last executing test programs: 4m39.295623035s ago: executing program 2 (id=10018): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000000000)=""/40, 0x28, 0x0, &(0x7f0000000040)=""/44, 0x2c}}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x488c0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000180)={@loopback={0x0, 0x3fc}, 0x0, r2}) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000180)={@loopback={0x0, 0x3fc}, 0x0, r2}) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x3, 0x14, &(0x7f0000001180)=ANY=[@ANYBLOB="620ad0ff45002c00620ad4ff00000000620ad8ff40060000620adcff7f000001620ae0ff7f000001620ad0ff12345678620ae8ff15223344620aecff00000000620af0ff60021000620af4ff00000000620af8ff1c0405b4620afcff00000000bfa100000000000007010000d0ffffffbfa200000000000007020000e4ffffffb70300001800000085000000cc000000b70000000200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xfffffe94, 0x0, 0x0, 0x0}, 0x94) 4m38.412342119s ago: executing program 2 (id=10023): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}]}, 0x3c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3c000000410001000800000000000000030100000f0000001200010000112233445566778899aabb86dd0000040002800c00038008000c8004"], 0x3c}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32=r4, @ANYBLOB='$\x002'], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000800)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6f}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xe8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004005}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$key(0xf, 0x3, 0x2) write$tun(r5, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0xcc}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x31, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1d, 0x0, @gue={{0x2, 0x0, 0x0, 0x4, 0x100}, "b68ed34f131c03e57e518e4d20"}}}}, 0x3f) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) 4m37.689292127s ago: executing program 2 (id=10026): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', @link_local}) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000280)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f00000002c0)="1100f8ae", 0x4}, {&(0x7f0000000300)="00020057", 0x4}], 0x3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x30, 0x2, 0x1, 0x3, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x908}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10050}, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$OCFS2_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000340)={0x1, 0x2, 0x1e8f2dbc, 0x10000, 0x2, 0x367f}) mmap(&(0x7f000012a000/0x1000)=nil, 0x1000, 0x80000c, 0x28012, r5, 0x80089000) mmap(&(0x7f0000ff2000/0xb000)=nil, 0xb000, 0x3, 0x28012, r0, 0x0) mmap(&(0x7f000040b000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 4m36.31450314s ago: executing program 2 (id=10032): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRES16=0x0], 0x18}}, {{0x0, 0x0, 0x0}}], 0x2, 0xf00) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10, 0x800) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000200)={'filter\x00', 0xd3, "aeff55eb4b21e12c8bdff7168fc4a233bf773ceae04a9dd62c87bf154746be6ad7e347f647d2ecb585d74ed28382ac7f24cd0c6be980b2b2d7ab42aa20b91de5874c0239fb41af8dbabe040f7dd054c1172b6b614f2dd45f4e0402ab24c58628ebb3dfe25f1b23f115f2101a2a06849181c3331c366786b7bb65dd752d2e390ec17964c60a960f179ac4543192d7913c2731bbeadf5ad49a377721da81dadf927430a5aaf020f10aaa08f8852dd95ee0ab46bcda47930ddaba2fd8f20cbbaa7e678e5bd98b631468535a77a4be2195096ccd8a"}, &(0x7f0000000300)=0xf7) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000007600090b000000000000000003000200000000000800050000000eb5"], 0x20}}, 0x0) 4m35.901334952s ago: executing program 2 (id=10035): socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000540)='\b\x00', 0x2}, {&(0x7f0000000580)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000081000000008000000", @ANYRES32=r0], 0x40}, 0x0) 4m35.497901366s ago: executing program 2 (id=10038): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x20, 0x40, 0x107, 0x70bd27, 0xfffffdfe, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0x4, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x50, 0x24, 0xe0b, 0x70bd27, 0xfffffffd, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x3}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x80) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x80000000, '\x00', r5, 0xffffffffffffffff, 0x4, 0x1}, 0x50) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001cc0)={{r1, &(0x7f00000000c0)='*%\x00', 0x80, &(0x7f0000000100)={@align=0xad, {0xa62, 0x74a, 0x2, 0x4}}, 0xfffffffd, &(0x7f0000000140), &(0x7f0000000180)=0xfffffc01}, 0x4, &(0x7f0000001c40)=[{0x1, 0x80000000, &(0x7f00000001c0)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000240)="5c0a63cb62c2a5350b736ed969a8ea940a38fb5c5cc7a1ffe95816f485611ce274c031974a0d7120151497e71751e84ed73ca5436a5f545a3f70c24f207a0a8e4a6308a1a4fbb54e63a96d5d1e4fe0b5af61d5d716a013e6a396094a8b3751f4763bb336027bdcb352131e074272a0e593c0556e86c7ba797782b222ad7113f2e3b779ab5f327910eb3849f795e5061cebd5cbbc668aab917b5829b3d710f14b781f5349ca45536d162d519695d856f365", 0xb1, 0xc}, {0x3, 0x8, &(0x7f0000000300)='\x00', &(0x7f0000000340)="f7e4a69718d0cb87538ecb90f0e2a02273bdb5575db520e670d29923a567e76e9e9dcfbe3bbd7a4ea3b25c215aefc57f5f6f2272f3e3977e8b9e395922ec39e9175847625009", 0x46, 0x20}, {0x1, 0xfff, &(0x7f00000003c0)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000b40)="b1deee892a5cf3d26ffbbb62b43fca0dcb68e2acf883682e27620f966fa32a1fa52c7e3c051cb5cfef7caa5b9a5a5b4a66660cfed4f16fec1e197d6efecdc850ee8fde510934ebe80b79893f29d906b6ba4103e06a7673f4386539ae9e21032e99bb0064e3a8dac83287b9adfc834491d38a110e684a08a8ba16a0a4ff67ef91aa6df9df4fc4f1333777e1d4b052e5bd9e7d2882df45f80f8901e17576356fdd73a33ed59bb95f87e98446f75fad4f0199682e91e2b18fa8ad66b39a1bb04b7f2c1fa5680e2cd7514a1856e0e09ff4961ac86d69e6bde8bcf52dd15afb8d2a057f815a48b71b4610c6e0d999a21a93b618b4990980e2685c4c35174c140972d56f15723a24bcb7ba8732865570243d963c8175d74a1c27c546bfc44033590ea2bf85c3717ebc561e3a709fc63fb355872a08f7e0ffaa52c0425e55140385ee658362c369c575f15845340d02cf1bb03d102026285f7a5400fda260a0911227def25f846d40bfd0b364fbb45928a9af4d92a25ca56098f63d719fe4d8fddc39f3f3a86228af7c31ab3ec3612bdb515c66cc5da4fc5b2c784347567e24475037797df3ebaf4999bf6f923c248fe68a285394ec4f9e0815c94ac0337cdbdd65c93ad76425941b8e430a01d7198aab0dfbc39e7f686fae629aed7f9caeecb8369259317c5d72b25dec4fe52090d02f41a4bf934062ae1294223e743197209186c12acfe980215d0eaef84c2fd53ac0d2bfca33253659abf655da60ee19f5f40ef3fbd2f9fbc37afc7849203685449fa37b8095a21d42fd1df6af4126aa89dd97fab8d73493760556a13c2ce89c86f3b01b94e475c10c986832510161879e52468e621bffa95184524dc4fbb80514df5b20f346d40b7df0a9edf716749223fd53c9557911de62c21567e6b91bfa7f3259269f5a00a7371a1e694fc5bc325ff9a4a24bf5aaafad30461583bdd095a7fd4e06f1ba80d45625bc8df8d4cbebc3b0e9b9c10e95513246e2ddfbd17ae0785e22f79cc5e9728ede2336fd21a27b19f29b9ea631985eb8349f96d26561705e3e9ef331d659fe3db8ab6c7651c69507059f1e1762d116fd67711b0bc3ba29f6cee0885a93fd7a63d3ecb75c5fffcaf0ea0c51ece9d88d44868348a0f2b6cefa94e8a40ec43f63e18163b96d76f29081d1c9a8fb01efebd45d432dbd901bc04ca3704e136d713d14596eb2ee714335b19066868baa57b0e6c84f23b98387b6f7c290dccae390d6f36dac189384c0f8396dedfedf790a468a3947c82868b53ad1d752daf35e71f1de0c14d5aa450f30fe0421beaa011d696cad0b77ae84d2be027ba9e1b26b1cd30e28854712261d7127ba252cf9503eee1515f670f2f38925136d60364c636b3bb1cb3d1f4e9bb652de559815ea452811220a0fcf75c182ce576b4e016a04d594bae4ace3dd28e385b8af75177125c20947d6771afeb275567b912ef2b304b16f1e1330bbdb3e3f96075c981b5fbeb89196f116f7b833798a75fde6d0f06b51473ba62070c73ca1a287302741d58b22b2163e6db29e8d07c2c0c376893c3b649efd688082a1ee273c52d3649b1dfded929a220767ff1d477ef6845030b9b0e0b05bdd1e2983a89d7caa06b68caec3de5451f0e5f539ca0a0498dce96e9382964c43a830f6094f133e1769d20ab228f2e7f734ae510192e19523af20b6a31fc32901d5e05c780f0b711148090bfcb2146e5761754a42ca2c325083da1873ce5cbbdfbf03ee866685ad226736b5b05d42cdfdc63224d96a953584377b3770eaec5f2b41745f9531f4e2c7fb0d99f715b383c500f92fa0adbe8b8206b567d1f1fa192f04646fefca9d3906654aef014955e4b600f02c8d551fb8f5295335e149314670ba2814195aaf937c109c8c0189ca0a7cdb3df3d528adffe0252458182f895f6ac1abe30365230fc860e28eeb0e5262056f848c455c181d0a335bbf2e1b78506587d963c7ffe7386903d53c19923e2536de25bf1b3976971092aac550ee27c0d6b5aa536c2b5a8bd66285e470836d6baa87d5ed8625105fe288b8e6772365064065e79cc345c893268935ab61fbd0a9f251f89ae000c60333a224d3ef8d8908db047a09cf03c365a03e81b9927e14e6f526872b573ba1578474412a13214e20da129cdc69e89a943aa6f625398e54590c36b822e467f0f65e71dcc00413e8c1ab4b470c56be1ee545a733afb710df0f2e2574566378efb1a6669c96536d8407aff3203ec843a8fe0d8d3f3e7b095a5350808a9ed69b2806ffca120790d71e84ee28be1a1cb9ad66af563d957ddb38d136e2dcaa9679bb9fa0f65295929d7e7175362a60cb85f21f7aa34ebb7de6ac0e427c7e929740895d364fd3c6a76bda7acc574fedfbbcdcfdc837d4805072a03dff436748e174ee1b4f4debc220d4216bd42a0977dcad6162324623d5e364b5002848cde6ba0ac4bf1776baef5b42ab2c86117b7c427d7c710aea2ed397cde2dbf9c1f9b3d3d9085c4289ad153b29cb588f251d917b6a7ab9c1567ff3520609465589639e6f4b7ebd435a5c9a45fcb8562fec933132f0d8023e677dd9721981402221968ad782f06f6820c0a77d14ccbfcf3214fabde9261218dd1c4cf4963b82cde218f9a95d792d3689c4af2868688594c4df1fd0ca7ef0020c64091c445be385e8585fc8db45306c65bd0e8777f468d59b52cb7434b3c104ebe654dee88234726663b8b6ea3de749cdd83004af2c1cc96b9197ec46d4056ed2dcd54f72765655094b2516a9bcbd23ec90edafd9d20afeab276bad0483b67b31dbd7d0733627da58b64fd3f4cb6c958e0551f05bb51b8702ab94e5a2432dc2ecb2d4819967e20bacd197b5b9158d03b4af7ec1be8eb890a31465df2e65debec86e1d98a99475e06412a4b68bc95c41793cf617b70c4aac3c2626e338dea4477906bd9516a6aba728867431f9f40ca4633a6c66fc225d449c2a658d9ae791aeead9522592fbc1e5565e6b365e40aa865a072f6e42b616946abf81e243f2b4d32caffd3e7dc175bc4de7c387c0c1dc61dfcc691c0405062fccf4ae1de7c18bd8a014751f6787238d4af2b54464e65927a08239c263ef322892a52bfb5ee94a75880c53395e037d9c53096733154dd3d080d96dad6df6647e142468dfc40f6b1360820dc9e8ab09ecda55bee568a323accec76e754fe4ac5d05b981d4c614450fe44a83389d6af897069442d56f00797d96b35a405b14343a5a9acc5492b6ddc5d834fff161fb8efcf7ecf5d9cd49b42caa8a8ff1ba1568a0eadcee5217eefca2654e1f5bcdb735927923e131a7f8f51b026862ff41422dbd22a4c9f2ae6afef7d236d23a48d71c1e3d50fe3f95f72a1b5bff157bf0ea8ae702e7d9d5b0180100054e5a3677890c9ff8082fcc6101360f2fc7f4faf6d3f162507f1ab360c2ff44dfb83f839e452828c556cb300e572aab98479189eb265655a245af9e6a77fe3643ec76cffee5bd15408c4e89758b1fd3393835bba2e498427c73d932b2054fe0358af6b108517b4cd673ec4324f47cd1d06f0985be5181a43ea6caf3982aa70f9222a657f7845612c1bd6f6c11ad5d13e7154e3365ba3463289d8189aa746f4c596b03ccb6b1693d8680b076104fd9ca55c6e4d9c46bf939236399fa5d83c4e508815b0228e2efc15639afe31d83838ba8b73f7b11e83f373e0e088375d5bbe2cdd6e9fc67244dd98eb95a82073b6eb2a651f790c90067c033a3302ca574b5f2897898bf1065cbeefaa69e659f0c597b3dfc651142c13549c61feb68aa0549af15ed5c0ba0a17b19e9c5b013a76d67627f4c1f3ba6fc89c5522be46618a0051485eb6d2384ad0badb40e7b0edf15fd593e735bb986147a27d4c26e927b295f4c823776b27d18a1e52940fb9af48f672fad9ea7fbb70f8148418591d405afcc1de5458e700ce1decb96f4eb2fd9f1524892cce5094629ace9b7ecb9cd565c22e5203b4ead36e257886d90d197d67e45ef25c71970c31a307d61ef5f75857c623a4c638fcd84cd58d48ee248029e813092ac76f6abe7d540f57ad80e75f7639268d52cefdde6098045cc81e37883ee525195271745109b5ea8745b0eec38e50146e7a643598c57fd5fac297dfd7659a05f7d196a53d57905b6cbe9f8b5539cafbfc95c5732c97754af6ca75193619f204c1877ed9d4dcd5e9dbdb2b75f7da564399951866713c21ac616506b795d42bb61149b675d0e0e940e958de32c26e11603a798aad24292b4722f048ecf93b2388e1377326c856f7af26444f45b5df3d347e7ec224540df37479f0cb6a02b2f5b656477ce799763378110469256a6d8289634099be3ef033eed7506762e59752f5c1d55f7f192ce25d3fb47c3849d265e7a791c7921c23f6707f14e328369024e33a955e84d1e0571977b59d5e02c4690c3b552cdee2f3ee801b3ea45202354777a7d245f54971a6da8e34e0a8decf23bacbd98f4cdf679d8e52924d11e3b12b0570dcb8007c5859020c34623da813b3fa8e1d91b9335c53b5cef7acc1639d727587609d8691a09af92bd752ac6681c81ee23017454c19ba7ec571734bf9beb580b8b91e150687b824e6a467d10ee133545d9ac5b77c3dafd8fb533f38339805c53000caaec9478db7b921b6d39d5dd614e7c7082d20d018863b715579cc8c45652930728c842c9a589728372cf403044e050d29b5326a310ec8f8c54726ba431660a90c222f8692b13afe498f158b8c2b2949307750934b44f14f6e1b71305550b19201730304387a88c83223833361f337837c6f52ffdd1078b6688aed27e8e22909b5c1417db27a0ee6cb89c7c463a97b6ccd19637eea2da39b5e5e10b32e26174d609b7e826f73ad4899a579b9e4dfcba9c9904d41e5a1f030b48c15bb2ceec1fd784036876bab635fef0c47acc40fd8466e7bf739a4e7b14a0edaeb4bb6e17163a4684f020441b4765046da59c323fb2ceea6ea765db2f77e843f46a8e72b35e44ff30f1c990c878ade9461fe94026b0583f7464e9274822e3aeced8f62979c5690dd0a06c9e46156f74d4422dfef0a31a6f3c8a5d90bbdadefdcf11fc91587cb82fa961bbb1a57973b97b5381a8d8feb46305b5addc5a183eb32ca39047d529c6008de48426199308523fabe64c3df83b665710688a27b542244d678e9c84aa47b15d58677ee24d1ebd2e86fb14c32b2c7f4b1856c99da6649b1211aca258ecaebe64645cc29e22fc3982076aac5c7dedf8cbf7502de988070d0459e9d1f652a3eab80a46b5d578d8ec7507ec76843fecc5b34150776da07b1f1418f147bd21e4bb7ed9e04332c91e2ed9a1ef672baf0a073dfec8066e4018843f8055f33f0b32d5b0f338869e759ac3c42fa937548c7ad735f52c26804345c4221d4741b73088c1597d137ce4bd4da917ea5ae54c7b39becf6b4758f65d4a2f10c09a388981856ad7b70dabfb0158eeebe247416b04d72ff3845f4a66d86df6f2fcafd5a8e5a8a0f87d91286f758577890905dec446ac990e8e6de7de2eeaa41b040239e0442103a921b6f2fdab2711657eab6fed56459ad70068530e6ea29028d3b8611e53ee4e77b5436a79813e56f3cad45f37ecf423c79819abd69503b44c885d76c57d941e290f7ff8ba6daa3f403a791d4a2d189819b5db4d403c0187bff3950f061f9b01dd8f68f065da58179b5a5388fd8af37af36d7cbb7de7afff3a0c8450db02b9c2f064f603daf7da7020decd51aedca536a9ce4e578aaabe5c1e77fe95562c107d3fabafe25c7f34093eef5d44c61d174734", 0x1000, 0x20}, {0x1, 0x7, &(0x7f0000001b40)='\x00', &(0x7f0000001b80)="d4acf3daea586cf3113d923d22e3444c587a55fa9faf040721bc1428c314c1b316db3cd68500241c05e1a5d94a5224545080327fa42d537c397a2db3fd4ea3bfe64802f2ddfab45d8e06b171ccdba8f723611003eba586effc93b20ecd81281ee3aa7b9060d3b6f40324929d83b7356bfa8412aa89fdec82084cbf323fdee7435f33d49b6e01e4ec2f9199a6adfd91f8a7cfd7fdc891de76f18134bd9b5ef92f0eba08593b329ee71934580697ca756a2948fdab75ab48", 0xb7}]}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001d40)={&(0x7f0000001d80)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r8, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001ec0)={0x3, 0x10, &(0x7f0000001f80)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r9, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf61000000000000070100000400000085000000c2000000b70000000000000095"], &(0x7f0000002000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=@base={0xf, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000020c0)={r10, &(0x7f0000002100), 0x0}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002440)={0xffffffffffffffff, 0x20, &(0x7f0000002400)={&(0x7f0000002380)=""/9, 0x9, 0x0, &(0x7f00000023c0)}}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000002480)={0xc, 0xe, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], &(0x7f0000003080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000030c0), 0xfffffedf, 0x10, &(0x7f0000003100), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003140)={r12, 0x0, 0xe, 0x0, &(0x7f00000031c0)="f0b9547ee7affa9daabd309a75d3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003200)={0x1b, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x7, '\x00', r5, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000003280)=@arena={0x21, 0x0, 0x0, 0x3, 0x60400, 0x1, 0x20000000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000003340)={0x1b, 0x2e, &(0x7f0000002140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25a, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff8}, @alu={0x7, 0x0, 0xb, 0xa, 0x9, 0xfffffffffffffff0, 0x4}, @ldst={0x2, 0x2, 0x4, 0x2, 0x1, 0x0, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000022c0)='syzkaller\x00', 0x7, 0x39, &(0x7f0000002300)=""/57, 0x40f00, 0x24, '\x00', r5, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002340)={0x4, 0xf, 0x9, 0x6}, 0x10, r11, r12, 0x0, &(0x7f0000003300)=[r13, r14], 0x0, 0x10, 0x86e}, 0x94) bind$packet(r1, &(0x7f00000007c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000a00)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 4m20.271503659s ago: executing program 32 (id=10038): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x20, 0x40, 0x107, 0x70bd27, 0xfffffdfe, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0x4, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x50, 0x24, 0xe0b, 0x70bd27, 0xfffffffd, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x3}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x80) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x80000000, '\x00', r5, 0xffffffffffffffff, 0x4, 0x1}, 0x50) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001cc0)={{r1, &(0x7f00000000c0)='*%\x00', 0x80, &(0x7f0000000100)={@align=0xad, {0xa62, 0x74a, 0x2, 0x4}}, 0xfffffffd, &(0x7f0000000140), &(0x7f0000000180)=0xfffffc01}, 0x4, &(0x7f0000001c40)=[{0x1, 0x80000000, &(0x7f00000001c0)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000240)="5c0a63cb62c2a5350b736ed969a8ea940a38fb5c5cc7a1ffe95816f485611ce274c031974a0d7120151497e71751e84ed73ca5436a5f545a3f70c24f207a0a8e4a6308a1a4fbb54e63a96d5d1e4fe0b5af61d5d716a013e6a396094a8b3751f4763bb336027bdcb352131e074272a0e593c0556e86c7ba797782b222ad7113f2e3b779ab5f327910eb3849f795e5061cebd5cbbc668aab917b5829b3d710f14b781f5349ca45536d162d519695d856f365", 0xb1, 0xc}, {0x3, 0x8, &(0x7f0000000300)='\x00', &(0x7f0000000340)="f7e4a69718d0cb87538ecb90f0e2a02273bdb5575db520e670d29923a567e76e9e9dcfbe3bbd7a4ea3b25c215aefc57f5f6f2272f3e3977e8b9e395922ec39e9175847625009", 0x46, 0x20}, {0x1, 0xfff, &(0x7f00000003c0)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000b40)="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", 0x1000, 0x20}, {0x1, 0x7, &(0x7f0000001b40)='\x00', &(0x7f0000001b80)="d4acf3daea586cf3113d923d22e3444c587a55fa9faf040721bc1428c314c1b316db3cd68500241c05e1a5d94a5224545080327fa42d537c397a2db3fd4ea3bfe64802f2ddfab45d8e06b171ccdba8f723611003eba586effc93b20ecd81281ee3aa7b9060d3b6f40324929d83b7356bfa8412aa89fdec82084cbf323fdee7435f33d49b6e01e4ec2f9199a6adfd91f8a7cfd7fdc891de76f18134bd9b5ef92f0eba08593b329ee71934580697ca756a2948fdab75ab48", 0xb7}]}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001d40)={&(0x7f0000001d80)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r8, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001ec0)={0x3, 0x10, &(0x7f0000001f80)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r9, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf61000000000000070100000400000085000000c2000000b70000000000000095"], &(0x7f0000002000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=@base={0xf, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000020c0)={r10, &(0x7f0000002100), 0x0}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002440)={0xffffffffffffffff, 0x20, &(0x7f0000002400)={&(0x7f0000002380)=""/9, 0x9, 0x0, &(0x7f00000023c0)}}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000002480)={0xc, 0xe, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], &(0x7f0000003080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000030c0), 0xfffffedf, 0x10, &(0x7f0000003100), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003140)={r12, 0x0, 0xe, 0x0, &(0x7f00000031c0)="f0b9547ee7affa9daabd309a75d3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003200)={0x1b, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x7, '\x00', r5, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000003280)=@arena={0x21, 0x0, 0x0, 0x3, 0x60400, 0x1, 0x20000000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000003340)={0x1b, 0x2e, &(0x7f0000002140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25a, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff8}, @alu={0x7, 0x0, 0xb, 0xa, 0x9, 0xfffffffffffffff0, 0x4}, @ldst={0x2, 0x2, 0x4, 0x2, 0x1, 0x0, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000022c0)='syzkaller\x00', 0x7, 0x39, &(0x7f0000002300)=""/57, 0x40f00, 0x24, '\x00', r5, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002340)={0x4, 0xf, 0x9, 0x6}, 0x10, r11, r12, 0x0, &(0x7f0000003300)=[r13, r14], 0x0, 0x10, 0x86e}, 0x94) bind$packet(r1, &(0x7f00000007c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000a00)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 3.883459721s ago: executing program 0 (id=12633): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, 0x0, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) write$cgroup_devices(r3, &(0x7f0000000380)={'c', ' *:* ', 'rm\x00'}, 0x9) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r4, 0x0, 0x0}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x101, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) (async) r5 = socket$inet(0x2, 0x3, 0x2) (async) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) 3.577826086s ago: executing program 0 (id=12635): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="850000003c000000791000000000000063000000001000009500740000000000"], &(0x7f0000000140)='GPL\x00', 0x8, 0xc3, &(0x7f0000000340)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x200, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {@in6=@local, 0x1, 0x2b}, @in=@multicast1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@coaddr={0x14}]}, 0x104}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve0\x00'}) ioctl$sock_netdev_private(r0, 0x89ff, &(0x7f0000000440)="e08f4a58b49b80e7d2ee31093033bab385f117f7d8ac8ccdaf16d3fa1673a14ce6d6e81f67bd49f1edc29c07ae5a8cb1cff29951dcb60c06db72cceb63e8670268a3221eb17da284eab297e4271c2a2746fb1f85689a481ac5dea38718fa46b929af8279626c8699f993763873c79183ec896658a9ddd402396a34d87d842b17955cf7579633177a7965f3c7e067a45659423d3d5fbaf96c3a669902972bd050773de0ce499c43d6") r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x44}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd1e, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7ff, 0xb, 0x10000000, 0x1, 0x10}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x40, 0x5}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x4080) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000740)=0x4) 3.136904855s ago: executing program 0 (id=12641): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000100)={'wlan1\x00', @random="0e0000000200"}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'ip6tnl0\x00', {0x2, 0x8000, @loopback}}) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20"], 0xfc}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000200)={0x80000006}, 0x10) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000000300)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 2.977794201s ago: executing program 5 (id=12644): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x2, 0x3, 0x1, {0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x7}}}, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010003d571e566525ee2a701d7facc26fafd78c39f46a542a33be9408e205ad9d11d69f44e9a9335c8386305bbcdc330f8831b9b06c28fb54c2b446304127faa469db2955ce9a737974495de35609cfa4b8a60f7771c50fcb3b0adc3ce0aac79551dda34c82447e675ebb3491cb42310bdbce23c5ce8932c2dd4de3f258dafd44d30f5aac09eb44ae1bd3c77a650f7e00"/157, @ANYRES32=r2, @ANYBLOB="94110000000400001c0012800b0001006d616373656300000c0002800500070001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.841411112s ago: executing program 0 (id=12647): socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000540)='\b\x00', 0x2}, {&(0x7f0000000580)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000280008000000", @ANYRES32=r0], 0x40}, 0x0) 2.709703389s ago: executing program 5 (id=12648): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async, rerun: 64) r0 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) (async) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) (async) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x14, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x2, 0x892f}, {}, {}, {0xa888}}}}}}}, 0x0) (async) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)="88d8bf92d5343dd44d28dcab01e9f92744ffaa9380bd4a", 0x3}, 0x1, 0x0, 0x0, 0x4000080}, 0xc00c890) (async, rerun: 32) r2 = socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000380)=0x6, 0x4) (async, rerun: 32) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000003c0), 0x4) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="4c000000020101040d0000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001"], 0x4c}, 0x1, 0x0, 0x0, 0x811}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000780)={&(0x7f00000002c0)={0x1d, r8}, 0x10, &(0x7f0000000300)={&(0x7f0000000340)=@can={{0x0, 0x0, 0x0, 0x1}, 0x7, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) 2.60178488s ago: executing program 0 (id=12650): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0005000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="8c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036677265000030000280140007002001000000000000000000000000000014000600fc020000000000000000000000000000040012000800280070cf00000c0019800500060014000000080004"], 0x8c}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x24, r1, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}}, 0x20004858) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) setsockopt$inet_msfilter(r5, 0x0, 0x30, 0x0, 0x2000000) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="3008f72a80fb5a2032b00108010300000000000000000000000058c80ea38282f683f49868452b6964ca8fab8bcf236956734fdcf06b991cc6c38fa1b9fe45c1172acad78d27e2f50b2ba5d638a079e5d0e18860fdf18417bf689cbca2427148de1b291c056fc21e7aa78850feae2e8a5708fc74016762ba1583b1ae177833c3ee8c8cdb5bb653f9c7087c0b8aef9a5b2b02ba9afc9628ea6c85ba31d18886439397b44ff3"], 0x14}}, 0x0) 1.941870157s ago: executing program 1 (id=12656): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3e8, 0xa0, 0xa0, 0x1d8, 0xa0, 0x138, 0xa0, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x0, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) sendfile(r1, r0, 0x0, 0x400) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d00)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0) 1.920180716s ago: executing program 5 (id=12657): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan0\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000700)={'syzkaller1\x00', 0x5001}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000700)={'syzkaller1\x00', 0x5001}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x7, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000740)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000300)=@gettfilter={0x54, 0x2e, 0x20, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {0x5, 0xb}, {0x8}}, [{0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xfffffffa}, {0x8, 0xb, 0x10000}]}, 0x54}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000300)=@gettfilter={0x54, 0x2e, 0x20, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {0x5, 0xb}, {0x8}}, [{0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xfffffffa}, {0x8, 0xb, 0x10000}]}, 0x54}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000d40)=@deltclass={0x8c, 0x29, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x5, 0xb}, {0x0, 0xfff3}, {0xe, 0xb}}, [@TCA_RATE={0x6, 0x5, {0xff, 0xd6}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x3, 0x1}}, @TCA_RATE={0x6, 0x5, {0xf9, 0x6}}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x72, 0x5}}, @TCA_RATE={0x6, 0x5, {0x2, 