a5d2f078d78b694bcc9fec12d2b500"/171], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) bind$bt_hci(r7, &(0x7f0000000140)={0x1f, 0x4, 0x2}, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'pim6reg0\x00'}) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x40, &(0x7f0000000240)=0x7fff, 0x4) 214.038883ms ago: executing program 2 (id=782): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x31}, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'bridge0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b400000000000000791090000000000063000000000000009500000000000000b8a164aed91d3d5b664c4ca806f01293f84f25209077b1bb4ab4cf447b29fad55603aa97715b6f60e53760e0565b07dd0f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000040000000560000022500000019000a001000000007fd", 0x2a}], 0x1) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x24, r4, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x88010}, 0x0) getsockname(r2, &(0x7f0000000180)=@x25={0x9, @remote}, &(0x7f0000000200)=0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000060000000200000000000006040000000d000000090000000000000000000000060000000700000000000080060000000e0000000200000007000000010000006c0b00000f000000060000000f000000010000000000002e3000"], 0x0, 0x2a}, 0x36) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5c38b46af21a0", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="fd", 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000008f00000095"], &(0x7f0000000300)='GPL\x00'}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x31}, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'bridge0\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b400000000000000791090000000000063000000000000009500000000000000b8a164aed91d3d5b664c4ca806f01293f84f25209077b1bb4ab4cf447b29fad55603aa97715b6f60e53760e0565b07dd0f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) (async) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000040000000560000022500000019000a001000000007fd", 0x2a}], 0x1) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x24, r4, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x88010}, 0x0) (async) getsockname(r2, &(0x7f0000000180)=@x25={0x9, @remote}, &(0x7f0000000200)=0x80) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000060000000200000000000006040000000d000000090000000000000000000000060000000700000000000080060000000e0000000200000007000000010000006c0b00000f000000060000000f000000010000000000002e3000"], 0x0, 0x2a}, 0x36) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5c38b46af21a0", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="fd", 0x0}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000008f00000095"], &(0x7f0000000300)='GPL\x00'}, 0x90) (async) 142.353746ms ago: executing program 3 (id=783): r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x6569}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20000010) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f0000000080)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)='b', 0x1}], 0x1, &(0x7f0000000140)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081) 0s ago: executing program 2 (id=784): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x18, r5, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x4, 0x1, 0x0, 0x0}]}, 0x18}}, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) listen(r3, 0x10) r6 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r6, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000400)=@ethtool_cmd={0x1e, 0x80000001, 0x2, 0x4e, 0x3, 0x0, 0x9, 0x8, 0x6, 0x4, 0x9, 0x0, 0x5, 0xb, 0x6, 0xc988, [0xd4, 0x6]}}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@delchain={0x118, 0x65, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff2, 0x5}, {0x9, 0x10}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_fw={{0x7}, {0xbc, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'gretap0\x00'}, @TCA_FW_ACT={0xa4, 0x4, [@m_skbedit={0xa0, 0x1f, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0xfff6}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x818, 0xc, 0xffffffffdffffff4, 0xc, 0x6}}]}, {0x4c, 0x6, "4c4b9be84e3fa3f317a392109906091c8f342d75cbe261038e70c0cba170669d4a656f5617505607b5ceef4dd1ef7891e8553325818e9c9793b6db39f152e8b6f805f1bd54752dab"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0x2, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0xc}]}, 0x118}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c004}, 0x24048004) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.106' (ED25519) to the list of known hosts. [ 77.825365][ T5598] cgroup: Unknown subsys name 'net' [ 77.977193][ T5598] cgroup: Unknown subsys name 'cpuset' [ 77.986521][ T5598] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.607266][ T5598] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.767571][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.775982][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.784018][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.795113][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.802763][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.987244][ T4927] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.998766][ T4927] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.009635][ T4927] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.017978][ T4927] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.027745][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.036093][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.046148][ T5620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.047213][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.060375][ T5620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.064178][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.069548][ T5620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.091873][ T5620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.099416][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.116127][ T4927] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.123692][ T4927] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.131818][ T4927] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.143521][ T4927] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.152422][ T4927] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.160957][ T4927] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.175660][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.655317][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.663368][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.670697][ T5609] bridge_slave_0: entered allmulticast mode [ 83.678606][ T5609] bridge_slave_0: entered promiscuous mode [ 83.735301][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.742497][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.752365][ T5609] bridge_slave_1: entered allmulticast mode [ 83.760188][ T5609] bridge_slave_1: entered promiscuous mode [ 83.828435][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.854687][ T5612] Bluetooth: hci0: command tx timeout [ 83.868860][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.978976][ T5609] team0: Port device team_slave_0 added [ 83.992019][ T5609] team0: Port device team_slave_1 added [ 84.007859][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.015417][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.022783][ T5616] bridge_slave_0: entered allmulticast mode [ 84.031556][ T5616] bridge_slave_0: entered promiscuous mode [ 84.079464][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.088263][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.095987][ T5616] bridge_slave_1: entered allmulticast mode [ 84.103287][ T5616] bridge_slave_1: entered promiscuous mode [ 84.127257][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.134286][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.160327][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.171314][ T5612] Bluetooth: hci1: command tx timeout [ 84.171336][ T5624] Bluetooth: hci2: command tx timeout [ 84.218050][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.225154][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.251972][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.253437][ T5612] Bluetooth: hci4: command tx timeout [ 84.269007][ T5624] Bluetooth: hci3: command tx timeout [ 84.302411][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.323627][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.330819][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.338083][ T5623] bridge_slave_0: entered allmulticast mode [ 84.345380][ T5623] bridge_slave_0: entered promiscuous mode [ 84.382111][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.391607][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.399243][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.406868][ T5623] bridge_slave_1: entered allmulticast mode [ 84.414666][ T5623] bridge_slave_1: entered promiscuous mode [ 84.433162][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.440402][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.447828][ T5618] bridge_slave_0: entered allmulticast mode [ 84.455253][ T5618] bridge_slave_0: entered promiscuous mode [ 