0xcd}}, @tclass_kind_options=@c_qfq={{0x8}, {0x14, 0x2, [@TCA_QFQ_WEIGHT={0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x200}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x80}}]}, 0x8c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000b80)={'syzkaller1\x00', 0x1}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000b80)={'syzkaller1\x00', 0x1}) write$tun(r3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="03031b003000320006006300000000442fff"], 0x76) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="6800000000090504000000000000000002000000090001007379003000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c696379300008000200000005020a0003000000001e", 0x68}], 0x1}, 0x4080) r9 = socket$inet(0x2, 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8b06, &(0x7f00000000c0)={'wlan1\x00', @random="0100000000eb"}) r12 = socket(0x11, 0x3, 0x300) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r13, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r14, @ANYBLOB="2ba81d488376b184d663200026bd7000fedbdf25050000006af71e2f64c9ddbb998783412b05c7e32f99ca1999aaae41b1e359489d9cfaad2e429f1d6f000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0xc0d7) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) r15 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r15, 0x0, 0x20000840) (async) sendmsg$IPVS_CMD_GET_CONFIG(r15, 0x0, 0x20000840) sendmsg$IPVS_CMD_SET_DEST(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x40010) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f00000008c0)={'wlan0\x00'}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f00000008c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050001000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="3471943bc020ceb1abf38139cc69297087bc9499d55cac1236d03057e576ecf861e8a8623cc66b3254ee48cc9092ffcd645f4481f9e30af447621f4e9a6987d47886fb490eee9d517a553e9d78886282f2c138596da97b83338950814e03ca2ed9cfb0e016031fb3e207556eead5fc735341f6bd7def6efbd76082ccc24fbed9427c6132a34b333cab97be1e3d824326e6c90a2d22385fa937e2e363d1e261ad64e5533bbd141d0fc793670d471ee00cb39f1fa8"], 0x24}}, 0x0) 1.912506664s ago: executing program 1 (id=12658): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000100)="520003000100b8", 0x7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0x4, 0xfffff01c}, {0x6}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0x4, 0xfffff01c}, {0x6}]}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x405, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x405, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x110}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x405, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x405, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x110}}, 0x0) 1.764858829s ago: executing program 4 (id=12659): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x24, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3c000000410001000800000000000000030100000f0000001200010000112233445566778899aabb86dd0000040002800c00038008"], 0x3c}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$key(0xf, 0x3, 0x2) write$tun(r2, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0xcc}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x27, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x13, 0x0, @gue={{0x2, 0x0, 0x0, 0x4, 0x100}, "b68ed3"}}}}, 0x35) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) 1.667990606s ago: executing program 1 (id=12660): socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000540)='\b\x00', 0x2}, {&(0x7f0000000580)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000e00008000000", @ANYRES32=r0], 0x40}, 0x0) 1.478865984s ago: executing program 3 (id=12661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000000e0603000000000000000000f000000905000100"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x58, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "f7f8e05e18006b5c49148e65e7766136"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8f52}, @NL80211_ATTR_PMK={0x14, 0xfe, "5d2463cbe777bbcfd783c11f7597206c"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000001600)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000015c0)={&(0x7f0000000600)={0xe74, r2, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x21}}}}, [@NL80211_ATTR_TID_CONFIG={0x5e4, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x35}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x74}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x228, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1ec, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x471, 0x8, 0x1, 0xe94, 0x1ff, 0x84]}}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x48, 0x18, 0xe, 0x6e, 0x16, 0x18, 0x30, 0x0, 0xb, 0x48, 0x6c, 0x36, 0x60, 0x36, 0x1, 0x60, 0x12, 0x48, 0x60, 0x16, 0x60, 0x1b, 0x6, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x3, 0x4, 0x5000, 0x9, 0x3, 0x7, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x80, 0x88, 0x3, 0x6, 0xf, 0x3c, 0xfff8]}}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x4, 0x3}, {0x2, 0xa}, {0x0, 0x4}, {0x4, 0x5}, {0x0, 0x7}, {0x5, 0x6}, {0x5, 0x8}, {0x0, 0x1}, {0x1, 0x9}, {0x4}, {0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x7, 0xa}, {0x6, 0x3}, {0x2, 0x4}, {0x7, 0x6}, {0x7, 0x8}, {0x0, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x3, 0x4}, {0x6, 0x7}, {0x5, 0xa}, {0x7, 0x8}, {0x7, 0x1}, {0x7, 0x5}, {0x6, 0x8}, {0x7, 0x9}, {0x0, 0xa}, {0x4, 0x5}, {0x3, 0x1}, {0x3, 0x4}, {0x4, 0x4}, {0x7, 0x6}, {0x1}, {}, {0x3, 0x6}, {0x0, 0x6}, {0x0, 0x11}, {0x4, 0x5}, {0x5, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x3, 0x9}, {0x3, 0x7}, {0x0, 0x8}, {0x5, 0x6}, {0x2, 0x9}, {0x5, 0x3}, {0x0, 0x4}, {0x5, 0x8}, {0x1, 0x3}, {0x3, 0x2}, {0x4, 0x5}, {0x0, 0x3}, {0x4, 0x2}, {0x0, 0x5}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc0e8, 0xf3, 0x2, 0x5, 0x9, 0xfff, 0x3, 0x3]}}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x24, 0xb, 0x5, 0x18, 0x4, 0x36, 0x12, 0x16, 0x12, 0x48, 0x6c, 0x2, 0x16, 0x48, 0x5, 0xc, 0xc, 0x5, 0x36, 0x36]}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x2, 0x48, 0xf, 0x5, 0x9, 0x12, 0x36, 0x1b, 0x16, 0x30, 0x9, 0x24, 0x6a]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xaed, 0x7, 0x1215, 0x0, 0xf, 0x40, 0xc9ed]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x36, 0x30, 0x9, 0x12, 0x1b, 0x42, 0x4, 0x24, 0x5, 0xb, 0x36, 0x60, 0x12, 0x2c, 0x1b, 0x60, 0x1, 0x5, 0x4, 0x1b, 0xc, 0x3, 0x60, 0x9, 0x6, 0x5, 0x1b, 0x2d]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x9]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x2}, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x2}, {0x7, 0x9}, {0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x3}, {0x6}, {0x0, 0x6}, {0x4, 0x1}, {0x1, 0x7}, {0x5}, {0x0, 0x7}, {0x6, 0x4}, {0x0, 0xa}, {0x1, 0x3}, {0x0, 0x3}, {0x0, 0xa}, {}, {0x4, 0x7}, {0x3, 0x7}, {0x1, 0x7}, {0x0, 0x4}, {0x2, 0xa}, {0x5, 0x2}, {0x4, 0x6}, {0x4, 0x8}, {0x1}, {0x5, 0x2}, {0x6, 0xa}, {0x0, 0x8}, {0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x4, 0x2, 0x9, 0x6, 0x800, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x8000, 0x5cf1, 0x2, 0x100, 0x1, 0x10, 0x1000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x68e2, 0x8, 0xce, 0xfff, 0x5c, 0x0, 0x2, 0x3]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcf}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x2d8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x2ac, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x24, 0x16, 0x24, 0x30, 0xb, 0x60, 0x0, 0x30, 0x0, 0x16, 0x24, 0x18, 0x1, 0x6, 0x60, 0x36, 0x60, 0x48, 0x0, 0x4]}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x5, 0x2, 0x36, 0x0, 0xf, 0x48, 0xc, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xf35f, 0x6, 0x5, 0x2, 0x6, 0x7ff, 0x10]}}]}, @NL80211_BAND_60GHZ={0x10c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3, 0x4, 0xd5e, 0x83, 0x5, 0xfffa, 0xffe1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xad, 0x6, 0xa, 0x8, 0xb2a, 0x40, 0x5, 0xfff8]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x7, 0x9}, {0x5, 0x6}, {0x2, 0x4}, {0x1, 0x5}, {0x4, 0x7}, {0x2}, {0x6, 0x3}, {0x1, 0x7}, {0x0, 0x2}, {0x5, 0x1}, {0x3}, {0x0, 0x2}, {0x6, 0xa}, {0x1, 0x2}, {0x5, 0x7}, {0x7}, {0x5, 0x1}, {0x6, 0x3}, {0x1, 0x7}, {0x6, 0x5}, {0x0, 0x5}, {0x0, 0x2}, {0x2, 0x1}, {0x3, 0x2}, {0x0, 0x5}, {0x5, 0x3}, {0x1, 0x2}, {0x7, 0x9}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x5, 0x3}, {0x6, 0x5}, {0x1, 0x3}, {0x5, 0x7}, {0x3, 0x8}, {0x6, 0x6}, {0x5, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x1, 0xa}, {0x7, 0xa}, {0x6, 0x4}, {0x1, 0x9}, {0x6, 0x7}, {0x0, 0x9}, {0x5}, {0x6, 0xa}, {0x1, 0x6}, {0x4, 0xa}, {0x0, 0x5}, {0x6, 0x9}, {0x1, 0xa}, {0x0, 0x2}, {0x1, 0x5}, {0x1, 0x4}, {0x1, 0x1}, {0x6, 0x2}, {0x5}, {0x1, 0x5}, {0x1, 0x6}, {0x0, 0x1}, {0x5, 0x5}, {0x4, 0x9}, {0x0, 0x6}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x3, 0xd, 0xb2ec, 0x8000, 0x10, 0x6, 0x8000]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x7, 0x1}, {0x5, 0x8}, {0x1, 0x3}, {0x7}, {0x7}, {0x6, 0x2}, {0x2, 0x5}, {0x5, 0x9}, {0x0, 0xa}, {0x7, 0x5}, {0x7, 0x3}, {0x6, 0x3}, {0x0, 0x6}, {0x0, 0x7}, {0x3, 0x6}, {0x7}, {0x4, 0x6}, {0x2, 0x7}, {0x5, 0x2}, {0x5, 0x1}, {0x0, 0x3}, {0x3, 0x2}, {0x5, 0x1}, {0x4, 0x5}, {0x2, 0x4}, {0x4, 0x7}, {0x6, 0x10}, {0x1, 0x6}, {0x1, 0x8}, {0x7, 0x2}, {0x4, 0x4}, {0x6, 0x1}, {0x5, 0x7}, {0x7}, {0x0, 0x7}, {0x3, 0x6}, {0x3, 0x2}, {0x0, 0x6}, {0x5, 0x8}, {0x1, 0x1}, {0x1, 0x6}, {0x7, 0x3}, {0x0, 0x4}, {0x1, 0x7}, {0x5, 0x2}, {0x0, 0x7}, {0x2, 0xa}, {0x4}, {0x1}, {0x0, 0x6}, {0x3, 0x3}, {0x5, 0xa}, {0x3, 0x5}, {0x1, 0xa}, {0x1, 0x4}, {0x6, 0x2}, {0x5, 0x8}, {0x3, 0x5}, {0x4, 0x2}, {0x3, 0x7}, {0x5, 0x5}, {0x6, 0x4}, {0x4, 0x1}, {0x0, 0x2}, {0x6, 0x9}, {0x5, 0x9}, {0x5, 0x6}, {0x4, 0x7}, {0x2, 0x6}, {0x0, 0x9}, {0x5, 0x5}, {0x1, 0x4}, {0x1, 0x7}, {0x2, 0x9}, {0x2, 0x2}, {0x4, 0x1}, {0x1, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x52d3, 0xa, 0x7, 0x40, 0x3ff, 0xa77]}}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0xe420, 0x4, 0x5623, 0xe39, 0x200, 0xa]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x4, 0x4}, {0x1, 0x9}, {0x3, 0xf}, {0x2, 0x5}, {0x3, 0x5}, {0x7, 0x1}, {0x7, 0x7}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x6}, {0x0, 0x8}, {0x1}, {0x1, 0x1}, {0x2, 0x8}, {0x1, 0x8}, {0x6, 0x5}, {0x1, 0xa}, {0x0, 0x3}, {0x6, 0x5}, {0x0, 0x9}, {0x3, 0x3}, {0x0, 0x8}, {0x3, 0x6}, {0x3, 0x4}, {0x3, 0x8}, {0x3, 0x6}, {0x7, 0x6}, {0x4, 0x8}, {0x1, 0x9}, {0x3, 0xa}, {0x6}, {0x4, 0x6}, {0x5}, {0x7, 0x1}, {0x1, 0x4}, {0x2, 0x9}, {0x7, 0x4}, {0x3, 0x3}, {0x2, 0x2}, {0x5, 0x8}, {0x6, 0xa}, {0x5, 0x3}, {0x5, 0x1}, {0x1, 0x6}, {0x4, 0xa}, {0x3, 0x3}, {0x1, 0xa}, {0x5, 0x8}, {0x5}]}]}, @NL80211_BAND_2GHZ={0xb4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf54c, 0xb, 0x7, 0x1, 0x2, 0x6, 0xd978, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x8c5, 0x6, 0x9, 0x0, 0x101, 0x4, 0xea]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x7, 0x7ff, 0x0, 0x8000, 0x3, 0x3d29, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffa, 0xa51e, 0x8, 0x4, 0x10, 0xb, 0xf, 0xb]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x3, 0x7, 0x8, 0x7, 0x6, 0x39b]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x5, 0x9}, {0x4, 0xa}, {0x3, 0x9}, {0x0, 0x2}, {0x1, 0x1}, {0x0, 0x7}, {0x1, 0x4}, {0x1, 0x1}, {0x5, 0x6}, {0x0, 0x8}, {0x0, 0x3}, {0x4, 0x9}, {0x3, 0x2}, {0x4, 0x5}, {0x1, 0x9}, {0x2, 0x6}, {0x7, 0x6}, {0x2, 0x7}, {}, {0x0, 0x5}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0xa}, {0x5, 0x5}, {0x1, 0xa}, {0x6, 0x6}, {0x4, 0x3}, {0x2, 0x1}, {0x0, 0x8}, {0x1, 0x2}, {0x1, 0x4}, {0x2}, {0x2, 0x4}, {0x0, 0x8}, {0x7, 0x5}, {0x0, 0x9}, {0x4, 0xa}, {0x7, 0x5}]}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x1, 0x5}, {0x5, 0x1}, {0x6}, {0x7, 0x8}, {0x0, 0x9}, {0x5, 0x1}, {0x3, 0x9}, {0x0, 0x9}, {0x5, 0x5}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x1b, 0x18, 0x36, 0x5, 0x9, 0x1b, 0x30, 0x1b, 0x1, 0x6c, 0x6c, 0xc, 0x30, 0xb, 0xb, 0x2, 0x9, 0x3, 0x30, 0x5, 0xc, 0x2, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0xffff, 0x3, 0x7, 0x2, 0xc, 0x3]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x10}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000000}]}, {0x80, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x40, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x2, 0x3}, {0x1, 0x5}, {}, {0x1, 0x1}, {0x3, 0x5}, {0x5, 0x3}, {0x5, 0xa}, {0x5, 0x6}, {0x4}, {0x1, 0x7}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x7}, {0x5, 0x1}, {0x3, 0x2}, {0x7, 0x3}, {0x1, 0xa}, {0x1, 0x2}, {0x6, 0x9}, {0x2, 0x8}, {0x0, 0x4}, {0x2, 0x3}, {0x1, 0x2}, {0x4, 0x8}, {0x7, 0x3}, {0x4, 0x2}, {0x4, 0x9}, {0x4, 0x2}, {0x6, 0xa}, {0x7, 0x1}, {0x7, 0x3}, {0x1, 0x8}, {0x5, 0x8}, {0x7, 0x8}, {0x6, 0x6}, {0x5, 0x6}, {0x2, 0x8}, {0x6, 0x7}, {0x0, 0x2}, {0x3, 0x3}, {0x2, 0x8}, {0x7, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5e78}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xeb}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x78}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x858, 0x11d, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5d}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x42}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x48, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7, 0xff81, 0x0, 0x0, 0x6, 0x9, 0xfffb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x5, 0x0, 0x75, 0x6, 0x6, 0xde3c, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, {0x74, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xa000, 0x5, 0x2, 0xfff, 0x8, 0x3ff, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x7, 0x9f7e, 0xa21, 0x7ff, 0x7, 0x100, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1a3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x94}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4e}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x46}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x41}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1d}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1000000000000000}]}, {0x3f4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x134, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x8, 0xf, 0xc1, 0x3, 0x0, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x7, 0x4, 0xff38, 0x4, 0x3, 0x4, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb4c, 0x7ff, 0xdc, 0x0, 0x8, 0x6, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x400, 0xe, 0x6, 0x10, 0x9326, 0x9, 0x491d]}}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x30, 0x6, 0x4, 0x5, 0x6, 0x4, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x800, 0x1000, 0x400, 0xfffa, 0x0, 0x100, 0xf4]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x5, 0x4000, 0x8, 0x73b0, 0x69fe, 0x7fff, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x4, 0x8000, 0x533f, 0x2, 0x1, 0xfffb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8, 0xfff, 0xfffa, 0x1, 0x2, 0x5, 0xe800]}}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x5, 0x9, 0x61, 0x9, 0x6, 0x3, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x29c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x12, 0x48, 0x60, 0xc, 0x5, 0x60, 0x9, 0x1b, 0x1b, 0x0, 0x24, 0x1]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x6}, {0x3, 0x5}, {0x0, 0x2}, {0x3, 0x4}, {0x0, 0x7}, {}, {0x0, 0x9}, {0x2, 0x5}, {0x6, 0x3}, {0x0, 0xa}, {0x5, 0x2}, {0x7, 0x9}, {0x4, 0x7}, {0x6, 0x2}, {0x2, 0x4}, {0x0, 0x8}, {0x1}, {0x2, 0x1}, {0x6, 0x7}, {0x0, 0x7}, {0x0, 0x6}, {0x3, 0x5}, {0x2, 0x3}, {0x2, 0x4}, {0x5, 0x6}, {0x5, 0x9}, {0x6, 0x6}, {0x4, 0x2}, {0x2, 0xa}, {0x3, 0xa}, {0x5, 0x4}, {0x3, 0xa}, {0x3, 0x8}, {0x3, 0x1}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x3}, {0x3, 0x1}, {0x7}, {0x4, 0x1}, {0x6, 0x8}, {0x1, 0x1}, {0x3, 0xa}, {0x2, 0x1}, {0x7, 0x1}, {0x1, 0x7}, {0x0, 0x4}, {0x7, 0x7}, {0x5, 0x9}, {0x4, 0xa}, {0x4, 0x1}, {0x2, 0x5}, {0x1, 0x8}, {0x0, 0x8}, {0x7, 0x9}, {0x7, 0x4}, {0x6, 0x5}, {0x1, 0x1}, {0x2, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ed3, 0x1, 0x53, 0x0, 0x9, 0x6, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x6, 0x7}, {0x6, 0x5}, {0x3}, {0x1}, {0x4, 0xa}, {0x5, 0x2}, {0x7, 0x7}, {0x1, 0x9}, {0x4, 0x2}, {0x3, 0x2}, {0x3, 0x5}, {0x1, 0x1}, {0x1, 0x9}, {0x7, 0x9}, {0x1, 0xa}, {0x6, 0x3}, {0x7, 0x4}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x5, 0xc, 0xb, 0x9, 0x30, 0x48, 0xb, 0x16, 0x16, 0x6, 0x3, 0x3, 0x3, 0x48, 0x1, 0x1e, 0x1, 0x4, 0xc, 0x48, 0x12, 0x2, 0x48, 0x4, 0x14, 0x4, 0x48, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x9774, 0x2, 0xfabd, 0x7, 0x40, 0x4686, 0x739]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x3, 0x0, 0x2, 0xb, 0x8208, 0x9, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x2}, {0x7, 0x2}, {0x1, 0x5}, {0x2, 0x2}, {0x4, 0x6}, {0x0, 0x2}, {0x0, 0x1}, {0x1, 0x2}, {0x1, 0x9}, {0x0, 0x8}, {0x2, 0x1}, {0x4, 0x5}, {0x3, 0x8}, {0x6, 0x7}, {0x0, 0x5}, {0x0, 0x1}, {0x5, 0x3}, {0x6, 0x6}, {0x4, 0x1}, {0x1}, {0x5, 0x2}, {0x2}, {0x2, 0x7}, {0x0, 0x8}, {0x6, 0x9}, {0x5, 0xa}, {0x3, 0x6}, {0x3, 0x6}, {0x7, 0x6}, {0x5, 0x3}, {0x3}, {0x0, 0x6}, {0x3, 0x4}, {0x2}, {0x0, 0xa}, {0x6, 0xa}, {0x7}, {0x6, 0x6}, {0x7}, {0x2, 0x2}, {0x2, 0x8}, {0x0, 0x8}, {0x7, 0x5}, {0x0, 0x9}, {0x6, 0x1}, {0x2, 0x4}, {}]}]}, @NL80211_BAND_2GHZ={0xd4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x1, 0x1}, {0x6, 0x6}, {0x6, 0x8}, {0x3, 0xa}, {0x5, 0xa}, {0x7, 0x8}, {0x6, 0x2}, {0x5, 0x4}, {0x4, 0x9}, {0x1, 0x3}, {0x1, 0x9}, {0x1, 0x6}, {0x6, 0x7}, {0x0, 0x8}, {0x0, 0x2}, {0x5, 0x8}, {0x1, 0x4}, {0x0, 0x5}, {0x1, 0x8}, {0x3, 0x3}, {0x5, 0x2}, {0x2, 0xa}, {0x2}, {0x0, 0x7}, {0x6, 0x6}, {0x7, 0x6}, {0x6}, {0x6, 0x6}, {0x2, 0x3}, {0x7, 0x5}, {0x0, 0x4}, {0x3, 0x6}, {0x4, 0x8}, {0x6, 0x7}, {0x5, 0x4}, {0x3, 0x3}, {0x3, 0x8}, {0x7, 0x7}, {0x5, 0x8}, {0x5, 0x4}, {0x3, 0xa}, {0x4, 0x1}, {0x7, 0x2}, {0x2, 0x8}, {0x2, 0x8}, {0x5, 0x6}, {0x0, 0x6}, {0x1, 0x9}, {0x5}, {0x7, 0x5}, {0x0, 0xa}, {0x2, 0x6}, {0x1, 0xa}, {0x1, 0x8}, {0x4, 0x4}, {0x4, 0x9}, {0x3, 0x4}, {0x0, 0x9}, {0x3, 0x1}]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x7}, {0x1, 0x6}, {0x7, 0xa}, {0x1, 0x4}, {0x1, 0x6}, {0x6, 0x1}, {0x3, 0x9}, {0x7, 0x2}, {0x2, 0x2}, {0x1, 0xa}, {0x6, 0x6}, {0x2, 0x7}, {0x7, 0x7}, {0x0, 0xa}, {0x7, 0xa}, {0x3, 0x1}, {0x5, 0x2}, {0x5}, {0x2, 0x2}, {0x7, 0x4}, {0x5, 0x5}, {0x5}, {0x3, 0x7}, {0x3}, {0x7, 0x4}, {0x2, 0x1}, {0x4, 0xa}, {0x5}, {0x6, 0x6}, {0x1, 0x9}, {0x4, 0x9}, {0x4, 0x5}, {0x7, 0x2}, {0x6, 0x2}, {0x1, 0x2}, {0x3, 0x2}, {0x5, 0x6}, {0x5, 0x4}, {0x6, 0x5}, {0x4, 0x2}, {0x3, 0x7}, {0x6, 0x8}, {0x6, 0x3}, {0x7, 0xa}, {0x4, 0x2}, {0x5, 0x9}, {0x7}, {0x1, 0x8}, {0x1, 0xa}, {0x7, 0x9}, {0x5, 0x4}, {0x3, 0x3}, {0x5, 0x5}, {0x3, 0x4}, {0x4}, {0x5, 0x5}, {0x1, 0x3}, {0x1, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x906d, 0x5, 0xf1, 0xfffb, 0x3, 0x2, 0x1000, 0x9]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x4, 0x30, 0x18, 0x48, 0x24, 0xb, 0x4, 0x18, 0x3, 0x1, 0x60, 0x36, 0x30, 0x5, 0x0, 0x4, 0x30, 0x0, 0x4, 0x18, 0x1b, 0x1, 0x12, 0xb, 0x2b, 0x2, 0x48, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x7, 0x2, 0x1, 0xa552, 0x9, 0x401]}}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x39, 0x2, [{0x2, 0x2}, {0x7, 0x5}, {0x6, 0x6}, {0x3, 0x7}, {0x2, 0x6}, {0x6, 0x5}, {0x5, 0x7}, {0x0, 0x4}, {0x3, 0x3}, {0x0, 0x7}, {0x6, 0x6}, {0x5, 0x5}, {0x2, 0xa}, {0x6, 0x6}, {0x0, 0x6}, {0x6, 0x7}, {0x1, 0x6}, {0x2, 0x3}, {0x6, 0x3}, {0x7, 0xa}, {0x1, 0x3}, {0x4, 0x2}, {0x3, 0x8}, {0x6, 0xa}, {}, {0x1, 0x2}, {0x3}, {0x1, 0x3}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x5}, {0x7, 0x5}, {0x7, 0x8}, {0x1, 0x7}, {0x6, 0x5}, {0x1, 0x3}, {0x3, 0x9}, {0x6}, {0x3, 0x3}, {0x2, 0x5}, {0x7, 0x7}, {0x3, 0x4}, {0x1, 0x9}, {0x1, 0x7}, {0x3, 0x5}, {0x7, 0xa}, {0x1, 0xa}, {0x6}, {0x5, 0x2}, {0x3, 0x9}, {0x5, 0x7}, {0x4, 0x5}, {0x1, 0x6}]}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe2ff, 0x4, 0xfe, 0xc800, 0x8000, 0x1, 0x9, 0x7fff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xfff, 0x2, 0x3, 0x7, 0x1, 0x4, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1875, 0x71, 0x3, 0xffff, 0x7, 0xd]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x16}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcc}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x20, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x3, 0x7, 0x5, 0x100, 0x42a, 0x33dc, 0xe]}}]}]}]}, {0x2b4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x2a8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x5, 0x200, 0xecca, 0x8, 0x2, 0x9]}}]}, @NL80211_BAND_6GHZ={0xcc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x0, 0x9}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x5}, {0x1, 0x1}, {0x6, 0x5}, {0x0, 0x2}, {0x2, 0xa}, {0x1, 0x7}, {0x6}, {}, {0x5, 0x6}, {0x3, 0x3}, {0x5, 0x6}, {0x5, 0x3}, {0x4}, {0x4, 0x7}, {0x4, 0x3}, {0x5, 0x5}, {0x0, 0x4}, {0x5, 0x2}, {0x4, 0x3}, {0x5, 0x7}, {0x2, 0x2}, {0x5, 0xa}, {0x5, 0x4}, {0x3, 0x5}, {0x5, 0x4}, {0x6}, {0x0, 0x4}, {0x0, 0x3}, {0x5, 0x2}, {0x1, 0x8}, {0x6, 0x8}, {0x0, 0xa}, {0x5}, {0x2, 0x2}, {0x3, 0x4}, {}, {0x0, 0x5}, {0x1, 0x3}, {0x1, 0xa}, {0x0, 0x2}, {0x3, 0x8}, {0x0, 0x8}, {0x4, 0x5}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x1}, {0x1, 0x4}, {0x4, 0x2}, {0x0, 0x3}, {0x2, 0x9}, {0x7, 0x5}, {0x7, 0x9}, {0x7}, {0x7, 0x7}, {0x1, 0x7}, {0x0, 0x5}, {0x1, 0x2}, {0x7, 0x5}, {0x1, 0x5}, {0x7, 0xa}, {0x0, 0x7}, {0x2, 0x1}, {0x2}, {0x7, 0x6}, {0x0, 0x1}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x6, 0x7}, {0x2, 0xa}, {0x7}, {0x1, 0x7}, {0x0, 0xa}, {0x5, 0x5}, {0x2, 0x8}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0x6}, {0x6, 0x8}, {0x1, 0x9}, {0x3, 0x6}, {0x5}, {0x5, 0x9}, {0x7}, {0x4, 0x8}, {0x3, 0x2}, {0x1}, {}, {0x5, 0x8}, {0x7, 0x3}, {0x3, 0x8}, {0x4, 0x5}, {0x6, 0x6}, {0x4}, {0x5, 0x2}, {0x6, 0x8}, {0x1, 0x5}, {0x1, 0xa}, {0x5, 0x5}, {0x5, 0x8}, {0x1, 0x2}, {0x5, 0x5}, {0x7, 0x5}, {0x4, 0x4}, {0x3, 0x6}, {0x1}, {0x4, 0x6}, {0x7, 0x2}, {0x4, 0x5}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x6, 0x9}, {0x6, 0x9}, {0x5, 0x5}, {0x0, 0x3}, {0x0, 0x7}, {0x2, 0x8}, {0x0, 0x3}, {0x1, 0x6}, {0x6}]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x3, 0x1}, {0x7, 0x8}, {0x7, 0x9}, {0x3, 0x5}, {0x4, 0x1}, {0x5, 0x5}, {0x1, 0x7}, {}, {0x4, 0x1}, {0x0, 0x9}, {0x2}, {0x1, 0x9}, {0x4, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x36, 0x30, 0x12, 0x30, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_5GHZ={0x110, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x39, 0x2, [{0x6, 0x8}, {0x4, 0x2}, {0x4, 0x9}, {0x5}, {0x1, 0x1}, {0x1, 0x7}, {0x0, 0x3}, {0x0, 0xa}, {0x7, 0x7}, {0x5}, {0x5, 0x6}, {0x0, 0x7}, {0x4, 0x2}, {0x4, 0x3}, {0x1, 0x2}, {0x0, 0x3}, {0x5, 0x2}, {0x2, 0x1}, {0x0, 0x6}, {0x6, 0xa}, {0x0, 0x9}, {0x2, 0x2}, {0x4, 0x1}, {0x0, 0x8}, {0x4, 0x4}, {0x6}, {0x7, 0x5}, {0x0, 0x1}, {0x7, 0x4}, {0x0, 0x5}, {0x3, 0xa}, {0x1, 0x2}, {0x1, 0x3}, {0x6, 0x5}, {0x4, 0x4}, {0x1, 0x1}, {0x6, 0x9}, {0x0, 0x2}, {0x1, 0x7}, {0x6, 0x9}, {0x5, 0x8}, {0x5}, {0x1, 0x6}, {0x5, 0x7}, {0x4, 0x5}, {0x0, 0x9}, {0x4, 0x3}, {0x5, 0xa}, {0x7, 0x8}, {0x0, 0x2}, {0x2, 0xa}, {0x7, 0x3}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x2, 0x1}, {0x4, 0xa}, {0x4, 0x2}, {0x0, 0x1}, {0x3, 0x4}, {0x0, 0x3}, {0x3, 0x1}, {0x4, 0x7}, {0x7, 0x4}, {0x3, 0x1}, {0x5, 0x3}, {0x2, 0xa}, {}, {0x1, 0xa}, {0x5, 0x3}, {0x5, 0x5}, {0x2, 0xa}, {0x2, 0x5}, {0x5, 0x6}, {0x0, 0x8}, {0x0, 0x9}, {0x4, 0x2}, {0x3, 0x6}, {0x7, 0x9}, {0x0, 0x9}, {0x4, 0x6}, {0x3, 0x2}, {0x0, 0x4}, {0x3, 0x1}, {0x4, 0x8}, {0x0, 0x6}, {0x6, 0x7}, {0x1, 0x1}, {0x2, 0x4}, {0x2, 0x2}, {0x4, 0x9}, {0x2, 0x6}, {0x0, 0x2}, {0x1}, {0x2, 0x3}, {0x1}, {0x7, 0x1}, {0x5, 0x8}, {0x7, 0xa}, {0x6, 0x4}, {0x2, 0x9}, {0x0, 0xa}, {0x7, 0x7}, {0x2, 0x2}, {0x7, 0x6}, {0x6, 0x8}, {0x0, 0x2}, {0x7, 0x2}, {0x1, 0x5}, {0x0, 0x3}, {0x0, 0x1}, {0x2, 0x3}, {0x6, 0x2}, {0x7}, {0x3, 0x8}, {0x3, 0x9}, {0x1, 0x3}, {0x7, 0x2}, {0x5, 0x3}, {0x3, 0x8}, {0x1, 0x8}, {0x4, 0x1c}, {0x0, 0x6}, {0x1, 0x12}, {0x4, 0x3}, {0x0, 0x4}, {0x5, 0x6}, {0x6, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x5, 0xa}, {0x6, 0x4}, {0x1, 0xa}, {0x4, 0x3}, {0x5, 0x3}, {0x1, 0x4}, {0x4, 0x6}, {0x5, 0x2}, {0x1, 0x9}, {0x7, 0x8}, {0x5}, {0x7, 0x4}, {0x4, 0x3}, {0x2, 0x3}, {0x3, 0x7}, {0x2, 0x6}, {0x4, 0x8}, {0x7, 0x3}, {0x0, 0x2}, {0x7, 0xa}, {0x2, 0xb}, {0x5, 0x2}, {0x7, 0x9}, {0x7}, {0x6, 0xa}, {0x2, 0x3}, {0x3, 0x5}, {0x3, 0x8}, {0x5, 0x1}, {0x2, 0x2}, {0x5, 0x8}, {}, {0x6, 0x3}, {0x3, 0x3}, {0x1, 0x1}, {0x7, 0x2}, {0x5, 0x2}, {0x7, 0x1}, {0x5, 0x3}, {0x1, 0x8}, {0x5, 0x2}, {0x0, 0xa}, {0x0, 0x6}, {0x0, 0x5}, {0x3, 0x1}, {0x0, 0x3}, {0x7, 0x9}, {0x1, 0x4}, {0x6, 0x4}, {0x0, 0x6}, {0x7, 0x4}, {0x1, 0x7}, {0x6}, {0x2}, {0x0, 0x8}, {0x2}, {0x1, 0x1}, {0x0, 0x8}, {0x5, 0x7}, {0x1, 0x3}, {0x6, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x3}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x5, 0x4}, {0x4, 0x7}, {0x4, 0x2}, {0x7, 0x8}, {0x0, 0x7}, {0x4, 0x5}, {0x5, 0x3}, {0x6, 0x4}, {0x3, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xcd00, 0x2, 0xf, 0xe, 0xd, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x46e, 0x73, 0x3, 0x6, 0x7, 0x3, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4000, 0x26f, 0x4780, 0x5, 0xec, 0xddd7, 0x7d, 0xd7ef]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcf}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4d}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa7}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x92}]}]}]}, 0xe74}}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000440)={'veth0_to_team\x00', 0x400}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000480)={0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000001640)=ANY=[@ANYBLOB="148e767a060000024534", @ANYRES16=r5, @ANYBLOB="000126bd7000fcdbdf256d000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) 1.426685722s ago: executing program 0 (id=12662): socket$pppl2tp(0x18, 0x1, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r0, 0x215eb000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xc, 0x0, 0x0) (async) setsockopt$packet_int(r2, 0x107, 0xc, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)='p', 0xff45}, {&(0x7f0000000340)="4d683db0d2e359a772d4d71b02d124200249b6fd74cfa02d901d9916e4fedd72cd907f7ec31f7dd586c641c6500fbcf2a1eddf3b1181156c7dd73d6e6d2b7f3a5ad2650e437027386e776a21db8feec0e54592345caeabdc58f0bfd74b478dbc6fb858adcce81e19409dd1a2be872918700770b13af6e4a77e489ccd1c48ff0d7941f9e0045704dfb162b2b11e2422ee07df2b8614e4904f2f02443d9268663520310e2e14f68a5f2c40b3b5dcf617f2ae1d9bfe8a55f3306edc4c7a02bfb76d91a30015e804ca5785f9230a83a505a3d47ae5f4e5c4d7ceb077c590862be015a758c95beb24fd6d148f4648a7f5a5d2e2a5f13334ef23", 0xf7}, {&(0x7f0000000440)="badb295db7e1a69aac9879f1d3649d2cb3a4", 0x12}], 0x3b}, 0x4048048) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.419938698s ago: executing program 1 (id=12663): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c000180050009"], 0x2c}}, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r5, 0xaa0f4000) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r6) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r8, 0x1, 0x2a, &(0x7f00000003c0)=0x87f4, 0x4) recvmsg(r8, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40010042) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r7, 0x308, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7d}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r8}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r9, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r9, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0xfffff000) mmap(&(0x7f00005d8000/0x4000)=nil, 0x4000, 0x1000001, 0x13, r4, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10012, r4, 0x0) 1.360781688s ago: executing program 3 (id=12664): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="04000000080000020100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300"/28], 0x48) socket(0x9, 0x7, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000100001060100000000000000000000000000000000000000000000000800030076783000240012800a00010076786c616e0000001400028008000100640000000800030001000000"], 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000100001000200000000000000000000000000000000000000000000000800030076783000240012800a00010076786c616e0000001400028008000100640000000800030002000000"], 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0x10, &(0x7f0000000b80)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff720200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bfa00000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.177884157s ago: executing program 3 (id=12665): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}}, &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x63, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xa2d, r2, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local, @remote}, 0xc) (async) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x1c) (async) syz_emit_ethernet(0x36, &(0x7f0000000140)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2=0xe0000001}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10002, 0x20}}}}}, 0x0) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f0000000040)=@ethtool_gfeatures={0x3a, 0x2, [{}, {}]}}) 1.177481021s ago: executing program 4 (id=12666): r0 = socket(0x10, 0x3, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtaction={0x48, 0x5a, 0x1, 0x0, 0x0, {0x2}, [{0x34}]}, 0x48}}, 0x4040040) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000600), &(0x7f0000000640)=r1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800181200005223b223478dd0ae279ce650d8b6040fa4b5e39107aa4b21582df3d3fb7f80bb7d2d14c63ec90e6dbe6da11ab8fbdd1512c577b971ef70fcaa208bbc9a76c8d33c8e1dfd714dcc7cedafa15983a46974f57faa40e2506ea9b7b30184c16511620405796ed20c74ece5347762fdf080686d07e9251c20346c3d97b0fdb417631765ad3510427e831cd6ed5d739c8e3bf8ff9a0cce9bc10e7f280b122b7cfc600c0939", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 928.160911ms ago: executing program 4 (id=12667): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf200000000000002600020007ffffffbd0310000000000095002000000000006916000000000000bf6700000000000004070000b964b01a4607feff00200000540700000ee61e00bf150000000000000f5700000000000065070000d23700002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c4ed68ecf264e0f84f9f17d3c30e3c7bdd2d17f2f175455000078af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd390700000500000000f18c30907d7bee45a0100000fe9de56c9d05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f1d5af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8dfd13ff15f852a39e5b2ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916fcecc8158f0200000000c8fb735fd552bdc268694aeb0743e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6037ed8c85f21ec2c081bdce431e56723888fb126a19bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c921b5bbf7949632cacfdd32b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3738270b315d362ed834f2af97787f696649a462e7e090000000000000045eac1f2014f720e83b7838e3eede14308d582685e1becd6f35154bcb4000000000000000000000000000000bc3af2b170ad3e2b26539cebca8f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d353887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b4040c1458d0320ce7d0000413a0000000000000000005f37983f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9a62a29ab028acfc1cb26a0f6a5480a55d624a0c544ba0dc828c22fe30000aa391598000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac872ade9d1f2ab779b8dbe843aeeda0426c767c00327b8c95b2bb6ddb55117669d9598c0f3598073f3a921c76beceff7e4fbf909a2cabf5b8ea5011db9020823b83abe54346c7af0a99fa077ffe7000feb9e44023a1749eb1d0d572b77d6e0d0fcd74031c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c7108ef0a7e59fd6d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4fe39cc2d292691672cc18ca372104ceb83a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec905000000b13f4a2575fbe943a6c40000000000000000000000000000028026b80c3899543223a6079ee96198b9a326db3be3a48af415ca28ca68c502550044ed8e29af8d763ef9b1f31befcad2ce5394601c7cdc233bff7f0000000000009fb3ad650f77e339768924dfdbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c1ba322fd4d6fbf19e617d51f964727bfd5cc5ba15370f6e1141d2271eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d952c7ad17a58d9be691c334ea35bae71e76e160cc2260bd028162917807ce89e11b5f261052ee0dde18efa1d802af2b7bcf6f8af41933cea0d0343261bccf64ca1c81045153eafbefdb91fbdff9ee3307d4a1837963b2dc2a3698d90e7915b098f19392e792adaea86052f4e948184001b6494e906925a092483adc7e9c8f7a29d226763c100aecae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baaae05aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e74feb98b1586946b452764ff917a8ecc10e529c5bea49cad70e22df522c2803b6ef65df70223c6e22c3433e322d8dbd6e9b040065a9d6b3d5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a96548d47c609a93c45f4d1382b39c05dcc07d5b49ad75ddb3ce5b5b9416e03995da04647aa5e6fc1a6f5d663380967ccef9de49a90ced031335e3219ebd9d06c257a50497ec523f5ff7361261ccfe239d603364a42e2e81fc068fcbb9792b673827fe7018a988fbce55bb74cdb327ced4b77b8743fb3cb72cc280b9f62e4f92f46a19600b802cba88b7d0a938d9e0e6cfe5d66b874c9a0c6c04b96360d6f499d004179e5b6025c0e1050faec7ecd9de190a975db2f8c06a551236278c4766d7e22e3b85168c9851de6266c791252f919b4f8b257b5a786734e5142e4666c67aef5b7b2f88c6640995434aa8636993089c73f196c54ae829ad4307132655b075ae534fa7f1ea9a17e62357b0bd2bd1d62d34bfc1364640250136729ba4f763ff25c33e8acc806611792add8254e705fefd2a44d5b15e3b36f6b75c97c9c04c511d8cf9e24c61c8284a913a381cb1a5628878040000000000000017b68afd95d4abf7920de9ebe1c89661f4adc3d83d72b1b778e30c2bf2efbbcd054cf51f4205ebf9a98a0d9f18135cb1d8d567c3436fa697b72c3b0200000000000079c0b3339debc78352b2e65299223d7ef2bd540e78167b3ac92a4c4f826f6d0e5c4ebf4f7a70c03e2f5ddbebf168586360c3663531eb5995d228f011a10ffc8b17d716b0c528dab6d0c4fe2ee402348104bc5d4012babedee898c6d3e1017be2e9bc759d3ab4d615f5000000000000000000000000000000000000000000007fff0000000000e693e314adf7dc9f517d04f1e6ca367d30d31d3647c6059db6e1e9529eb1623ef99e2d9ac2ab4872f8e784b07a31110bef6d000000a6f9e89e6d50ee06ce716f94da60f1f22d9669560d296287c13c92070000ee7553eb2df17839542fa88d09f000e88a90cf4406b9000000000000000000000000f441d6a6f516c235c6f5863e7f454ee0e16b9aa2593eb31fa3836703e7765aaeb77a8770e518efaa6d3dd85e03b3b133eb749057cea9af75a0e6f633532f2891b8e263cb6eecea691842827bc7c8c0130187081c8d320642389f5f0c42dba0ff68e84d7b130906f17f6aa075a257310f2d92cb1d1e16468949f5675262ee318e735930b01d8f586e34537bcff7d6196f494cdcf3a712078d745db0f5687a78ee6d000b3d171a0f08299b52d207f32e9da311ca090000003a42732808515eec574f892622c5be497fc3d9ca122d7c18b9e54637812c8debc61f0e42d838e44a819b74bce1a56108bb0fde97a02475920532309c55b2c9ae9f281391ec5cc72a5e94cca1cbf1ff01000000000000bdb537a0c52bd45a9f966c25616cec30c3ea3246cb8e6aac7cf273638e6656a3e4ccadc348f0172028c99cc5f6d5c6d09ed65aa54549e73c28b7c8ad06ad3c5e3c27eec0eff1a6c84f1189919eefcee807fc081e004ffb7d3104af00ac92f1080211c4bee74381a0e31021918f27863fdbafb50f70857d52a1f7df51935a80b1980a4778d35f183ea517f55a98095305701ab3f3ae43f06e91bc7d85e3800b46926944fba9805a985e63e53a62232fcd3f01dbe1728f300e247a7ebe344f9749818ff3961b2a42664ccd680a90bbb6ab400e286acc8f9febef64594777f848ed1cf980a3da2f0f7745760a05887d0c28060d613dd6539d392fc21fee0b5131609664b821d7a994e6c5965a4fa1ec1790c54e54586907dcc5e8bac16e79da9c2444420900000000000000f888a94365b99b72796fca1b922fc9aefaf1546c17cbb1d2d2fd12cb1a49cad501a3ca218c595b667b634606c57987ebfb0783a4948e4561d5cda158fe74453ff4a837beeedba483842c57d6005b544b4f80003386edfd3d4a88a667bd41eefe0d808abed08a29e6bc370a80cc0366fb4080bfbaaa946fd47ab662c794846e403950bbc3a48bb276cbb08a8eab145c06221ef16a238e3d50ad18aea9a2cec97d3c2d0569caabe2bffe02506bc9cb7294c5d020536dd5e7a6351642112df3b55d0215aaec7e45598995e79699e47567e353e68b03f82be860b188554b734e1192f9c1a867b815ef52cdc3307c0cc9be05a40fde69c350e59f11f1d26a4d04d8c8b2c4a4d23ec931d14bc7807db773a614b670acf46f83f7c65a0f8d43c5f64705f0d27c46d4b686e867e9b0be76a7978a8f962bb5a070df97f2bf7612115cfe5ebdc7ad0bc5a5f3ace25347d0e5c347279d55aa67a967380000000000000000000000000000000000000000000000ed0942d980c754c6c69ef65c375ad018824f78b260d5f51bc3feba504408a8c8141d84f3f417603b5081680f346ff0ffbe4ae19e936511966965ce268b6345a0001c0f26a32e0a999fc869292e939dcf89b9bfd794f9c12d41959a00688cca43015a9eec58f647796adea520cd2abeb0b55c22949d10e5a05fee4543fdc1e02554a55b5fef2427a6e5708edc38fac53c2f961945a3f83cdf01979939b49bc6b1aef8c733401bbe473de8d64efbe0d123739f387d1c0d9e74f2175c174ada1678c7db79492e8dd0f34e2ccf419cf7f14ffa408b50a52685b36aed14aa22ad928191d5a2697646edc52a1c0c5d720ae690add2b34aed161f51cc1cb424f76098e1e1921e5a405f9d298a8461f2da30e47b7c6ed7c95c84c745f58723e4cddffae3b53b5b947f9435e589f9ae55b30ecd3827b2de5df31976870823da8058c2538c04e397f3d0ef90c11c74da984fa558697ecb57224ce8fa6f79aadbd7dbf3678e74d790bc2ee72769a3ada1dd504f8e4133ce1effd446bc9a2f139e65cc4bd83912af3122352506c7c2191b3705116b2f4fc20d4e93882bdd6ccea97f3a08d3565b0000000000000000000000000000d35fb97c2d7a9374294dcec3da3df9a13c4fc63b00426682534d894caee0b963a3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8}, 0x94) 828.764899ms ago: executing program 4 (id=12668): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f00000001c0)={0x2, 0xffffffffffffffff}, &(0x7f0000000200)=0xc) ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000000240)={r1, 0xffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266"], 0x48}}, 0x0) sendmmsg(r3, &(0x7f0000000480), 0x4000000000001f2, 0xfc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000480)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x14, 0x3a, 0x229, 0x0, 0x25dfdbfa, {0x2}}, 0x14}}, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000005c0)={'syzkaller1\x00', 0xc201}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), r6) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x410001, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000080)={'veth0_to_bridge\x00', @multicast}) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r9, &(0x7f0000000140)={0x27}, 0x62) ioctl$int_in(r9, 0x5421, &(0x7f0000000180)=0x6) listen(r9, 0x0) accept4(r9, 0x0, 0x0, 0x80800) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xfffffffffffffe62}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) 766.289105ms ago: executing program 3 (id=12669): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000000540)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x38}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x271d, 0x0, &(0x7f0000000740)) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'team_slave_1\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$team(&(0x7f00000005c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x60, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x85}}, {0x8, 0x6, r3}}}]}}]}, 0x60}, 0x1, 0x400000000000000, 0x0, 0x10}, 0x0) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x120, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@inet=@length={{0x28}, {0x58, 0x8000, 0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x0, 0x1}, {0x3, 0x6, 0x2}}}}, {{@uncond, 0x0, 0x118, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@hbh={{0x48}, {0x4, 0x6, 0x1, [0x8000, 0x6, 0x0, 0x3672, 0x2, 0x9, 0x6, 0x7, 0x10, 0x0, 0x3, 0x3, 0x6, 0xf, 0x6, 0x4], 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x398) (async) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x480f0) 765.308107ms ago: executing program 5 (id=12670): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, 0x40, 0x109, 0xfffffffe, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x13, 0x0, 0x1, [@nested={0x4, 0x19}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e21, 0x0, @loopback, 0x3}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000300)=@sack_info={r2, 0x1, 0x6b37}, 0xc) syz_emit_ethernet(0x68, &(0x7f0000005a40)={@multicast, @random="6076b5cad4f6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x32, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a3579e", 0x0, 0x2b, 0x0, @mcast1, @remote, [], "6be2"}}}}}}}, 0x0) 724.559105ms ago: executing program 1 (id=12671): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275c, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000280)={0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @link_local}]}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800000000000000000000000000002408000005000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007600000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x1adbc, 0x1004, 0x0, 0x7, 0x1}) 577.047473ms ago: executing program 1 (id=12672): r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000140)="18", 0x1, 0x20008884, &(0x7f0000000180)={0x11, 0xd, r3, 0x1, 0xfd, 0x6, @local}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r7, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r4, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x42013, 0x2020e}}, 0x20}, 0x1, 0x0, 0x0, 0x4000886}, 0x0) 417.868306ms ago: executing program 3 (id=12673): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000080), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'fo\x00', 0x0, 0x800000d, 0x5c}, 0x2c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000500180100002020692500000000002020206b1a00fe00000000bfa100000000000007010000f8fffdffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000001ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x9}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r0, &(0x7f0000000080), 0x800001d, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'fo\x00', 0x0, 0x800000d, 0x5c}, 0x2c) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000500180100002020692500000000002020206b1a00fe00000000bfa100000000000007010000f8fffdffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000001ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x9}, 0x94) (async) 404.451514ms ago: executing program 5 (id=12674): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000000e0603000000000000000000f000000905000100"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x58, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "f7f8e05e18006b5c49148e65e7766136"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8f52}, @NL80211_ATTR_PMK={0x14, 0xfe, "5d2463cbe777bbcfd783c11f7597206c"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000001600)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000015c0)={&(0x7f0000000600)={0xe74, r2, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x21}}}}, [@NL80211_ATTR_TID_CONFIG={0x5e4, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x35}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x74}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x228, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1ec, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x471, 0x8, 0x1, 0xe94, 0x1ff, 0x84]}}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x48, 0x18, 0xe, 0x6e, 0x16, 0x18, 0x30, 0x0, 0xb, 0x48, 0x6c, 0x36, 0x60, 0x36, 0x1, 0x60, 0x12, 0x48, 0x60, 0x16, 0x60, 0x1b, 0x6, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x3, 0x4, 0x5000, 0x9, 0x3, 0x7, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x80, 0x88, 0x3, 0x6, 0xf, 0x3c, 0xfff8]}}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x4, 0x3}, {0x2, 0xa}, {0x0, 0x4}, {0x4, 0x5}, {0x0, 0x7}, {0x5, 0x6}, {0x5, 0x8}, {0x0, 0x1}, {0x1, 0x9}, {0x4}, {0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x7, 0xa}, {0x6, 0x3}, {0x2, 0x4}, {0x7, 0x6}, {0x7, 0x8}, {0x0, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x3, 0x4}, {0x6, 0x7}, {0x5, 0xa}, {0x7, 0x8}, {0x7, 0x1}, {0x7, 0x5}, {0x6, 0x8}, {0x7, 0x9}, {0x0, 0xa}, {0x4, 0x5}, {0x3, 0x1}, {0x3, 0x4}, {0x4, 0x4}, {0x7, 0x6}, {0x1}, {}, {0x3, 0x6}, {0x0, 0x6}, {0x0, 0x11}, {0x4, 0x5}, {0x5, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x3, 0x9}, {0x3, 0x7}, {0x0, 0x8}, {0x5, 0x6}, {0x2, 0x9}, {0x5, 0x3}, {0x0, 0x4}, {0x5, 0x8}, {0x1, 0x3}, {0x3, 0x2}, {0x4, 0x5}, {0x0, 0x3}, {0x4, 0x2}, {0x0, 0x5}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc0e8, 0xf3, 0x2, 0x5, 0x9, 0xfff, 0x3, 0x3]}}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x24, 0xb, 0x5, 0x18, 0x4, 0x36, 0x12, 0x16, 0x12, 0x48, 0x6c, 0x2, 0x16, 0x48, 0x5, 0xc, 0xc, 0x5, 0x36, 0x36]}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x2, 0x48, 0xf, 0x5, 0x9, 0x12, 0x36, 0x1b, 0x16, 0x30, 0x9, 0x24, 0x6a]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xaed, 0x7, 0x1215, 0x0, 0xf, 0x40, 0xc9ed]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x36, 0x30, 0x9, 0x12, 0x1b, 0x42, 0x4, 0x24, 0x5, 0xb, 0x36, 0x60, 0x12, 0x2c, 0x1b, 0x60, 0x1, 0x5, 0x4, 0x1b, 0xc, 0x3, 0x60, 0x9, 0x6, 0x5, 0x1b, 0x2d]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x9]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x2}, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x2}, {0x7, 0x9}, {0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x3}, {0x6}, {0x0, 0x6}, {0x4, 0x1}, {0x1, 0x7}, {0x5}, {0x0, 0x7}, {0x6, 0x4}, {0x0, 0xa}, {0x1, 0x3}, {0x0, 0x3}, {0x0, 0xa}, {}, {0x4, 0x7}, {0x3, 0x7}, {0x1, 0x7}, {0x0, 0x4}, {0x2, 0xa}, {0x5, 0x2}, {0x4, 0x6}, {0x4, 0x8}, {0x1}, {0x5, 0x2}, {0x6, 0xa}, {0x0, 0x8}, {0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x4, 0x2, 0x9, 0x6, 0x800, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x8000, 0x5cf1, 0x2, 0x100, 0x1, 0x10, 0x1000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x68e2, 0x8, 0xce, 0xfff, 0x5c, 0x0, 0x2, 0x3]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcf}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x2d8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x2ac, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x24, 0x16, 0x24, 0x30, 0xb, 0x60, 0x0, 0x30, 0x0, 0x16, 0x24, 0x18, 0x1, 0x6, 0x60, 0x36, 0x60, 0x48, 0x0, 0x4]}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x5, 0x2, 0x36, 0x0, 0xf, 0x48, 0xc, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xf35f, 0x6, 0x5, 0x2, 0x6, 0x7ff, 0x10]}}]}, @NL80211_BAND_60GHZ={0x10c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3, 0x4, 0xd5e, 0x83, 0x5, 0xfffa, 0xffe1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xad, 0x6, 0xa, 0x8, 0xb2a, 0x40, 0x5, 0xfff8]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x7, 0x9}, {0x5, 0x6}, {0x2, 0x4}, {0x1, 0x5}, {0x4, 0x7}, {0x2}, {0x6, 0x3}, {0x1, 0x7}, {0x0, 0x2}, {0x5, 0x1}, {0x3}, {0x0, 0x2}, {0x6, 0xa}, {0x1, 0x2}, {0x5, 0x7}, {0x7}, {0x5, 0x1}, {0x6, 0x3}, {0x1, 0x7}, {0x6, 0x5}, {0x0, 0x5}, {0x0, 0x2}, {0x2, 0x1}, {0x3, 0x2}, {0x0, 0x5}, {0x5, 0x3}, {0x1, 0x2}, {0x7, 0x9}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x5, 0x3}, {0x6, 0x5}, {0x1, 0x3}, {0x5, 0x7}, {0x3, 0x8}, {0x6, 0x6}, {0x5, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x1, 0xa}, {0x7, 0xa}, {0x6, 0x4}, {0x1, 0x9}, {0x6, 0x7}, {0x0, 0x9}, {0x5}, {0x6, 0xa}, {0x1, 0x6}, {0x4, 0xa}, {0x0, 0x5}, {0x6, 0x9}, {0x1, 0xa}, {0x0, 0x2}, {0x1, 0x5}, {0x1, 0x4}, {0x1, 0x1}, {0x6, 0x2}, {0x5}, {0x1, 0x5}, {0x1, 0x6}, {0x0, 0x1}, {0x5, 0x5}, {0x4, 0x9}, {0x0, 0x6}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x3, 0xd, 0xb2ec, 0x8000, 0x10, 0x6, 0x8000]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x7, 0x1}, {0x5, 0x8}, {0x1, 0x3}, {0x7}, {0x7}, {0x6, 0x2}, {0x2, 0x5}, {0x5, 0x9}, {0x0, 0xa}, {0x7, 0x5}, {0x7, 0x3}, {0x6, 0x3}, {0x0, 0x6}, {0x0, 0x7}, {0x3, 0x6}, {0x7}, {0x4, 0x6}, {0x2, 0x7}, {0x5, 0x2}, {0x5, 0x1}, {0x0, 0x3}, {0x3, 0x2}, {0x5, 0x1}, {0x4, 0x5}, {0x2, 0x4}, {0x4, 0x7}, {0x6, 0x10}, {0x1, 0x6}, {0x1, 0x8}, {0x7, 0x2}, {0x4, 0x4}, {0x6, 0x1}, {0x5, 0x7}, {0x7}, {0x0, 0x7}, {0x3, 0x6}, {0x3, 0x2}, {0x0, 0x6}, {0x5, 0x8}, {0x1, 0x1}, {0x1, 0x6}, {0x7, 0x3}, {0x0, 0x4}, {0x1, 0x7}, {0x5, 0x2}, {0x0, 0x7}, {0x2, 0xa}, {0x4}, {0x1}, {0x0, 0x6}, {0x3, 0x3}, {0x5, 0xa}, {0x3, 0x5}, {0x1, 0xa}, {0x1, 0x4}, {0x6, 0x2}, {0x5, 0x8}, {0x3, 0x5}, {0x4, 0x2}, {0x3, 0x7}, {0x5, 0x5}, {0x6, 0x4}, {0x4, 0x1}, {0x0, 0x2}, {0x6, 0x9}, {0x5, 0x9}, {0x5, 0x6}, {0x4, 0x7}, {0x2, 0x6}, {0x0, 0x9}, {0x5, 0x5}, {0x1, 0x4}, {0x1, 0x7}, {0x2, 0x9}, {0x2, 0x2}, {0x4, 0x1}, {0x1, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x52d3, 0xa, 0x7, 0x40, 0x3ff, 0xa77]}}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0xe420, 0x4, 0x5623, 0xe39, 0x200, 0xa]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x4, 0x4}, {0x1, 0x9}, {0x3, 0xf}, {0x2, 0x5}, {0x3, 0x5}, {0x7, 0x1}, {0x7, 0x7}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x6}, {0x0, 0x8}, {0x1}, {0x1, 0x1}, {0x2, 0x8}, {0x1, 0x8}, {0x6, 0x5}, {0x1, 0xa}, {0x0, 0x3}, {0x6, 0x5}, {0x0, 0x9}, {0x3, 0x3}, {0x0, 0x8}, {0x3, 0x6}, {0x3, 0x4}, {0x3, 0x8}, {0x3, 0x6}, {0x7, 0x6}, {0x4, 0x8}, {0x1, 0x9}, {0x3, 0xa}, {0x6}, {0x4, 0x6}, {0x5}, {0x7, 0x1}, {0x1, 0x4}, {0x2, 0x9}, {0x7, 0x4}, {0x3, 0x3}, {0x2, 0x2}, {0x5, 0x8}, {0x6, 0xa}, {0x5, 0x3}, {0x5, 0x1}, {0x1, 0x6}, {0x4, 0xa}, {0x3, 0x3}, {0x1, 0xa}, {0x5, 0x8}, {0x5}]}]}, @NL80211_BAND_2GHZ={0xb4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf54c, 0xb, 0x7, 0x1, 0x2, 0x6, 0xd978, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x8c5, 0x6, 0x9, 0x0, 0x101, 0x4, 0xea]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x7, 0x7ff, 0x0, 0x8000, 0x3, 0x3d29, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffa, 0xa51e, 0x8, 0x4, 0x10, 0xb, 0xf, 0xb]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x3, 0x7, 0x8, 0x7, 0x6, 0x39b]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x5, 0x9}, {0x4, 0xa}, {0x3, 0x9}, {0x0, 0x2}, {0x1, 0x1}, {0x0, 0x7}, {0x1, 0x4}, {0x1, 0x1}, {0x5, 0x6}, {0x0, 0x8}, {0x0, 0x3}, {0x4, 0x9}, {0x3, 0x2}, {0x4, 0x5}, {0x1, 0x9}, {0x2, 0x6}, {0x7, 0x6}, {0x2, 0x7}, {}, {0x0, 0x5}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0xa}, {0x5, 0x5}, {0x1, 0xa}, {0x6, 0x6}, {0x4, 0x3}, {0x2, 0x1}, {0x0, 0x8}, {0x1, 0x2}, {0x1, 0x4}, {0x2}, {0x2, 0x4}, {0x0, 0x8}, {0x7, 0x5}, {0x0, 0x9}, {0x4, 0xa}, {0x7, 0x5}]}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x1, 0x5}, {0x5, 0x1}, {0x6}, {0x7, 0x8}, {0x0, 0x9}, {0x5, 0x1}, {0x3, 0x9}, {0x0, 0x9}, {0x5, 0x5}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x1b, 0x18, 0x36, 0x5, 0x9, 0x1b, 0x30, 0x1b, 0x1, 0x6c, 0x6c, 0xc, 0x30, 0xb, 0xb, 0x2, 0x9, 0x3, 0x30, 0x5, 0xc, 0x2, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0xffff, 0x3, 0x7, 0x2, 0xc, 0x3]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x10}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000000}]}, {0x80, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x40, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x2, 0x3}, {0x1, 0x5}, {}, {0x1, 0x1}, {0x3, 0x5}, {0x5, 0x3}, {0x5, 0xa}, {0x5, 0x6}, {0x4}, {0x1, 0x7}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x7}, {0x5, 0x1}, {0x3, 0x2}, {0x7, 0x3}, {0x1, 0xa}, {0x1, 0x2}, {0x6, 0x9}, {0x2, 0x8}, {0x0, 0x4}, {0x2, 0x3}, {0x1, 0x2}, {0x4, 0x8}, {0x7, 0x3}, {0x4, 0x2}, {0x4, 0x9}, {0x4, 0x2}, {0x6, 0xa}, {0x7, 0x1}, {0x7, 0x3}, {0x1, 0x8}, {0x5, 0x8}, {0x7, 0x8}, {0x6, 0x6}, {0x5, 0x6}, {0x2, 0x8}, {0x6, 0x7}, {0x0, 0x2}, {0x3, 0x3}, {0x2, 0x8}, {0x7, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5e78}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xeb}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x78}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x858, 0x11d, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5d}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x42}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x48, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7, 0xff81, 0x0, 0x0, 0x6, 0x9, 0xfffb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x5, 0x0, 0x75, 0x6, 0x6, 0xde3c, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, {0x74, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xa000, 0x5, 0x2, 0xfff, 0x8, 0x3ff, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x7, 0x9f7e, 0xa21, 0x7ff, 0x7, 0x100, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1a3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x94}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4e}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x46}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x41}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1d}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1000000000000000}]}, {0x3f4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x134, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x8, 0xf, 0xc1, 0x3, 0x0, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x7, 0x4, 0xff38, 0x4, 0x3, 0x4, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb4c, 0x7ff, 0xdc, 0x0, 0x8, 0x6, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x400, 0xe, 0x6, 0x10, 0x9326, 0x9, 0x491d]}}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x30, 0x6, 0x4, 0x5, 0x6, 0x4, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x800, 0x1000, 0x400, 0xfffa, 0x0, 0x100, 0xf4]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x5, 0x4000, 0x8, 0x73b0, 0x69fe, 0x7fff, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x4, 0x8000, 0x533f, 0x2, 0x1, 0xfffb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8, 0xfff, 0xfffa, 0x1, 0x2, 0x5, 0xe800]}}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x5, 0x9, 0x61, 0x9, 0x6, 0x3, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x29c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x12, 0x48, 0x60, 0xc, 0x5, 0x60, 0x9, 0x1b, 0x1b, 0x0, 0x24, 0x1]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x6}, {0x3, 0x5}, {0x0, 0x2}, {0x3, 0x4}, {0x0, 0x7}, {}, {0x0, 0x9}, {0x2, 0x5}, {0x6, 0x3}, {0x0, 0xa}, {0x5, 0x2}, {0x7, 0x9}, {0x4, 0x7}, {0x6, 0x2}, {0x2, 0x4}, {0x0, 0x8}, {0x1}, {0x2, 0x1}, {0x6, 0x7}, {0x0, 0x7}, {0x0, 0x6}, {0x3, 0x5}, {0x2, 0x3}, {0x2, 0x4}, {0x5, 0x6}, {0x5, 0x9}, {0x6, 0x6}, {0x4, 0x2}, {0x2, 0xa}, {0x3, 0xa}, {0x5, 0x4}, {0x3, 0xa}, {0x3, 0x8}, {0x3, 0x1}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x3}, {0x3, 0x1}, {0x7}, {0x4, 0x1}, {0x6, 0x8}, {0x1, 0x1}, {0x3, 0xa}, {0x2, 0x1}, {0x7, 0x1}, {0x1, 0x7}, {0x0, 0x4}, {0x7, 0x7}, {0x5, 0x9}, {0x4, 0xa}, {0x4, 0x1}, {0x2, 0x5}, {0x1, 0x8}, {0x0, 0x8}, {0x7, 0x9}, {0x7, 0x4}, {0x6, 0x5}, {0x1, 0x1}, {0x2, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ed3, 0x1, 0x53, 0x0, 0x9, 0x6, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x6, 0x7}, {0x6, 0x5}, {0x3}, {0x1}, {0x4, 0xa}, {0x5, 0x2}, {0x7, 0x7}, {0x1, 0x9}, {0x4, 0x2}, {0x3, 0x2}, {0x3, 0x5}, {0x1, 0x1}, {0x1, 0x9}, {0x7, 0x9}, {0x1, 0xa}, {0x6, 0x3}, {0x7, 0x4}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x5, 0xc, 0xb, 0x9, 0x30, 0x48, 0xb, 0x16, 0x16, 0x6, 0x3, 0x3, 0x3, 0x48, 0x1, 0x1e, 0x1, 0x4, 0xc, 0x48, 0x12, 0x2, 0x48, 0x4, 0x14, 0x4, 0x48, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x9774, 0x2, 0xfabd, 0x7, 0x40, 0x4686, 0x739]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x3, 0x0, 0x2, 0xb, 0x8208, 0x9, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x2}, {0x7, 0x2}, {0x1, 0x5}, {0x2, 0x2}, {0x4, 0x6}, {0x0, 0x2}, {0x0, 0x1}, {0x1, 0x2}, {0x1, 0x9}, {0x0, 0x8}, {0x2, 0x1}, {0x4, 0x5}, {0x3, 0x8}, {0x6, 0x7}, {0x0, 0x5}, {0x0, 0x1}, {0x5, 0x3}, {0x6, 0x6}, {0x4, 0x1}, {0x1}, {0x5, 0x2}, {0x2}, {0x2, 0x7}, {0x0, 0x8}, {0x6, 0x9}, {0x5, 0xa}, {0x3, 0x6}, {0x3, 0x6}, {0x7, 0x6}, {0x5, 0x3}, {0x3}, {0x0, 