84.501732][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.509450][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.516772][ T5618] bridge_slave_1: entered allmulticast mode [ 84.524149][ T5618] bridge_slave_1: entered promiscuous mode [ 84.561638][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.594718][ T5616] team0: Port device team_slave_0 added [ 84.607175][ T5609] hsr_slave_0: entered promiscuous mode [ 84.614071][ T5609] hsr_slave_1: entered promiscuous mode [ 84.623901][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.655761][ T5616] team0: Port device team_slave_1 added [ 84.684183][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.739670][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.749077][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.756588][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.763962][ T5621] bridge_slave_0: entered allmulticast mode [ 84.771105][ T5621] bridge_slave_0: entered promiscuous mode [ 84.786774][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.794014][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.820380][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.833876][ T5623] team0: Port device team_slave_0 added [ 84.850556][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.857831][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.865292][ T5621] bridge_slave_1: entered allmulticast mode [ 84.872528][ T5621] bridge_slave_1: entered promiscuous mode [ 84.891112][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.898199][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.924422][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.938172][ T5623] team0: Port device team_slave_1 added [ 84.992406][ T5618] team0: Port device team_slave_0 added [ 85.037246][ T5618] team0: Port device team_slave_1 added [ 85.046854][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.059069][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.074903][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.081958][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.108239][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.121038][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.128190][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.155128][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.269144][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.276373][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.302961][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.319426][ T5616] hsr_slave_0: entered promiscuous mode [ 85.326194][ T5616] hsr_slave_1: entered promiscuous mode [ 85.332334][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 85.338569][ T5616] Cannot create hsr debugfs directory [ 85.346499][ T5621] team0: Port device team_slave_0 added [ 85.355082][ T5621] team0: Port device team_slave_1 added [ 85.369624][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.376769][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.403191][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.538406][ T5623] hsr_slave_0: entered promiscuous mode [ 85.544918][ T5623] hsr_slave_1: entered promiscuous mode [ 85.551072][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 85.557162][ T5623] Cannot create hsr debugfs directory [ 85.563490][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.570630][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.597130][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.609856][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.616885][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.642933][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.678254][ T5618] hsr_slave_0: entered promiscuous mode [ 85.684687][ T5618] hsr_slave_1: entered promiscuous mode [ 85.690804][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 85.696735][ T5618] Cannot create hsr debugfs directory [ 85.877980][ T5621] hsr_slave_0: entered promiscuous mode [ 85.884485][ T5621] hsr_slave_1: entered promiscuous mode [ 85.890599][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 85.896795][ T5621] Cannot create hsr debugfs directory [ 85.923655][ T5612] Bluetooth: hci0: command tx timeout [ 86.021921][ T5609] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.034949][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.073947][ T5609] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.091201][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.145180][ T5609] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.155432][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.192920][ T5609] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.202774][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.243878][ T5612] Bluetooth: hci1: command tx timeout [ 86.253976][ T5612] Bluetooth: hci2: command tx timeout [ 86.323707][ T5612] Bluetooth: hci4: command tx timeout [ 86.323993][ T5624] Bluetooth: hci3: command tx timeout [ 86.379246][ T5616] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.394914][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.402576][ T5616] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.413121][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.425290][ T5616] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.437586][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.448034][ T5616] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.458779][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.552883][ T5623] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.569910][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.578295][ T5623] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.588822][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.598166][ T5623] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.607746][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.616980][ T5623] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.629292][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.815653][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.822876][ T5618] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.837182][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.856511][ T5618] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.875463][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.886950][ T5618] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.908036][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.928499][ T5618] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.943390][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.991902][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.051175][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.058822][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.109022][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.116175][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.152801][ T5621] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.163969][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.171901][ T5621] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.182995][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.202103][ T5621] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.213208][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.221422][ T5621] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.235946][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.262056][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.348889][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.400074][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.407244][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.426283][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.461116][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.468335][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.492800][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.543491][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.579746][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.586985][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.646035][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.661068][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.668391][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.709328][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.716492][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.741540][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.748790][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.837908][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.941730][ T5618] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.986259][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.008494][ T5624] Bluetooth: hci0: command tx timeout [ 88.023897][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.031082][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.086070][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.093310][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.324366][ T5624] Bluetooth: hci2: command tx timeout [ 88.330262][ T5624] Bluetooth: hci1: command tx timeout [ 88.407453][ T5624] Bluetooth: hci3: command tx timeout [ 88.408732][ T5612] Bluetooth: hci4: command tx timeout [ 88.545930][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.740052][ T5609] veth0_vlan: entered promiscuous mode [ 88.792074][ T5609] veth1_vlan: entered promiscuous mode [ 88.889224][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.952456][ T5609] veth0_macvtap: entered promiscuous mode [ 89.008512][ T5609] veth1_macvtap: entered promiscuous mode [ 89.077921][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.122843][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.189402][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.325462][ T438] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.487102][ T5623] veth0_vlan: entered promiscuous mode [ 89.521201][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.542919][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.558767][ T5623] veth1_vlan: entered promiscuous mode [ 89.565880][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.585087][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.647750][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.655770][ T5774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.666197][ T5774] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.703657][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.745019][ T5609] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.785641][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.811556][ T5618] veth0_vlan: entered promiscuous mode [ 89.818585][ T5621] veth0_vlan: entered promiscuous mode [ 89.827912][ T5623] veth0_macvtap: entered promiscuous mode [ 89.840185][ T5616] veth0_vlan: entered promiscuous mode [ 89.855774][ T5623] veth1_macvtap: entered promiscuous mode [ 89.898807][ T5618] veth1_vlan: entered promiscuous mode [ 89.930699][ T5616] veth1_vlan: entered promiscuous mode [ 89.941068][ T5621] veth1_vlan: entered promiscuous mode [ 89.962879][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.002596][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.047284][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.083871][ T5612] Bluetooth: hci0: command tx timeout [ 90.105294][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.130497][ T5618] veth0_macvtap: entered promiscuous mode [ 90.167512][ T5618] veth1_macvtap: entered promiscuous mode [ 90.179215][ T5616] veth0_macvtap: entered promiscuous mode [ 90.227543][ T5621] veth0_macvtap: entered promiscuous mode [ 90.243018][ T5621] veth1_macvtap: entered promiscuous mode [ 90.257141][ T5616] veth1_macvtap: entered promiscuous mode [ 90.303459][ T5817] syzkaller0: entered promiscuous mode [ 90.309555][ T5817] syzkaller0: entered allmulticast mode [ 90.321477][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.335007][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.344754][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.380846][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.394816][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.403926][ T5612] Bluetooth: hci2: command tx timeout [ 90.404238][ T5624] Bluetooth: hci1: command tx timeout [ 90.450474][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.472905][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.482702][ T5817] tipc: Started in network mode [ 90.487968][ T5624] Bluetooth: hci4: command tx timeout [ 90.494277][ T5624] Bluetooth: hci3: command tx timeout [ 90.499942][ T5817] tipc: Node identity 8e6b6668f64a, cluster identity 4711 [ 90.507870][ T5817] tipc: Enabled bearer , priority 0 [ 90.515779][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.526347][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.530405][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.535189][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.586730][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.656729][ T5815] tipc: Resetting bearer [ 90.672804][ T5815] tipc: Disabling bearer [ 90.743423][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.828263][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.836450][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.852453][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.890956][ T5822] netlink: 'syz.1.2': attribute type 3 has an invalid length. [ 90.899080][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.899152][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.899189][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.899242][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.899278][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.899315][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.899351][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.899386][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.923120][ T5822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 90.999442][ T5822] netlink: 'syz.1.2': attribute type 3 has an invalid length. [ 91.009436][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.025038][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.032584][ T5822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 91.065377][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.081420][ T5822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 91.081849][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.106296][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.196365][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.222927][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.318538][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.339378][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.396720][ T5832] warning: `syz.1.10' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.432398][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.441690][ T438] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.473656][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.786555][ T42] cfg80211: failed to load regulatory.db [ 92.009633][ T5858] sctp: [Deprecated]: syz.1.12 (pid 5858) Use of struct sctp_assoc_value in delayed_ack socket option. [ 92.009633][ T5858] Use struct sctp_sack_info instead [ 92.028229][ T5858] netlink: 'syz.1.12': attribute type 10 has an invalid length. [ 92.060217][ T5860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.081962][ T5860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.516115][ T5853] netlink: 244 bytes leftover after parsing attributes in process `syz.2.13'. [ 92.579243][ T5858] team0: Device veth0_macvtap failed to register rx_handler [ 92.635121][ T5865] syzkaller1: entered promiscuous mode [ 92.659133][ T5865] syzkaller1: entered allmulticast mode [ 93.075283][ T5877] Zero length message leads to an empty skb [ 93.368826][ T5900] bridge1: entered promiscuous mode [ 93.742279][ T5914] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 93.918408][ T5919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27'. [ 94.531594][ T5935] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI % [ 94.737353][ T5947] netlink: 'syz.1.36': attribute type 1 has an invalid length. [ 94.942234][ T5960] netlink: 'syz.4.39': attribute type 28 has an invalid length. [ 94.952854][ T5960] netlink: 'syz.4.39': attribute type 3 has an invalid length. [ 94.961331][ T5960] netlink: 132 bytes leftover after parsing attributes in process `syz.4.39'. [ 94.980070][ T5960] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 95.040987][ T5963] netlink: 'syz.3.40': attribute type 15 has an invalid length. [ 95.065911][ T5963] netlink: 84 bytes leftover after parsing attributes in process `syz.3.40'. [ 95.080030][ T5963] netlink: 84 bytes leftover after parsing attributes in process `syz.3.40'. [ 95.122290][ T5965] netlink: 144 bytes leftover after parsing attributes in process `syz.4.41'. [ 95.205581][ T5967] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.292349][ T5969] netlink: 'syz.3.43': attribute type 2 has an invalid length. [ 95.325432][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.44'. [ 95.511256][ T5948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.662926][ T5990] netlink: 'syz.1.50': attribute type 2 has an invalid length. [ 95.885724][ T5990] : entered promiscuous mode [ 95.938843][ T6005] __nla_validate_parse: 2 callbacks suppressed [ 95.938863][ T6005] netlink: 80 bytes leftover after parsing attributes in process `syz.2.53'. [ 95.995622][ T5998] IPVS: Scheduler module ip_vs_sip not found [ 96.082645][ T6005] sctp: [Deprecated]: syz.2.53 (pid 6005) Use of int in maxseg socket option. [ 96.082645][ T6005] Use struct sctp_assoc_value instead [ 96.110613][ T6010] netlink: 16 bytes leftover after parsing attributes in process `syz.4.55'. [ 96.282177][ T6016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'. [ 96.343348][ T6018] tipc: Enabling of bearer rejected, failed to enable media [ 96.435694][ T6022] raw_sendmsg: syz.0.59 forgot to set AF_INET. Fix it! [ 96.544070][ T6025] netlink: 'syz.3.61': attribute type 11 has an invalid length. [ 96.574202][ T6025] netlink: 'syz.3.61': attribute type 4 has an invalid length. [ 96.595857][ T6025] netlink: 224 bytes leftover after parsing attributes in process `syz.3.61'. [ 96.636967][ T6033] tipc: Started in network mode [ 96.653244][ T6033] tipc: Node identity ac141441, cluster