0x6}, {0x3, 0x4}, {0x2}, {0x0, 0xa}, {0x6, 0xa}, {0x7}, {0x6, 0x6}, {0x7}, {0x2, 0x2}, {0x2, 0x8}, {0x0, 0x8}, {0x7, 0x5}, {0x0, 0x9}, {0x6, 0x1}, {0x2, 0x4}, {}]}]}, @NL80211_BAND_2GHZ={0xd4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x1, 0x1}, {0x6, 0x6}, {0x6, 0x8}, {0x3, 0xa}, {0x5, 0xa}, {0x7, 0x8}, {0x6, 0x2}, {0x5, 0x4}, {0x4, 0x9}, {0x1, 0x3}, {0x1, 0x9}, {0x1, 0x6}, {0x6, 0x7}, {0x0, 0x8}, {0x0, 0x2}, {0x5, 0x8}, {0x1, 0x4}, {0x0, 0x5}, {0x1, 0x8}, {0x3, 0x3}, {0x5, 0x2}, {0x2, 0xa}, {0x2}, {0x0, 0x7}, {0x6, 0x6}, {0x7, 0x6}, {0x6}, {0x6, 0x6}, {0x2, 0x3}, {0x7, 0x5}, {0x0, 0x4}, {0x3, 0x6}, {0x4, 0x8}, {0x6, 0x7}, {0x5, 0x4}, {0x3, 0x3}, {0x3, 0x8}, {0x7, 0x7}, {0x5, 0x8}, {0x5, 0x4}, {0x3, 0xa}, {0x4, 0x1}, {0x7, 0x2}, {0x2, 0x8}, {0x2, 0x8}, {0x5, 0x6}, {0x0, 0x6}, {0x1, 0x9}, {0x5}, {0x7, 0x5}, {0x0, 0xa}, {0x2, 0x6}, {0x1, 0xa}, {0x1, 0x8}, {0x4, 0x4}, {0x4, 0x9}, {0x3, 0x4}, {0x0, 0x9}, {0x3, 0x1}]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x7}, {0x1, 0x6}, {0x7, 0xa}, {0x1, 0x4}, {0x1, 0x6}, {0x6, 0x1}, {0x3, 0x9}, {0x7, 0x2}, {0x2, 0x2}, {0x1, 0xa}, {0x6, 0x6}, {0x2, 0x7}, {0x7, 0x7}, {0x0, 0xa}, {0x7, 0xa}, {0x3, 0x1}, {0x5, 0x2}, {0x5}, {0x2, 0x2}, {0x7, 0x4}, {0x5, 0x5}, {0x5}, {0x3, 0x7}, {0x3}, {0x7, 0x4}, {0x2, 0x1}, {0x4, 0xa}, {0x5}, {0x6, 0x6}, {0x1, 0x9}, {0x4, 0x9}, {0x4, 0x5}, {0x7, 0x2}, {0x6, 0x2}, {0x1, 0x2}, {0x3, 0x2}, {0x5, 0x6}, {0x5, 0x4}, {0x6, 0x5}, {0x4, 0x2}, {0x3, 0x7}, {0x6, 0x8}, {0x6, 0x3}, {0x7, 0xa}, {0x4, 0x2}, {0x5, 0x9}, {0x7}, {0x1, 0x8}, {0x1, 0xa}, {0x7, 0x9}, {0x5, 0x4}, {0x3, 0x3}, {0x5, 0x5}, {0x3, 0x4}, {0x4}, {0x5, 0x5}, {0x1, 0x3}, {0x1, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x906d, 0x5, 0xf1, 0xfffb, 0x3, 0x2, 0x1000, 0x9]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x4, 0x30, 0x18, 0x48, 0x24, 0xb, 0x4, 0x18, 0x3, 0x1, 0x60, 0x36, 0x30, 0x5, 0x0, 0x4, 0x30, 0x0, 0x4, 0x18, 0x1b, 0x1, 0x12, 0xb, 0x2b, 0x2, 0x48, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x7, 0x2, 0x1, 0xa552, 0x9, 0x401]}}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x39, 0x2, [{0x2, 0x2}, {0x7, 0x5}, {0x6, 0x6}, {0x3, 0x7}, {0x2, 0x6}, {0x6, 0x5}, {0x5, 0x7}, {0x0, 0x4}, {0x3, 0x3}, {0x0, 0x7}, {0x6, 0x6}, {0x5, 0x5}, {0x2, 0xa}, {0x6, 0x6}, {0x0, 0x6}, {0x6, 0x7}, {0x1, 0x6}, {0x2, 0x3}, {0x6, 0x3}, {0x7, 0xa}, {0x1, 0x3}, {0x4, 0x2}, {0x3, 0x8}, {0x6, 0xa}, {}, {0x1, 0x2}, {0x3}, {0x1, 0x3}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x5}, {0x7, 0x5}, {0x7, 0x8}, {0x1, 0x7}, {0x6, 0x5}, {0x1, 0x3}, {0x3, 0x9}, {0x6}, {0x3, 0x3}, {0x2, 0x5}, {0x7, 0x7}, {0x3, 0x4}, {0x1, 0x9}, {0x1, 0x7}, {0x3, 0x5}, {0x7, 0xa}, {0x1, 0xa}, {0x6}, {0x5, 0x2}, {0x3, 0x9}, {0x5, 0x7}, {0x4, 0x5}, {0x1, 0x6}]}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe2ff, 0x4, 0xfe, 0xc800, 0x8000, 0x1, 0x9, 0x7fff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xfff, 0x2, 0x3, 0x7, 0x1, 0x4, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1875, 0x71, 0x3, 0xffff, 0x7, 0xd]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x16}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcc}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x20, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x3, 0x7, 0x5, 0x100, 0x42a, 0x33dc, 0xe]}}]}]}]}, {0x2b4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x2a8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x5, 0x200, 0xecca, 0x8, 0x2, 0x9]}}]}, @NL80211_BAND_6GHZ={0xcc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x0, 0x9}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x5}, {0x1, 0x1}, {0x6, 0x5}, {0x0, 0x2}, {0x2, 0xa}, {0x1, 0x7}, {0x6}, {}, {0x5, 0x6}, {0x3, 0x3}, {0x5, 0x6}, {0x5, 0x3}, {0x4}, {0x4, 0x7}, {0x4, 0x3}, {0x5, 0x5}, {0x0, 0x4}, {0x5, 0x2}, {0x4, 0x3}, {0x5, 0x7}, {0x2, 0x2}, {0x5, 0xa}, {0x5, 0x4}, {0x3, 0x5}, {0x5, 0x4}, {0x6}, {0x0, 0x4}, {0x0, 0x3}, {0x5, 0x2}, {0x1, 0x8}, {0x6, 0x8}, {0x0, 0xa}, {0x5}, {0x2, 0x2}, {0x3, 0x4}, {}, {0x0, 0x5}, {0x1, 0x3}, {0x1, 0xa}, {0x0, 0x2}, {0x3, 0x8}, {0x0, 0x8}, {0x4, 0x5}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x1}, {0x1, 0x4}, {0x4, 0x2}, {0x0, 0x3}, {0x2, 0x9}, {0x7, 0x5}, {0x7, 0x9}, {0x7}, {0x7, 0x7}, {0x1, 0x7}, {0x0, 0x5}, {0x1, 0x2}, {0x7, 0x5}, {0x1, 0x5}, {0x7, 0xa}, {0x0, 0x7}, {0x2, 0x1}, {0x2}, {0x7, 0x6}, {0x0, 0x1}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x6, 0x7}, {0x2, 0xa}, {0x7}, {0x1, 0x7}, {0x0, 0xa}, {0x5, 0x5}, {0x2, 0x8}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0x6}, {0x6, 0x8}, {0x1, 0x9}, {0x3, 0x6}, {0x5}, {0x5, 0x9}, {0x7}, {0x4, 0x8}, {0x3, 0x2}, {0x1}, {}, {0x5, 0x8}, {0x7, 0x3}, {0x3, 0x8}, {0x4, 0x5}, {0x6, 0x6}, {0x4}, {0x5, 0x2}, {0x6, 0x8}, {0x1, 0x5}, {0x1, 0xa}, {0x5, 0x5}, {0x5, 0x8}, {0x1, 0x2}, {0x5, 0x5}, {0x7, 0x5}, {0x4, 0x4}, {0x3, 0x6}, {0x1}, {0x4, 0x6}, {0x7, 0x2}, {0x4, 0x5}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x6, 0x9}, {0x6, 0x9}, {0x5, 0x5}, {0x0, 0x3}, {0x0, 0x7}, {0x2, 0x8}, {0x0, 0x3}, {0x1, 0x6}, {0x6}]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x3, 0x1}, {0x7, 0x8}, {0x7, 0x9}, {0x3, 0x5}, {0x4, 0x1}, {0x5, 0x5}, {0x1, 0x7}, {}, {0x4, 0x1}, {0x0, 0x9}, {0x2}, {0x1, 0x9}, {0x4, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x36, 0x30, 0x12, 0x30, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_5GHZ={0x110, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x39, 0x2, [{0x6, 0x8}, {0x4, 0x2}, {0x4, 0x9}, {0x5}, {0x1, 0x1}, {0x1, 0x7}, {0x0, 0x3}, {0x0, 0xa}, {0x7, 0x7}, {0x5}, {0x5, 0x6}, {0x0, 0x7}, {0x4, 0x2}, {0x4, 0x3}, {0x1, 0x2}, {0x0, 0x3}, {0x5, 0x2}, {0x2, 0x1}, {0x0, 0x6}, {0x6, 0xa}, {0x0, 0x9}, {0x2, 0x2}, {0x4, 0x1}, {0x0, 0x8}, {0x4, 0x4}, {0x6}, {0x7, 0x5}, {0x0, 0x1}, {0x7, 0x4}, {0x0, 0x5}, {0x3, 0xa}, {0x1, 0x2}, {0x1, 0x3}, {0x6, 0x5}, {0x4, 0x4}, {0x1, 0x1}, {0x6, 0x9}, {0x0, 0x2}, {0x1, 0x7}, {0x6, 0x9}, {0x5, 0x8}, {0x5}, {0x1, 0x6}, {0x5, 0x7}, {0x4, 0x5}, {0x0, 0x9}, {0x4, 0x3}, {0x5, 0xa}, {0x7, 0x8}, {0x0, 0x2}, {0x2, 0xa}, {0x7, 0x3}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x2, 0x1}, {0x4, 0xa}, {0x4, 0x2}, {0x0, 0x1}, {0x3, 0x4}, {0x0, 0x3}, {0x3, 0x1}, {0x4, 0x7}, {0x7, 0x4}, {0x3, 0x1}, {0x5, 0x3}, {0x2, 0xa}, {}, {0x1, 0xa}, {0x5, 0x3}, {0x5, 0x5}, {0x2, 0xa}, {0x2, 0x5}, {0x5, 0x6}, {0x0, 0x8}, {0x0, 0x9}, {0x4, 0x2}, {0x3, 0x6}, {0x7, 0x9}, {0x0, 0x9}, {0x4, 0x6}, {0x3, 0x2}, {0x0, 0x4}, {0x3, 0x1}, {0x4, 0x8}, {0x0, 0x6}, {0x6, 0x7}, {0x1, 0x1}, {0x2, 0x4}, {0x2, 0x2}, {0x4, 0x9}, {0x2, 0x6}, {0x0, 0x2}, {0x1}, {0x2, 0x3}, {0x1}, {0x7, 0x1}, {0x5, 0x8}, {0x7, 0xa}, {0x6, 0x4}, {0x2, 0x9}, {0x0, 0xa}, {0x7, 0x7}, {0x2, 0x2}, {0x7, 0x6}, {0x6, 0x8}, {0x0, 0x2}, {0x7, 0x2}, {0x1, 0x5}, {0x0, 0x3}, {0x0, 0x1}, {0x2, 0x3}, {0x6, 0x2}, {0x7}, {0x3, 0x8}, {0x3, 0x9}, {0x1, 0x3}, {0x7, 0x2}, {0x5, 0x3}, {0x3, 0x8}, {0x1, 0x8}, {0x4, 0x1c}, {0x0, 0x6}, {0x1, 0x12}, {0x4, 0x3}, {0x0, 0x4}, {0x5, 0x6}, {0x6, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x5, 0xa}, {0x6, 0x4}, {0x1, 0xa}, {0x4, 0x3}, {0x5, 0x3}, {0x1, 0x4}, {0x4, 0x6}, {0x5, 0x2}, {0x1, 0x9}, {0x7, 0x8}, {0x5}, {0x7, 0x4}, {0x4, 0x3}, {0x2, 0x3}, {0x3, 0x7}, {0x2, 0x6}, {0x4, 0x8}, {0x7, 0x3}, {0x0, 0x2}, {0x7, 0xa}, {0x2, 0xb}, {0x5, 0x2}, {0x7, 0x9}, {0x7}, {0x6, 0xa}, {0x2, 0x3}, {0x3, 0x5}, {0x3, 0x8}, {0x5, 0x1}, {0x2, 0x2}, {0x5, 0x8}, {}, {0x6, 0x3}, {0x3, 0x3}, {0x1, 0x1}, {0x7, 0x2}, {0x5, 0x2}, {0x7, 0x1}, {0x5, 0x3}, {0x1, 0x8}, {0x5, 0x2}, {0x0, 0xa}, {0x0, 0x6}, {0x0, 0x5}, {0x3, 0x1}, {0x0, 0x3}, {0x7, 0x9}, {0x1, 0x4}, {0x6, 0x4}, {0x0, 0x6}, {0x7, 0x4}, {0x1, 0x7}, {0x6}, {0x2}, {0x0, 0x8}, {0x2}, {0x1, 0x1}, {0x0, 0x8}, {0x5, 0x7}, {0x1, 0x3}, {0x6, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x3}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x5, 0x4}, {0x4, 0x7}, {0x4, 0x2}, {0x7, 0x8}, {0x0, 0x7}, {0x4, 0x5}, {0x5, 0x3}, {0x6, 0x4}, {0x3, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xcd00, 0x2, 0xf, 0xe, 0xd, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x46e, 0x73, 0x3, 0x6, 0x7, 0x3, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4000, 0x26f, 0x4780, 0x5, 0xec, 0xddd7, 0x7d, 0xd7ef]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcf}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4d}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa7}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x92}]}]}]}, 0xe74}}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000440)={'veth0_to_team\x00', 0x400}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000480)={0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000001640)=ANY=[@ANYBLOB="148e767a060000024534", @ANYRES16=r5, @ANYBLOB="000126bd7000fcdbdf256d000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) 246.564338ms ago: executing program 4 (id=12675): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000001600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000015c0)={&(0x7f0000000480)={0x1130, r1, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0xd}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}, @NL80211_ATTR_FRAME_MATCH={0xf2, 0x5b, "8a1d1a10fb5c44527e9ec9e5ddaafa926e0d21a666a7a1f110293c18447fda36367fbf08ffb026af9009ae657cae75d660c2e6c1f94c3c364887e71fd9c537d771ecf7a38f40ef58ebbf92d258b20233397fea377fda0342d812879a55fe4d7fb123f623684b6cb79b09036953715f82818d9523462f0933edbfbd6b887501c075cb3d5882b84ae8aa56d91d95ab54547257676bd06b53732478002de9e42a86c32adc5fded66960c20a051e539622fd073309782b3f7bc5b6f011972e9c90517e80b81b103fa3c27e66f04c713cf3da69b57ebb6d243292a04947b45e0e169fc00d3b8f660039a09090ffa96015"}]}, 0x1130}, 0x1, 0x0, 0x0, 0x11}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 1.845073ms ago: executing program 5 (id=12676): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x12) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6400000002060301000000000000000000000000140007800800114000000000050015000c00000005000100060000000500050002000000050004000000000016000300686173683a6e65742c706f72742c6e6574000000090002"], 0x64}}, 0x20004800) 363.395µs ago: executing program 4 (id=12677): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000180)=[{&(0x7f00000001c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848460000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4810) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000200)={0x3, 0x2}) (async) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000240)={0x15a, 0xb2f8, 0x3, 0x800, 0x3, [0x6, 0x0, 0x9, 0xffffffff]}) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000009000010000000000000000000200000a20000000000a010800000000000000000200000009df010073797a300000000034000000090a010400000000090000000200000008000a40000000010900020073797a31000000000900010073797a3000000000440000000c0a010100a38b8cfa399a9cabb454937259ef130700000000000000020000000900020073797a31000000000900010073797a30000000001800038014000080100001800c000100000000000000000014000000"], 0xc0}, 0x1, 0x0, 0x0, 0x6005}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) close(r0) syz_80211_inject_frame(0x0, 0x0, 0xffffffffffffff72) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008810}, 0x80) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000500)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, r4, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3005}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xd65}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) 0s ago: executing program 3 (id=12678): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f00000000c0)={'erspan0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x7}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc, 0x7}, {0x2, 0xfff1}, {0xf, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008848}, 0x24004004) kernel console output (not intermixed with test programs): butes in process `syz.4.10936'. [ 1378.167912][T14848] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10936'. [ 1378.313758][T14856] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10937'. [ 1378.373024][T14865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10940'. [ 1378.375422][T14865] netlink: 544 bytes leftover after parsing attributes in process `syz.1.10940'. [ 1378.526489][T14874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10942'. [ 1378.834717][T14890] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1378.964178][T14894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10949'. [ 1379.072502][T14896] netlink: 'syz.4.10952': attribute type 11 has an invalid length. [ 1379.072528][T14896] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10952'. [ 1379.185210][T14906] vlan2: entered allmulticast mode [ 1379.185237][T14906] bond0: entered allmulticast mode [ 1379.185253][T14906] bond_slave_0: entered allmulticast mode [ 1379.185270][T14906] bond_slave_1: entered allmulticast mode [ 1379.217035][T14908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10953'. [ 1379.238521][T14908] xfrm2: entered promiscuous mode [ 1379.238635][T14908] xfrm2: entered allmulticast mode [ 1379.338610][T14912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10955'. [ 1379.759726][T26507] nci: nci_rsp_packet: unknown rsp opcode 0x6 [ 1380.052976][T14945] netlink: 'syz.5.10963': attribute type 12 has an invalid length. [ 1380.506378][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1380.506587][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1380.506754][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1382.615396][T14926] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1383.087132][T10134] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1383.087235][T10134] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1383.087275][T10134] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1383.087313][T10134] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1383.089229][T14999] tipc: Enabled bearer , priority 0 [ 1383.169874][T14993] tipc: Disabling bearer [ 1383.335818][T15013] __nla_validate_parse: 4 callbacks suppressed [ 1383.335845][T15013] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10976'. [ 1383.420316][T15013] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10976'. [ 1383.525201][T15026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10979'. [ 1383.604836][T15033] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1383.696660][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1383.696921][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1383.979436][T15046] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1383.979476][T15046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1384.428665][T15065] netlink: 1080 bytes leftover after parsing attributes in process `syz.1.10983'. [ 1384.576970][T15076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10987'. [ 1384.895481][T15101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10993'. [ 1385.175308][T15116] netlink: 'syz.4.10997': attribute type 7 has an invalid length. [ 1385.175336][T15116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10997'. [ 1385.175470][T15116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10997'. [ 1385.273054][T15119] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 1385.388970][T15110] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10997'. [ 1385.488881][T15125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10999'. [ 1385.592095][T10129] IPVS: starting estimator thread 0... [ 1385.676611][T15133] IPVS: using max 26 ests per chain, 62400 per kthread [ 1386.229243][T15168] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1386.640113][T15201] netlink: 'syz.5.11018': attribute type 83 has an invalid length. [ 1386.891358][T15215] netlink: 'syz.1.11021': attribute type 4 has an invalid length. [ 1386.897039][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1386.897705][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1386.898432][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1387.018433][T15215] netlink: zone id is out of range [ 1387.018453][T15215] netlink: zone id is out of range [ 1387.049467][T15222] netlink: 'syz.4.11025': attribute type 11 has an invalid length. [ 1388.718422][ C0] net_ratelimit: 33 callbacks suppressed [ 1388.718448][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 1388.919030][T15305] Cannot find add_set index 34 as target [ 1389.139042][T15323] __nla_validate_parse: 10 callbacks suppressed [ 1389.139065][T15323] netlink: 64 bytes leftover after parsing attributes in process `syz.5.11054'. [ 1389.274634][T15333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11056'. [ 1389.401047][T15340] netlink: 64 bytes leftover after parsing attributes in process `syz.4.11060'. [ 1389.402860][T15336] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1389.402885][T15336] syzkaller1: Linktype set failed because interface is up [ 1389.418691][ T5745] syzkaller1: tun_net_xmit 90 [ 1389.440483][T15328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11052'. [ 1389.691395][T15352] bond9: Unable to set peer notification delay as MII monitoring is disabled [ 1389.710409][T15352] bond9 (unregistering): Released all slaves [ 1389.738079][T15356] Set syz0 is full, maxelem 0 reached [ 1389.832377][T15356] bond7: Removing last arp target with arp_interval on [ 1389.920010][T15353] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.920051][T15353] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1390.228884][T15353] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.228929][T15353] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1390.397224][T15353] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.397267][T15353] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1390.449321][T15385] netlink: 'syz.5.11072': attribute type 7 has an invalid length. [ 1390.605264][T15353] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.605305][T15353] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1390.680169][T15392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11075'. [ 1390.680225][T15392] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11075'. [ 1390.714032][T15392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11075'. [ 1390.714076][T15392] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11075'. [ 1391.029575][ T9444] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1391.029616][ T9444] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1391.150028][T10134] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1391.150066][T10134] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1391.150117][T10134] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1391.150174][T10134] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1391.158057][T10134] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1391.158148][T10134] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1391.240848][T15418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11082'. [ 1391.376460][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1391.376708][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1391.376955][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1391.377174][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1391.470025][T15429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11087'. [ 1391.970747][T15451] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 1392.178742][T15458] xt_hashlimit: overflow, try lower: 3/0 [ 1392.298004][T15477] wg2: entered promiscuous mode [ 1392.679274][T15493] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1393.336071][T15517] xt_IDLETIMER: label is empty or not nul-terminated [ 1393.763385][T15539] netlink: 'syz.0.11124': attribute type 10 has an invalid length. [ 1393.808591][T15539] macvlan1: entered promiscuous mode [ 1393.808618][T15539] macvlan1: entered allmulticast mode [ 1393.844653][T15539] veth1_vlan: entered allmulticast mode [ 1393.889248][T15539] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 1393.895528][T15539] netlink: 'syz.0.11124': attribute type 10 has an invalid length. [ 1393.921972][T15539] veth1_vlan: left allmulticast mode [ 1393.935321][T15539] netlink: 'syz.0.11124': attribute type 10 has an invalid length. [ 1394.025612][T15539] netlink: 'syz.0.11124': attribute type 10 has an invalid length. [ 1394.035969][T15539] netlink: 'syz.0.11124': attribute type 10 has an invalid length. [ 1394.037576][T15539] netlink: 'syz.0.11124': attribute type 10 has an invalid length. [ 1394.038298][T15559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1394.040166][T15539] netlink: 'syz.0.11124': attribute type 10 has an invalid length. [ 1394.178329][T15559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1394.208697][T15539] netlink: 'syz.0.11124': attribute type 10 has an invalid length. [ 1394.208894][T15539] netlink: 'syz.0.11124': attribute type 10 has an invalid length. [ 1394.462048][T15576] __nla_validate_parse: 6 callbacks suppressed [ 1394.462073][T15576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11130'. [ 1394.580837][T15590] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11134'. [ 1394.755925][T15591] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11132'. [ 1395.181645][T15617] netlink: 220 bytes leftover after parsing attributes in process `syz.3.11141'. [ 1395.352184][T15625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11145'. [ 1395.491459][T15632] validate_nla: 57 callbacks suppressed [ 1395.491484][T15632] netlink: 'syz.1.11148': attribute type 1 has an invalid length. [ 1395.534506][T15632] bond8: entered promiscuous mode [ 1395.534944][T15632] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1395.646789][T15632] bond9: option arp_all_targets: invalid value (18446744073709551613) [ 1395.648800][T15632] bond9 (unregistering): Released all slaves [ 1395.756421][T15642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11147'. [ 1396.043522][T15663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11156'. [ 1396.275737][T15666] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1396.697353][T15701] netlink: 'syz.3.11167': attribute type 2 has an invalid length. [ 1396.711737][T15701] netlink: 'syz.3.11167': attribute type 1 has an invalid length. [ 1396.711765][T15701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11167'. [ 1396.711781][T15701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11167'. [ 1396.711797][T15701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11167'. [ 1397.019420][T15717] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1397.137122][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1397.137361][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1397.137576][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1397.857533][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1398.381354][T15790] netlink: 'syz.4.11196': attribute type 3 has an invalid length. [ 1398.420457][T15784] vlan3: entered allmulticast mode [ 1398.420484][T15784] bond0: entered allmulticast mode [ 1398.420499][T15784] bond_slave_0: entered allmulticast mode [ 1398.420518][T15784] bond_slave_1: entered allmulticast mode [ 1398.420536][T15784] vlan2: entered allmulticast mode [ 1398.420550][T15784] team_slave_1: entered allmulticast mode [ 1398.799211][T15805] netlink: 'syz.0.11200': attribute type 4 has an invalid length. [ 1399.317331][T15829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1399.369685][T15832] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1399.662879][T15849] x_tables: unsorted underflow at hook 2 [ 1399.830706][T15855] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1399.907940][T15860] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 1399.913086][T15860] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 1399.930597][T15860] __nla_validate_parse: 13 callbacks suppressed [ 1399.930616][T15860] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11217'. [ 1400.203763][T15874] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11222'. [ 1400.327632][T15878] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 1400.327998][T15878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11223'. [ 1400.485288][T15889] netlink: 'syz.0.11225': attribute type 1 has an invalid length. [ 1400.677786][T15897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11228'. [ 1400.761241][T15902] netlink: 144 bytes leftover after parsing attributes in process `syz.4.11230'. [ 1400.762800][T15902] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1400.795946][T15902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11230'. [ 1400.974230][T15911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11232'. [ 1401.337642][T15939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11238'. [ 1401.341956][T15930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11236'. [ 1401.657868][T15958] netlink: 'syz.4.11243': attribute type 83 has an invalid length. [ 1402.091108][T15978] netlink: 104 bytes leftover after parsing attributes in process `syz.0.11248'. [ 1402.896399][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1402.896624][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1402.896846][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1404.913553][T16134] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1405.143289][T16148] __nla_validate_parse: 14 callbacks suppressed [ 1405.143316][T16148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11306'. [ 1405.356688][T16160] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11310'. [ 1405.358945][T16161] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11310'. [ 1405.615252][T16172] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11315'. [ 1405.615305][T16172] netlink: 'syz.4.11315': attribute type 7 has an invalid length. [ 1405.615321][T16172] netlink: 'syz.4.11315': attribute type 8 has an invalid length. [ 1405.615336][T16172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11315'. [ 1405.652241][T16172] erspan0: entered promiscuous mode [ 1405.667352][T16172] erspan0: left promiscuous mode [ 1405.713855][T16173] netlink: 'syz.5.11314': attribute type 10 has an invalid length. [ 1405.734879][T16173] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 1405.759568][T16173] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1405.774259][T16173] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1405.788447][T16173] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1405.819182][T16175] netlink: 'syz.0.11316': attribute type 1 has an invalid length. [ 1405.831297][T16175] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11316'. [ 1405.960038][T16187] Bluetooth: hci0: unsupported parameter 5135 [ 1405.960063][T16187] Bluetooth: hci0: unsupported parameter 8192 [ 1405.960082][T16187] Bluetooth: hci0: unsupported parameter 5135 [ 1405.960096][T16187] Bluetooth: hci0: unsupported parameter 8192 [ 1406.363544][T16205] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11328'. [ 1406.415087][T16205] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1406.819711][ T1694] block nbd5: Possible stuck request ffff88802807e000: control (read@0,4096B). Runtime 180 seconds [ 1406.922866][T10846] Bluetooth: hci3: Malformed HCI Event [ 1406.951751][T16233] netlink: 'syz.4.11337': attribute type 1 has an invalid length. [ 1406.951776][T16233] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11337'. [ 1407.199575][T16246] netlink: 'syz.4.11342': attribute type 1 has an invalid length. [ 1407.199601][T16246] netlink: 'syz.4.11342': attribute type 268 has an invalid length. [ 