identity 4711 [ 96.685965][ T6033] tipc: Enabled bearer , priority 10 [ 96.996251][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.67'. [ 97.025772][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.67'. [ 97.108785][ T6051] netlink: 'syz.1.68': attribute type 9 has an invalid length. [ 97.117251][ T6051] netlink: 'syz.1.68': attribute type 4 has an invalid length. [ 97.216637][ T6051] gre1: entered promiscuous mode [ 97.300183][ T6053] netlink: 260 bytes leftover after parsing attributes in process `syz.0.69'. [ 97.459651][ T6055] xt_l2tp: v2 doesn't support IP mode [ 97.508742][ T6059] netlink: 'syz.0.72': attribute type 23 has an invalid length. [ 97.815739][ T10] tipc: Node number set to 2886997057 [ 97.978550][ T5720] IPVS: starting estimator thread 0... [ 98.038023][ T6075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.76'. [ 98.059399][ T6075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.76'. [ 98.106270][ T6071] IPVS: using max 28 ests per chain, 67200 per kthread [ 98.460440][ T6081] netlink: 'syz.4.77': attribute type 1 has an invalid length. [ 99.565026][ T6100] bridge0: port 3(veth0) entered blocking state [ 99.591291][ T6100] bridge0: port 3(veth0) entered disabled state [ 99.608520][ T6100] veth0: entered allmulticast mode [ 99.640434][ T6100] veth0: entered promiscuous mode [ 99.661030][ T6100] bridge0: port 3(veth0) entered blocking state [ 99.668594][ T6100] bridge0: port 3(veth0) entered forwarding state [ 100.442484][ T6111] netlink: 68 bytes leftover after parsing attributes in process `syz.4.82'. [ 100.469673][ T6057] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 101.447107][ T6139] __nla_validate_parse: 1 callbacks suppressed [ 101.447129][ T6139] netlink: 28 bytes leftover after parsing attributes in process `syz.0.91'. [ 101.483964][ T6139] netlink: 'syz.0.91': attribute type 7 has an invalid length. [ 101.518263][ T6139] netlink: 'syz.0.91': attribute type 8 has an invalid length. [ 101.583443][ T6143] block nbd0: not configured, cannot reconfigure [ 101.606385][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.91'. [ 101.745004][ T6149] netlink: 'syz.2.94': attribute type 2 has an invalid length. [ 102.069844][ T6166] netlink: 1 bytes leftover after parsing attributes in process `syz.0.98'. [ 102.196504][ T6166] netlink: 1 bytes leftover after parsing attributes in process `syz.0.98'. [ 102.277970][ T6166] netlink: 1 bytes leftover after parsing attributes in process `syz.0.98'. [ 102.357164][ T6166] netlink: 1 bytes leftover after parsing attributes in process `syz.0.98'. [ 102.438713][ T6166] netlink: 1 bytes leftover after parsing attributes in process `syz.0.98'. [ 102.481439][ T6166] netlink: 1 bytes leftover after parsing attributes in process `syz.0.98'. [ 102.502725][ T6166] netlink: 1 bytes leftover after parsing attributes in process `syz.0.98'. [ 102.518600][ T6166] netlink: 1 bytes leftover after parsing attributes in process `syz.0.98'. [ 103.200166][ T6199] batadv0: entered promiscuous mode [ 103.216897][ T6199] batadv0: entered allmulticast mode [ 103.346759][ T6203] netlink: 'syz.2.111': attribute type 1 has an invalid length. [ 104.091492][ T6234] netlink: 'syz.3.120': attribute type 1 has an invalid length. [ 104.178118][ T6238] openvswitch: netlink: IP tunnel TTL not specified. [ 104.338875][ T6234] bond1: entered promiscuous mode [ 104.360373][ T6234] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.752120][ T6261] netlink: 'syz.3.125': attribute type 1 has an invalid length. [ 105.220412][ T6275] bond2: (slave gretap1): making interface the new active one [ 105.277886][ T6275] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 105.767471][ T6298] netlink: 'syz.4.133': attribute type 1 has an invalid length. [ 105.803604][ T6298] netlink: 'syz.4.133': attribute type 1 has an invalid length. [ 105.874297][ T6298] netlink: 'syz.4.133': attribute type 1 has an invalid length. [ 105.955436][ T6309] syzkaller0: entered promiscuous mode [ 105.996724][ T6309] syzkaller0: entered allmulticast mode [ 106.174733][ T6309] netlink: 'syz.2.136': attribute type 1 has an invalid length. [ 107.087100][ T6351] block nbd0: Unsupported socket: should be TCP or UNIX. [ 107.846891][ T6369] syz.3.152 uses obsolete (PF_INET,SOCK_PACKET) [ 107.956708][ T6369] netlink: 'syz.3.152': attribute type 1 has an invalid length. [ 107.996919][ T6378] __nla_validate_parse: 28 callbacks suppressed [ 107.996940][ T6378] netlink: 20 bytes leftover after parsing attributes in process `syz.4.155'. [ 108.016559][ T6370] SET target dimension over the limit! [ 108.041759][ T6369] SET target dimension over the limit! [ 108.072171][ T6379] netlink: 'syz.3.152': attribute type 30 has an invalid length. [ 108.096911][ T6370] netlink: 'syz.3.152': attribute type 30 has an invalid length. [ 108.376823][ T6379] bond3: option arp_missed_max: invalid value (0) [ 108.410240][ T6379] bond3: option arp_missed_max: allowed values 1 - 255 [ 108.499474][ T6379] bond3 (unregistering): Released all slaves [ 108.588949][ T6370] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 108.905983][ T6398] syzkaller0: entered promiscuous mode [ 108.974225][ T6398] syzkaller0: entered allmulticast mode [ 109.039489][ T6417] netlink: 48 bytes leftover after parsing attributes in process `syz.4.163'. [ 109.360124][ T6420] netlink: 108 bytes leftover after parsing attributes in process `syz.3.164'. [ 111.372261][ T6447] syz_tun: entered allmulticast mode [ 111.467324][ T6447] syz_tun: left allmulticast mode [ 111.837509][ T6472] netlink: 9 bytes leftover after parsing attributes in process `syz.2.178'. [ 111.875442][ T6474] netlink: 9 bytes leftover after parsing attributes in process `syz.2.178'. [ 112.062432][ T6484] netlink: zone id is out of range [ 112.107319][ T6484] netlink: zone id is out of range [ 112.150467][ T6484] netlink: zone id is out of range [ 112.191405][ T6484] netlink: zone id is out of range [ 112.216290][ T6484] netlink: zone id is out of range [ 112.235157][ T6484] netlink: zone id is out of range [ 112.695734][ T6511] netlink: 16 bytes leftover after parsing attributes in process `syz.1.186'. [ 112.731877][ T6515] netlink: 80 bytes leftover after parsing attributes in process `syz.4.187'. [ 112.751886][ T6511] netlink: 16 bytes leftover after parsing attributes in process `syz.1.186'. [ 113.345925][ T6540] netlink: 'syz.2.194': attribute type 21 has an invalid length. [ 113.359761][ T6540] netlink: 152 bytes leftover after parsing attributes in process `syz.2.194'. [ 114.319678][ T6576] netlink: 32 bytes leftover after parsing attributes in process `syz.4.203'. [ 114.482943][ T6579] netlink: 64 bytes leftover after parsing attributes in process `syz.3.204'. [ 114.594029][ T6588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.205'. [ 114.608449][ T6589] ip6gre1: entered allmulticast mode [ 114.640567][ T5774] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 115.414901][ T6626] netlink: 'syz.1.219': attribute type 1 has an invalid length. [ 115.488107][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.220'. [ 115.604160][ T187] IPVS: starting estimator thread 0... [ 115.623407][ T6629] IPVS: ip_vs_add_dest(): server weight less than zero [ 115.726208][ T6639] IPVS: using max 25 ests per chain, 60000 per kthread [ 115.791545][ T6642] netlink: 156 bytes leftover after parsing attributes in process `syz.3.223'. [ 116.263323][ T6664] netlink: 'syz.0.229': attribute type 1 has an invalid length. [ 116.319602][ T6664] netlink: 232 bytes leftover after parsing attributes in process `syz.0.229'. [ 116.442825][ T6664] netlink: 'syz.0.229': attribute type 1 has an invalid length. [ 116.773682][ T6681] netlink: 28 bytes leftover after parsing attributes in process `syz.3.235'. [ 116.824275][ T6681] netlink: 'syz.3.235': attribute type 14 has an invalid length. [ 116.901287][ T6687] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 117.097030][ T6690] netlink: 'syz.0.238': attribute type 1 has an invalid length. [ 117.289820][ T6690] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.412214][ T6708] trusted_key: syz.2.241 sent an empty control message without MSG_MORE. [ 117.424426][ T6698] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 117.459809][ T6708] x_tables: duplicate underflow at hook 3 [ 117.508611][ T6708] netlink: 32 bytes leftover after parsing attributes in process `syz.2.241'. [ 118.146463][ T6729] team0: Port device syz_tun added [ 118.530793][ T6750] netlink: 'syz.0.252': attribute type 1 has an invalid length. [ 118.561722][ T6746] netlink: 24 bytes leftover after parsing attributes in process `syz.4.253'. [ 118.645285][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.691591][ T6753] netlink: 'syz.1.256': attribute type 4 has an invalid length. [ 118.724660][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 118.740316][ T6753] netlink: 17 bytes leftover after parsing attributes in process `syz.1.256'. [ 119.080853][ T6738] netlink: 'syz.2.251': attribute type 1 has an invalid length. [ 119.275355][ T6763] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.459594][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.566845][ T6776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.727427][ T6763] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.841383][ T6790] netlink: 'syz.0.265': attribute type 2 has an invalid length. [ 120.081346][ T6763] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.131233][ T6800] netlink: 40 bytes leftover after parsing attributes in process `syz.4.266'. [ 120.249802][ T6804] netlink: 312 bytes leftover after parsing attributes in process `syz.0.269'. [ 120.416816][ T6763] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.484807][ T5343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.517413][ T6798] tipc: Started in network mode [ 120.531318][ T6798] tipc: Node identity fffff9fd, cluster identity 4711 [ 120.541824][ T6798] tipc: Node number set to 4294965757 [ 120.552480][ T6796] syzkaller1: entered promiscuous mode [ 120.558197][ T6796] syzkaller1: entered allmulticast mode [ 120.983691][ T35] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.023806][ T6831] netlink: 16 bytes leftover after parsing attributes in process `syz.1.275'. [ 121.043422][ T6825] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 121.052421][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.175190][ T6360] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.237767][ T6828] syzkaller1: entered promiscuous mode [ 121.246353][ T6828] syzkaller1: entered allmulticast mode [ 121.293799][ T6360] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.329310][ T6360] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.408183][ T6841] netlink: 'syz.1.279': attribute type 1 has an invalid length. [ 121.449128][ T6841] netlink: 232 bytes leftover after parsing attributes in process `syz.1.279'. [ 121.468215][ T6841] netlink: 'syz.1.279': attribute type 1 has an invalid length. [ 121.494500][ T6841] bridge_slave_1: left allmulticast mode [ 121.500440][ T6841] bridge_slave_1: left promiscuous mode [ 121.508170][ T6841] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.524978][ T5343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.566510][ T6841] bridge_slave_0: left allmulticast mode [ 121.608233][ T6841] bridge_slave_0: left promiscuous mode [ 121.631495][ T6841] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.057884][ T6856] tc_dump_action: action bad kind [ 122.504605][ T6868] netlink: 24 bytes leftover after parsing attributes in process `syz.3.287'. [ 122.566830][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.887661][ T6877] sctp: [Deprecated]: syz.4.291 (pid 6877) Use of int in maxseg socket option. [ 122.887661][ T6877] Use struct sctp_assoc_value instead [ 122.972674][ T6885] sctp: [Deprecated]: syz.4.291 (pid 6885) Use of int in maxseg socket option. [ 122.972674][ T6885] Use struct sctp_assoc_value instead [ 123.017903][ T6889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.294'. [ 123.218985][ T6897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.296'. [ 123.322845][ T6902] netlink: 'syz.2.296': attribute type 1 has an invalid length. [ 123.343276][ T6902] netlink: 224 bytes leftover after parsing attributes in process `syz.2.296'. [ 123.442312][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.452232][ T6908] IPVS: set_ctl: invalid protocol: 44 10.1.1.2:20000 [ 123.496063][ T187] IPVS: starting estimator thread 0... [ 123.611500][ T5343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.650828][ T6912] IPVS: using max 29 ests per chain, 69600 per kthread [ 123.728800][ T6915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.738857][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.846995][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.084351][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.236626][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 124.335599][ T6928] netlink: 'syz.2.304': attribute type 5 has an invalid length. [ 124.568313][ T6937] team0: Port device team_slave_0 removed [ 124.678224][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.896620][ T6948] netlink: 20 bytes leftover after parsing attributes in process `syz.3.309'. [ 124.937833][ T6952] netlink: 'syz.2.311': attribute type 20 has an invalid length. [ 124.960452][ T6948] netlink: 11 bytes leftover after parsing attributes in process `syz.3.309'. [ 124.981467][ T6952] IPv6: NLM_F_CREATE should be specified when creating new route [ 125.087933][ T6959] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 125.697125][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.251972][ T6987] netlink: 'syz.3.320': attribute type 4 has an invalid length. [ 126.302354][ T6990] x_tables: duplicate underflow at hook 3 [ 126.325616][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.478107][ T6994] netlink: 'syz.0.321': attribute type 12 has an invalid length. [ 126.527223][ T6994] netlink: 132 bytes leftover after parsing attributes in process `syz.0.321'. [ 126.759675][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.963714][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 127.070014][ T7013] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 127.124984][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.679762][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.329'. [ 128.048113][ T7036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.331'. [ 128.336318][ T7046] netlink: 64 bytes leftover after parsing attributes in process `syz.2.335'. [ 128.525960][ T7060] netlink: 'syz.0.338': attribute type 1 has an invalid length. [ 128.825338][ T5720] net_ratelimit: 2 callbacks suppressed [ 128.825354][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.034168][ T7080] netlink: 'syz.0.344': attribute type 1 has an invalid length. [ 129.060176][ T7080] netlink: 224 bytes leftover after parsing attributes in process `syz.0.344'. [ 129.473261][ T7085] veth1_to_bond: entered allmulticast mode [ 129.485833][ T7090] veth1_to_bond: left allmulticast mode [ 129.690953][ T7110] netlink: 'syz.3.351': attribute type 32 has an invalid length. [ 129.831467][ T7103] bridge0: port 3(veth0) entered disabled state [ 129.838125][ T7103] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.845994][ T7103] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.891192][ T987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.234973][ T7103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.261609][ T7103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.493755][ T59] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.534153][ T59] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.582741][ T59] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.625789][ T59] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.807999][ T7140] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 130.896518][ T7140] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 131.019013][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.235042][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.357'. [ 131.283926][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.611436][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.360'. [ 131.690444][ T7170] Driver unsupported XDP return value 0 on prog (id 57) dev N/A, expect packet loss! [ 131.740005][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.362'. [ 131.956074][ T7184] netlink: 24 bytes leftover after parsing attributes in process `syz.3.365'. [ 132.091482][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.241500][ T7189] netlink: 40 bytes leftover after parsing attributes in process `syz.2.367'. [ 132.365759][ T7196] netlink: 20 bytes leftover after parsing attributes in process `syz.1.369'. [ 132.484633][ T7206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.371'. [ 132.727554][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.770301][ T7215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.780016][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.817245][ T7218] netlink: 32 bytes leftover after parsing attributes in process `syz.1.374'. [ 132.975145][ T7228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.987780][ T7228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.007395][ T7228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.130440][ T5343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.806566][ T7256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.051729][ T7256] bridge1: entered allmulticast mode [ 134.180008][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.323042][ T7272] netlink: 'syz.1.388': attribute type 1 has an invalid length. [ 134.331874][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.513987][ T7272] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.687260][ T7279] bond2: (slave ip6erspan0): making interface the new active one [ 134.772396][ T7279] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 134.950677][ T7303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.134572][ T7308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.398'. [ 135.225675][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.500239][ T7327] netlink: 'syz.0.401': attribute type 1 has an invalid length. [ 135.522940][ T7323] netlink: 36 bytes leftover after parsing attributes in process `syz.3.400'. [ 135.926784][ T7339] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 135.935043][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.253280][ T5343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.681005][ T7356] __nla_validate_parse: 2 callbacks suppressed [ 136.681023][ T7356] netlink: 104 bytes leftover after parsing attributes in process `syz.0.407'. [ 136.794462][ T7366] netlink: 32 bytes leftover after parsing attributes in process `syz.0.410'. [ 137.225377][ T5272] veth0_vlan: left promiscuous mode [ 137.291142][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.370556][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.446452][ T7371] ip6gre1: entered allmulticast mode [ 137.496948][ T5728] veth0_vlan: entered promiscuous mode [ 137.556540][ T7379] sit1: entered promiscuous mode [ 137.578015][ T7379] sit1: entered allmulticast mode [ 137.608074][ T59] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 138.335983][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.372482][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.325995][ T7373] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 140.406939][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.415209][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.608651][ T7411] netlink: 16 bytes leftover after parsing attributes in process `syz.3.421'. [ 141.335959][ T7443] syzkaller1: entered promiscuous mode [ 141.354330][ T7443] syzkaller1: entered allmulticast mode [ 141.383310][ T7448] netlink: 'syz.2.430': attribute type 1 has an invalid length. [ 141.424043][ T7448] netlink: 224 bytes leftover after parsing attributes in process `syz.2.430'. [ 141.456295][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.603861][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 142.092071][ T7472] netlink: 'syz.2.435': attribute type 1 has an invalid length. [ 142.130398][ T7472] netlink: 224 bytes leftover after parsing attributes in process `syz.2.435'. [ 142.493236][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.697154][ T7500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.706164][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.771788][ T7496] netlink: 196 bytes leftover after parsing attributes in process `syz.2.439'. [ 142.807791][ T7496] netlink: 196 bytes leftover after parsing attributes in process `syz.2.439'. [ 142.829051][ T7505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.441'. [ 142.843712][ T7496] netlink: 19 bytes leftover after parsing attributes in process `syz.2.439'. [ 142.876750][ T7505] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 142.978158][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.135745][ T7516] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 143.268659][ T7520] netlink: 596 bytes leftover after parsing attributes in process `syz.0.447'. [ 143.279028][ T7519] IPv6: NLM_F_CREATE should be specified when creating new route [ 143.319767][ T7520] xt_hashlimit: overflow, try lower: 3/0 [ 143.368395][ T7519] veth3: entered promiscuous mode [ 143.387739][ T7519] veth3: entered allmulticast mode [ 143.421080][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.446'. [ 143.498095][ T7519] netlink: 16 bytes leftover after parsing attributes in process `syz.1.446'. [ 143.541028][ T7519] netlink: 16 bytes leftover after parsing attributes in process `syz.1.446'. [ 143.603718][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 143.766126][ T7535] bridge0: entered promiscuous mode [ 143.781803][ T7535] bridge0: entered allmulticast mode [ 144.072990][ T7547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.457'. [ 144.158038][ T9] IPVS: starting estimator thread 0... [ 144.197239][ T7556] netlink: 'syz.0.460': attribute type 10 has an invalid length. [ 144.207337][ T7556] veth1_macvtap: left promiscuous mode [ 144.218720][ T7553] netlink: 'syz.2.459': attribute type 9 has an invalid length. [ 144.241851][ T7556] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 144.266283][ T7554] IPVS: using max 27 ests per chain, 64800 per kthread [ 144.534498][ T7566] net_ratelimit: 2 callbacks suppressed [ 144.534515][ T7566] ip_tables: iptables: counters copy to user failed while replacing table [ 144.569681][ T5343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.772169][ T7578] xt_hashlimit: size too large, truncated to 1048576 [ 144.929484][ T7586] netlink: 'syz.0.469': attribute type 83 has an invalid length. [ 145.217996][ T29] audit: type=1800 audit(1786940526.229:2): pid=7595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.470" name=680B20 dev="tmpfs" ino=506 res=0 errno=0 [ 145.642336][ T5343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.790588][ T7620] bond0: (slave bond_slave_1): Releasing backup interface [ 146.121736][ T7626] : renamed from virt_wifi0 [ 146.210069][ T7630] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 146.265397][ T7630] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 146.391372][ T7640] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 146.427085][ T7640] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 146.483948][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.639974][ T7652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.666264][ T5343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.678193][ T7652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.727395][ T7652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.951683][ T7665] x_tables: ip_tables: osf match: only valid for protocol 6 [ 147.624384][ T7685] syzkaller0: entered promiscuous mode [ 147.659351][ T7685] syzkaller0: entered allmulticast mode [ 147.809517][ T7703] __nla_validate_parse: 9 callbacks suppressed [ 147.809536][ T7703] netlink: 16 bytes leftover after parsing attributes in process `syz.2.500'. [ 147.901236][ T7703] netlink: 56 bytes leftover after parsing attributes in process `syz.2.500'. [ 148.213969][ T7710] bond4 (unregistering): Released all slaves [ 148.915805][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'. [ 149.010344][ T7737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.511'. [ 149.156339][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'. [ 149.169560][ T59] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.202137][ T7737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.511'. [ 149.204026][ T59] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.255853][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.514'. [ 149.291874][ T59] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.554739][ T59] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.798116][ T5736] net_ratelimit: 8 callbacks suppressed [ 149.798133][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.850632][ T7773] ip_tables: iptables: counters copy to user failed while replacing table [ 150.003781][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 150.023837][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.142876][ T7785] xt_TCPMSS: Only works on TCP SYN packets [ 150.317074][ T7788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.523'. [ 150.822683][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.864259][ T7808] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 150.896156][ T7808] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 150.925112][ T7811] netlink: 16 bytes leftover after parsing attributes in process `syz.2.531'. [ 151.297101][ T7826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.395018][ T438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.431918][ T438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.507646][ T7837] No such timeout policy "syz0" [ 151.583450][ T7839] netlink: 'syz.2.540': attribute type 5 has an invalid length. [ 151.629738][ T7839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.540'. [ 151.786201][ T7845] IPVS: set_ctl: invalid protocol: 50 172.20.20.20:20003 [ 151.896980][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.590133][ T7876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.605337][ T7875] netlink: 'syz.1.552': attribute type 1 has an invalid length. [ 152.643852][ T7875] netlink: 'syz.1.552': attribute type 2 has an invalid length. [ 152.665010][ T7877] netlink: 'syz.1.552': attribute type 1 has an invalid length. [ 152.712637][ T7877] 8021q: adding VLAN 0 to HW filter on device bond3 [ 152.869301][ T7875] bond3: (slave gretap1): making interface the new active one [ 152.912060][ T7875] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 152.985011][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.045011][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.368525][ T7897] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 153.392839][ T7897] bond4 (unregistering): Released all slaves [ 153.768467][ T7764] wlan0: Trigger new scan to find an IBSS to join [ 153.903851][ T7927] netlink: 'syz.0.565': attribute type 16 has an invalid length. [ 154.000315][ T7927] __nla_validate_parse: 2 callbacks suppressed [ 154.000333][ T7927] netlink: 64130 bytes leftover after parsing attributes in process `syz.0.565'. [ 154.025531][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.048089][ T5343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.192477][ T7973] netlink: 24 bytes leftover after parsing attributes