1407.199626][T16246] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11342'. [ 1407.607702][T16260] ip_tables: iptables: counters copy to user failed while replacing table [ 1407.609381][T16260] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11347'. [ 1407.612863][T16260] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1407.667065][T16265] veth0: entered promiscuous mode [ 1407.669608][T16263] veth0: left promiscuous mode [ 1407.864513][T16277] netlink: 'syz.0.11354': attribute type 8 has an invalid length. [ 1408.016370][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1408.016690][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1408.016961][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1408.151422][T16288] lo: entered promiscuous mode [ 1408.165155][T16288] tunl0: entered promiscuous mode [ 1408.176942][T16288] gre0: entered promiscuous mode [ 1408.191746][T16288] gretap0: entered promiscuous mode [ 1408.207311][T16288] erspan0: entered promiscuous mode [ 1408.210407][T16288] ip_vti0: entered promiscuous mode [ 1409.844356][T16390] netlink: 'syz.1.11392': attribute type 3 has an invalid length. [ 1409.844387][T16390] netlink: 'syz.1.11392': attribute type 3 has an invalid length. [ 1410.239356][ T5000] udevd[5000]: worker [9445] /devices/virtual/block/nbd5 timeout; kill it [ 1410.239454][ T5000] udevd[5000]: seq 40226 '/devices/virtual/block/nbd5' killed [ 1410.257149][T16396] __nla_validate_parse: 6 callbacks suppressed [ 1410.257204][T16396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11393'. [ 1410.384775][T16416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11397'. [ 1410.488542][T16422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11400'. [ 1410.762984][T16436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11404'. [ 1410.763013][T16436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11404'. [ 1411.001374][T16446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11406'. [ 1411.201462][T16456] netlink: 'syz.0.11409': attribute type 1 has an invalid length. [ 1411.201487][T16456] netlink: 'syz.0.11409': attribute type 2 has an invalid length. [ 1411.226483][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.226716][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.226914][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.544686][T16479] x_tables: duplicate underflow at hook 3 [ 1411.587917][T16480] bond0: entered promiscuous mode [ 1411.595438][T16480] batadv0: entered promiscuous mode [ 1411.611515][T16480] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1411.611535][T16480] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1411.628479][T16480] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1411.649913][T16480] bond0: left promiscuous mode [ 1411.652984][T16480] batadv0: left promiscuous mode [ 1411.909920][T16499] ip6t_ah: unknown flags 5 [ 1412.727182][T16526] bond0: entered promiscuous mode [ 1413.357604][T16551] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11435'. [ 1413.357945][T16551] gre0: Master is either lo or non-ether device [ 1413.641243][T16562] netlink: 92 bytes leftover after parsing attributes in process `syz.1.11438'. [ 1413.641288][T16562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11438'. [ 1413.942291][T16572] iwpm_parse_nlmsg: Invalid attribute (msg type Add Mapping response ret = -34) [ 1413.944808][T16572] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11444'. [ 1414.367351][T16599] FAULT_INJECTION: forcing a failure. [ 1414.367351][T16599] name failslab, interval 1, probability 0, space 0, times 0 [ 1414.367388][T16599] CPU: 1 UID: 0 PID: 16599 Comm: syz.3.11451 Not tainted syzkaller #0 PREEMPT(full) [ 1414.367428][T16599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1414.367450][T16599] Call Trace: [ 1414.367459][T16599] [ 1414.367468][T16599] dump_stack_lvl+0xe8/0x150 [ 1414.367512][T16599] should_fail_ex+0x3eb/0x540 [ 1414.367549][T16599] should_failslab+0xa8/0x100 [ 1414.367589][T16599] __kmalloc_noprof+0xf9/0x710 [ 1414.367617][T16599] ? rcu_is_watching+0x16/0xb0 [ 1414.367654][T16599] ? tomoyo_realpath_from_path+0xf2/0x640 [ 1414.367754][T16599] ? tomoyo_realpath_from_path+0xf2/0x640 [ 1414.367788][T16599] tomoyo_realpath_from_path+0xf2/0x640 [ 1414.367825][T16599] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1414.367886][T16599] tomoyo_path_number_perm+0x246/0x5f0 [ 1414.367924][T16599] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1414.367964][T16599] ? __lock_acquire+0x747/0x2de0 [ 1414.368043][T16599] ? __fget_files+0x2a/0x420 [ 1414.368077][T16599] ? __fget_files+0x2a/0x420 [ 1414.368106][T16599] ? __fget_files+0x2a/0x420 [ 1414.368141][T16599] security_file_ioctl+0xc3/0x2a0 [ 1414.368203][T16599] __se_sys_ioctl+0x47/0x170 [ 1414.368243][T16599] do_syscall_64+0x166/0x520 [ 1414.368275][T16599] ? trace_irq_disable+0x3b/0x140 [ 1414.368308][T16599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1414.368333][T16599] ? clear_bhb_loop+0x70/0xc0 [ 1414.368362][T16599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1414.368385][T16599] RIP: 0033:0x7f59a0ba8f19 [ 1414.368408][T16599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1414.368428][T16599] RSP: 002b:00007f599edf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1414.368453][T16599] RAX: ffffffffffffffda RBX: 00007f59a0e25fa0 RCX: 00007f59a0ba8f19 [ 1414.368471][T16599] RDX: 00002000000008c0 RSI: 00000000400448c8 RDI: 0000000000000005 [ 1414.368486][T16599] RBP: 00007f599edf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1414.368500][T16599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1414.368515][T16599] R13: 00007f59a0e26038 R14: 00007f59a0e25fa0 R15: 00007ffce6607fa8 [ 1414.368552][T16599] [ 1414.370497][T16599] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1414.400813][T16599] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 1414.416987][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1414.417242][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1414.638449][T16602] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1414.755913][T16606] ip_tables: iptables: counters copy to user failed while replacing table [ 1414.819690][T16606] syzkaller1: entered promiscuous mode [ 1414.819717][T16606] syzkaller1: entered allmulticast mode [ 1415.147524][ T5791] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 1415.256063][T16621] ip_tables: iptables: counters copy to user failed while replacing table [ 1415.259087][T16621] __nla_validate_parse: 5 callbacks suppressed [ 1415.259106][T16621] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11457'. [ 1415.358766][T16622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11455'. [ 1415.535196][T16643] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1416.354395][T16686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11475'. [ 1416.386991][T16692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11477'. [ 1416.654968][T16706] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11482'. [ 1416.778281][T16712] netlink: 'syz.1.11482': attribute type 1 has an invalid length. [ 1416.830230][T16715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11482'. [ 1417.203429][T16731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11491'. [ 1417.272038][T16735] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11492'. [ 1417.361969][T16734] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 1417.398940][T10846] Bluetooth: hci4: link tx timeout [ 1417.398962][T10846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1417.449216][T16734] netlink: 'syz.0.11493': attribute type 32 has an invalid length. [ 1417.450754][T16734] netlink: 'syz.0.11493': attribute type 1 has an invalid length. [ 1417.450776][T16734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11493'. [ 1417.594447][T16751] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 1417.601444][T16751] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11499'. [ 1418.001771][T10483] IPVS: starting estimator thread 0... [ 1418.074069][T16770] netlink: 'syz.5.11506': attribute type 16 has an invalid length. [ 1418.074094][T16770] netlink: 'syz.5.11506': attribute type 17 has an invalid length. [ 1418.087112][T16780] netlink: 'syz.5.11506': attribute type 16 has an invalid length. [ 1418.087175][T16780] netlink: 'syz.5.11506': attribute type 17 has an invalid length. [ 1418.096963][T16777] IPVS: using max 26 ests per chain, 62400 per kthread [ 1418.115873][T16778] netlink: 'syz.0.11507': attribute type 3 has an invalid length. [ 1418.188095][T16790] netlink: 'syz.1.11510': attribute type 11 has an invalid length. [ 1418.266500][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.266744][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.266971][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.332402][T16770] vlan2: left allmulticast mode [ 1418.332430][T16770] bond0: left allmulticast mode [ 1418.332447][T16770] bond_slave_0: left allmulticast mode [ 1418.332466][T16770] bond_slave_1: left allmulticast mode [ 1418.332487][T16770] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 1418.697785][T16797] bond5: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 1418.703747][T16797] bond5 (unregistering): Released all slaves [ 1418.752378][T16804] netlink: 'syz.4.11512': attribute type 1 has an invalid length. [ 1419.193709][T16821] ip_tables: iptables: counters copy to user failed while replacing table [ 1419.428260][T26507] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 1419.428311][T26507] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 1419.428348][T26507] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 1419.428384][T26507] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 1419.468874][T10846] Bluetooth: hci4: command 0x0405 tx timeout [ 1419.508073][T16830] FAULT_INJECTION: forcing a failure. [ 1419.508073][T16830] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1419.508114][T16830] CPU: 0 UID: 0 PID: 16830 Comm: syz.1.11520 Not tainted syzkaller #0 PREEMPT(full) [ 1419.508140][T16830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1419.508154][T16830] Call Trace: [ 1419.508163][T16830] [ 1419.508174][T16830] dump_stack_lvl+0xe8/0x150 [ 1419.508227][T16830] should_fail_ex+0x3eb/0x540 [ 1419.508263][T16830] prepare_alloc_pages+0x21e/0x5f0 [ 1419.508309][T16830] __alloc_frozen_pages_noprof+0x17c/0x410 [ 1419.508346][T16830] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1419.508408][T16830] alloc_pages_mpol+0x21e/0x390 [ 1419.508439][T16830] ___kmalloc_large_node+0x7b/0x170 [ 1419.508471][T16830] __kmalloc_large_noprof+0x1a/0x90 [ 1419.508510][T16830] hidp_connection_add+0x3bd/0x1a00 [ 1419.508659][T16830] hidp_sock_ioctl+0x403/0x650 [ 1419.508693][T16830] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 1419.508773][T16830] ? do_vfs_ioctl+0x116f/0x1530 [ 1419.508823][T16830] sock_do_ioctl+0x101/0x320 [ 1419.508861][T16830] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1419.508914][T16830] sock_ioctl+0x57a/0x7e0 [ 1419.508944][T16830] ? __fget_files+0x2a/0x420 [ 1419.508973][T16830] ? __pfx_sock_ioctl+0x10/0x10 [ 1419.509003][T16830] ? __fget_files+0x2a/0x420 [ 1419.509038][T16830] ? __fget_files+0x2a/0x420 [ 1419.509071][T16830] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1419.509106][T16830] ? __pfx_sock_ioctl+0x10/0x10 [ 1419.509136][T16830] __se_sys_ioctl+0xfc/0x170 [ 1419.509174][T16830] do_syscall_64+0x166/0x520 [ 1419.509270][T16830] ? trace_irq_disable+0x3b/0x140 [ 1419.509301][T16830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1419.509359][T16830] ? clear_bhb_loop+0x70/0xc0 [ 1419.509389][T16830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1419.509414][T16830] RIP: 0033:0x7f53325a8f19 [ 1419.509437][T16830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1419.509458][T16830] RSP: 002b:00007f533348a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1419.509483][T16830] RAX: ffffffffffffffda RBX: 00007f5332826090 RCX: 00007f53325a8f19 [ 1419.509501][T16830] RDX: 00002000000008c0 RSI: 00000000400448c8 RDI: 0000000000000005 [ 1419.509517][T16830] RBP: 00007f533348a090 R08: 0000000000000000 R09: 0000000000000000 [ 1419.509532][T16830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1419.509547][T16830] R13: 00007f5332826128 R14: 00007f5332826090 R15: 00007ffec00907a8 [ 1419.509582][T16830] [ 1421.305989][T16931] __nla_validate_parse: 6 callbacks suppressed [ 1421.306012][T16931] netlink: 96 bytes leftover after parsing attributes in process `syz.3.11532'. [ 1422.178892][ T5793] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 1422.736605][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.736896][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.737075][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.737209][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.450079][T16903] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1423.755634][T16945] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1423.870907][T16953] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11538'. [ 1424.072637][T16957] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11539'. [ 1424.086387][T16957] validate_nla: 6 callbacks suppressed [ 1424.086407][T16957] netlink: 'syz.1.11539': attribute type 1 has an invalid length. [ 1424.121876][T16967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11539'. [ 1424.150530][T16957] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1424.153811][T16957] netlink: 'syz.1.11539': attribute type 1 has an invalid length. [ 1424.193608][T16957] netlink: 'syz.1.11539': attribute type 1 has an invalid length. [ 1424.252080][T16967] bond9: (slave veth0_to_bond): making interface the new active one [ 1424.270470][T16967] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1424.320526][T16956] macvlan2: entered promiscuous mode [ 1424.320553][T16956] macvlan2: entered allmulticast mode [ 1424.321210][T16956] bond9: entered promiscuous mode [ 1424.321230][T16956] veth0_to_bond: entered promiscuous mode [ 1424.321869][T16956] bond9: entered allmulticast mode [ 1424.321887][T16956] veth0_to_bond: entered allmulticast mode [ 1424.322507][T16956] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1424.323383][T16956] bond9: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1424.323838][T16956] bond9: left allmulticast mode [ 1424.323857][T16956] veth0_to_bond: left allmulticast mode [ 1424.323901][T16956] bond9: left promiscuous mode [ 1424.323914][T16956] veth0_to_bond: left promiscuous mode [ 1424.474056][T16957] macvlan2: entered promiscuous mode [ 1424.474075][T16957] macvlan2: entered allmulticast mode [ 1424.474669][T16957] bond9: entered promiscuous mode [ 1424.474683][T16957] veth0_to_bond: entered promiscuous mode [ 1424.475090][T16957] bond9: entered allmulticast mode [ 1424.475102][T16957] veth0_to_bond: entered allmulticast mode [ 1424.475573][T16957] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1424.480736][T16957] bond9: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1424.482042][T16957] bond9: left allmulticast mode [ 1424.482086][T16957] veth0_to_bond: left allmulticast mode [ 1424.482209][T16957] bond9: left promiscuous mode [ 1424.482242][T16957] veth0_to_bond: left promiscuous mode [ 1424.643557][T16957] macvlan2: entered promiscuous mode [ 1424.643584][T16957] macvlan2: entered allmulticast mode [ 1424.644662][T16957] bond9: entered promiscuous mode [ 1424.644684][T16957] veth0_to_bond: entered promiscuous mode [ 1424.669442][T16957] bond9: entered allmulticast mode [ 1424.669466][T16957] veth0_to_bond: entered allmulticast mode [ 1424.670151][T16957] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1424.670940][T16957] bond9: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1424.671072][T16957] bond9: left allmulticast mode [ 1424.671086][T16957] veth0_to_bond: left allmulticast mode [ 1424.671119][T16957] bond9: left promiscuous mode [ 1424.671131][T16957] veth0_to_bond: left promiscuous mode [ 1424.862596][T16957] macvlan2: entered promiscuous mode [ 1424.862632][T16957] macvlan2: entered allmulticast mode [ 1424.863327][T16957] bond9: entered promiscuous mode [ 1424.863346][T16957] veth0_to_bond: entered promiscuous mode [ 1424.863873][T16957] bond9: entered allmulticast mode [ 1424.863890][T16957] veth0_to_bond: entered allmulticast mode [ 1424.864573][T16957] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1424.865511][T16957] bond9: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1424.865646][T16957] bond9: left allmulticast mode [ 1424.865661][T16957] veth0_to_bond: left allmulticast mode [ 1424.865702][T16957] bond9: left promiscuous mode [ 1424.865716][T16957] veth0_to_bond: left promiscuous mode [ 1425.027095][ T5645] Bluetooth: hci4: unexpected event 0x35 length: 3 < 6 [ 1426.191267][T17022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11556'. [ 1427.856330][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1427.856531][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1427.856679][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1427.856822][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1427.861644][T16989] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1428.139994][T17029] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11558'. [ 1428.193879][T17042] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11559'. [ 1428.313340][T17049] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11563'. [ 1428.749010][T17075] gretap1: entered promiscuous mode [ 1428.753242][T17075] batman_adv: batadv0: Adding interface: gretap1 [ 1428.753269][T17075] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 1428.753297][T17075] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1428.805623][T17068] batman_adv: batadv0: Adding interface: syz_tun [ 1428.805644][T17068] batman_adv: batadv0: The MTU of interface syz_tun is too small (127) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1428.805694][T17068] batman_adv: batadv0: Interface activated: syz_tun [ 1428.871511][T17072] tipc: Started in network mode [ 1428.871532][T17072] tipc: Node identity , cluster identity 4711 [ 1428.876059][T17072] tipc: Failed to obtain node identity [ 1428.878274][T17072] tipc: Enabling of bearer rejected, failed to enable media [ 1429.067997][T17080] batman_adv: batadv0: Adding interface: syz_tun [ 1429.068018][T17080] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1429.068050][T17080] batman_adv: batadv0: Interface activated: syz_tun [ 1429.153434][T17089] lo: left promiscuous mode [ 1429.153630][T17089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1429.228827][ T5793] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 1429.288381][T17095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11575'. [ 1429.292062][T17095] netlink: 'syz.0.11575': attribute type 1 has an invalid length. [ 1429.293572][T17095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11575'. [ 1429.742452][T17111] bond9 (unregistering): Released all slaves [ 1429.855085][T17106] netlink: 56 bytes leftover after parsing attributes in process `syz.4.11579'. [ 1429.870232][T17106] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11579'. [ 1430.084632][T17134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11587'. [ 1430.133535][T17133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11586'. [ 1430.133574][T17133] netlink: 'syz.4.11586': attribute type 30 has an invalid length. [ 1430.258797][T17141] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11590'. [ 1430.259512][T17141] netlink: 'syz.5.11590': attribute type 2 has an invalid length. [ 1430.322413][T17143] syzkaller0: left promiscuous mode [ 1430.322441][T17143] syzkaller0: left allmulticast mode [ 1430.322899][T17143] tipc: Resetting bearer [ 1431.815220][T17212] sctp: [Deprecated]: syz.4.11616 (pid 17212) Use of int in max_burst socket option deprecated. [ 1431.815220][T17212] Use struct sctp_assoc_value instead [ 1432.317734][T17242] bond9: entered promiscuous mode [ 1432.317762][T17242] bond9: entered allmulticast mode [ 1433.616703][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.616950][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.617199][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.617467][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1434.902274][T17228] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1435.155224][T17259] __nla_validate_parse: 5 callbacks suppressed [ 1435.155246][T17259] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11627'. [ 1435.194669][T17267] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11629'. [ 1435.640024][T17286] netlink: 'syz.3.11633': attribute type 10 has an invalid length. [ 1436.323009][T17333] netlink: 'syz.1.11646': attribute type 1 has an invalid length. [ 1436.334981][ T5791] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 1436.371313][T17331] veth1_vlan (unregistering): left allmulticast mode [ 1436.397078][T17337] ip_tables: iptables: counters copy to user failed while replacing table [ 1436.463059][T17331] bond0: (slave macvlan1): Releasing backup interface [ 1436.902017][ T1694] block nbd5: Possible stuck request ffff88802807e000: control (read@0,4096B). Runtime 210 seconds [ 1436.945206][T17338] dummy0: left promiscuous mode [ 1437.264066][T17362] x_tables: duplicate underflow at hook 1 [ 1437.407244][T17372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11657'. [ 1437.670539][T17386] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11662'. [ 1437.706819][T17378] IPv6: NLM_F_CREATE should be specified when creating new route [ 1437.709820][T17378] netlink: 80 bytes leftover after parsing attributes in process `syz.4.11658'. [ 1437.738754][T17389] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11663'. [ 1437.795129][T17389] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 1438.285885][T17396] netlink: 92 bytes leftover after parsing attributes in process `syz.5.11665'. [ 1438.345502][T17414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11670'. [ 1438.433876][T17416] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.11672'. [ 1438.554276][T17419] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.11672'. [ 1438.666311][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.666536][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.666765][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.806526][T17427] netlink: 'syz.0.11674': attribute type 6 has an invalid length. [ 1438.852314][T17435] bridge0: port 3(veth1_to_bridge) entered blocking state [ 1438.852416][T17435] bridge0: port 3(veth1_to_bridge) entered disabled state [ 1438.852621][T17435] veth1_to_bridge: entered allmulticast mode [ 1438.855572][T17435] veth1_to_bridge: entered promiscuous mode [ 1438.889937][T17435] netlink: 'syz.1.11677': attribute type 1 has an invalid length. [ 1438.913367][T17437] nbd: illegal input index -8454144 [ 1439.051355][T17443] nbd8: detected capacity change from 0 to 274877906944 [ 1439.144622][T17433] IPVS: Scheduler module ip_vs_sip not found [ 1439.147833][ T5645] block nbd8: Receive control failed (result -104) [ 1439.305533][T17459] netlink: 'syz.3.11686': attribute type 1 has an invalid length. [ 1439.478324][T17451] macsec2: entered promiscuous mode [ 1439.478353][T17451] bridge0: entered promiscuous mode [ 1439.478554][T17451] macsec2: entered allmulticast mode [ 1439.480212][T17451] bridge0: entered allmulticast mode [ 1439.484148][T17451] bridge0: port 3(macsec2) entered blocking state [ 1439.485116][T17451] bridge0: port 3(macsec2) entered disabled state [ 1439.584523][T17451] bridge0: left allmulticast mode [ 1439.684506][ T5796] bridge0: left promiscuous mode [ 1439.781831][T17479] C: left promiscuous mode [ 1439.801969][T17479] tunl0: left promiscuous mode [ 1439.812661][T17479] gre0: left promiscuous mode [ 1439.822478][T17479] 0ªX¹¦Dö»: left promiscuous mode [ 1439.826883][T17479] erspan0: left promiscuous mode [ 1439.841519][T17479] ip_vti0: left promiscuous mode [ 1439.863309][T17479] 8021q: adding VLAN 0 to HW filter on device team0 [ 1439.894369][T17479] wg2: left promiscuous mode [ 1439.943146][T17479] mac80211_hwsim hwsim81 wlan1: left promiscuous mode [ 1439.955318][T17479] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1439.980015][T17479] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1440.011643][T17479] bond5: left promiscuous mode [ 1440.012385][T17479] geneve2: left promiscuous mode [ 1440.015927][T17479] gretap1: left promiscuous mode [ 1440.038727][T17479] bond6: left promiscuous mode [ 1440.059629][T17479] vlan1: left promiscuous mode [ 1440.059656][T17479] hsr0: left promiscuous mode [ 1440.062317][T17479] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1440.065946][T17479] vlan3: left promiscuous mode [ 1440.065970][T17479] bridge0: left promiscuous mode [ 1440.095996][T17479] xfrm2: left promiscuous mode [ 1440.112822][T17479] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1440.116938][T17479] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1440.131375][T17479] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1440.135276][T17479] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1440.152860][T17479] bond8: left promiscuous mode [ 1440.154358][T17479] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 1440.163260][ T9444] bridge0: port 1(bridge_slave_0) entered blocking state [ 1440.163534][ T9444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1440.234597][T26507] bond4: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 1440.234943][T26507] bond4: (slave veth3): making interface the new active one [ 1440.266900][T26507] bond4: active interface up! [ 1440.367865][T17493] __nla_validate_parse: 3 callbacks suppressed [ 1440.367887][T17493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11694'. [ 1440.523826][T26508] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1440.529524][T26508] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1440.583389][T17498] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11695'. [ 1441.683163][T17564] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11714'. [ 1441.793930][T17571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11719'. [ 1441.936418][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1441.936687][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1442.091064][T17592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11724'. [ 1442.266316][T17603] ip_tables: iptables: counters copy to user failed while replacing table [ 1442.394717][T17610] netlink: 'syz.0.11729': attribute type 5 has an invalid length. [ 1442.394753][T17610] netlink: 140 bytes leftover after parsing attributes in process `syz.0.11729'. [ 1442.530982][T17607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11728'. [ 1442.614795][T17615] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11730'. [ 1442.905958][T17638] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11735'. [ 1442.920984][T17638] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input14 [ 1443.114781][T17643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11737'. [ 1443.114807][T17643] netlink: 'syz.1.11737': attribute type 1 has an invalid length. [ 1443.280092][T17651] netlink: 'syz.1.11743': attribute type 11 has an invalid length. [ 1443.590348][T17676] netlink: 'syz.1.11747': attribute type 1 has an invalid length. [ 1443.590373][T17676] netlink: 'syz.1.11747': attribute type 2 has an invalid length. [ 1443.622446][T17679] netlink: 'syz.1.11747': attribute type 1 has an invalid length. [ 1443.622470][T17679] netlink: 'syz.1.11747': attribute type 2 has an invalid length. [ 1443.912425][T17689] team0 (unregistering): Port device team_slave_0 removed [ 1443.952402][ T5794] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 1443.997364][T17689] team0 (unregistering): Port device team_slave_1 removed [ 1444.039355][T26928] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1444.039407][T26928] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1444.039445][T26928] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1444.050638][T26928] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1444.246498][T17700] netlink: 'syz.3.11755': attribute type 6 has an invalid length. [ 1444.471511][T17710] xt_hashlimit: size too large, truncated to 1048576 [ 1444.816952][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1444.896635][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1445.073474][T17725] xt_HMARK: spi-set and port-set can't be combined [ 1445.132583][T10139] bond0: (slave vlan2): link status definitely down, disabling slave [ 1445.133067][T10139] bond0: (slave macvlan1): link status definitely down, disabling slave [ 1445.137210][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1445.137928][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1445.138562][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1445.287376][T17728] netlink: 'syz.5.11765': attribute type 1 has an invalid length. [ 1445.392355][T17738] netlink: zone id is out of range [ 1445.392375][T17738] netlink: del zone limit has 4 unknown bytes [ 1445.655340][T17741] Cannot find map_set index 135 as target [ 1445.929457][T17761] __nla_validate_parse: 7 callbacks suppressed [ 1445.929480][T17761] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11776'. [ 1446.075332][T17766] x_tables: unsorted entry at hook 3 [ 1446.223576][T17776] netlink: 'syz.5.11781': attribute type 1 has an invalid length. [ 1446.297914][T17776] bond2: option mode: invalid value (10) [ 1446.302387][T17779] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11781'. [ 1446.305586][T17776] bond2 (unregistering): Released all slaves [ 1446.875696][T17803] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1447.119764][T17818] bond10: entered promiscuous mode [ 1447.154022][T17823] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11794'. [ 1447.188788][T17825] netlink: 292 bytes leftover after parsing attributes in process `syz.3.11795'. [ 1447.188822][T17825] netlink: 292 bytes leftover after parsing attributes in process `syz.3.11795'. [ 1447.670590][T17849] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11800'. [ 1448.193221][T17873] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11807'. [ 1448.407824][T17885] ip_tables: iptables: counters copy to user failed while replacing table [ 1448.528066][T17888] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input15 [ 1448.930250][T17910] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11819'. [ 1449.010809][T17915] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11822'. [ 1449.057062][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1449.111733][T17918] syzkaller0: entered promiscuous mode [ 1449.111761][T17918] syzkaller0: entered allmulticast mode [ 1449.113581][T17920] tipc: Resetting bearer [ 1449.113623][T17920] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1449.152251][T17922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11824'. [ 1449.180993][T17920] tipc: Disabling bearer [ 1449.193158][T17920] batman_adv: batadv0: Removing interface: syzkaller0 [ 1449.272984][T17920] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 1449.616330][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1449.616582][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1449.616869][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1449.854094][T17953] team0: No ports can be present during mode change [ 1449.887687][T17953] xt_TCPMSS: Only works on TCP SYN packets [ 1450.700104][T18003] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1450.978614][ T5796] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 1451.048168][T18025] __nla_validate_parse: 5 callbacks suppressed [ 1451.048190][T18025] netlink: 76 bytes leftover after parsing attributes in process `syz.4.11851'. [ 1451.048211][T18025] netlink: 76 bytes leftover after parsing attributes in process `syz.4.11851'. [ 1451.113467][T18020] ip_tables: iptables: counters copy to user failed while replacing table [ 1451.114573][T18020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11849'. [ 1451.163939][T18031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11853'. [ 1451.613054][T18048] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1451.752077][T18058] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11857'. [ 1451.774070][T18054] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11859'. [ 1451.774103][T18054] netlink: 43 bytes leftover after parsing attributes in process `syz.1.11859'. [ 1451.774154][T18054] netlink: 'syz.1.11859': attribute type 5 has an invalid length. [ 1451.774170][T18054] netlink: 43 bytes leftover after parsing attributes in process `syz.1.11859'. [ 1451.857779][ T5645] Bluetooth: hci4: command 0x0405 tx timeout [ 1451.859832][T18060] batman_adv: batadv0: Adding interface: syzkaller0 [ 1451.859852][T18060] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1451.859885][T18060] batman_adv: batadv0: Interface activated: syzkaller0 [ 1451.865754][T18058] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input16 [ 1451.974382][T18060] bond10 (unregistering): Released all slaves [ 1452.099891][T18064] bond11: entered promiscuous mode [ 1452.099956][T18064] bond11: entered allmulticast mode [ 1452.100426][T18064] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1452.143168][T18073] ip_tables: iptables: counters copy to user failed while replacing table [ 1452.171635][T18059] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1452.239975][T18059] batman_adv: batadv0: Removing interface: syzkaller0 [ 1452.481605][T18084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11864'. [ 1452.484849][T18085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11865'. [ 1452.571934][T18088] ip6gre2: entered allmulticast mode [ 1452.690124][T18089] tc mirred: Loop (syzkaller1:ingress --> syzkaller1:ingress) [ 1452.690227][T18089] 0: reclassify loop, rule prio 0, protocol 03 [ 1452.756586][T18096] xt_l2tp: invalid flags combination: 8 [ 1453.201818][T18116] netlink: 'syz.3.11873': attribute type 21 has an invalid length. [ 1453.331382][T18119] bridge_slave_1: left allmulticast mode [ 1453.331415][T18119] bridge_slave_1: left promiscuous mode [ 1453.331715][T18119] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.371630][T18119] bridge_slave_0: left allmulticast mode [ 1453.371662][T18119] bridge_slave_0: left promiscuous mode [ 1453.372028][T18119] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.520792][T18124] veth0: entered promiscuous mode [ 1453.534325][T18120] netlink: 'syz.0.11875': attribute type 1 has an invalid length. [ 1453.539732][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1453.589038][T18126] netlink: 'syz.1.11876': attribute type 8 has an invalid length. [ 1453.653741][T18122] veth0: left promiscuous mode [ 1454.182793][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1457.296340][ C0] net_ratelimit: 5 callbacks suppressed [ 1457.296361][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1457.296547][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.028749][ T5794] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 1460.506408][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1460.506632][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1460.506830][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.419220][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1464.976446][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.976675][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.976881][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1465.070438][ T5793] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 1466.978156][ T1694] block nbd5: Possible stuck request ffff88802807e000: control (read@0,4096B). Runtime 240 seconds [ 1468.816419][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1468.816675][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1469.549500][ T2086] block nbd8: Possible stuck request ffff8880281ee000: control (read@0,4096B). Runtime 30 seconds [ 1470.176782][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1471.456669][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1472.016322][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1472.016513][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1472.016717][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1472.107187][ T5796] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 1476.506425][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.506613][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.506817][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1478.225646][T18169] __nla_validate_parse: 8 callbacks suppressed [ 1478.225673][T18169] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.11882'. [ 1478.290863][T18175] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11884'. [ 1478.310045][T18176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11883'. [ 1478.311649][T18176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11883'. [ 1478.311735][T18176] C: Caught tx_queue_len zero misconfig [ 1478.614393][T18191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11892'. [ 1478.740705][T18202] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11890'. [ 1478.782428][T18205] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11895'. [ 1478.790610][T18205] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input17 [ 1479.148832][ T5793] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 1479.525428][T18237] syzkaller1: entered promiscuous mode [ 1479.525457][T18237] syzkaller1: entered allmulticast mode [ 1479.558567][T18237] netlink: 'syz.4.11902': attribute type 1 has an invalid length. [ 1479.792285][T18244] netlink: 'syz.1.11904': attribute type 1 has an invalid length. [ 1479.814600][T18248] ip_tables: iptables: counters copy to user failed while replacing table [ 1479.981200][T18249] bond12: (slave gretap2): making interface the new active one [ 1479.981736][T18249] bond12: (slave gretap2): Enslaving as an active interface with an up link [ 1479.985384][T18246] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1480.133268][T18257] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11905'. [ 1480.253024][T18267] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11909'. [ 1480.336403][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1480.336622][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1480.587078][T18287] bond10: entered allmulticast mode [ 1480.587598][T18287] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1481.577103][T18188] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1481.874975][T18297] xt_HMARK: spi-set and port-set can't be combined [ 1481.898781][T18292] NFSD: Failed to start, no listeners configured. [ 1481.928701][T18301] x_tables: unsorted entry at hook 2 [ 1481.952759][T18297] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11916'. [ 1482.475411][T18294] NFSD: Failed to start, no listeners configured. [ 1482.511683][T18332] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input18 [ 1483.101427][T18353] netlink: 'syz.5.11929': attribute type 1 has an invalid length. [ 1483.101454][T18353] netlink: 'syz.5.11929': attribute type 268 has an invalid length. [ 1483.343648][T18365] __nla_validate_parse: 7 callbacks suppressed [ 1483.343670][T18365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11931'. [ 1483.536512][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1483.536760][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1483.537034][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1483.794333][T18394] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1483.862224][T18397] tipc: Enabling of bearer rejected, failed to enable media [ 1483.912521][T18394] xt_hashlimit: size too large, truncated to 1048576 [ 1484.070475][T18406] IPv6: NLM_F_CREATE should be specified when creating new route [ 1484.104485][T18405] netlink: 168 bytes leftover after parsing attributes in process `syz.3.11935'. [ 1484.105808][T18412] netlink: 168 bytes leftover after parsing attributes in process `syz.3.11935'. [ 1484.235044][T18414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11941'. [ 1484.284203][T18415] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11940'. [ 1484.327606][T18423] netlink: 'syz.5.11942': attribute type 5 has an invalid length. [ 1484.474511][T18431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11943'. [ 1484.564351][ T30] audit: type=1107 audit(1794325710.518:15): pid=18432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1484.603062][T18433] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11944'. [ 1484.915738][T18446] tipc: Enabled bearer , priority 0 [ 1484.924071][T18446] syzkaller0: entered promiscuous mode [ 1484.924096][T18446] syzkaller0: entered allmulticast mode [ 1484.941905][T18446] tipc: Resetting bearer [ 1484.952331][T18445] tipc: Resetting bearer [ 1484.994475][T18445] tipc: Disabling bearer [ 1485.278096][T18466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11955'. [ 1485.529697][T18482] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1485.555920][T18482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11959'. [ 1485.578173][T18484] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1485.928245][T18497] netlink: 'syz.0.11962': attribute type 13 has an invalid length. [ 1486.188411][ T5793] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 1486.549750][T18520] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11968'. [ 1486.795028][T18531] netlink: 'syz.0.11974': attribute type 1 has an invalid length. [ 1486.884302][T18531] bond5: (slave gretap1): making interface the new active one [ 1486.884818][T18531] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 1487.633499][T18572] bond11: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1487.674717][T18572] bond11: (slave lo): Enslaving as an active interface with an up link [ 1487.675006][T18572] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1488.016556][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1488.016824][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1488.530762][T18618] __nla_validate_parse: 5 callbacks suppressed [ 1488.530788][T18618] netlink: 56 bytes leftover after parsing attributes in process `syz.4.11998'. [ 1488.983925][T18638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12006'. [ 1489.039436][T18640] netlink: 56 bytes leftover after parsing attributes in process `syz.1.12006'. [ 1489.563168][T18660] netlink: 'syz.5.12014': attribute type 1 has an invalid length. [ 1489.609061][T18666] netlink: ct family unspecified [ 1489.758491][T18672] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.12018'. [ 1489.839444][T18667] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12014'. [ 1490.024385][ T5745] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 1490.136763][T18678] netlink: 'syz.0.12020': attribute type 1 has an invalid length. [ 1490.199593][T10846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1490.215974][T10846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1490.229229][T10846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1490.252598][T10846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1490.263938][T10846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1490.335080][T18684] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12022'. [ 1490.381393][T18678] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1490.453790][T18696] netlink: 'syz.0.12020': attribute type 10 has an invalid length. [ 1490.453816][T18696] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12020'. [ 1490.533895][T18686] bond6: (slave veth7): Enslaving as an active interface with a down link [ 1490.731609][T18687] bond6: (slave dummy0): making interface the new active one [ 1490.738687][T18687] dummy0: entered promiscuous mode [ 1490.755919][T18687] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 1490.805675][T18690] bond11: option mode: unable to set because the bond device has slaves [ 1490.830786][T18696] bond6: (slave dummy0): Releasing active interface [ 1490.869280][T18699] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1491.210226][T18724] netlink: 'syz.4.12028': attribute type 1 has an invalid length. [ 1491.216369][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1491.216588][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1491.216787][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1491.371634][T18724] bond12: option mode: invalid value (11) [ 1491.400583][T18724] bond12 (unregistering): Released all slaves [ 1491.416749][T18730] netlink: 'syz.4.12028': attribute type 10 has an invalid length. [ 1491.416773][T18730] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12028'. [ 1491.623861][T18732] bond7 (unregistering): Released all slaves [ 1491.834975][T18741] netlink: 76 bytes leftover after parsing attributes in process `syz.5.12030'. [ 1491.923982][T18681] tunl0 speed is unknown, defaulting to 1000 [ 1492.346330][ T5645] Bluetooth: hci1: command tx timeout [ 1492.394332][T18681] rxe_eth0 speed is unknown, defaulting to 1000 [ 1492.657989][T18771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1492.678343][T18771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1492.716799][T18681] wg0 speed is unknown, defaulting to 1000 [ 1492.790948][T18773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1492.812829][T18773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1492.872854][T18776] netlink: 'syz.0.12040': attribute type 1 has an invalid length. [ 1492.959691][T18779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12040'. [ 1493.005751][T18776] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1493.531171][T18681] bridge0: port 1(bridge_slave_0) entered blocking state [ 1493.531483][T18681] bridge0: port 1(bridge_slave_0) entered disabled state [ 1493.531665][T18681] bridge_slave_0: entered allmulticast mode [ 1493.533450][T18681] bridge_slave_0: entered promiscuous mode [ 1493.543280][T18681] bridge0: port 2(bridge_slave_1) entered blocking state [ 1493.543458][T18681] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.543944][T18681] bridge_slave_1: entered allmulticast mode [ 1493.545937][T18681] bridge_slave_1: entered promiscuous mode [ 1493.709873][T18681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1493.713761][T18681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1493.774328][T18681] team0: Port device team_slave_0 added [ 1493.787658][T18681] team0: Port device team_slave_1 added [ 1493.829285][T18681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1493.829313][T18681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1493.829349][T18681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1493.833574][T18681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1493.833592][T18681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1493.833620][T18681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1494.034319][T18681] hsr_slave_0: entered promiscuous mode [ 1494.035402][T18681] hsr_slave_1: entered promiscuous mode [ 1494.052667][T18681] debugfs: 'hsr0' already exists in 'hsr' [ 1494.052689][T18681] Cannot create hsr debugfs directory [ 1494.196972][T18814] xt_ecn: cannot match TCP bits for non-tcp packets [ 1494.241703][T18818] netlink: 116 bytes leftover after parsing attributes in process `syz.5.12049'. [ 1494.263972][T18818] netlink: 'syz.5.12049': attribute type 1 has an invalid length. [ 1494.416456][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1494.416667][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1494.428289][ T5645] Bluetooth: hci1: command tx timeout [ 1494.505853][T18825] netlink: 108 bytes leftover after parsing attributes in process `syz.3.12052'. [ 1494.542717][T18828] netlink: ct family unspecified [ 1494.724348][T18681] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1494.724390][T18681] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1494.724420][T18681] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1494.755001][T18836] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1494.901173][T18844] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12058'. [ 1494.985704][T18838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12057'. [ 1495.135869][T18681] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1495.135910][T18681] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1495.135939][T18681] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1495.190085][T18853] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12057'. [ 1495.399702][T18859] netlink: 52 bytes leftover after parsing attributes in process `syz.5.12063'. [ 1495.399767][T18859] netlink: 52 bytes leftover after parsing attributes in process `syz.5.12063'. [ 1495.399795][T18859] netlink: 52 bytes leftover after parsing attributes in process `syz.5.12063'. [ 1495.552610][T18861] ip_tables: iptables: counters copy to user failed while replacing table [ 1495.581970][T18681] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1495.582012][T18681] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1495.582042][T18681] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1495.582774][T18861] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12062'. [ 1495.681209][T18865] macvtap0: entered allmulticast mode [ 1495.681236][T18865] veth0_macvtap: entered allmulticast mode [ 1495.834012][T18681] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1495.834053][T18681] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1495.834083][T18681] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1495.844766][T18870] netlink: 45 bytes leftover after parsing attributes in process `syz.0.12066'. [ 1496.148818][T18884] syzkaller0: Caught tx_queue_len zero misconfig [ 1496.222216][T18883] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 1496.244850][T18886] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1496.423089][T18894] netlink: 'syz.4.12074': attribute type 5 has an invalid length. [ 1496.508227][ T5645] Bluetooth: hci1: command tx timeout [ 1496.541400][T18681] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1496.576342][T18681] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1496.643182][T18681] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1496.672478][T18681] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1496.688191][T18681] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1496.715848][T18681] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1496.726144][T18681] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1496.755736][T18681] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1496.799930][T18910] bond0: entered promiscuous mode [ 1496.799965][T18910] bond_slave_0: entered promiscuous mode [ 1496.800325][T18910] bond_slave_1: entered promiscuous mode [ 1496.800545][T18910] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1496.802514][T18910] batadv0: entered promiscuous mode [ 1496.805222][T18910] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1496.851945][T18910] bond0: left promiscuous mode [ 1496.851968][T18910] bond_slave_0: left promiscuous mode [ 1496.852205][T18910] bond_slave_1: left promiscuous mode [ 1496.852407][T18910] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 1496.882479][T18910] batadv0: left promiscuous mode [ 1497.062019][ T1694] block nbd5: Possible stuck request ffff88802807e000: control (read@0,4096B). Runtime 270 seconds [ 1497.063411][ T3644] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 1497.160743][T18932] netlink: set zone limit has 4 unknown bytes [ 1497.293971][T18681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1497.337568][T18681] 8021q: adding VLAN 0 to HW filter on device team0 [ 1497.371752][T26929] bridge0: port 1(bridge_slave_0) entered blocking state [ 1497.371895][T26929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1497.413020][T10136] bridge0: port 2(bridge_slave_1) entered blocking state [ 1497.413131][T10136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1497.616525][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1497.616754][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1497.616964][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1497.771912][T18955] sctp: [Deprecated]: syz.0.12091 (pid 18955) Use of int in maxseg socket option. [ 1497.771912][T18955] Use struct sctp_assoc_value instead [ 1497.771981][T18956] sctp: [Deprecated]: syz.0.12091 (pid 18956) Use of int in maxseg socket option. [ 1497.771981][T18956] Use struct sctp_assoc_value instead [ 1497.925422][T18968] netlink: 'syz.0.12093': attribute type 21 has an invalid length. [ 1497.925491][T18968] netlink: 'syz.0.12093': attribute type 6 has an invalid length. [ 1497.936611][T18969] netlink: 'syz.0.12093': attribute type 21 has an invalid length. [ 1497.936808][T18969] netlink: 'syz.0.12093': attribute type 6 has an invalid length. [ 1497.970538][T18968] netlink: 'syz.0.12093': attribute type 2 has an invalid length. [ 1497.970564][T18968] netlink: 'syz.0.12093': attribute type 1 has an invalid length. [ 1498.588492][ T5645] Bluetooth: hci1: command tx timeout [ 1499.368998][T19026] __nla_validate_parse: 84 callbacks suppressed [ 1499.369026][T19026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12103'. [ 1499.369046][T19026] netlink: 5740 bytes leftover after parsing attributes in process `syz.4.12103'. [ 1499.369121][T19026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12103'. [ 1499.374302][T18681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1499.541404][T19037] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1499.659502][T18681] veth0_vlan: entered promiscuous mode [ 1499.675305][ T2086] block nbd8: Possible stuck request ffff8880281ee000: control (read@0,4096B). Runtime 60 seconds [ 1499.713321][T18681] veth1_vlan: entered promiscuous mode [ 1499.791102][T19043] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12109'. [ 1499.795607][T19044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1499.802273][T19043] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12109'. [ 1499.890561][T18681] veth0_macvtap: entered promiscuous mode [ 1499.951556][T18681] veth1_macvtap: entered promiscuous mode [ 1499.978747][T18681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1500.014236][T18681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1500.247037][T10136] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.247194][T10136] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.247233][T10136] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.283015][T26929] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.450267][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1500.450293][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1500.549819][T26928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1500.549845][T26928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1500.552234][T19073] xt_NETMAP: bad rangesize 37. [ 1500.700676][T19082] netlink: 256 bytes leftover after parsing attributes in process `syz.5.12117'. [ 1501.165227][T10846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1501.181812][T10846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1501.194289][T10846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1501.205942][T10846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1501.215114][T10846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1501.389188][T19096] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.12121'. [ 1501.389294][T19096] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.12121'. [ 1501.724620][ T7962] batman_adv: batadv0: Interface deactivated: syz_tun [ 1501.841772][ T7962] batman_adv: batadv0: Removing interface: syz_tun [ 1502.106435][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1502.106706][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1502.106948][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1502.347204][T19093] tunl0 speed is unknown, defaulting to 1000 [ 1502.443657][T19126] netlink: 52 bytes leftover after parsing attributes in process `syz.5.12127'. [ 1502.445483][T19126] netlink: 52 bytes leftover after parsing attributes in process `syz.5.12127'. [ 1502.545776][T19128] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1502.643642][T19093] rxe_eth0 speed is unknown, defaulting to 1000 [ 1502.829267][ T146] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 1503.001915][T19093] wg0 speed is unknown, defaulting to 1000 [ 1503.262360][T19157] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1503.296808][ T5645] Bluetooth: hci2: command tx timeout [ 1503.382792][T19159] xt_l2tp: unknown flags: 43 [ 1503.457006][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1503.750062][T19175] netlink: 'syz.5.12143': attribute type 10 has an invalid length. [ 1503.788449][T19175] veth0_macvtap: left allmulticast mode [ 1503.788480][T19175] veth0_macvtap: left promiscuous mode [ 1503.815369][T19175] macvtap0: left allmulticast mode [ 1503.945667][T19192] xt_TCPMSS: Only works on TCP SYN packets [ 1503.979474][T19184] wireguard0: entered promiscuous mode [ 1504.334261][T19093] bridge0: port 1(bridge_slave_0) entered blocking state [ 1504.334473][T19093] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.334601][T19093] bridge_slave_0: entered allmulticast mode [ 1504.345968][T19093] bridge_slave_0: entered promiscuous mode [ 1504.372930][T19093] bridge0: port 2(bridge_slave_1) entered blocking state [ 1504.373118][T19093] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.373270][T19093] bridge_slave_1: entered allmulticast mode [ 1504.375120][T19093] bridge_slave_1: entered promiscuous mode [ 1504.429138][T19212] __nla_validate_parse: 4 callbacks suppressed [ 1504.429163][T19212] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12151'. [ 1504.433585][T19211] bridge_slave_0: left allmulticast mode [ 1504.433612][T19211] bridge_slave_0: left promiscuous mode [ 1504.433815][T19211] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.486456][T19211] bridge_slave_1: left allmulticast mode [ 1504.486484][T19211] bridge_slave_1: left promiscuous mode [ 1504.486687][T19211] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.493324][T19211] bond0: (slave bond_slave_0): Releasing backup interface [ 1504.532990][T19211] bond0: (slave bond_slave_1): Releasing backup interface [ 1504.561781][T19211] team0: Port device team_slave_0 removed [ 1504.575047][T19211] team0: Port device team_slave_1 removed [ 1504.591176][T19211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1504.591203][T19211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1504.614305][T19211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1504.614330][T19211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1504.631628][T19211] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1504.769265][T19226] xt_hashlimit: size too large, truncated to 1048576 [ 1504.837655][T19223] tipc: Enabling of bearer rejected, media not registered [ 1504.902458][T19211] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1504.947374][T19093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1505.117977][T19211] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1505.125932][T19093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1505.230012][T19211] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1505.260278][T19231] tap0: tun_chr_ioctl cmd 1074025672 [ 1505.260309][T19231] tap0: ignored: set checksum disabled [ 1505.378781][ T5645] Bluetooth: hci2: command tx timeout [ 1505.411838][T19093] team0: Port device team_slave_0 added [ 1505.443513][T19093] team0: Port device team_slave_1 added [ 1505.543821][T19093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1505.543843][T19093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1505.543873][T19093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1505.567162][T19093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1505.567233][T19093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1505.567322][T19093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1505.846874][T19093] hsr_slave_0: entered promiscuous mode [ 1505.850918][T19093] hsr_slave_1: entered promiscuous mode [ 1505.851857][T19093] debugfs: 'hsr0' already exists in 'hsr' [ 1505.851876][T19093] Cannot create hsr debugfs directory [ 1506.017887][T19252] netlink: 872 bytes leftover after parsing attributes in process `syz.5.12160'. [ 1506.193878][T19253] netlink: 52 bytes leftover after parsing attributes in process `syz.0.12161'. [ 1506.193902][T19253] tipc: Invalid UDP bearer configuration [ 1506.193977][T19253] tipc: Enabling of bearer rejected, failed to enable media [ 1506.313884][T19264] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12163'. [ 1506.314476][T19260] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1506.314515][T19260] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.656711][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1506.695632][T19270] tipc: Resetting bearer [ 1506.701779][T19270] tipc: Resetting bearer [ 1506.882758][T19270] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1506.985806][T19273] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 1507.000417][T19273] batman_adv: batadv0: Adding interface: gretap4 [ 1507.000445][T19273] batman_adv: batadv0: Interface activated: gretap4 [ 1507.001479][T19277] syz_tun: entered allmulticast mode [ 1507.253291][T19093] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1507.253334][T19093] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1507.313177][T19300] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12171'. [ 1507.322126][T19274] syz_tun: left allmulticast mode [ 1507.334962][T19300] netlink: 'syz.0.12171': attribute type 3 has an invalid length. [ 1507.357473][T19300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12171'. [ 1507.457085][ T5645] Bluetooth: hci2: command tx timeout [ 1507.642718][T19093] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1507.642758][T19093] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1507.680124][T19310] netlink: 'syz.0.12174': attribute type 1 has an invalid length. [ 1507.681780][ T5295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1507.766692][T19311] netlink: 'syz.5.12173': attribute type 1 has an invalid length. [ 1507.768474][T19310] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1507.775178][T19319] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12176'. [ 1507.838523][T19312] net_ratelimit: 3 callbacks suppressed [ 1507.838544][T19312] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1507.861616][T19311] bond3: entered promiscuous mode [ 1507.862136][T19311] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1507.978830][T19093] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1507.978869][T19093] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1508.100785][T19320] bond3: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1508.100815][T19320] bond3: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 1508.111913][T19320] bond3: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 1508.245681][T19332] nbd: must specify at least one socket [ 1508.372987][T19093] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1508.373037][T19093] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1508.580373][ T3643] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 1508.729002][T19358] netlink: 'syz.1.12184': attribute type 2 has an invalid length. [ 1508.824545][T19093] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1508.851104][T19093] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1508.858220][T19093] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1508.885533][T19093] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1508.894890][T19093] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1508.925119][T19093] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1508.934160][T19093] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1508.977304][T19093] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1509.167464][T19093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1509.205869][T19093] 8021q: adding VLAN 0 to HW filter on device team0 [ 1509.240976][T26928] bridge0: port 1(bridge_slave_0) entered blocking state [ 1509.241073][T26928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1509.262195][T26928] bridge0: port 2(bridge_slave_1) entered blocking state [ 1509.262517][T26928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1509.295153][T19373] hsr0: entered allmulticast mode [ 1509.295180][T19373] hsr_slave_0: entered allmulticast mode [ 1509.373073][T19373] hsr0: entered promiscuous mode [ 1509.397396][T19373] netlink: 'syz.5.12187': attribute type 11 has an invalid length. [ 1509.418375][T19373] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12187'. [ 1509.419127][T19375] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1509.419148][T19375] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1509.425254][T19373] hsr_slave_0: left promiscuous mode [ 1509.438372][T19381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12190'. [ 1509.503351][T19373] hsr0 (unregistering): left allmulticast mode [ 1509.503402][T19373] hsr0 (unregistering): left promiscuous mode [ 1509.537274][ T5645] Bluetooth: hci2: command tx timeout [ 1509.720952][T19395] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12191'. [ 1510.426497][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.426724][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.770157][T19441] netlink: 260 bytes leftover after parsing attributes in process `syz.5.12200'. [ 1510.804414][T19441] netlink: 52 bytes leftover after parsing attributes in process `syz.5.12200'. [ 1510.804445][T19441] netlink: 52 bytes leftover after parsing attributes in process `syz.5.12200'. [ 1510.804462][T19441] netlink: 52 bytes leftover after parsing attributes in process `syz.5.12200'. [ 1510.851107][T19441] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12200'. [ 1511.093981][T19093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1511.181888][T19453] netlink: 'syz.0.12202': attribute type 8 has an invalid length. [ 1511.181912][T19453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12202'. [ 1511.181945][T19453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12202'. [ 1511.235209][T19456] netlink: 'syz.0.12202': attribute type 8 has an invalid length. [ 1511.235233][T19456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12202'. [ 1511.623909][T19093] veth0_vlan: entered promiscuous mode [ 1511.646174][T19093] veth1_vlan: entered promiscuous mode [ 1511.727034][T19093] veth0_macvtap: entered promiscuous mode [ 1511.742698][T19093] veth1_macvtap: entered promiscuous mode [ 1511.769787][T19093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1511.774920][T19093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1511.893264][T10136] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.917052][ T3644] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.918115][ T3644] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.932109][T10136] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.041051][T10371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1512.041215][T10371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1512.163678][T10371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1512.163704][T10371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1512.210772][T19488] syzkaller0: entered promiscuous mode [ 1512.210796][T19488] syzkaller0: entered allmulticast mode [ 1512.448160][T19500] ip_tables: iptables: counters copy to user failed while replacing table [ 1513.092371][T19524] ip_tables: iptables: counters copy to user failed while replacing table [ 1513.173945][T10846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1513.192252][T10846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1513.201166][T10846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1513.219403][T10846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1513.224243][T10846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1513.527486][T19537] netlink: 'syz.1.12225': attribute type 1 has an invalid length. [ 1513.584474][T19537] syzkaller1: entered promiscuous mode [ 1513.584500][T19537] syzkaller1: entered allmulticast mode [ 1513.616410][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1513.616644][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1513.616828][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1513.715024][ T3644] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 1513.762989][T19548] bond0: (slave ip6tnl0): refused to change device type [ 1513.978444][ T7482] batman_adv: batadv0: Interface deactivated: syz_tun [ 1514.155168][ T7482] syz_tun (unregistering): left allmulticast mode [ 1514.172443][ T7482] batman_adv: batadv0: Removing interface: syz_tun [ 1514.253404][T19555] bond0: (slave ip6tnl0): refused to change device type [ 1514.468690][T19581] __nla_validate_parse: 5 callbacks suppressed [ 1514.468712][T19581] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12231'. [ 1514.468729][T19581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12231'. [ 1514.793979][T19526] tunl0 speed is unknown, defaulting to 1000 [ 1514.957365][T19597] ipt_ECN: cannot use operation on non-tcp rule [ 1515.126751][T19606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12238'. [ 1515.185601][T19611] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12240'. [ 1515.185646][T19611] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12240'. [ 1515.296358][T10846] Bluetooth: hci5: command tx timeout [ 1515.373933][T19526] rxe_eth0 speed is unknown, defaulting to 1000 [ 1516.039490][T19526] wg0 speed is unknown, defaulting to 1000 [ 1516.189663][T19644] tipc: Started in network mode [ 1516.189732][T19644] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 1516.189913][T19644] tipc: Enabled bearer , priority 0 [ 1516.194077][T19645] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12252'. [ 1516.273466][T19644] tipc: Disabling bearer [ 1516.495310][T19654] bond9 (unregistering): Released all slaves [ 1517.114679][T19698] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12261'. [ 1517.376706][T10846] Bluetooth: hci5: command tx timeout [ 1517.429308][T19526] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.430524][T19526] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.430687][T19526] bridge_slave_0: entered allmulticast mode [ 1517.433448][T19713] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12263'. [ 1517.434776][T19526] bridge_slave_0: entered promiscuous mode [ 1517.452647][T19526] bridge0: port 2(bridge_slave_1) entered blocking state [ 1517.454130][T19526] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.454610][T19526] bridge_slave_1: entered allmulticast mode [ 1517.459924][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1517.460175][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1517.460398][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1517.472790][T19526] bridge_slave_1: entered promiscuous mode [ 1517.476610][T19714] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12263'. [ 1517.569381][T19713] ip_tables: iptables: counters copy to user failed while replacing table [ 1517.670805][T19526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1517.674299][T19526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1517.734034][T19526] team0: Port device team_slave_0 added [ 1517.744066][T19526] team0: Port device team_slave_1 added [ 1517.773068][ T5000] udevd[5000]: worker [9448] /devices/virtual/block/nbd8 is taking a long time [ 1517.801110][T19526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1517.801131][T19526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1517.801157][T19526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1517.803568][T19526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1517.803584][T19526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1517.803615][T19526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1517.952658][T19724] xt_hashlimit: size too large, truncated to 1048576 [ 1518.045005][T19526] hsr_slave_0: entered promiscuous mode [ 1518.057372][T19526] hsr_slave_1: entered promiscuous mode [ 1518.059472][T19526] debugfs: 'hsr0' already exists in 'hsr' [ 1518.059494][T19526] Cannot create hsr debugfs directory [ 1518.135940][T19726] ip_tables: iptables: counters copy to user failed while replacing table [ 1518.358229][T19733] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12269'. [ 1518.687515][T19744] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input19 [ 1518.819422][ T62] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 1518.851987][T19526] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1518.852028][T19526] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.890178][T19750] sctp: [Deprecated]: syz.1.12277 (pid 19750) Use of int in max_burst socket option. [ 1518.890178][T19750] Use struct sctp_assoc_value instead [ 1518.915154][T19756] sctp: [Deprecated]: syz.1.12277 (pid 19756) Use of int in max_burst socket option. [ 1518.915154][T19756] Use struct sctp_assoc_value instead [ 1519.093984][T19526] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1519.094031][T19526] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.173591][T19770] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1519.190500][T19770] netlink: 'syz.1.12283': attribute type 1 has an invalid length. [ 1519.264135][T19526] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1519.264179][T19526] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.462341][T10846] Bluetooth: hci5: command tx timeout [ 1520.114650][T19526] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1520.142585][T19526] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1520.144733][T19813] openvswitch: netlink: IP tunnel dst address not specified [ 1520.145229][T19814] openvswitch: netlink: IP tunnel dst address not specified [ 1520.145544][T19526] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1520.191695][T19526] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1520.204009][T19526] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1520.229016][T19526] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1520.232119][T19526] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1520.280103][T19526] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1520.508693][T19526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1520.572240][T19526] 8021q: adding VLAN 0 to HW filter on device team0 [ 1520.609841][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 1520.609958][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1520.655301][T10136] bridge0: port 2(bridge_slave_1) entered blocking state [ 1520.655416][T10136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1520.759503][T19837] __nla_validate_parse: 2 callbacks suppressed [ 1520.759526][T19837] netlink: 384 bytes leftover after parsing attributes in process `syz.5.12296'. [ 1520.879027][T19841] netlink: 'syz.5.12297': attribute type 21 has an invalid length. [ 1520.904494][T19841] netlink: 156 bytes leftover after parsing attributes in process `syz.5.12297'. [ 1521.190814][T19847] tipc: Enabled bearer , priority 0 [ 1521.191934][T19847] ip_tables: iptables: counters copy to user failed while replacing table [ 1521.385140][T19847] syzkaller0: entered promiscuous mode [ 1521.385170][T19847] syzkaller0: entered allmulticast mode [ 1521.400116][T19847] tipc: Resetting bearer [ 1521.453968][T19845] tipc: Resetting bearer [ 1521.538628][T10846] Bluetooth: hci5: command tx timeout [ 1521.983294][T19873] netlink: 164 bytes leftover after parsing attributes in process `syz.4.12302'. [ 1521.991817][T19873] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12302'. [ 1521.995537][T19872] netlink: 164 bytes leftover after parsing attributes in process `syz.4.12302'. [ 1522.038443][T19872] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12302'. [ 1522.052433][T19876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12303'. [ 1522.235260][T19880] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12305'. [ 1522.812557][T19896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12308'. [ 1523.219568][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1523.219817][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1523.220029][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1523.938945][ T3644] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 1525.047521][T19845] tipc: Disabling bearer [ 1525.203460][T19903] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12309'. [ 1525.203501][T19903] netlink: 'syz.5.12309': attribute type 5 has an invalid length. [ 1525.321193][T19903] geneve2: entered promiscuous mode [ 1525.321214][T19903] geneve2: entered allmulticast mode [ 1525.339118][ T3644] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1525.477338][ T3644] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1525.479227][T10371] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1525.489075][ T3641] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1525.867161][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1525.920982][T19526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1525.994793][T19935] __nla_validate_parse: 2 callbacks suppressed [ 1525.994816][T19935] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12318'. [ 1526.029080][T19933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12316'. [ 1526.054235][T19933] ebt_among: wrong size: 2080 against expected 1044, rounded to 1048 [ 1526.055247][T19935] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12318'. [ 1526.189759][T19526] veth0_vlan: entered promiscuous mode [ 1526.216704][T19526] veth1_vlan: entered promiscuous mode [ 1526.268271][T19526] veth0_macvtap: entered promiscuous mode [ 1526.275809][T19526] veth1_macvtap: entered promiscuous mode [ 1526.315846][T19526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1526.344409][T19526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1526.389290][ T3644] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.389333][ T3644] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.389364][ T3644] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.389395][ T3644] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.626458][T10136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1526.626484][T10136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1526.775560][T26929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1526.775585][T26929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1526.903683][T19959] netlink: 232 bytes leftover after parsing attributes in process `syz.0.12326'. [ 1527.141315][ T1694] block nbd5: Possible stuck request ffff88802807e000: control (read@0,4096B). Runtime 300 seconds [ 1527.368628][T19978] ip_tables: iptables: counters copy to user failed while replacing table [ 1527.505116][T19983] netlink: 'syz.3.12218': attribute type 1 has an invalid length. [ 1527.505141][T19983] netlink: 244 bytes leftover after parsing attributes in process `syz.3.12218'. [ 1527.737783][T19987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1527.815310][T19990] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12334'. [ 1527.935150][T19996] bond0: entered promiscuous mode [ 1527.952711][T19996] batadv0: entered promiscuous mode [ 1527.955099][T19996] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1527.975817][T19996] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1527.996391][T19996] bond0: left promiscuous mode [ 1528.000772][T19996] batadv0: left promiscuous mode [ 1528.142807][T20004] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12335'. [ 1528.545778][T20017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12339'. [ 1528.976458][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.976705][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.976955][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.977171][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1529.242658][T20049] netlink: 'syz.3.12349': attribute type 10 has an invalid length. [ 1529.273236][T20049] team0: Port device dummy0 added [ 1529.375029][T20053] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12347'. [ 1529.375068][T20053] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12347'. [ 1529.699020][T26929] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 1529.718419][ T2086] block nbd8: Possible stuck request ffff8880281ee000: control (read@0,4096B). Runtime 90 seconds [ 1530.357329][T10846] block nbd9: Receive control failed (result -32) [ 1530.359636][ T5645] block nbd9: Receive control failed (result -32) [ 1530.541605][T20112] ip_tables: iptables: counters copy to user failed while replacing table [ 1530.699390][T20121] netlink: 'syz.1.12368': attribute type 3 has an invalid length. [ 1530.803653][T20130] netlink: 'syz.5.12371': attribute type 5 has an invalid length. [ 1531.223930][T20155] __nla_validate_parse: 11 callbacks suppressed [ 1531.223955][T20155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12379'. [ 1531.392470][T20163] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12380'. [ 1531.394003][T20163] netlink: 'syz.3.12380': attribute type 1 has an invalid length. [ 1531.454739][T20154] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.12377'. [ 1531.491832][T20157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12378'. [ 1532.060866][T20194] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12391'. [ 1532.408726][T20217] netlink: 'syz.5.12395': attribute type 32 has an invalid length. [ 1532.408756][T20217] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12395'. [ 1532.502876][T20209] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12395'. [ 1532.502912][T20209] netlink: 'syz.5.12395': attribute type 10 has an invalid length. [ 1532.502930][T20209] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12395'. [ 1532.531182][T20228] netlink: 872 bytes leftover after parsing attributes in process `syz.4.12398'. [ 1532.557778][T20217] bond5: option coupled_control: invalid value (20) [ 1532.562301][T20217] bond5 (unregistering): Released all slaves [ 1532.754276][T20209] geneve3: entered promiscuous mode [ 1532.754305][T20209] geneve3: entered allmulticast mode [ 1533.125886][T20250] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12405'. [ 1533.158894][T20252] netlink: 'syz.1.12403': attribute type 1 has an invalid length. [ 1533.205375][T20256] netlink: 'syz.0.12406': attribute type 1 has an invalid length. [ 1533.245203][T20252] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1533.344766][T20264] netlink: 'syz.1.12403': attribute type 10 has an invalid length. [ 1533.418299][T20257] bond1: (slave veth7): Enslaving as an active interface with a down link [ 1533.441833][T20258] bond9: (slave erspan1): making interface the new active one [ 1533.461223][T20258] bond9: (slave erspan1): Enslaving as an active interface with an up link [ 1533.483577][T20257] netlink: 'syz.1.12403': attribute type 1 has an invalid length. [ 1533.509463][T20252] bond1: (slave dummy0): making interface the new active one [ 1533.515517][T20252] dummy0: entered promiscuous mode [ 1533.531464][T20252] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1533.584390][T20264] bond1: (slave dummy0): Releasing active interface [ 1533.668491][T20277] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1533.708491][T20277] tunl0: entered promiscuous mode [ 1533.715100][T20277] netlink: 'syz.3.12412': attribute type 3 has an invalid length. [ 1534.345817][T10136] nci: nci_rx_work: unknown MT 0x1 [ 1534.414331][T20302] hsr_slave_1 (unregistering): left promiscuous mode [ 1534.705434][T20315] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1534.705713][T20315] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1534.736434][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1534.736683][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1534.736963][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1534.737184][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1534.807727][T20317] vlan2: entered promiscuous mode [ 1534.807752][T20317] hsr0: entered promiscuous mode [ 1534.808187][T20317] vlan2: entered allmulticast mode [ 1534.808205][T20317] hsr0: entered allmulticast mode [ 1534.808218][T20317] hsr_slave_0: entered allmulticast mode [ 1534.808233][T20317] hsr_slave_1: entered allmulticast mode [ 1535.469556][ T137] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 1537.214120][T20295] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1537.638157][T20396] tipc: Enabling of bearer rejected, failed to enable media [ 1537.824933][T20405] ip_tables: iptables: counters copy to user failed while replacing table [ 1538.014094][T20414] __nla_validate_parse: 4 callbacks suppressed [ 1538.014116][T20414] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12448'. [ 1538.233951][T20421] netlink: 260 bytes leftover after parsing attributes in process `syz.5.12450'. [ 1538.320406][T20423] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1538.320432][T20423] syzkaller1: Linktype set failed because interface is up [ 1538.493101][T20432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12454'. [ 1538.530559][T20432] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1538.878325][T20458] ip_tables: iptables: counters copy to user failed while replacing table [ 1539.068952][T20467] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12464'. [ 1539.133398][T20478] netlink: 316 bytes leftover after parsing attributes in process `syz.1.12464'. [ 1539.133426][T20478] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1539.356773][T20475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12462'. [ 1539.611220][T20493] netlink: 5 bytes leftover after parsing attributes in process `syz.5.12468'. [ 1539.613603][T20493] netlink: 5 bytes leftover after parsing attributes in process `syz.5.12468'. [ 1539.613849][T20493] netlink: 5 bytes leftover after parsing attributes in process `syz.5.12468'. [ 1539.614073][T20493] netlink: 5 bytes leftover after parsing attributes in process `syz.5.12468'. [ 1539.933553][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802b41f400: rx timeout, send abort [ 1539.933832][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802b41f400: 0x2ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 1540.496345][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1540.496628][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1540.496867][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1540.497102][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1540.711115][T10371] IPVS: starting estimator thread 0... [ 1540.796925][T20523] IPVS: using max 25 ests per chain, 60000 per kthread [ 1541.154240][T20527] openvswitch: netlink: IP tunnel dst address not specified [ 1541.235093][T10371] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 1541.425429][T20544] sctp: [Deprecated]: syz.5.12484 (pid 20544) Use of int in maxseg socket option. [ 1541.425429][T20544] Use struct sctp_assoc_value instead [ 1542.110919][T20585] syz_tun: entered allmulticast mode [ 1542.130948][T20587] netlink: 'syz.4.12496': attribute type 3 has an invalid length. [ 1542.241518][T20582] syz_tun: left allmulticast mode [ 1542.262390][T20598] Bluetooth: hci0: unsupported parameter 5135 [ 1542.262415][T20598] Bluetooth: hci0: unsupported parameter 8192 [ 1542.262431][T20598] Bluetooth: hci0: unsupported parameter 5135 [ 1542.262445][T20598] Bluetooth: hci0: unsupported parameter 8192 [ 1542.845767][T20621] Bluetooth: MGMT ver 1.23 [ 1543.512555][T20635] __nla_validate_parse: 7 callbacks suppressed [ 1543.512580][T20635] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12506'. [ 1543.512596][T20635] tipc: Invalid UDP bearer configuration [ 1543.512636][T20635] tipc: Enabling of bearer rejected, failed to enable media [ 1543.544398][T20635] netlink: 'syz.1.12506': attribute type 1 has an invalid length. [ 1543.858090][T20645] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12510'. [ 1543.858390][T20644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12509'. [ 1544.335543][T20666] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12515'. [ 1544.401721][T20666] bridge0: port 2(bridge_slave_1) entered disabled state [ 1544.402779][T20666] bridge0: port 1(bridge_slave_0) entered disabled state [ 1544.860741][T20684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12524'. [ 1544.968626][T20691] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12525'. [ 1544.986277][T20687] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12522'. [ 1545.269177][T20702] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12527'. [ 1545.404846][T20702] syzkaller1: entered promiscuous mode [ 1545.404876][T20702] syzkaller1: entered allmulticast mode [ 1545.552918][T20702] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12527'. [ 1545.725101][T20720] ovs-dp0: entered promiscuous mode [ 1545.748249][T20720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12531'. [ 1545.893509][T20727] netlink: 'syz.1.12536': attribute type 1 has an invalid length. [ 1545.893536][T20727] netlink: 'syz.1.12536': attribute type 4 has an invalid length. [ 1546.146104][T20739] netlink: 'syz.4.12539': attribute type 2 has an invalid length. [ 1546.221155][T20743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1546.256921][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.257249][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.257522][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.257737][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.350575][T10136] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 1546.893880][ T5645] Bluetooth: hci4: Malformed HCI Event [ 1547.060343][ T5645] Bluetooth: hci5: command 0x0405 tx timeout [ 1548.208268][T20837] sctp: [Deprecated]: syz.3.12567 (pid 20837) Use of int in maxseg socket option. [ 1548.208268][T20837] Use struct sctp_assoc_value instead [ 1548.798980][T20865] netlink: 'syz.0.12575': attribute type 49 has an invalid length. [ 1548.859285][T20867] xt_hashlimit: size too large, truncated to 1048576 [ 1548.901506][T20869] netlink: 'syz.0.12578': attribute type 12 has an invalid length. [ 1548.901531][T20869] __nla_validate_parse: 9 callbacks suppressed [ 1548.901545][T20869] netlink: 84 bytes leftover after parsing attributes in process `syz.0.12578'. [ 1549.089361][T20876] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.12576'. [ 1549.134343][T20876] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 1549.159787][T20876] 0ªX¹¦Dö»: entered allmulticast mode [ 1549.241507][T20881] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1549.451165][T20886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12583'. [ 1549.739477][T20900] netlink: 'syz.4.12587': attribute type 1 has an invalid length. [ 1549.765492][T20903] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12588'. [ 1549.765518][T20903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12588'. [ 1549.895892][T20907] bond2: (slave gretap1): making interface the new active one [ 1549.920279][T20907] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1550.051883][T20910] netlink: 256 bytes leftover after parsing attributes in process `syz.3.12590'. [ 1550.051915][T20910] netlink: 256 bytes leftover after parsing attributes in process `syz.3.12590'. [ 1550.083365][T20920] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12592'. [ 1550.105680][T20912] netlink: 1 bytes leftover after parsing attributes in process `syz.0.12591'. [ 1550.234639][T20928] can: request_module (can-proto-0) failed. [ 1550.308222][T20924] syzkaller0: entered promiscuous mode [ 1550.308247][T20924] syzkaller0: entered allmulticast mode [ 1550.441408][T20937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12596'. [ 1550.481088][T20939] tipc: Started in network mode [ 1550.481123][T20939] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 1550.481286][T20939] tipc: Enabled bearer , priority 0 [ 1550.891709][T20966] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1551.296342][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.296556][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.296735][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.296917][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.308638][T20978] Bluetooth: hci0: unsupported parameter 5135 [ 1551.308699][T20978] Bluetooth: hci0: unsupported parameter 8192 [ 1551.308732][T20978] Bluetooth: hci0: unsupported parameter 5135 [ 1551.308771][T20978] Bluetooth: hci0: unsupported parameter 8192 [ 1551.497115][ T5793] tipc: Node number set to 43690 [ 1551.710746][T20986] netlink: 'syz.3.12608': attribute type 12 has an invalid length. [ 1552.109226][T10371] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 1552.305222][T21019] netlink: 'syz.3.12616': attribute type 1 has an invalid length. [ 1552.368485][T21019] bond2: (slave gretap0): making interface the new active one [ 1552.369305][T21019] bond2: (slave gretap0): Enslaving as an active interface with an up link [ 1552.397613][T21024] Cannot find add_set index 65532 as target [ 1552.761935][T21046] sctp: [Deprecated]: syz.4.12625 (pid 21046) Use of int in max_burst socket option. [ 1552.761935][T21046] Use struct sctp_assoc_value instead [ 1553.403628][T21039] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1553.418772][T21039] netlink: 'syz.5.12622': attribute type 1 has an invalid length. [ 1553.418796][T21039] netlink: 'syz.5.12622': attribute type 2 has an invalid length. [ 1553.535835][T21073] bond10: entered promiscuous mode [ 1553.550062][T21073] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1554.101306][T21107] netlink: 'syz.4.12640': attribute type 1 has an invalid length. [ 1554.101334][T21107] __nla_validate_parse: 5 callbacks suppressed [ 1554.101349][T21107] netlink: 96 bytes leftover after parsing attributes in process `syz.4.12640'. [ 1554.102292][T21107] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1554.382963][T21123] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12644'. [ 1554.479049][T21127] bond3 (unregistering): Released all slaves [ 1554.720860][T21144] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12648'. [ 1554.759415][T21145] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12650'. [ 1555.098311][T21156] netlink: 'syz.3.12654': attribute type 1 has an invalid length. [ 1555.145782][T21159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12655'. [ 1555.259446][T21165] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1555.352346][T21160] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1555.354396][T21160] bond3: (slave bond4): making interface the new active one [ 1555.354866][T21160] bond3: (slave bond4): Enslaving as an active interface with an up link [ 1555.414318][T21160] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12654'. [ 1555.428815][T21156] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 1555.578422][T21178] netlink: 'syz.4.12659': attribute type 72 has an invalid length. [ 1555.643427][T21176] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12657'. [ 1555.805287][T21187] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12657'. [ 1556.212566][T21206] netlink: 'syz.4.12666': attribute type 1 has an invalid length. [ 1556.496410][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.496634][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.496830][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.497062][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.559999][T21215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12668'. [ 1556.622817][T21216] Cannot find del_set index 3 as target [ 1556.641332][T21212] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12668'. [ 1556.749730][T21224] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1556.847333][T21224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1556.853708][T21224] bond4: (slave bond0): Enslaving as an active interface with a down link [ 1556.932162][T21226] bond4 (unregistering): (slave bond0): Releasing active interface [ 1556.964038][T21229] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1556.970601][T10371] IPVS: starting estimator thread 0... [ 1557.001985][T21226] bond4 (unregistering): Released all slaves [ 1557.034796][T21236] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1557.078396][T21233] IPVS: using max 27 ests per chain, 64800 per kthread [ 1557.224032][ T1694] block nbd5: Possible stuck request ffff88802807e000: control (read@0,4096B). Runtime 330 seconds [ 1557.237969][ T32] INFO: task udevd:9445 blocked in I/O wait for more than 143 seconds. [ 1557.237997][ T32] Not tainted syzkaller #0 [ 1557.238011][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1557.238022][ T32] task:udevd state:D stack:26344 pid:9445 tgid:9445 ppid:5000 task_flags:0x400140 flags:0x00080002 [ 1557.238091][ T32] Call Trace: [ 1557.238100][ T32] [ 1557.238115][ T32] __schedule+0x17dd/0x5830 [ 1557.238171][ T32] ? __lock_acquire+0x747/0x2de0 [ 1557.238215][ T32] ? __pfx___schedule+0x10/0x10 [ 1557.238253][ T32] ? schedule+0x90/0x2b0 [ 1557.238285][ T32] schedule+0x164/0x2b0 [ 1557.238315][ T32] io_schedule+0x7f/0xd0 [ 1557.238346][ T32] folio_wait_bit_common+0x6d0/0xcf0 [ 1557.238429][ T32] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1557.238457][ T32] ? filemap_read_folio+0x234/0x3a0 [ 1557.238505][ T32] ? __pfx_wake_page_function+0x10/0x10 [ 1557.238541][ T32] ? __filemap_get_folio_mpol+0x7c3/0xff0 [ 1557.238584][ T32] do_read_cache_folio+0x1ac/0x590 [ 1557.238620][ T32] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1557.238717][ T32] read_part_sector+0xb6/0x2b0 [ 1557.238812][ T32] adfspart_check_POWERTEC+0x9a/0x7a0 [ 1557.238836][ T32] ? rcu_is_watching+0x16/0xb0 [ 1557.238882][ T32] ? __pfx_ ** replaying previous printk message ** [ 1557.238882][ T32] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1557.238906][ T32] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1557.238930][ T32] ? __kmalloc_cache_noprof+0x148/0x600 [ 1557.238961][ T32] ? bdev_disk_changed+0x56c/0x1680 [ 1557.238993][ T32] ? bdev_disk_changed+0x56c/0x1680 [ 1557.239112][ T32] bdev_disk_changed+0x851/0x1680 [ 1557.249834][ T32] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1557.249990][ T32] blkdev_get_whole+0x372/0x510 [ 1557.250178][ T32] bdev_open+0x324/0xd70 [ 1557.250318][ T32] blkdev_open+0x461/0x600 [ 1557.250403][ T32] ? __pfx_blkdev_open+0x10/0x10 [ 1557.250464][ T32] do_dentry_open+0x80e/0x1360 [ 1557.250575][ T32] vfs_open_consume+0x4a/0x350 [ 1557.250638][ T32] ? path_openat+0x16e1/0x20f0 [ 1557.250779][ T32] path_openat+0x16fc/0x20f0 [ 1557.250915][ T32] do_file_open+0x23e/0x4a0 [ 1557.250999][ T32] ? __pfx_do_file_open+0x10/0x10 [ 1557.251144][ T32] ? _raw_spin_unlock+0x28/0x50 [ 1557.251250][ T32] ? alloc_fd+0x6af/0x760 [ 1557.251359][ T32] do_sys_openat2+0x115/0x200 [ 1557.275351][ T32] ? __pfx_do_sys_openat2+0x10/0x10 [ 1557.275451][ T32] ? __x64_sys_epoll_wait+0x1d7/0x230 [ 1557.275705][ T32] __x64_sys_openat+0x138/0x170 [ 1557.275792][ T32] do_syscall_64+0x166/0x520 [ 1557.275893][ T32] ? trace_irq_disable+0x3b/0x140 [ 1557.275978][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.276158][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1557.276242][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.276306][ T32] RIP: 0033:0x7f291d8a7407 [ 1557.276362][ T32] RSP: 002b:00007ffe9e0e0e10 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1557.276419][ T32] RAX: ffffffffffffffda RBX: 00007f291e04b880 RCX: 00007f291d8a7407 [ 1557.276471][ T32] RDX: 00000000000a0800 RSI: 0000559f68da9c40 RDI: ffffffffffffff9c [ 1557.276514][ T32] RBP: 0000559f68d87910 R08: 0000000000000000 R09: 0000000000000000 [ 1557.276549][ T32] R10: 0000000000000000 R11: 0000000000000202 R12: 0000559f68d9ae20 [ 1557.276589][ T32] R13: 0000559f68d95190 R14: 0000000000000000 R15: 0000559f68d9ae20 [ 1557.276684][ T32] [ 1557.276956][ T32] [ 1557.276956][ T32] Showing all locks held in the system: [ 1557.295511][ T32] locks held by pr/ttyS0/31: 2, last CPU#0: [ 1557.295695][ T32] #0: ffffffff90033d58 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 1557.295958][ T32] #1: ffffffff9c205e98 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 1557.296284][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 1557.296326][ T32] #0: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1557.296557][ T32] locks held by getty/5391: 2, on CPU#1: [ 1557.296599][ T32] #0: ffff8880368f90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1557.296813][ T32] #1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1557.296977][ T32] locks held by kworker/u8:20/10371: 1, last CPU#1: [ 1557.297019][ T32] #0: ffff888078a73948 ((wq_completion)bond1#13){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1557.311618][ T32] locks held by kworker/u8:2/26928: 3, last CPU#1: [ 1557.311642][ T32] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1557.311716][ T32] #1: ffffc90005317c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1557.311783][ T32] #2: ffff888048895258 (&devlink->lock_key#24){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 1557.312106][ T32] locks held by kworker/1:16/5796: 3, last CPU#1: [ 1557.312973][ T32] #0: ffff88813fe0dd48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1557.313151][ T32] #1: ffffc90003557c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1557.313327][ T32] #2: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x274/0x1890 [ 1557.313651][ T32] locks held by udevd/9445: 1, on CPU#0: [ 1557.313693][ T32] #0: ffff888026eb0350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 1557.313870][ T32] locks held by udevd/9448: 1, on CPU#1: [ 1557.313912][ T32] #0: ffff888028149350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 1557.323697][ T32] locks held by syz-executor/11791: 4, last CPU#1: [ 1557.323742][ T32] #0: ffffffff9023a610 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0xf6/0x640 [ 1557.323910][ T32] #1: ffff88807d0e5900 (&mm->mmap_lock){++++}-{4:4}, at: copy_mm+0x110/0x640 [ 1557.324067][ T32] #2: ffff88804a0f0340 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1f6/0x1c80 [ 1557.324228][ T32] #3: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1557.324387][ T32] locks held by syz-executor/19526: 1, last CPU#1: [ 1557.324430][ T32] #0: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1557.324646][ T32] locks held by syz.0.12662/21227: 1, last CPU#1: [ 1557.324688][ T32] #0: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: folio_lruvec_lock_irqsave+0x24/0x560 [ 1557.333810][ T32] locks held by syz.1.12672/21226: 2, last CPU#1: [ 1557.333834][ T32] #0: ffff88802d170340 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x19c/0xa40 [ 1557.333982][ T32] #1: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1557.334131][ T32] locks held by syz-executor/21238: 4, last CPU#0: [ 1557.334175][ T32] #0: ffff8880279b9fb8 (&sb->s_type->i_mutex_key#12){++++}-{4:4}, at: lookup_slow+0x46/0x80 [ 1557.334354][ T32] #1: ffff8880679b42a0 (DCACHE_PAR_LOOKUP#4){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 1557.334596][ T32] #2: ffffffff90294f80 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 1557.334752][ T32] #3: ffffffff902ab600 (mmu_notifier_invalidate_range_start){+.+.}-{0:0}, at: fs_reclaim_acquire+0x7c/0x100 [ 1557.337643][ T32] [ 1557.337706][ T32] ============================================= [ 1557.337706][ T32] [ 1557.337747][ T32] NMI backtrace for cpu 1 [ 1557.337799][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1557.337870][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1557.337902][ T32] Call Trace: [ 1557.337932][ T32] [ 1557.337955][ T32] dump_stack_lvl+0xe8/0x150 [ 1557.338049][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1557.338177][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1557.338271][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1557.338371][ T32] sys_info+0x135/0x170 [ 1557.338424][ T32] watchdog+0x1073/0x10f0 [ 1557.338547][ T32] ? watchdog+0x209/0x10f0 [ 1557.338641][ T32] kthread+0x38b/0x480 [ 1557.338713][ T32] ? __pfx_watchdog+0x10/0x10 [ 1557.338790][ T32] ? __pfx_kthread+0x10/0x10 [ 1557.338855][ T32] ret_from_fork+0x514/0xb70 [ 1557.339166][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1557.339234][ T32] ? __switch_to+0xc78/0x1410 [ 1557.339271][ T32] ? __pfx_kthread+0x10/0x10 [ 1557.339299][ T32] ret_from_fork_asm+0x1a/0x30 [ 1557.339344][ T32] [ 1557.339389][ T32] Sending NMI from CPU 1 to CPUs 0: [ 1557.339422][ C0] NMI backtrace for cpu 0 [ 1557.339437][ C0] CPU: 0 UID: 0 PID: 31 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 1557.339502][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1557.339513][ C0] RIP: 0010:pie_calculate_probability+0x3b/0x7f0 [ 1557.339599][ C0] Code: 58 89 d3 49 89 f6 49 89 fc 49 bf 00 00 00 00 00 fc ff df e8 a7 ac c1 f7 4d 8d 6c 24 1a 4c 89 ed 48 c1 ed 03 42 0f b6 44 3d 00 <84> c0 0f 85 ab 06 00 00 89 5c 24 04 41 0f b6 5d 00 0f b6 f3 31 ff [ 1557.339615][ C0] RSP: 0018:ffffc90000007b98 EFLAGS: 00000a02 [ 1557.339633][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88801f6f1f40 [ 1557.339646][ C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: ffff8880790b42c0 [ 1557.339659][ C0] RBP: 1ffff1100f21685b R08: 0000000000000100 R09: 0000000000000004 [ 1557.339672][ C0] R10: dffffc0000000000 R11: fffff52000000f74 R12: ffff8880790b42c0 [ 1557.339687][ C0] R13: ffff8880790b42da R14: ffffc9000f341960 R15: dffffc0000000000 [ 1557.339701][ C0] FS: 0000000000000000(0000) GS:ffff888123409000(0000) knlGS:0000000000000000 [ 1557.339717][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1557.339730][ C0] CR2: 00007f3712462fec CR3: 000000007751a000 CR4: 00000000003526f0 [ 1557.339747][ C0] Call Trace: [ 1557.339756][ C0] [ 1557.339772][ C0] fq_pie_timer+0x27d/0x5a0 [ 1557.339799][ C0] ? fq_pie_timer+0x4d/0x5a0 [ 1557.339827][ C0] call_timer_fn+0x18d/0x5f0 [ 1557.339845][ C0] ? __pfx_fq_pie_timer+0x10/0x10 [ 1557.339868][ C0] ? call_timer_fn+0xd5/0x5f0 [ 1557.339884][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1557.339908][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1557.339930][ C0] ? __pfx_fq_pie_timer+0x10/0x10 [ 1557.339955][ C0] __run_timer_base+0x652/0x8b0 [ 1557.339998][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1557.340028][ C0] ? lapic_next_event+0x11/0x20 [ 1557.340051][ C0] ? clockevents_program_event+0x491/0x630 [ 1557.340076][ C0] run_timer_softirq+0xb7/0x170 [ 1557.340103][ C0] handle_softirqs+0x265/0x8d0 [ 1557.340138][ C0] __irq_exit_rcu+0xc6/0x220 [ 1557.340164][ C0] irq_exit_rcu+0x9/0x30 [ 1557.340188][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1557.340212][ C0] [ 1557.340219][ C0] [ 1557.340226][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1557.340247][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 1557.340270][ C0] Code: f7 e8 3d 61 9c f5 f7 c3 00 02 00 00 74 05 e8 f0 02 c9 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 74 55 8d f5 65 48 8b 05 ac 11 d9 08 48 85 c0 74 18 5b 41 5e c3 [ 1557.340286][ C0] RSP: 0018:ffffc90000a77ca8 EFLAGS: 00000206 [ 1557.340302][ C0] RAX: 0000000000000006 RBX: 0000000000000206 RCX: 8000000000000001 [ 1557.340314][ C0] RDX: 0000000000000000 RSI: ffffffff8e6a8733 RDI: 0000000000000001 [ 1557.340327][ C0] RBP: ffffc90000a77e18 R08: ffffffff91bdfcbf R09: 1ffffffff237bf97 [ 1557.340341][ C0] R10: dffffc0000000000 R11: fffffbfff237bf98 R12: 0000000000000002 [ 1557.340354][ C0] R13: ffff88801f6f1f40 R14: ffffffff9c205e80 R15: dffffc0000000000 [ 1557.340381][ C0] nbcon_kthread_func+0x724/0x8d0 [ 1557.340410][ C0] ? nbcon_kthread_func+0x163/0x8d0 [ 1557.340434][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1557.340474][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1557.340493][ C0] ? __kthread_parkme+0x199/0x1f0 [ 1557.340515][ C0] kthread+0x38b/0x480 [ 1557.340536][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1557.340558][ C0] ? __pfx_kthread+0x10/0x10 [ 1557.340580][ C0] ret_from_fork+0x514/0xb70 [ 1557.340602][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1557.340623][ C0] ? __switch_to+0xc78/0x1410 [ 1557.340653][ C0] ? __pfx_kthread+0x10/0x10 [ 1557.340675][ C0] ret_from_fork_asm+0x1a/0x30 [ 1557.340705][ C0] [ 1557.386733][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1558.430502][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1558.439639][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1558.449719][ T32] Call Trace: [ 1558.453019][ T32] [ 1558.456010][ T32] vpanic+0x26f/0x710 [ 1558.460024][ T32] panic+0xc5/0xd0 [ 1558.463765][ T32] ? __pfx_panic+0x10/0x10 [ 1558.468283][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 1558.473774][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 1558.479173][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1558.485370][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1558.491561][ T32] watchdog+0x10e7/0x10f0 [ 1558.495934][ T32] ? watchdog+0x209/0x10f0 [ 1558.500418][ T32] kthread+0x38b/0x480 [ 1558.504548][ T32] ? __pfx_watchdog+0x10/0x10 [ 1558.509263][ T32] ? __pfx_kthread+0x10/0x10 [ 1558.513894][ T32] ret_from_fork+0x514/0xb70 [ 1558.518648][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1558.523795][ T32] ? __switch_to+0xc78/0x1410 [ 1558.528519][ T32] ? __pfx_kthread+0x10/0x10 [ 1558.533141][ T32] ret_from_fork_asm+0x1a/0x30 [ 1558.537954][ T32] [ 1558.541618][ T32] Kernel Offset: disabled [ 1558.545997][ T32] Rebooting in 86400 seconds..