in process `syz.3.575'. [ 155.285313][ T7973] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 155.445601][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.454715][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.492118][ T7949] netlink: 156 bytes leftover after parsing attributes in process `syz.4.570'. [ 155.649126][ T7987] netlink: 36 bytes leftover after parsing attributes in process `syz.3.577'. [ 155.717739][ T7991] netlink: 56 bytes leftover after parsing attributes in process `syz.2.578'. [ 156.084462][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.092654][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.512532][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.583'. [ 156.557352][ T8019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.583'. [ 156.797343][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.587'. [ 156.947589][ T8030] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 156.959693][ T8030] netlink: 152 bytes leftover after parsing attributes in process `syz.0.587'. [ 157.046151][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.081052][ T8032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.097612][ T7766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.128981][ T7766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.144477][ T8036] netlink: 'syz.1.586': attribute type 1 has an invalid length. [ 157.163651][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.174905][ T8036] netlink: 'syz.1.586': attribute type 1 has an invalid length. [ 157.948712][ T8080] netlink: 16 bytes leftover after parsing attributes in process `syz.1.598'. [ 157.994712][ T8083] netlink: 'syz.0.599': attribute type 1 has an invalid length. [ 158.013864][ T8080] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 158.039789][ T8084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.173474][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.318831][ T8094] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 158.777701][ T8108] x_tables: unsorted entry at hook 1 [ 158.804207][ T7766] wlan0: Trigger new scan to find an IBSS to join [ 158.912169][ T8114] IPVS: set_ctl: invalid protocol: 58 10.1.1.1:20003 [ 158.934600][ T8114] xt_ecn: cannot match TCP bits for non-tcp packets [ 159.254792][ T8125] __nla_validate_parse: 4 callbacks suppressed [ 159.254808][ T8125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.614'. [ 159.313358][ T8136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.614'. [ 159.707572][ T8152] netlink: 232 bytes leftover after parsing attributes in process `syz.4.619'. [ 159.933420][ T8162] netlink: 'syz.2.622': attribute type 26 has an invalid length. [ 160.251322][ T5343] net_ratelimit: 2 callbacks suppressed [ 160.251338][ T5343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.266265][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.321826][ T8172] Bluetooth: MGMT ver 1.23 [ 160.407599][ T8177] netlink: 'syz.3.625': attribute type 30 has an invalid length. [ 160.726253][ T8186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.627'. [ 160.932559][ T8195] bridge_slave_1: entered promiscuous mode [ 160.971555][ T8195] netlink: 16 bytes leftover after parsing attributes in process `syz.1.629'. [ 161.286363][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.316797][ T8203] netlink: 'syz.2.633': attribute type 1 has an invalid length. [ 162.126379][ T8248] netlink: 27 bytes leftover after parsing attributes in process `syz.4.643'. [ 162.352118][ T5343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.372860][ T8261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.645'. [ 162.409207][ T8262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.645'. [ 162.468355][ T8261] openvswitch: netlink: Missing key (keys=40, expected=100) [ 162.530518][ T8262] openvswitch: netlink: Missing key (keys=40, expected=100) [ 162.836436][ T8279] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 162.902145][ T8279] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 163.000400][ T8289] openvswitch: netlink: Unknown key attributes 1 [ 163.027152][ T8289] netlink: 'syz.1.651': attribute type 1 has an invalid length. [ 163.286050][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.328863][ T8301] netlink: 168 bytes leftover after parsing attributes in process `syz.1.655'. [ 163.395152][ T5343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.011515][ T8330] xfrm1: entered allmulticast mode [ 164.096457][ T8329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.664'. [ 164.328729][ T8329] team0 (unregistering): Port device team_slave_0 removed [ 164.354699][ T8329] team0 (unregistering): Port device team_slave_1 removed [ 164.371362][ T8334] veth1_to_bond: entered promiscuous mode [ 164.412379][ T5343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.488189][ T8339] veth1_to_bond: left promiscuous mode [ 164.711543][ T8362] netlink: 'syz.1.671': attribute type 16 has an invalid length. [ 164.762475][ T8362] netlink: 'syz.1.671': attribute type 3 has an invalid length. [ 164.798520][ T8358] __nla_validate_parse: 1 callbacks suppressed [ 164.798537][ T8358] netlink: 24 bytes leftover after parsing attributes in process `syz.4.672'. [ 164.828018][ T8362] netlink: 132 bytes leftover after parsing attributes in process `syz.1.671'. [ 165.024230][ T8351] netlink: 'syz.1.671': attribute type 1 has an invalid length. [ 165.052164][ T8351] netlink: 224 bytes leftover after parsing attributes in process `syz.1.671'. [ 165.363912][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 165.464878][ T5343] net_ratelimit: 1 callbacks suppressed [ 165.464894][ T5343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.478880][ T8374] syzkaller1: entered promiscuous mode [ 165.495362][ T8374] syzkaller1: entered allmulticast mode [ 165.615861][ T8392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.681'. [ 165.797323][ T8391] netlink: 'syz.3.681': attribute type 2 has an invalid length. [ 165.902769][ T8406] netlink: 48 bytes leftover after parsing attributes in process `syz.0.687'. [ 165.947781][ T8406] netlink: 16 bytes leftover after parsing attributes in process `syz.0.687'. [ 165.977123][ T8406] netlink: 84 bytes leftover after parsing attributes in process `syz.0.687'. [ 166.324052][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.490279][ T5343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.625225][ T8437] netlink: 'syz.4.696': attribute type 2 has an invalid length. [ 166.644966][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.685260][ T8419] syzkaller0: entered promiscuous mode [ 166.704822][ T8419] syzkaller0: entered allmulticast mode [ 166.737242][ T8431] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 166.815906][ T8437] : entered promiscuous mode [ 166.986916][ T29] audit: type=1800 audit(1786940547.999:3): pid=8449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.699" name="memory.events" dev="tmpfs" ino=680 res=0 errno=0 [ 167.192364][ T8454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.700'. [ 167.536738][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.610387][ T5343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.667949][ T8446] vlan0: entered allmulticast mode [ 168.673170][ T8446] bond0: entered allmulticast mode [ 168.679051][ T8446] bond_slave_0: entered allmulticast mode [ 168.703835][ T8446] bond_slave_1: entered allmulticast mode [ 168.932385][ T8467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.703'. [ 168.973680][ T8468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.703'. [ 169.382286][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.556690][ T8492] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 169.612144][ T8492] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 169.673248][ T8497] bridge_slave_0: invalid flags given to default FDB implementation [ 169.697155][ T5343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.774170][ T8492] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 170.064783][ T8506] bond3: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 170.111679][ T8515] nbd: must specify a size in bytes for the device [ 170.126973][ T8506] bond3 (unregistering): Released all slaves [ 170.154496][ T8515] netlink: 'syz.1.721': attribute type 1 has an invalid length. [ 170.352687][ T8530] __nla_validate_parse: 4 callbacks suppressed [ 170.352706][ T8530] netlink: 28 bytes leftover after parsing attributes in process `syz.1.721'. [ 170.427878][ T8512] syzkaller0: entered promiscuous mode [ 170.473536][ T8512] syzkaller0: entered allmulticast mode [ 170.507734][ T8534] netlink: 'syz.1.721': attribute type 16 has an invalid length. [ 170.533331][ T8512] netlink: 108 bytes leftover after parsing attributes in process `syz.2.720'. [ 170.595237][ T8534] netlink: 20 bytes leftover after parsing attributes in process `syz.1.721'. [ 170.729755][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.826056][ T8524] macvtap1: entered allmulticast mode [ 170.913886][ T8525] macvtap2: entered allmulticast mode [ 170.939466][ T8525] netlink: 'syz.1.721': attribute type 16 has an invalid length. [ 170.977731][ T8525] netlink: 20 bytes leftover after parsing attributes in process `syz.1.721'. [ 171.050986][ T8553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.063757][ T8553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.109748][ T8553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.330052][ T8562] netlink: 24 bytes leftover after parsing attributes in process `syz.3.729'. [ 171.682501][ T8577] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 171.695917][ T8576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.733'. [ 171.775629][ T5343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.850138][ T8551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.865484][ T8551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.177210][ T8593] netlink: 36 bytes leftover after parsing attributes in process `syz.1.740'. [ 172.404043][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.748981][ T8627] netlink: 'syz.4.749': attribute type 1 has an invalid length. [ 172.769356][ T8627] netlink: 208 bytes leftover after parsing attributes in process `syz.4.749'. [ 172.814218][ T5343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.518590][ T8657] Cannot find add_set index 46338 as target [ 173.683612][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.756043][ T8666] netlink: 28 bytes leftover after parsing attributes in process `syz.1.761'. [ 173.799636][ T8666] netlink: 28 bytes leftover after parsing attributes in process `syz.1.761'. [ 173.942619][ T8666] gretap0: entered promiscuous mode [ 173.954129][ T8676] netlink: 'syz.4.764': attribute type 5 has an invalid length. [ 173.983192][ T8666] gretap0: left promiscuous mode [ 174.179843][ T8676] bond3: option lp_interval: invalid value (0) [ 174.203242][ T8676] bond3: option lp_interval: allowed values 1 - 2147483647 [ 174.271462][ T8676] bond3 (unregistering): Released all slaves [ 174.309449][ T8682] IPv6: sit1: Disabled Multicast RS [ 174.837025][ T8710] netlink: 'syz.4.770': attribute type 2 has an invalid length. [ 175.049599][ T8720] sctp: [Deprecated]: syz.3.774 (pid 8720) Use of int in maxseg socket option. [ 175.049599][ T8720] Use struct sctp_assoc_value instead [ 175.603838][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 176.018462][ T5343] net_ratelimit: 3 callbacks suppressed [ 176.018479][ T5343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.071996][ T8757] [ 176.074395][ T8757] ====================================================== [ 176.081431][ T8757] WARNING: possible circular locking dependency detected [ 176.088478][ T8757] syzkaller #0 Not tainted [ 176.092915][ T8757] ------------------------------------------------------ [ 176.099944][ T8757] syz.2.784/8757 is trying to acquire lock: [ 176.105850][ T8757] ffff888033652fe8 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x101/0xca0 [ 176.117375][ T8757] [ 176.117375][ T8757] but task is already holding lock: [ 176.124756][ T8757] ffff8880336540e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x550 [ 176.133774][ T8757] [ 176.133774][ T8757] which lock already depends on the new lock. [ 176.133774][ T8757] [ 176.144209][ T8757] [ 176.144209][ T8757] the existing dependency chain (in reverse order) is: [ 176.153323][ T8757] [ 176.153323][ T8757] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 176.161090][ T8757] lock_sock_nested+0x41/0x100 [ 176.166404][ T8757] smc_listen_out+0xd4/0x3d0 [ 176.171543][ T8757] smc_listen_work+0x81d/0x1410 [ 176.176949][ T8757] process_scheduled_works+0xa8e/0x14e0 [ 176.183083][ T8757] worker_thread+0xa47/0xfb0 [ 176.188219][ T8757] kthread+0x388/0x470 [ 176.192843][ T8757] ret_from_fork+0x514/0xb70 [ 176.197992][ T8757] ret_from_fork_asm+0x1a/0x30 [ 176.203349][ T8757] [ 176.203349][ T8757] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 176.213644][ T8757] __lock_acquire+0x1520/0x2cf0 [ 176.219060][ T8757] lock_acquire+0x106/0x350 [ 176.224123][ T8757] __flush_work+0x74c/0xca0 [ 176.229181][ T8757] __cancel_work_sync+0xbe/0x110 [ 176.234667][ T8757] smc_clcsock_release+0x60/0xf0 [ 176.240161][ T8757] __smc_release+0x64e/0x7c0 [ 176.245294][ T8757] smc_close_non_accepted+0xd5/0x1f0 [ 176.251128][ T8757] smc_close_active+0xb42/0xf30 [ 176.256529][ T8757] __smc_release+0x9c/0x7c0 [ 176.261595][ T8757] smc_release+0x2c5/0x550 [ 176.266564][ T8757] sock_close+0xad/0x220 [ 176.271362][ T8757] __fput+0x418/0xa50 [ 176.275899][ T8757] task_work_run+0x1d9/0x270 [ 176.281049][ T8757] exit_to_user_mode_loop+0x1fa/0x730 [ 176.286977][ T8757] do_syscall_64+0x353/0x580 [ 176.292113][ T8757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.298577][ T8757] [ 176.298577][ T8757] other info that might help us debug this: [ 176.298577][ T8757] [ 176.308826][ T8757] Possible unsafe locking scenario: [ 176.308826][ T8757] [ 176.316310][ T8757] CPU0 CPU1 [ 176.321711][ T8757] ---- ---- [ 176.327098][ T8757] lock(sk_lock-AF_SMC/1); [ 176.331637][ T8757] lock((work_completion)(&new_smc->smc_listen_work)); [ 176.341119][ T8757] lock(sk_lock-AF_SMC/1); [ 176.348180][ T8757] lock((work_completion)(&new_smc->smc_listen_work)); [ 176.355146][ T8757] [ 176.355146][ T8757] *** DEADLOCK *** [ 176.355146][ T8757] [ 176.363310][ T8757] 3 locks held by syz.2.784/8757: [ 176.368357][ T8757] #0: ffff888057f74180 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 176.378604][ T8757] #1: ffff8880336540e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x550 [ 176.388063][ T8757] #2: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x101/0xca0 [ 176.397348][ T8757] [ 176.397348][ T8757] stack backtrace: [ 176.403299][ T8757] CPU: 0 UID: 0 PID: 8757 Comm: syz.2.784 Not tainted syzkaller #0 PREEMPT(full) [ 176.403323][ T8757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 176.403345][ T8757] Call Trace: [ 176.403353][ T8757] [ 176.403361][ T8757] dump_stack_lvl+0xe8/0x150 [ 176.403393][ T8757] print_circular_bug+0x2e1/0x300 [ 176.403429][ T8757] check_noncircular+0x12e/0x150 [ 176.403464][ T8757] __lock_acquire+0x1520/0x2cf0 [ 176.403497][ T8757] ? __pfx___schedule+0x10/0x10 [ 176.403517][ T8757] ? irqentry_exit+0x218/0x8f0 [ 176.403540][ T8757] ? irqentry_exit+0x218/0x8f0 [ 176.403561][ T8757] ? trace_irq_disable+0x3b/0x140 [ 176.403586][ T8757] ? __flush_work+0x101/0xca0 [ 176.403608][ T8757] lock_acquire+0x106/0x350 [ 176.403633][ T8757] ? __flush_work+0x101/0xca0 [ 176.403658][ T8757] ? preempt_schedule_thunk+0x16/0x40 [ 176.403681][ T8757] ? __flush_work+0x101/0xca0 [ 176.403704][ T8757] __flush_work+0x74c/0xca0 [ 176.403727][ T8757] ? __flush_work+0x101/0xca0 [ 176.403750][ T8757] ? __flush_work+0x101/0xca0 [ 176.403775][ T8757] ? __pfx___flush_work+0x10/0x10 [ 176.403799][ T8757] ? __pfx_wq_barrier_func+0x10/0x10 [ 176.403831][ T8757] ? __cancel_work_sync+0x5c/0x110 [ 176.403858][ T8757] __cancel_work_sync+0xbe/0x110 [ 176.403885][ T8757] smc_clcsock_release+0x60/0xf0 [ 176.403913][ T8757] __smc_release+0x64e/0x7c0 [ 176.403935][ T8757] smc_close_non_accepted+0xd5/0x1f0 [ 176.403957][ T8757] smc_close_active+0xb42/0xf30 [ 176.403983][ T8757] ? __pfx_sock_def_readable+0x10/0x10 [ 176.404013][ T8757] __smc_release+0x9c/0x7c0 [ 176.404030][ T8757] ? __local_bh_enable_ip+0xd0/0x130 [ 176.404055][ T8757] smc_release+0x2c5/0x550 [ 176.404083][ T8757] sock_close+0xad/0x220 [ 176.404111][ T8757] ? __pfx_sock_close+0x10/0x10 [ 176.404137][ T8757] __fput+0x418/0xa50 [ 176.404167][ T8757] task_work_run+0x1d9/0x270 [ 176.404198][ T8757] ? __pfx_task_work_run+0x10/0x10 [ 176.404232][ T8757] exit_to_user_mode_loop+0x1fa/0x730 [ 176.404258][ T8757] ? rcu_is_watching+0x15/0xb0 [ 176.404289][ T8757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.404311][ T8757] do_syscall_64+0x353/0x580 [ 176.404335][ T8757] ? clear_bhb_loop+0x70/0xc0 [ 176.404358][ T8757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.404379][ T8757] RIP: 0033:0x7ff1b799e0d9 [ 176.404405][ T8757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.404423][ T8757] RSP: 002b:00007ffcc21b4f28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 176.404444][ T8757] RAX: 0000000000000000 RBX: 00007ffcc21b5010 RCX: 00007ff1b799e0d9 [ 176.404459][ T8757] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 176.404471][ T8757] RBP: 000000000002aef2 R08: 0000000000000001 R09: 0000000000000000 [ 176.404483][ T8757] R10: 0000001b32620000 R11: 0000000000000246 R12: 00007ffcc21b5050 [ 176.404496][ T8757] R13: 00007ff1b7c25fac R14: 000000000002afa3 R15: 00007ff1b7c25fa0 [ 176.404520][ T8757] [ 177.163692][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.245056][ T5343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.324046][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.483749][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.364709][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.404907][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.444197][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.523802][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.484704][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.524010][ T5343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.564267][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.572430][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.604326][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog