last executing test programs: 5m37.977472091s ago: executing program 1 (id=1648): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_getroute={0xa0, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_NEWDST={0x84}]}, 0xa0}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xa}, {0xe, 0xb}, {0x9, 0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xe, 0xb, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004c8f3}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5m37.55076686s ago: executing program 1 (id=1654): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xcd}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000050c0), r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x164}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x3fff, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10, 0x0}, 0x34000001) r4 = socket$kcm(0x21, 0x2, 0xa) setsockopt$sock_attach_bpf(r4, 0x110, 0x2, &(0x7f0000000140), 0x16) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r3, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x10, &(0x7f0000000080)=0x2, 0x4) recvmmsg(r3, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb8100000088a86d4f022c001800fffc0200000000000000"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000051c0)={0x0, 0x0, &(0x7f0000005180)={&(0x7f0000005100)={0x44, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x40080) 5m37.340247203s ago: executing program 1 (id=1657): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x10, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @alu={0x4, 0x0, 0xd, 0x7, 0x7, 0x40}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffd}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xe}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5m37.231479165s ago: executing program 1 (id=1659): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000018000000000000003000000850000007a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x20, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000680)=r2, 0x4) sendmsg$inet(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e23, @multicast1}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000001c0)={r5, 0xffff}, &(0x7f0000000200)=0x8) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000000)) 5m37.069960564s ago: executing program 1 (id=1663): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x57) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='afs_make_fs_call\x00', r1, 0x0, 0x29a}, 0x18) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x46) unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}}}, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00000000000000001c0012800b000100697036746e6c00000c00028008000100", @ANYRES32=r4], 0x3c}}, 0x4880) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000004600)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000020010000300012800b000100697036746e6c00002000028008000100"], 0x50}}, 0x20004010) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000f00"/28], 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0d00000004000000040000000500000000000000", @ANYRES32=r9, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r8, 0x0, 0x32658) 5m36.058445667s ago: executing program 1 (id=1680): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x1}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x80001, 0x1004, {0x6}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r5 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)={0x28, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2m58.604946677s ago: executing program 32 (id=1680): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x1}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x80001, 0x1004, {0x6}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r5 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)={0x28, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2m36.922770573s ago: executing program 5 (id=2038): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) syz_emit_ethernet(0x1191, &(0x7f0000001c40)={@remote, @broadcast, @void, {@mpls_mc={0x8848, {[{0xff801}], @ipv4=@gre={{0x1f, 0x4, 0x3, 0x5, 0x117f, 0x66, 0x0, 0x2, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @loopback, {[@rr={0x7, 0x13, 0xda, [@local, @broadcast, @multicast1, @local]}, @timestamp={0x44, 0x1c, 0x38, 0x0, 0x4, [0x7f, 0xf, 0x60, 0x0, 0x5e1, 0x6]}, @timestamp_addr={0x44, 0x1c, 0x8c, 0x1, 0xf, [{@local, 0x81}, {@rand_addr=0x64010102, 0x6}, {@local, 0x1}]}, @timestamp_prespec={0x44, 0x14, 0xe6, 0x3, 0x6, [{@multicast2, 0x5}, {@private=0xa010102, 0x3}]}, @rr={0x7, 0x7, 0x6d, [@broadcast]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x1000, 0x0, [0x6, 0x8], "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"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "f64dd1118ec3719d41ea18a4e5c71af1880200651d6014"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x200], "b0c27d095b09437dfd99dd6e7f1d56f9993ff728272432e2bedf774b48111284bb792f5c6248ee9dbeae165e91f8dd9a61b4de686eef47698505202f977207dad1b815e16224d37f3a83946952b5fe3d486e5bd9d9f0ac1b0f0ea2127a235c665a877c5936fdbcc309cea18db3987eda43cc252e1b5d444829a31bf38e5fd49104d1ecb8bf7dde9780773d62e3ac22f4fd2c07def7"}, {0x8, 0x88be, 0x4, {{0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x67}, 0x1, {0xd}}}, {0x8, 0x22eb, 0x4, {{0xc, 0x2, 0xd, 0x1, 0x1, 0x3, 0x7, 0x6}, 0x2, {0x8, 0x7, 0x2, 0x6, 0x1, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "e5d33b6b6ca8fc1f06a2dafca5"}}}}}}}, &(0x7f0000000040)={0x1, 0x4, [0x1a, 0xaf4, 0x56c, 0x9d1]}) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x8001, @empty, 0x80000001}, 0x1c) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001440)=ANY=[@ANYBLOB="611578000000000061133c0000000000bfa000000000000007000000ee0000052d03010000000000250500000000000069163e0000000000bf07200000000000350507000fff0720670500003f000000140300000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190de000000003cc3aa39642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a01000000a1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d1542c882e672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2474ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6e15e1417058ba11671295d20ba906d4331ce87573d2472371ac6369744a569da6c90f0e8ecba9ee68be2691922073d177bdffd5f1aa96173286f7d66f6c3e6b5eff01ed91681bbddcc66544b42a3d68c129798f2ae62b0fc690c9df12ef0dee69bdbe446322a18155e6662c13708d73aa49f1d8fd2cf86754065bfed808d0c76caaca1e0fc8a6baf185b58a1541911688f4a055bc49ed73c5bfb556c7c7bb62a8594e0aef56a374f4bf910a60d9cd751c3a14f94a3be70dbc9211d754ca9023e1efeef81c775664c3f348d000000000000000000000076d4b94b8d33469cdf2aba94c6e871fcd122f18409ee01620e45ab01c4af441373c1e6234b631ea4bb41e344"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) (async) syz_emit_ethernet(0x1191, &(0x7f0000001c40)={@remote, @broadcast, @void, {@mpls_mc={0x8848, {[{0xff801}], @ipv4=@gre={{0x1f, 0x4, 0x3, 0x5, 0x117f, 0x66, 0x0, 0x2, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @loopback, {[@rr={0x7, 0x13, 0xda, [@local, @broadcast, @multicast1, @local]}, @timestamp={0x44, 0x1c, 0x38, 0x0, 0x4, [0x7f, 0xf, 0x60, 0x0, 0x5e1, 0x6]}, @timestamp_addr={0x44, 0x1c, 0x8c, 0x1, 0xf, [{@local, 0x81}, {@rand_addr=0x64010102, 0x6}, {@local, 0x1}]}, @timestamp_prespec={0x44, 0x14, 0xe6, 0x3, 0x6, [{@multicast2, 0x5}, {@private=0xa010102, 0x3}]}, @rr={0x7, 0x7, 0x6d, [@broadcast]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x1000, 0x0, [0x6, 0x8], "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"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "f64dd1118ec3719d41ea18a4e5c71af1880200651d6014"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x200], "b0c27d095b09437dfd99dd6e7f1d56f9993ff728272432e2bedf774b48111284bb792f5c6248ee9dbeae165e91f8dd9a61b4de686eef47698505202f977207dad1b815e16224d37f3a83946952b5fe3d486e5bd9d9f0ac1b0f0ea2127a235c665a877c5936fdbcc309cea18db3987eda43cc252e1b5d444829a31bf38e5fd49104d1ecb8bf7dde9780773d62e3ac22f4fd2c07def7"}, {0x8, 0x88be, 0x4, {{0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x67}, 0x1, {0xd}}}, {0x8, 0x22eb, 0x4, {{0xc, 0x2, 0xd, 0x1, 0x1, 0x3, 0x7, 0x6}, 0x2, {0x8, 0x7, 0x2, 0x6, 0x1, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "e5d33b6b6ca8fc1f06a2dafca5"}}}}}}}, &(0x7f0000000040)={0x1, 0x4, [0x1a, 0xaf4, 0x56c, 0x9d1]}) (async) listen(r0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x8001, @empty, 0x80000001}, 0x1c) (async) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) 2m36.800550091s ago: executing program 5 (id=2041): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="12000000000000800000006c44f5fcb78f1b91eb05850da585e3307ad0374bbd407cad68159298f7a93fc9c2317ee89ab46b3392868d9e9eb4e3f22a632b6f04b090a272", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000000)={0x4fc0, 0x80, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc) bind$bt_l2cap(r6, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r6, &(0x7f0000009d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24084044) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}]}, 0x38}}, 0x0) sendto$packet(r2, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700e6669d", 0x2b, 0x4000840, &(0x7f00000000c0)={0x11, 0x86dd, r5, 0x1, 0x2, 0x6, @local}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x55, r5}) setsockopt$sock_attach_bpf(r1, 0x1, 0x45, &(0x7f00000000c0), 0x4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000003200)={'ip6tnl0\x00', &(0x7f0000003180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f1f}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000540)={'ip6_vti0\x00', r8, 0x29, 0x18, 0x0, 0x9, 0x10, @dev={0xfe, 0x80, '\x00', 0x36}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x7800, 0x2, 0x6}}) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="01000087be0800020005000000"], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00'}) socket(0x10, 0x3, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) 2m35.474912816s ago: executing program 5 (id=2053): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000140), 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000140)="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"/297, 0x3accf8d5) close(0x4) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x31) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) unshare(0x64000600) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='afs_call\x00', r0}, 0x18) unshare(0x800) 2m34.891955321s ago: executing program 5 (id=2066): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x830, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x2b, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xd}}}, 0x24}}, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r5, 0x27, 0x82, 0x0, &(0x7f0000000240)="f8ad48cc02cb29dcc8007f5b86dd", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) close(0x4) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x3}}]}, 0x30}}, 0x4000050) r7 = socket$nl_crypto(0x10, 0x3, 0x15) unshare(0x22020600) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000020000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x0) (async) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r10, 0x65, 0x1, 0x0, 0xf00) (async) sendmsg$netlink(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce2d715f2d2d290a9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="c606f93f6b8199f926"}]}]}, 0xe0}], 0x1}, 0x40040) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) 2m34.368866191s ago: executing program 5 (id=2070): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2c060000) unshare(0x22020600) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2m33.364903303s ago: executing program 5 (id=2074): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x34, r4, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40006) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0x14, r4, 0x400, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20080000}, 0x20000000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x10e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@enum={0xe, 0x2, 0x0, 0x6, 0x4, [{0x3, 0x3d}, {0x0, 0x8}]}]}, {0x0, [0x1e, 0x2e]}}, &(0x7f0000000480)=""/173, 0x38, 0xad, 0x1, 0x5}, 0x28) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0xa, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @generic={0x7, 0x0, 0xc, 0x100}]}, &(0x7f0000000640)='GPL\x00', 0xffffffff, 0x32, &(0x7f0000000680)=""/50, 0x40f00, 0x1, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0x9, 0x10, 0xd5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000740)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000780)=[{0x3, 0x3, 0xd, 0x8}, {0x5, 0x5, 0x8, 0xc}]}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000030101040000000000000000020000002400018014000180080001"], 0x38}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r12 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r12, 0x84, 0x4, &(0x7f0000000000)=0xfffffff7, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xc, 0x11, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x466}, [@map_idx, @generic={0x5, 0x0, 0x2, 0x5, 0x81}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4c92}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x1c, &(0x7f0000000400)=""/28, 0x40f00, 0x1, '\x00', r1, @fallback=0x30, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0x7, 0x1, 0x55}, 0x10, 0x0, r9, 0x1, &(0x7f0000000880)=[0x1, r11], &(0x7f00000008c0)=[{0x3, 0x4, 0xb, 0x9}], 0x10, 0x2}, 0x94) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESHEX], 0x44}}, 0x20008040) 2m18.323010316s ago: executing program 33 (id=2074): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x34, r4, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40006) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0x14, r4, 0x400, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20080000}, 0x20000000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x10e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@enum={0xe, 0x2, 0x0, 0x6, 0x4, [{0x3, 0x3d}, {0x0, 0x8}]}]}, {0x0, [0x1e, 0x2e]}}, &(0x7f0000000480)=""/173, 0x38, 0xad, 0x1, 0x5}, 0x28) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0xa, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @generic={0x7, 0x0, 0xc, 0x100}]}, &(0x7f0000000640)='GPL\x00', 0xffffffff, 0x32, &(0x7f0000000680)=""/50, 0x40f00, 0x1, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0x9, 0x10, 0xd5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000740)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000780)=[{0x3, 0x3, 0xd, 0x8}, {0x5, 0x5, 0x8, 0xc}]}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000030101040000000000000000020000002400018014000180080001"], 0x38}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r12 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r12, 0x84, 0x4, &(0x7f0000000000)=0xfffffff7, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xc, 0x11, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x466}, [@map_idx, @generic={0x5, 0x0, 0x2, 0x5, 0x81}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4c92}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x1c, &(0x7f0000000400)=""/28, 0x40f00, 0x1, '\x00', r1, @fallback=0x30, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0x7, 0x1, 0x55}, 0x10, 0x0, r9, 0x1, &(0x7f0000000880)=[0x1, r11], &(0x7f00000008c0)=[{0x3, 0x4, 0xb, 0x9}], 0x10, 0x2}, 0x94) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESHEX], 0x44}}, 0x20008040) 1m38.962793998s ago: executing program 3 (id=2715): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x300, 0x70bd26, 0x25dfdbfe, {0x1}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x90100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf4, 0x1, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xe}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x1c7c]}, @CTA_LABELS={0x4}, @CTA_NAT_SRC={0xcc, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010100}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x800}, 0x2000c000) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c880}, 0x4) connect$netlink(r0, &(0x7f0000000400)=@proc={0x10, 0x0, 0x25dfdbfc, 0x40000}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, 0x0, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xff0}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}]}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x4}}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000600)={r3, r4}, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x144, 0x3, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_NAT_DST={0x80, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x13}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}, @CTA_PROTOINFO={0x2c, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x28, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x8}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x9}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xf9}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x5}]}}, @CTA_LABELS={0x28, 0x16, 0x1, 0x0, [0x2, 0x80000000, 0x80000000, 0x7ff, 0x4000000, 0x4, 0x8, 0x40, 0xffffffff]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1ff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xf}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffff0}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xf}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) bind$tipc(r2, 0x0, 0x0) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000880)=0x1, 0x4) setsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f00000008c0)=0x1, 0x4) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r5, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x10, 0x3e8, 0x400, 0x70bd25, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4008804) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x4) r6 = socket$inet(0x2, 0x1, 0x9c) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x6}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x28040}, 0x20000011) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000c80)=@generic={&(0x7f0000000c40)='./file0\x00', r3}, 0x18) socket$netlink(0x10, 0x3, 0xb) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000d40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000002840)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002800)={&(0x7f0000000d80)={0x1a5c, r8, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x208, 0x11d, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc7}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xc16}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0x140, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfa}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x67}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1c, 0x2, [{0x4, 0x2}, {0x0, 0x5}, {0x1, 0x2}, {0x5, 0x8}, {0x6, 0x1}, {0x7, 0x3}, {0x3, 0x6}, {0x0, 0x7}, {0x5, 0x3}, {0x7, 0x3}, {0x4, 0xa}, {0x6, 0x8}, {0x0, 0x8}, {0x6, 0xa}, {0x1, 0x6}, {0x7, 0xa}, {0x0, 0x6}, {0x4, 0x6}, {0x1, 0x5}, {0x2, 0x3}, {}, {0x4, 0x3}, {0x4, 0x7}, {0x3, 0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x9, 0x4, 0x6, 0x0, 0x400, 0x7]}}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8, 0xaf, 0x6, 0x1, 0x6, 0x5, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x322b, 0x80, 0x7e79, 0x7, 0x1, 0xe6da, 0x5, 0x4]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6, 0x6, 0x48, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x7721, 0x76, 0x7, 0x7, 0x6, 0x9, 0x6021]}}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x5, 0x8}, {0x0, 0x9}, {0x3, 0x1}, {0x6, 0x5}, {0x7, 0xa}, {0x1, 0x8}, {0x0, 0x4}, {0x7, 0x9}, {0x2, 0x5}, {0x0, 0x3}, {0x7, 0x9}, {0x1, 0x8}, {0x6, 0x3}, {0x4, 0x5}, {0x0, 0x6}, {0x3, 0x2}, {0x3, 0x1}, {0x7, 0x8}, {0x2, 0x4}, {0x3, 0x6}, {0x3, 0x1}, {0x6, 0x9}, {0x1, 0x1}, {0x6, 0x7}, {0x1, 0x2}, {0x4, 0x7}, {0x3, 0x8}, {0x1, 0x4}, {0x1, 0x3}, {0x4, 0x4}, {0x2, 0x4}, {0x5, 0x9}, {0x3, 0x7}, {0x4, 0x7}, {0x5, 0x4}, {}, {0x5, 0x2}, {0x6, 0x3}, {0x7, 0x6}, {0x5, 0x5}, {0x7, 0x9}, {0x0, 0x8}, {0x7, 0x4}, {0x0, 0x9}, {0x2, 0x7}, {0x3, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0xff00, 0x59d, 0xafe, 0x1, 0x6, 0x3, 0x8]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x57}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x71}]}]}, @NL80211_ATTR_TID_CONFIG={0x4f8, 0x11d, 0x0, 0x1, [{0xe0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xc}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x5, 0x8, 0x4, 0x6, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x0, 0x3}, {0x1}, {0x6, 0x3}, {0x4, 0x2}, {0x3, 0x2}, {0x5, 0x6}, {0x7, 0x9}, {0x3, 0x5}, {0x3, 0x6}, {0x5, 0x9}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x1, 0x3}, {0x6}, {0x7, 0x3}, {0x3, 0x6}, {0x0, 0x6}, {0x7, 0x8}, {0x2, 0xa}, {0x0, 0x9}, {0x4}, {}, {0x2, 0x2}, {0x0, 0x5}, {0x3, 0x7}, {0x0, 0x6}, {0x1, 0x9}, {0x0, 0x1}, {0x7}, {0x5, 0x3}, {0x2, 0x3}, {0x2, 0x7}, {0x7, 0x8}, {0x2}, {0x5, 0x1}, {0x5}, {0x6, 0x9}, {0x3, 0x9}, {0x7, 0x6}, {0x2, 0x6}, {0x5, 0x8}, {0x3, 0x5}, {0x6, 0x6}, {0x0, 0x6}, {0x3, 0x11}, {0x7, 0x10}, {0x4, 0x9}, {0x6, 0x8}, {0x0, 0x9}, {0x5, 0x4}, {0x2}, {0x1, 0x6}, {0x6, 0x1}, {0x2, 0x5}, {0x1}, {0x0, 0x3}, {0x5, 0xa}]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x4, 0xa}, {0x3, 0x6}, {0x0, 0x6}, {0x3, 0xa}, {0x1, 0x3}, {0x4, 0xa}, {0x5, 0x9}, {0x1}, {0x7, 0x1f}, {0x5, 0x7}, {0x5, 0x9}, {0x3, 0x5}, {0x1, 0x4}, {0x3, 0x8}, {0x2, 0x9}, {0x3, 0x3}, {0x1, 0x5}, {0x7, 0x9}, {0x2, 0x5}, {}, {0x2, 0x5}, {0x0, 0x2}, {0x0, 0x8}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x6}, {0x2, 0x7}, {0x1, 0x2}, {}, {0x2}, {}, {0x7}, {0x6, 0x8}, {0x7, 0x4}]}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0xc, 0x30, 0x1, 0x52, 0x6, 0x0, 0x4, 0x5, 0x6, 0x6c, 0x744755f60bd83562]}]}]}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10000}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x3cc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x82}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3a0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x7, 0x4}, {0x0, 0x4}, {0x1, 0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x7}, {0x0, 0x6}, {0x4, 0x1}, {0x0, 0xa}, {0x6, 0x2}, {0x7, 0x9}, {0x0, 0xa}, {0x7, 0x2}, {0x7, 0x7}, {0x4, 0x5}, {0x3}, {0x0, 0x3}, {0x1, 0xa}, {0x0, 0x6}, {0x0, 0x5}, {0x1, 0xa}, {0x6, 0x1}, {0x3, 0x8}, {0x0, 0x8}, {0x0, 0xe}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0xe18e, 0x7, 0xe567, 0xfffc, 0x8, 0x5, 0xd5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0xbc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x12, 0x2, 0x18, 0x6, 0x16, 0x12, 0x2, 0x48, 0x45, 0xb, 0xc, 0x48, 0xc, 0x24, 0x30, 0x0, 0x1b, 0x6, 0x60, 0x4, 0x1, 0xc, 0x5, 0x0, 0x59, 0x1, 0x6c, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8000, 0x1, 0x8, 0x6, 0x137a, 0x7, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x0, 0xa}, {0x2, 0x9}, {0x7, 0xa}, {0x1}, {0x5, 0x2}, {0x3, 0x3}, {0x7, 0xa}, {0x3, 0x1}, {0x4, 0xa}, {0x7, 0x9}, {0x2, 0x3}, {0x0, 0x8}, {0x1, 0x2}, {0x2, 0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x8}, {0x2, 0xa}, {0x0, 0x4}, {0x6, 0x6}, {0x3, 0x8}, {0x1, 0x2}, {0x5, 0xa}, {0x7, 0x6}, {0x5, 0x7}, {0x6, 0xa}, {0x1}, {0x4, 0x6}, {0x1, 0x6}, {0x0, 0x1}, {0x4, 0x7}, {0x5, 0x3}, {0x3, 0x7}, {0x7, 0x6}, {0x1, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}, {0x7, 0x6}, {0x7, 0x2}, {0x0, 0x5}, {0x5, 0xa}, {0x4, 0x7}, {0x4, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x6, 0x3}, {0x0, 0x9}, {0x1, 0x4}, {0x6, 0x1}, {0x1, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0xc, 0x3, 0x9, 0x5f, 0xc, 0x3, 0x6, 0x24, 0x3, 0x2, 0x4, 0x18, 0x36, 0x16, 0x3, 0x48, 0x48, 0x5, 0x6c, 0x30, 0x4, 0x24, 0x60, 0x5, 0x24, 0x16, 0x6c, 0x1, 0x4, 0x7e, 0x4, 0x1b]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x9, 0x5, 0x1, 0x400, 0xf, 0x8000, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x9, 0x7, 0x8, 0x1, 0x6, 0x7fe, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7fff, 0x70f6, 0x5, 0x8, 0x2, 0x7ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0x6, 0x9, 0x7, 0x4, 0x1, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x18, 0x2, [{0x1, 0x4}, {0x6}, {0x6, 0x7}, {0x0, 0x6}, {0x2, 0x8}, {0x0, 0x5}, {0x7}, {0x2, 0x4}, {0x6, 0x8}, {0x0, 0xa}, {0x7, 0x7}, {0x7, 0x9}, {0x3, 0x3}, {0x0, 0x6}, {0x2, 0x7}, {0x6, 0x3}, {0x2, 0x7}, {0x5, 0x6}, {0x1, 0x2}, {0x3, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x81, 0x2, 0x5, 0x200, 0x2, 0x1000, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x2, 0x2}, {0x4, 0x6}, {0x5, 0x3}, {0x1, 0x5}, {0x4, 0x8}, {0x4, 0x1}, {0x0, 0x4}, {0x6}, {0x5, 0x1}, {0x4, 0x6}, {0x5, 0x4}, {0x5, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xfffc, 0x7, 0x2, 0xfff, 0x9, 0x5674, 0x86]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0x2, 0x5000, 0x2, 0x7f, 0x5, 0x1000]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x4, 0x36, 0xc, 0x60, 0xb]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x5, 0x6c, 0x24, 0xc, 0x30, 0x11, 0x18, 0x5, 0x9, 0x1, 0x18, 0x18, 0xc, 0x9, 0xb, 0x48, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0xfffb, 0x6, 0xffff, 0x10, 0x8000, 0xa2, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x0, 0x4}, {0x2, 0x8}, {0x2, 0xa}, {0x3, 0x7}, {0x3, 0xa}, {0x0, 0xa}, {0x3, 0x8}, {0x1, 0x6}, {0x1, 0xa}, {0x1, 0x7}, {0x5, 0x5}, {0x7, 0x1}, {0x4, 0x1}, {0x7, 0x4}, {0x7, 0x5}, {0x6, 0x3}, {0x1, 0x2}, {0x0, 0x8}, {0x5, 0x4}, {0x6}, {0x3, 0x4}, {0x4, 0x7}, {0x5, 0xa}, {0x2}, {0x0, 0x2}, {0x6, 0x4}, {0x4}, {0x0, 0x6}, {0x1, 0x5}, {0x1, 0x6}, {0x3, 0x3}, {0x1, 0x8}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x6}, {0x3, 0x1}, {0x4, 0x2}, {0x0, 0x1}, {0x3, 0x2}, {0x0, 0x2}, {0x7, 0x7}, {0x0, 0x8}, {0x7, 0x4}, {0x0, 0x2}, {0x2, 0x2}, {0x4, 0x2}, {0x4, 0x7}, {0x4}, {0x0, 0x4}, {}, {0x2, 0xa}, {0x5, 0xa}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x5, 0x1b, 0x4, 0x1, 0x24, 0xb, 0x60, 0x18, 0x24]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xd7, 0x2, 0xff45, 0x6, 0x0, 0x7, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0xb8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x6c, 0x9, 0x5, 0x854f1f9860b2252f, 0x1b, 0x0, 0x5, 0x30, 0x4, 0x3, 0x12, 0xe9da11d7e6412e58, 0x12, 0x3, 0x6c, 0x60, 0x30, 0x20, 0xb]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0x6e7, 0x4, 0x5, 0x6, 0x5, 0x6]}}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x4, 0x5}, {0x0, 0x2}, {0x2, 0x5}, {0x1, 0x9}, {0x6, 0x5}, {0x6, 0xa}, {0x1, 0x4}, {0x2, 0x2}, {0x5, 0x3}, {0x4, 0x6}, {0x2, 0x1}, {0x3, 0xa}, {0x0, 0x8}, {0x1, 0x5}, {0x6}, {0x4, 0x4}, {0x0, 0x6}, {0x6, 0x9}, {0x1, 0x7}, {0x5, 0x2}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0x6}, {0x6, 0x4}, {0x0, 0x3}, {0x2, 0x9}, {0x4, 0x6}, {0x5, 0x8}, {0x7, 0x4}, {0x1, 0x2}, {0x1, 0x4}, {0x3, 0x1}, {0x4, 0x7}, {0x1, 0x5}, {0x0, 0x2}, {0x0, 0x1}, {0x0, 0x4}, {0x4, 0xa}, {0x1, 0x6}, {0x1, 0x3}, {0x0, 0x2}, {0x2, 0x3}, {0x4, 0x3}]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x4, 0x1}, {0x3, 0xa}, {0x4, 0x4}, {0x1, 0x9}, {0x1, 0x9}, {0x1, 0xa}, {0x7, 0xa}, {0x1, 0x6}, {0x4, 0x4}, {0x6, 0x7}, {0x7, 0xa}, {0x6}, {0x7}, {0x0, 0x6}, {0x4, 0x5}, {0x6, 0x7}, {0x5, 0x6}, {0x6, 0x6}, {0x3, 0x2}, {0x0, 0x6}, {0x6, 0x1}, {0x0, 0xa}, {0x2, 0x6}, {0x4, 0x5}, {0x3, 0xa}, {0x2, 0x8}, {0x1, 0x3}, {0x3, 0x3}, {0x1, 0x2}, {0x4, 0x8}, {0x1, 0x9}, {0x3, 0x3}, {0x4, 0x8}, {0x0, 0xa}, {0x2, 0xa}, {0x0, 0x6}, {0x1}, {0x1, 0x3}, {0x5, 0x4}, {0x1, 0x5}, {0x6, 0x4}, {0x6}, {0x5, 0xa}, {0x0, 0x6}, {0x6, 0x7}, {0x3}, {0x2, 0x9}, {0x1, 0xa}, {0x1, 0x5}, {0x7, 0x8}, {0x3}, {0x1, 0x2}, {0x6, 0x5}, {0x6, 0x8}, {0x0, 0x1}, {0x3, 0x2}, {0x1, 0xa}, {0x1, 0x2}, {0x5, 0x1}, {0x0, 0x3}, {0x1, 0x1}, {0x4}, {0x1, 0x3}, {0x1, 0xa}, {0x6, 0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x18}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x7c, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8b}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xb}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xaab}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7f}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x50}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xf00, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x401}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcb}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8f}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x3c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x30, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x8, 0x800, 0x0, 0x7, 0x2f, 0x2, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0xfffe, 0xfff, 0x2, 0x36d, 0x69a4, 0xd7e]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x35c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x1, 0x4}, {0x1, 0x7}, {0x0, 0x6}, {0x5, 0x3}, {0x5, 0x3}, {0x1, 0x7}, {0x5, 0x6}, {0x0, 0x2}, {0x7, 0x8}, {0x0, 0x7}, {0x1, 0x8}, {0x3, 0xa}, {0x4, 0x7}, {0x4, 0x8}, {0x3, 0x4}, {0x0, 0xa}, {0x6, 0x1}, {0x4, 0x8}, {0x3, 0x3}, {0x4, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x0, 0x5}, {0x4, 0x6}, {0x0, 0x5}, {0x5, 0xa}, {0x0, 0x9}, {0x0, 0x7}, {0x1, 0x1}, {0x3, 0x9}, {0x5, 0x8}, {0x0, 0x3}, {0x6, 0x7}, {0x1, 0x5}, {0x7}, {0x5, 0xa}, {0x6, 0x5}, {0x1, 0x7}, {0x3, 0x5}, {0x5, 0x3}, {0x7, 0x3}, {0x4, 0x7}, {0x4, 0x8}, {0x2, 0x6}, {0x0, 0x7}, {0x1, 0x8}, {0x7}, {0x5, 0x1}, {0x2, 0x9}, {0x4, 0x6}, {}, {0x0, 0x5}, {0x5, 0x5}, {}, {0x5, 0x6}]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0xc, 0x4, 0x0, 0x24, 0x6c, 0x24, 0x6, 0x2, 0x5, 0x1, 0x4, 0x2, 0xc, 0xc]}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x91b3, 0x8, 0x5, 0x21d, 0x84c2, 0xf, 0x4, 0x3b]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x36, 0x16, 0x1, 0x3, 0x6, 0x36, 0x93, 0x1b, 0x48, 0x4, 0x30, 0x5, 0x18, 0x36, 0x13, 0x16, 0x9, 0x24, 0x6c, 0x12, 0x6, 0x0, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x80, 0x8, 0x7, 0x1ff, 0x8, 0x567, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x6, 0xfda, 0x9, 0x1, 0x666, 0x4000]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x12, 0x5, 0x60, 0x5, 0x16, 0x30, 0x5c, 0x5, 0x9, 0xb, 0xc, 0x1, 0x12, 0x3, 0x5, 0x1b, 0x9, 0x2, 0x1, 0x24, 0x36, 0x12, 0x2, 0x1b, 0x2, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4000, 0x770, 0x9, 0x242, 0x1000, 0x5, 0x521, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6, 0x6c, 0x9, 0x1, 0x3, 0x5, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xbf, 0x3, 0x200, 0x4, 0x8, 0x9f05, 0x5, 0xfff7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x0, 0x2}, {0x3, 0x6}, {0x0, 0x1}, {0x0, 0x8}, {0x5, 0x5}, {0x7, 0x2}, {0x0, 0x9}, {0x7, 0x1}, {0x5, 0x2}, {0x7, 0x4}, {0x6, 0x4}, {0x1, 0x9}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x9}, {0x0, 0x4}, {0x0, 0x5}, {0x6, 0x9}, {0x1, 0x2}, {0x4, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x100, 0x5, 0x8, 0xf, 0x40, 0x7, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0x0, 0x8f3, 0x4, 0x7, 0x0, 0xb]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x16, 0x2, 0x1b, 0x24, 0x1, 0x60, 0x30, 0x6, 0x24, 0xb, 0x65, 0x30, 0x12, 0x0, 0x48, 0xb, 0x36, 0x48, 0x9, 0x16, 0xc, 0x6, 0x5, 0x30, 0x16, 0x6c, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9c7, 0x2, 0x4, 0xffff, 0x3, 0xcc, 0xfff8, 0xc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1800, 0x0, 0x3, 0x2, 0x0, 0x8, 0x2, 0xaa1a]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x0, 0x2, 0x40, 0xc, 0x2, 0x8001, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x0, 0x60, 0x5, 0x30, 0x3, 0x16, 0x5, 0x33, 0x60, 0xc, 0xc, 0x18, 0x4, 0x48, 0x1, 0x36, 0x24, 0xb, 0xb, 0x1b, 0x1b, 0x3, 0x3, 0x9, 0x12, 0x60]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x6c, 0x2, 0x48, 0x36, 0x24, 0x5, 0x18, 0x6, 0x5, 0x12, 0x4, 0x60, 0x9, 0x24, 0x24, 0x36, 0x6, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x8000, 0x4, 0x5, 0x0, 0x10, 0x101, 0x1]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x3, 0x8}, {0x3, 0x3}, {0x1, 0x6}, {0x0, 0x3}, {0x6, 0x6}, {0x2, 0x7}, {0x4, 0x7}, {0x4, 0x4}, {0x4, 0x9}, {0x0, 0xa}, {0x4, 0x6}, {0x1, 0x3}, {0x4, 0x1}, {0x7, 0x6}, {0x1, 0x1}, {0x1, 0x2}, {0x0, 0x2}, {0x3, 0xa}, {0x7, 0x9}, {0x0, 0x3}, {0x5, 0xa}, {0x3, 0x5}, {0x6, 0x1}, {0x4, 0x1}, {0x5, 0x4}, {0x6, 0x8}, {0x5, 0x8}, {0x3, 0x8}, {0x6, 0x2}, {0x1, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0xefd7, 0xc, 0x1ff, 0x4, 0x7, 0x1]}}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x1a, 0x24, 0x3, 0x9, 0x3, 0x3, 0x4, 0x46, 0x3, 0x5, 0x6c, 0x16, 0x9, 0x5, 0x18, 0x48, 0x60, 0x3, 0x5, 0x12, 0x4, 0x18, 0x1b, 0x3, 0x28]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x3, 0x1, 0x6, 0x1, 0x7, 0xf000, 0x9e]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xebbd, 0x2, 0x3, 0x3000, 0x800, 0x8, 0x6]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x6c, 0x24, 0x24, 0x6c, 0x6c, 0x24, 0x24, 0x16, 0xc, 0x6c, 0x30, 0x1, 0x4, 0x36, 0xc, 0x24, 0x16, 0xb]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x84, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x6c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x3, 0x60, 0x4, 0x6c, 0x5, 0x9, 0x16, 0x48, 0x4, 0x0, 0x12, 0x2, 0x1b, 0x48, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x4, 0x5}, {0x2, 0x3}, {0x0, 0x7}, {0x7, 0x8}, {0x4, 0x1}, {0x7, 0x3}, {0x1}, {0x0, 0x8}, {0x1}, {0x0, 0x7}, {0x0, 0x4}, {0x0, 0x7}, {0x5, 0x9}, {0x2, 0x7}, {0x7, 0xa}, {0x6}, {0x4, 0x2}, {0x3, 0x5}, {0x2, 0x1}, {0x0, 0x4}, {0x0, 0x6}, {0x2, 0x6}, {0x1, 0x2}, {0x0, 0xa}, {0x4, 0x3}, {0x5, 0x9}, {0x4, 0x2}, {0x6, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x6, 0x1000, 0xfffc, 0x4c39, 0x10, 0x7, 0x4]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x18]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xfb}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfe}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x414, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x88, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x7, 0x7}, {0x6, 0x4}, {0x1, 0x2}, {0x0, 0x6}, {0x2, 0x4}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x6}, {0x5, 0x2}, {0x5, 0x1}, {0x7, 0xa}, {0x7, 0x6}, {0x1, 0x2}, {0x3, 0x8}, {0x3, 0x9}]}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x0, 0x2, 0xfffb, 0x8, 0x515d, 0xffff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x5, 0x3, 0xa161, 0x2, 0xc0, 0x5, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x0, 0x9, 0x6, 0x1, 0xb, 0x2, 0xfffb]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x38}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf9}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x34c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xe4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x34, 0x2, [{0x3, 0x9}, {0x0, 0x8}, {0x2, 0x7}, {0x7, 0x3}, {0x6, 0x5}, {}, {0x5, 0x1}, {0x0, 0xa}, {0x4}, {0x4, 0xa}, {0x0, 0x6}, {0x1, 0x7}, {0x1, 0x3}, {0x1, 0x1}, {0x3, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x7, 0x1}, {0x4, 0x4}, {0x1}, {0x4, 0x5}, {0x1, 0xa}, {0x1, 0x15}, {0x2, 0x5}, {0x1, 0x4}, {}, {0x1, 0x6}, {0x7, 0x2}, {0x4, 0xa}, {0x2, 0xa}, {0x4, 0x9}, {0x6, 0x7}, {0x5, 0x7}, {0x1, 0x1}, {0x3, 0x4}, {0x6, 0x9}, {0x2, 0x1}, {0x6}, {0x0, 0xa}, {0x6, 0x7}, {0x4, 0x8}, {0x0, 0x6}, {0x0, 0x9}, {0x0, 0x3}, {0x5, 0x9}, {0x7, 0x5}, {0x1, 0x2}, {0x4, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x54a, 0x0, 0x101, 0x9, 0x400, 0x7, 0xe, 0x5d27]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x5, 0x2}, {0x7, 0x2}, {0x1}, {0x0, 0x4}, {0x6, 0x8}, {0x0, 0x1}, {0x7, 0x2}, {0x0, 0x4}, {0x6, 0x1}, {0x5, 0x9}, {0x2, 0x7}, {0x6, 0x2}, {0x2, 0x8}, {0x4, 0x1}, {0x0, 0x6}, {0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x3, 0x1}, {0x6, 0xa}, {0x1, 0xa}, {0x0, 0x5}, {0x5, 0x3}, {0x0, 0x6}, {0x6, 0x5}, {0x0, 0xa}, {0x5, 0x4}, {0x3, 0x8}, {0x7, 0x1}, {0x1, 0x1}, {0x3, 0xa}, {0x2, 0xa}, {0x5}, {0x7, 0xa}, {0x4, 0x2}, {0x2, 0x6}, {0x1, 0x2}, {0x7, 0x3}, {0x1, 0x1}, {0x3}, {0x7, 0x5}, {0x0, 0x8}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x6}, {0x3, 0x2}, {0x6, 0x3}, {0x6, 0x6}, {0x1, 0x6}, {0x4, 0x7}, {0x7, 0x8}, {0x0, 0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0xa}, {0x7, 0x5}, {0x1}, {}, {0x3, 0x5}, {0x2, 0x9}, {0x6, 0x8}, {0x4, 0x4}, {0x5}, {0x0, 0x2}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0x30, 0x2, 0x12, 0x4d, 0x1b, 0x22, 0x4, 0x48, 0x2, 0x12, 0x30, 0xc, 0x16, 0x12, 0x11, 0x60, 0x48, 0x18, 0xb, 0xb, 0x18, 0xc, 0x9, 0x36, 0x60, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6, 0x4, 0x3, 0x401, 0x1, 0x2, 0x400]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7f, 0x9, 0xa18, 0x5, 0x1, 0xa3e, 0x8]}}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xffff, 0x4, 0xcf, 0x3e4, 0x5, 0x2, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1b, 0x5, 0x4, 0x18, 0x6, 0x24, 0x4, 0x24, 0x18, 0x3, 0x4, 0x60, 0x2, 0x6c, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x4, 0x8, 0x7, 0xfae8, 0x6, 0xff62, 0x32]}}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x100, 0x7, 0xff6b, 0xfff8, 0x1, 0x3]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x12, 0x18, 0x20, 0x36, 0x1b, 0x18, 0x6, 0x60, 0x18, 0x16, 0x4, 0x1, 0x24, 0x60, 0x36, 0x30, 0x24, 0x24, 0x36, 0x1, 0x24, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfe, 0x7, 0x8, 0x3, 0xdf, 0x4, 0x7, 0x800]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x4, 0x61, 0x3, 0x7ff, 0x1, 0x8, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x30, 0x30, 0x1b, 0x24, 0x6, 0x1b, 0x5, 0x60, 0x0]}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6, 0x6, 0x82, 0x0, 0xfffc, 0xb46e, 0x706]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0xcb06f0051cc70599}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x268e, 0xc, 0x0, 0xfff9, 0xfffa, 0x4, 0xb41, 0x10]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x8, 0x4, 0xfff8, 0x0, 0x4, 0xcd5]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x5, 0x6c, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7fff, 0x2, 0xae0, 0x2, 0xfff8, 0x8, 0x1]}}]}, @NL80211_BAND_60GHZ={0xc4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xf, 0x8eac, 0x7d, 0x70, 0x2, 0x3, 0xb3]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3}, {0x2, 0x3}, {0x3, 0x5}, {0x1, 0x3}, {0x1, 0x8}, {0x4, 0x5}, {0x0, 0x5}, {0x3, 0x3}, {0x2, 0xa}, {0x4, 0x9}, {0x0, 0x3}, {}, {0x0, 0x9}, {0x7, 0xa}, {0x3, 0xa}, {0x2, 0x5}, {0x2, 0x2}, {0x0, 0x2}, {0x0, 0x4}, {0x2, 0x2}, {0x2, 0x8}, {0x4, 0x5}, {0x6, 0x5}, {0x5, 0x6}, {0x0, 0x1}, {0x5}, {0x6, 0x2}, {0x4, 0x6}, {0x1, 0x1}, {0x1, 0x9}, {0x4, 0x4}, {0x1, 0x1}, {0x4, 0x8}, {0x0, 0x4}, {0x7, 0x1}, {0x4, 0x8}, {0x0, 0x4}, {0x0, 0xa}, {0x3, 0x5}, {0x6, 0x2}, {0x7, 0x3}, {0x7, 0x8}, {0x2, 0x2}, {0x1, 0x8}, {0x0, 0x8}, {0x7, 0x6}, {0x7, 0xa}, {0x6, 0x7}, {0x6, 0x9}, {0x0, 0x8}, {0x2, 0x9}, {0x3, 0x8}, {0x3, 0x6}, {0x6, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9480, 0x2, 0x1, 0x9e, 0x7f, 0xd, 0x7]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0x9}, {0x0, 0x5}, {0x2, 0x5}, {0x5, 0x7}, {0x2, 0x3}, {0x2}, {0x3, 0x8}, {0x2, 0x6}, {0x2, 0x3}, {0x4, 0x8}, {0x5}, {0x6, 0x5}, {0x3, 0x3}, {0x0, 0x9}, {0x1, 0x3}, {0x1, 0x5}, {0x4, 0x7}, {0x2, 0x6}, {0x0, 0x7}, {0x0, 0x5}, {0x2, 0x2}, {0x6, 0x8}, {0x2, 0x5}, {0x1, 0x2}, {0x5, 0x2}, {0x0, 0x5}, {0x5, 0x9}, {0x5, 0x7}, {0x7, 0x4}, {0x3, 0x6}, {0x5}, {0x2, 0x9}, {0x5, 0x6}, {0x0, 0xa}, {0x4, 0x9}, {0x0, 0x3}, {0x2}, {0x0, 0x3}, {0x3}, {0x2, 0x1}, {0x6, 0x4}, {0x5, 0x5}, {0x1, 0x3}, {0x2, 0x9}, {0x0, 0x9}, {0x1, 0x3}, {0x0, 0x6}, {0x0, 0x2}, {0x1, 0x2}, {0x2, 0x8}, {0x6, 0x7}, {0x4, 0x5}, {0x5, 0x2}, {0x4, 0x7}, {0x2, 0x2}, {0x2, 0x6}, {0x0, 0x1}, {0x3, 0x5}, {0x2, 0x7}, {0x4, 0xa}, {0x0, 0x8}, {0x6, 0x7}, {0x0, 0x3}, {0x6, 0x7}, {0x3, 0x7}, {0x1, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0a5, 0x1, 0xfffe, 0x943c, 0x8, 0x6, 0xbd, 0xfc0f]}}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x5, 0x4, 0x2, 0x9, 0x30, 0x1000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x3, 0x1, 0x30, 0x6c, 0x6, 0x9, 0x12, 0x24, 0x0, 0x1, 0x10, 0x3, 0x26, 0x1b, 0xb, 0x24, 0x1, 0x1, 0x60, 0x1b, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0xff, 0x400, 0xf, 0x6, 0x5, 0x7, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0xffff, 0x8, 0x2, 0x9, 0x3, 0xa, 0x8]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffffc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x5e8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x401}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1f8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x5, 0x30, 0xb, 0x1, 0xb, 0x34, 0x36, 0x36, 0x1, 0x24, 0x18, 0x9, 0x3, 0x24, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x80, 0x7, 0x0, 0x3, 0x0, 0x5, 0xfff]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x1, 0x1}, {0x4, 0x5}, {0x7}, {0x6, 0x3}, {0x0, 0x8}, {0x6, 0x5}, {0x7}, {0x4, 0xa}, {0x0, 0x9}, {0x1, 0x9}, {0x2, 0x9}, {0x6, 0x9}, {0x0, 0x6}, {0x5, 0x5}, {0x2, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x8, 0x3, 0x12, 0x9c5d, 0x6, 0x7f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x200, 0x200, 0x3b, 0x4, 0x4, 0x8, 0x7]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1, 0x7d0f, 0x6, 0x2eb8, 0x3a, 0xe, 0xf421]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x9, 0x9, 0x3, 0x2, 0x2, 0x3]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xc, 0xc, 0x60, 0xb, 0x6, 0x1, 0x36, 0x18, 0x6c, 0xb, 0x6c, 0x12, 0xc, 0x36, 0x17, 0xb, 0x30, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xf000, 0x99, 0x5, 0x0, 0xfffb, 0x7, 0x3]}}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x6, 0xa}, {0x2, 0x6}, {0x0, 0xa}, {0x0, 0x3}, {0x6, 0x6}, {0x7, 0x4}, {0x3, 0x8}, {0x5, 0x9}, {0x4, 0x6}, {0x2, 0x6}, {0x0, 0x3}, {0x4, 0xa}, {0x0, 0x5}, {0x6, 0x5}, {0x6, 0x3}, {0x2, 0x1a}, {0x6, 0x5}, {0x1, 0xa}, {}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xfffb, 0x3, 0x9, 0x3, 0x3, 0x6, 0x7]}}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x3, 0x5, 0x1, 0x400, 0x8001, 0x1, 0x40]}}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x0, 0x2}, {0x3, 0x1}, {0x5, 0x2}, {0x7, 0x5}, {0x7, 0x2}, {0x4, 0x1}, {0x4, 0x4}, {0x1, 0x3}, {0x1}, {0x6, 0x7}, {0x4, 0x9}, {0x5, 0x1}, {0x3, 0x6}, {0x4, 0x7}, {0x0, 0xa}, {0x3, 0x1}, {0x5, 0x2}, {0x4, 0x6}, {0x4, 0x4}, {0x3, 0x2}, {0x2, 0x4}, {0x4, 0x9}, {0x3}, {0x1, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x7, 0x6}, {0x1, 0x2}, {0x6, 0x1}, {0x7, 0x9}, {0x2, 0x9}, {0x7, 0x3}, {0x4, 0x6}, {0x5}, {0x1, 0x4}, {0x5, 0x3}, {0x5, 0x3}, {0x0, 0xa}, {0x4, 0x7}, {0x0, 0x2}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x3}]}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x6}, {0x4, 0x2}, {0x7, 0x9}, {0x1, 0x6}, {0x3, 0x4}, {0x5, 0x3}, {0x0, 0x8}, {0x5}, {0x4, 0x3}, {0x4}, {0x5, 0x9}, {0x7, 0x9}, {0x0, 0x4}, {0x0, 0x6}, {0x0, 0x1}, {0x7}, {0x6, 0x7}, {0x5, 0x1}, {0x7, 0x6}, {0x2, 0x8}, {0x5, 0x5}, {0x0, 0x9}, {0x1, 0x1}, {0x6, 0x4}, {0x5, 0x3}, {0x0, 0xa}, {0x0, 0xa}, {0x6, 0x3}, {0x7, 0x4}, {0x4, 0x2}, {0x1, 0x7}, {0x2, 0x9}, {0x3, 0xa}, {0x1, 0x1}, {0x2, 0x9}, {0x4, 0x8}, {0x1, 0x6}, {0x6, 0x1}, {0x4, 0x1}, {0x6, 0x5}, {0x0, 0xa}, {0x4, 0x1}, {0x4, 0x5}, {0x4, 0x7}, {0x7, 0x5}, {0x6, 0x1}, {0x1, 0x7}, {0x0, 0x5}, {0x6, 0x5}, {0x2, 0x5}, {0x4, 0x6}, {0x7, 0x1}, {0x4, 0xa}, {0x2}, {0x1, 0x4}, {0x2, 0x9}, {0x5, 0x3}, {0x2, 0x4}, {0x0, 0x3}, {0x1, 0xa}, {0x5, 0x7}, {0x6, 0x1}, {0x0, 0x7}, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0x3}, {0x4, 0x9}, {0x7, 0x3}, {0x7, 0x8}, {0x1, 0x3}, {0x2, 0x5}, {0x2, 0x6}, {0x3, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x120, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x108, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x5, 0x3}, {0x1, 0xa}, {0x0, 0xa}, {0x2, 0x7}, {0x5, 0x6}, {0x6, 0x3}, {0x1, 0x8}, {0x5, 0x2}, {0x4, 0x5}, {0x0, 0x2}, {0x5, 0x3}, {0x0, 0x7}, {0x0, 0x5}, {0x1}, {0x0, 0x1}, {0x4, 0x8}, {0x0, 0x5}, {0x5, 0x6}, {0x4, 0x7}, {0x2}, {0x1, 0x6}, {0x6, 0x1}, {0x2, 0x5}, {0x3, 0x3}, {0x4, 0x2}, {0x0, 0x7}, {0x4, 0x4}, {0x1, 0xa}, {0x0, 0x2}, {}, {0x5, 0x3}, {0x4, 0x2}, {0x1, 0x1}, {0x6, 0x6}, {0x2, 0x4}, {0x3, 0x9}, {0x1, 0x2}, {0x5, 0x3}, {0x6, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0xa}, {0x6, 0x2}, {0x3}, {0x0, 0x4}, {0x7, 0x9}, {0x7, 0x8}, {0x1}, {0x2, 0x9}, {0x2, 0x2}, {0x2, 0x8}, {0x6, 0x1}, {0x2, 0x7}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x24, 0xc, 0x6b, 0x36, 0x30, 0x3, 0x30, 0xc, 0x24, 0x68, 0x30, 0x6, 0x36, 0x9, 0x9, 0xb, 0x9, 0x6c, 0x9, 0x6c, 0xc, 0x6c, 0x6c, 0x1b, 0xc, 0x9, 0x9, 0x3]}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x5, 0x1}, {0x6, 0x5}, {0x6, 0x2}, {0x5, 0x1}, {0x1, 0x5}, {0x3, 0x6}, {0x6, 0x4}, {0x4, 0x3}, {0x3, 0x9}, {0x6, 0x6}, {0x5}, {0x0, 0x9}, {0x4, 0x4}, {0x4}, {0x7, 0x5}, {0x3, 0x5}, {0x1, 0x5}, {0x2, 0xa}, {0x4, 0x2}, {0x4, 0x4}, {0x3, 0x9}, {0x6, 0xa}, {0x4, 0x1}, {0x6, 0x5}, {0x5, 0x8}, {0x0, 0xa}, {0x6, 0x8}, {0x7, 0x6}, {0x2, 0x1}, {0x7, 0x4}, {0x0, 0x8}, {0x4, 0xa}, {0x1, 0x9}, {0x0, 0x8}, {0x4, 0x3}, {0x0, 0x3}, {0x2, 0x1}, {0x1, 0x7}, {0x0, 0xa}, {0x2, 0x6}, {0x1}, {0x0, 0x2}, {0x5, 0x1}, {0x3}, {0x1, 0x7}, {0x2, 0x5}, {0x0, 0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x4}, {0x6, 0x8}, {0x2, 0x8}, {0x1, 0x4}, {0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x5, 0x8}, {0x1, 0x5}, {0x1, 0x5}, {0x4, 0x5}, {0x2, 0x1}, {0x7, 0x1}, {0x1, 0x1}, {0x1}, {0x6, 0xa}, {0x2, 0x2}, {0x3, 0x9}, {0x5, 0x3}, {0x0, 0x2}, {0x3, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x7, 0x3}, {0x4, 0x1}, {0x3, 0xa}, {0x6, 0xa}, {0x3, 0xa}, {0x2, 0xa}, {0x1}, {0x5, 0x2}, {0x3}, {0x0, 0xa}, {0x4}, {0x1, 0x3}, {0x1, 0x4}, {0x0, 0x7}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x1}, {0x5, 0x5}, {0x0, 0x6}, {0x6}, {0x0, 0x1}, {0x2, 0x9}, {0x6, 0xa}, {0x2, 0x1}, {0x7, 0x2}, {0x0, 0x8}, {0x4, 0x7}, {0x4, 0x5}, {0x7, 0x9}, {0x7, 0x1}, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x8}, {0x3, 0x4}, {0x4, 0x3}, {0x7, 0x7}, {0x0, 0x9}, {0x4, 0x7}, {0x6, 0x4}, {0x0, 0x5}, {0x0, 0x4}, {0x4, 0xa}, {0x0, 0x3}, {0x6, 0x9}, {0x1, 0x9}, {0x3, 0x8}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8f}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x288, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1b, 0x5, 0x0, 0x3e, 0x4, 0x30, 0x6, 0x4, 0x12, 0x4, 0x9, 0x2, 0x12, 0x60, 0x24, 0x69, 0x48, 0x6, 0x16]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x7, 0x1}, {0x4, 0x6}, {0x7, 0xa}, {}, {0x5, 0x3}, {0x6, 0x1}, {0x0, 0x5}, {0x4, 0x6}, {0x2, 0x9}, {0x4, 0x9}, {0x5, 0x4}, {0x0, 0x8}, {0x0, 0x7}, {0x7, 0x2}, {0x5, 0x8}, {}, {0x6, 0x7}, {0x0, 0x9}, {0x2}, {0x7, 0x2}, {0x7, 0x1}, {0x3, 0x6}, {0x1, 0x4}, {0x5, 0x3}, {0x7, 0x8}, {}, {0x2, 0xa}, {}, {0x3, 0x7}, {0x6, 0x1}, {0x3, 0x5}, {0x1, 0x4}, {0x5, 0x2}, {0x3, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf03, 0x1, 0xfff, 0xbcf5, 0xfe01, 0x3, 0x408]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xded, 0x2, 0xc1f8, 0x4, 0x0, 0xfffb, 0xffff, 0x5]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff8, 0x2, 0x800, 0x5, 0x5ad, 0x8a31, 0x401, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9251, 0x0, 0x0, 0x3, 0x2d34, 0x7a, 0x5, 0x8]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x5, 0x4, 0xe, 0x16, 0x24, 0x3, 0x16, 0x60, 0x6c, 0x24]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x6}, {0x2, 0x9}, {0x4, 0x7}, {0x0, 0x1}, {0x2, 0x5}, {0x3, 0x3}, {0x4, 0x2}, {0x7, 0x5}, {0x0, 0x9}, {0x4, 0x3}, {0x1, 0x3}, {0x0, 0x7}, {0x6, 0x1}, {0x7, 0x3}, {0x5, 0x8}, {0x4, 0x5}, {0x3, 0x4}, {}, {0x3, 0xa}, {0x5, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x6}, {0x1, 0x3}, {0x1}, {0x5, 0x4}, {0x0, 0xa}, {0x6, 0x7}, {0x2, 0x7}, {0x4, 0x4}, {0x6, 0x3}, {0x3, 0xa}, {0x3, 0x7}, {0x4, 0x5}, {0x3, 0x7}, {0x1, 0xa}, {0x1}, {0x7, 0x7}, {0x1, 0x4}, {0x3, 0x7}, {0x7, 0x9}, {}, {0x6, 0x3}, {0x2, 0x7}, {0x1, 0x1}]}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x60, 0xb, 0x3, 0x60]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0xe1d3, 0x9, 0x8, 0x1ff, 0x4, 0x2, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9c1b, 0x401, 0xdbc, 0x4, 0x5, 0x2, 0x5, 0xe]}}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x3, 0xa}, {}, {0x1, 0x6}, {0x4, 0x4}, {0x1, 0x5}, {0x0, 0x7}, {0x2, 0x6}, {0x1, 0x1}, {0x3, 0x2}, {0x6, 0x2}, {0x4, 0xa}, {0x7, 0x2}, {0x3, 0x5}, {0x1}, {}, {0x6, 0x5}, {}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0x9, 0x4, 0x30, 0x1, 0x6, 0x3]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x7, 0x5}, {0x2, 0x4}, {0x2, 0xa}, {0x3, 0x6}, {0x1, 0x4}, {0x3, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0xb, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1a7a, 0x3, 0x2, 0xfff8, 0x3ff, 0x6880, 0x9]}}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x0, 0x5}, {0x7, 0x4}, {0x1, 0x3}, {0x1, 0x9}, {0x6, 0x5}, {0x1}, {0x6, 0x2}, {0x4, 0x2}, {0x3, 0x8}, {0x1, 0x8}, {0x3, 0x2}, {0x5, 0x2}, {0x2, 0x8}, {0x7, 0x9}, {0x6, 0x9}, {0x4}, {0x3, 0x7}, {0x1, 0x2}, {0x6, 0x4}, {0x3, 0x6}, {0x7, 0x7}, {0x5, 0xa}, {0x1, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x6}, {0x6, 0x4}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x24, 0x7e, 0x9, 0x2, 0x6, 0x24, 0x9, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x7ff, 0x4d73, 0x3, 0x2, 0x34, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0xf, 0x6, 0xff, 0x49, 0x8, 0x2, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xaa1, 0x7f, 0x6, 0x1, 0xbfe, 0x2, 0x52af, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x88}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}]}]}, @NL80211_ATTR_TID_CONFIG={0x1a4, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2c}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10001}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x4}, {0x154, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xaf}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x11c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x700, 0x7, 0x6, 0x842, 0x2e, 0x4, 0xfff8, 0x1000]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0x4, 0x3, 0x8001, 0x7382, 0x4]}}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0xb, 0x6c, 0x48, 0x28, 0x47, 0x5, 0x6c, 0x48, 0x24, 0x18, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3ff, 0xfff7, 0xfff7, 0x8f, 0x40, 0x5]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x3, 0x2}, {0x2}, {0x7}, {0x0, 0x9}, {0x2, 0x1}, {0x6, 0xa}, {0x3, 0xa}, {0x7, 0x9}, {0x4, 0x7}, {0x0, 0x1}, {0x7, 0x3}, {0x5, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x0, 0x1}, {0x6, 0x6}, {0x4}, {0x3, 0xa}, {0x6, 0xa}, {0x2, 0x7}, {0x1, 0xa}, {0x5, 0x3}, {0x0, 0x5}, {0x3, 0xa}, {0x7, 0x4}, {0x0, 0x7}, {0x3, 0x1}, {0x0, 0x2}, {0x1}, {0x7, 0x6}, {0x3, 0x3}, {0x4, 0x8}, {0x2}, {0x2, 0x4}, {0x4, 0x8}, {0x0, 0xa}, {0x2, 0x5}, {0x4, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x0, 0x5}, {0x1, 0x9}, {0x0, 0x6}, {0x0, 0x7}, {0x6, 0x3}, {0x3, 0x8}, {0x5, 0x8}, {0x3, 0xa}, {0x4, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x1, 0x80, 0x1, 0x0, 0x6, 0x1, 0x2]}}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x40f, 0x400, 0x3, 0x7, 0x829d, 0x100, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x8001, 0x7f, 0x5, 0x7, 0x5585, 0xfffa]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x59}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x11c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x84}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xab}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0xe0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x14}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0xb, 0x60, 0x36, 0x48, 0x48, 0x24, 0xb, 0x12, 0x4, 0x30, 0x30, 0x36]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x0, 0x2, 0x9, 0x1b, 0x1, 0x48, 0x4, 0xc, 0x48, 0x1, 0x18, 0x1, 0x60, 0x16, 0xb, 0x6, 0x12, 0x4, 0x4, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x7, 0x8}, {0x1, 0x5}, {0x3, 0x9}, {0x5, 0x5}, {0x2, 0x3}, {0x7, 0x3}, {0x6, 0x9}, {0x4, 0x8}, {0x4, 0x3}, {0x1, 0xa}, {0x3, 0x5}, {0x1, 0x7}, {0x6, 0x3}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x60, 0x1b, 0xc, 0x9, 0xb, 0x36, 0x24, 0x41, 0x6c, 0x60, 0x3, 0x1, 0x18, 0x1b, 0x0, 0x12, 0x4]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1000, 0xb, 0x46, 0x400, 0x401, 0xa]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xcb8, 0x0, 0x200, 0x4, 0x200, 0xd8, 0x5254, 0x7b7]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x4}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x54}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xd0, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1a}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x77}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6a}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3d8a}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffffa}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x4}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd9}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}]}, 0x1a5c}, 0x1, 0x0, 0x0, 0x40080c4}, 0x40045) socket(0x27, 0x5, 0x5) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000002880)={0x0, 0x7}, &(0x7f00000028c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000002900)={r10, 0x9}, &(0x7f0000002940)=0x8) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f0000002a40)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002a00)={&(0x7f00000029c0)={0x1c, r8, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4c890) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000002a80)=0x1, 0x4) 1m38.241553979s ago: executing program 3 (id=2720): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x484880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'ip6_vti0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1000}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'netpci0\x00', 0x400}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280a01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4008014) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}]}, 0x10) socket(0x27, 0xa, 0x4) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x2c020400) bpf$LINK_DETACH(0x22, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x4e23, 0x6, 'nq\x00', 0x1, 0x5, 0x4a}, 0x2c) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 1m38.078666254s ago: executing program 2 (id=2722): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020400) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x3, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xa00}, {{}, {}, {0x5, 0x0, 0xb, 0x2}, {}, {0x4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x1001, &(0x7f0000002e80)=""/4097, 0x0, 0x9, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0xa0, 0x3e, 0x10b, 0x70bd2a, 0x25dfdbfd, {0x4, 0x7c}, [@generic="bd595e2fa86477eed6cde9914874a07ff16cbdee743236acdd3c946f749d7a05fe511429c8659b93134f70b0e981f0e9265801ac606ab1daefe29c9e27eaf61cbf39966b0cb8fa0d808a800a6ce74dfbb3e54fec6cb1fbf2f224e89d35eac352625523f1097ff853c4b5377f748529a9cc1c0d3adac9", @nested={0x4, 0x28}, @typed={0x8, 0x133, 0x0, 0x0, @fd}, @typed={0x8, 0x6f, 0x0, 0x0, @uid}]}, 0xa0}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r5, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) unshare(0x28000600) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x79e7469dcf10f3e}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c6bcecc", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fedbdf25040000000800030001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x8001) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x7800, 0x10, 0x9e, 0x200, {{0x5, 0x4, 0x3, 0x2, 0x14, 0x64, 0x0, 0x4, 0x29, 0x0, @local, @empty}}}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r7, &(0x7f0000000880)={&(0x7f0000000040)={0xa, 0x4e21, 0x2, @private2, 0x4000000c}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000200)="8000e859667fbc13", 0x8}], 0x1, &(0x7f0000000100)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x33, 0x2, 0x2, 0x2, 0x0, [@empty]}}}], 0x28}, 0x8040) 1.438283701s ago: executing program 3 (id=2725): bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x8, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0500000001f01f007f0000007b00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000001000000000824c0000000000000000000000000000000062146fc4eaae61a0125e78f43d9d86b47d6beab702a0aa03cb1f83cf13627bf017a15bb8079274ebf90a6019668f2b0937c660a869779a636a010ff4768558b9711a84487016b0961e0c483744d421d3a62d4664"], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000001c0)=0x475c, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd000311000400000000006eec00be10a42f01fe8000000000000000000000000000aa"], 0x10da) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000080), 0x0}, 0x20) r2 = socket(0x10, 0x803, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpu.idle\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f00000002c0)=0xe, 0x12) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000190001000000000000000000802090000011000500f2ffff070002"], 0x2c}, 0x1, 0x0, 0x0, 0xa800}, 0x0) listen(r4, 0x3) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000300)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x16, 0x4, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x7ffffffe, 0xfbc}, @nop, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x1, 0x8a}, @exp_fastopen={0xfe, 0x10, 0xf989, "444e38caa511b9096239c28c"}, @exp_fastopen={0xfe, 0x4}, @md5sig={0x13, 0x12, "0c39e122bd2f7556512830127a3fa7b7"}]}}}}}}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x69, 0x8, 0x2}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000], [], 'wg1\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x0, 0x5, 0x0, 0x1c}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0xc8ba, 0x7, 0x9, 'syz1\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x310) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0x20000000) sendmmsg$inet(r7, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000740)="3fe77ecff9979b66907a0a4b5871f69e782109cf319cd8ecdbd674795f9a5029b9e7644bac7107", 0x27}, {&(0x7f0000000780)="86d2da994ba8a7c9868cba900ab1605a6caa2cd2cb16fc", 0x17}, {&(0x7f0000000880)="ca95fd562be248058c428ff9a0857d138bb1690519004b371ff6c2c4c3ee1a4174b9dcd9433ba1f9c858e58ee7aab2d6e4639b18f5519bcafa3352e264f973ab56a73d92103e1840edbedc40bfbf151af101620cd026af71659acd91b315652d35a3a8a91c829e4af49d02e2b40ff33adc25d6981d44804473e5101e220d3fcdddc038541d3d9f4f5aaa0d4b77b7f2b785d36a547f1abb1e078abc39ff2899a11177674ab2128208eaddf01bffb1c446b87a5938e339425d75f091a449a9022f142ed527cc92c4e4bc8576b121ba5f7b7c423502195cb70d5f9d919f8c932e5207435e2727a67d7deb937c24c593", 0xee}, {&(0x7f0000000980)="6cad737b3a41854385321c51692f0786055cf846690f4a3183a661095bb82c66f7f1220a2fa45651f9bbc7ceeb96e3a27631a88fb21776644e594502af340b18576624d3ec93b6ce378247a3d7b97e45a84e497a9663f943ee70f0681876c1950eaadfee93ec868cef6854a77df69723ab91d6c4d8b9240091a4055714bdcea4d00712952b7714d04c5674fc385863518dbbf4a5657ce41994b8b64c69712a68a7528e8c33a22301bbabfbc3cc31af20ca4d6766e0712be27bede26ceb21a3022bddebe0396ebd45f37acfdcb1c3b2c9d0a0e6fb69d44d829d9be74f4c7522b3e34138a3bda965f3ed7cdd", 0xeb}, {&(0x7f0000000a80)="6e2ae21c27e6b759440ecccc7e67d77554e42e35cc4389b9f52fa5b2a8e86210974a4e30ed33616f052bbb3cc2672067356d8ea7abe548872ab1c4025d819d147bfdc7489733e8d8bbc8807b630c7e032c76e2eca5a72c67fae07d1f3b09005abe6d5019df29102a64730f5059aea4e64090cb0e056d96230741579365d5c2369901c91ce909da259081a71b", 0x8c}, {&(0x7f0000000b40)="0f0fd81bc25667f47255328881aa4b4e3625406cb5db3d1eaf0f3cc7eca6b046403076186c771cb0bf15c8d2a63963cca57390e2ddfb6bbbd8e722b183d61e8d1652d6c6b00ca0f7d1185646aad5f96e7e84635b48d62edfcfeca0d79f69be2a7bad473392bcbef48e1a52e2ec385f75420d04100038f495d97a194294369b42a2d661cfca05cca7007986cb4c79e7dfc691a3d220c1b15aada9c812a4871327732d2d0aaafbcadd649f195a91648efae44cf2f20559cca0a803a6f4f90476dd5522db9b59e824c7162bc20bdfa38ab2fc81180a8cd93d", 0xd7}, {&(0x7f0000000c40)="e64d2b93c9d27cdf02f3833631934031ea796c48a017b4307214726f0fc84e506e3848b57005668dea7284e3b7f5700933f87b353f5dee86742774075816287e6d89eea57d37e1edf377eefd7f15d72e55e515362046aa397365895cdf352681abd67c8528f6b92b00804b32a3e8b1700ace42599af6463a53686ab564b4b5a0bd274ebd6a25e69254b0b1bcd36737333d2e92940e24a660c7dcec49082866b983f9357ac59218660ebfbc", 0xab}], 0x7, &(0x7f0000002880)=[@ip_retopts={{0x50, 0x0, 0x7, {[@ssrr={0x89, 0x1b, 0xb4, [@local, @rand_addr=0x64010102, @local, @empty, @local, @multicast2]}, @ssrr={0x89, 0x23, 0x4b, [@local, @multicast1, @multicast1, @local, @local, @dev={0xac, 0x14, 0x14, 0x3e}, @local, @empty]}, @end]}}}, @ip_retopts={{0x134, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0xf4, 0x0, 0x9, [0x6, 0x3]}, @cipso={0x86, 0xf, 0x8f77263c4b7aaae1, [{0x5, 0x2}, {0x7, 0x7, "998997f85a"}]}, @lsrr={0x83, 0x2b, 0xb8, [@loopback, @private=0x75, @loopback, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, @dev={0xac, 0x14, 0x14, 0x3d}, @remote, @private=0xa010101, @private=0xa010101]}, @ssrr={0x89, 0xf, 0x3e, [@empty, @dev={0xac, 0x14, 0x14, 0xb}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x13, 0x2f, [@dev={0xac, 0x14, 0x14, 0x21}, @dev={0xac, 0x14, 0x14, 0x1a}, @local, @dev={0xac, 0x14, 0x14, 0x25}]}, @timestamp_addr={0x44, 0x44, 0xb0, 0x1, 0x3, [{@broadcast, 0x5}, {@multicast2, 0x40}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@multicast2, 0xa}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@rand_addr=0x64010100, 0x86b1}, {@rand_addr=0x64010101, 0x1}, {@remote, 0x800}]}, @noop, @ssrr={0x89, 0x1b, 0x2d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @private=0xa010100, @rand_addr=0x64010100, @loopback]}, @cipso={0x86, 0x56, 0x1, [{0x7, 0x4, "a255"}, {0x5, 0x9, "619b9af40d750c"}, {0x7, 0x5, "2e7fe2"}, {0x0, 0x5, "b0e8a1"}, {0x0, 0x3, "f8"}, {0x1, 0x9, "f942c04388ab4d"}, {0x0, 0xd, "8f37f94f77f27abf4153ac"}, {0x1, 0x10, "7aa37900214a7dd2ac2a35cdbe4a"}, {0x2, 0x10, "e8d255787117e44fd1ed8e3e9eee"}]}, @ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fffffff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7ff}}, @ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe55}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3, 0xb8}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x248}}, {{&(0x7f00000007c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000fc0)=[{&(0x7f00000011c0)="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", 0x1000}], 0x1, &(0x7f0000001000)=[@ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x100006}}], 0x30}}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001040)="8af0bf63411747858d4d6b006a7610e3fd9780f2a9451e45155f60ba0d50a858b26e2a0989914e61508947641663561d79bd3edfa42eb6886c4f03d8732d9c1575b67b9f3d20408f661fce1a5e3c8349", 0x50}, {&(0x7f00000010c0)="29fd3138623f11084c9a9a4ecfdcbb08ece008c6e653406596a55fedb4dc4e61f1d3fd3bb68f60bccb094534104ec8", 0x2f}, {&(0x7f00000021c0)="3aea8c7f3b127e75fe071cb056015daf781d112ee7661b9d99fd5b46dc10d08e56dbb0549ff56566c4c64e0ee237bcf4ef8fcc4bf3d007b4f0e23f1c490c5f4a8e67a7829eeb5ba3737cae013add76969c1de239f5faa5af51cd3d50bfe1d0c1c525db8e09c56d3e22d6222416e74b746a6d864d6b366ad4277c21f0b5517c642e2d5c9fb3dac335a424becde493daa8c4a40b7928604f4df590289851d771fdf89b9d642b91d67343a64faa18d23e264e3ba93f5949d438f780bf89d464940a7a", 0xc1}, {&(0x7f0000001100)="5a50a913829b4597f5a25e8009b6f6cb3b38fd850d473249deee941676e8c22a53260437ebbb462a2be4d9becb65dbcf7e73b819e452fb984c88100b3ef986b1da19ccfd0e52b632d376daf7e3d7", 0x4e}, {&(0x7f00000022c0)="2c4f49e3b7e375398b3670581ed97ae264749160e2acc4b6f8a0fafb4639edd3a42478177a7c3d0119783ec4923dc756792cbb128cc165", 0x37}], 0x5, &(0x7f0000002380)=[@ip_retopts={{0xc0, 0x0, 0x7, {[@end, @cipso={0x86, 0x65, 0x2, [{0x0, 0x6, "188b581b"}, {0x0, 0xf, "ef99ab157345b6164a6297f26f"}, {0x5, 0x8, "794dc62d4e41"}, {0x7, 0x10, "828461f5f94e84c6f362c9eb8930"}, {0x8, 0xe, "16ce29bcf25552ed234be723"}, {0x1, 0x12, "171fd6de37136f7fc0a33400ffe8ec99"}, {0x0, 0x12, "598f4443363ca37396f0440000006871"}]}, @end, @timestamp={0x44, 0xc, 0xb8, 0x0, 0xe, [0x0, 0x45ad]}, @ssrr={0x89, 0x13, 0x8d, [@broadcast, @empty, @broadcast, @multicast2]}, @rr={0x7, 0x17, 0xb0, [@remote, @loopback, @remote, @private=0xa010102, @rand_addr=0x64010101]}, @cipso={0x86, 0x12, 0x2, [{0x2, 0xc, "be68cda2d8a8c0e2997a"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x894}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0xf0}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002480)="71f022da8ab69f08096b8f9a12cb04f0b5aea97b0be3fbcbb2369d8702340dd0adf7045cccaa7ca4c921676ae958fd5933eb8aa5c99a4e9569dd927842129943a07a329faf8fe4ac8460f50665dfbe6d5e06df5d8781c8b9fc7f349b412ca951e17376873865bcc6006f04d424db3b68dec97777030a965c8eb5092042792d403e9bf7", 0x83}, {&(0x7f0000002540)="ebe3eed190a0b2c2b0ce69915c9f09c93102a819d3086ca386899804be8995a23bce9075d22029b4618177fb30ee8588935abca5b66c0faeeb1b829c308ba01e6a35a7acb814c0255dc60f95debbbd0e0bf3bdb12e3e79cd11d798d3ff760b8f3a79ff516b", 0x65}, {&(0x7f00000025c0)="8767e9ca265aea4da661a40e9bb218ed0b", 0x11}, {&(0x7f0000002600)="6164a253affe2b6f002cfcb7501f91c3a655ae019197ebe0e0d6d23f1a4ed36d921fb5961a6c24d10f176a66a99f308fa4c813c44a77a0105b543e8e7d7571ad67c7a7e2128c59fb1a5acfbc3e55562d3b97d1f75d65af9f37ae8be19665fb2abac1fca3bce045559b028d7341a3faf86210334dd8027d16ba676b174b60a374b1d909a484e422bb034bb1d22ac532c1017a534e5ae432729884037cae39ffc6dd00f12d2a94540965050c0e342cc2cf7d41759adc85f6d690e8ef527054d6cae953396dabdcde8e7df9307ac50af161d343fb1fde0e6a", 0xd7}], 0x4, &(0x7f0000002740)}}], 0x4, 0x0) 1.437648223s ago: executing program 4 (id=2726): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) listen(r0, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r1, 0x3) close(0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {0x3, 0x3, 0x6, 0xa, 0x5, 0xfe00, 0xa1}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20000400) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r5, 0x103, 0x3, &(0x7f00000000c0)=0x401, 0x4) close(r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a70008000340000000011400000011000100"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x48, &(0x7f0000000380)=ANY=[@ANYRES64=r2], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 1.433212638s ago: executing program 3 (id=2728): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') (async) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6362, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xffffffffffffff36, 0x0, 0x10, 0x209, 0x7, 0x8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000180)="bad330fbc9b554000400004fcdf6", 0xe, 0x2000c005, &(0x7f00000001c0)={0x11, 0x1, r2, 0x1, 0xd8, 0x6, @local}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) unshare(0x6a040000) (async) unshare(0x6a040000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB=' '], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.432699812s ago: executing program 4 (id=2729): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000001001f6ff0e002000c76a55c900000000000000000000000000a1f50000000180f0130000000000000000000009b7d42ae36312a7763981c17de5f2498a6ec713646a7ef406ea8b76f2400f9dd47d7c0c06045009df809e2d7d97838569a784c8066ee0ee54c59e04afa64f49b5e982a9a95df029ccbd3d35e852d550af6068d26c14d25a83ef0d06900c87a5f154c6db58a3197810c261a114e165435467c879"], 0xfffffffffffffe4b}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910280000000000de500000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 1.430894648s ago: executing program 4 (id=2730): ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000080)=0x80, 0x80800) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000980)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000940)={&(0x7f0000000140)={0x7a8, r1, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x1b, 0x80, [@rann={0x7e, 0x15, {{0x0, 0x71}, 0x7, 0x5e, @device_b, 0xa, 0x5, 0x2}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x1c2, 0x80, [@perr={0x84, 0x12e, {0x1, 0x12, [{{}, @device_a, 0x1, @void, 0x27}, {{}, @device_a, 0x8, @void, 0x12}, {{0x0, 0x1}, @device_b, 0x1, @value, 0x37}, {{0x0, 0x1}, @broadcast, 0x6f2, @value=@device_b, 0x22}, {{0x0, 0x1}, @device_a, 0x0, @value=@device_b, 0x1a}, {{}, @device_a, 0x9, @void, 0x3e}, {{0x0, 0x1}, @broadcast, 0x7, @value=@broadcast, 0x2a}, {{0x0, 0x1}, @broadcast, 0x8, @value, 0x38}, {{}, @device_a, 0x1ff, @void, 0x1b}, {{}, @device_a, 0x9, @void, 0x6}, {{}, @broadcast, 0x7ff, @void, 0x30}, {{0x0, 0x1}, @device_b, 0xd203, @value=@broadcast, 0x2c}, {{0x0, 0x1}, @broadcast, 0x9, @value, 0x11}, {{0x0, 0x1}, @broadcast, 0x80000000, @value, 0x4}, {{}, @broadcast, 0xfffffff8, @void, 0x26}, {{0x0, 0x1}, @device_b, 0x5, @value, 0x23}, {{0x0, 0x1}, @broadcast, 0x4, @value=@device_b, 0x22}, {{0x0, 0x1}, @device_a, 0x7f, @value=@broadcast, 0x24}]}}, @preq={0x82, 0x88, {{0x1}, 0x2, 0x9, 0x3, @broadcast, 0x9, @void, 0xd, 0x80000000, 0xa, [{{0x1, 0x0, 0x1}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x7}, {{0x1}, @device_b, 0x3}, {{0x1, 0x0, 0x1}, @device_a, 0x7}, {{0x1}, @device_a, 0x10000}, {{}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b}, {{0x0, 0x0, 0x1}, @device_b, 0xdc8}, {{0x1, 0x0, 0x1}, @device_a, 0xe4a5}, {{}, @device_b, 0x9}]}}, @ibss={0x6, 0x2, 0x1}]}, @NL80211_ATTR_BEACON_HEAD={0x149, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @device_a, @broadcast, @from_mac=@device_b, {0xc, 0xe}}, 0x3, @random, 0x0, @val={0x0, 0x1e, @random="d7e5c15469e2755dbf6bffdffb428e9685a5724cb2577c93f6bb339bbbab"}, @val={0x1, 0x6, [{0x4, 0x1}, {0x16, 0x1}, {0x9}, {0x12}, {0x56, 0x1}, {0xb, 0x1}]}, @val={0x3, 0x1, 0x6c}, @void, @void, @val={0x5, 0x13, {0x2, 0x8b, 0x52, "2f117c783660487ef745530956ed1725"}}, @val={0x25, 0x3, {0x1, 0x32, 0x10}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x2, 0x0, {0x74a, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x8, 0xfff, 0xe}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0xc}}, @void, [{0xdd, 0x6e, "9833f5605401d772cd000079044ae0d79ad08e1951479c7a3e8de525639328dac03ae7163201ff28d02a7941d71587257aab9b85dede6f730b13aab2f1366b310d93bc255f46304e5c107a428f035c117d083ad17f49f211bb914b23c453aed7da4930088e2f0f2a080111b50ef8"}, {0xdd, 0x42, "e762d5eeb0886cadcf3ebeca81ec9d85a19043afe9660667af44aeb6f3d6e39b4bd54e91840cd342af6d4b32c9f38d6d41dc535c3a4f4f7ea6c9e4739f99cc3a6f44"}]}}, @NL80211_ATTR_BEACON_HEAD={0x45c, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x7}, @device_b, @device_b, @from_mac=@device_b, {0x7, 0xccf}, @value=@ver_80211n={0x0, 0x2, 0x3, 0x2, 0x0, 0x2}}, 0x401, @random=0x1, 0x8000, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x2, [{0x6c, 0x1}, {0x60, 0x1}]}, @void, @val={0x4, 0x6, {0x42, 0x6e, 0xff81, 0xff}}, @void, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0x85, 0xa9, 0x1}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa, 0x40}}, @void, [{0xdd, 0x25, "98d696b840531d8d84e0ff130bad80535c66b2c5be903a7eafc9359538b4700f6b005c948b"}, {0xdd, 0x7c, "02077168214be56762424c1c1606785c8965dbe6d31b5c2daa559eb5a312d41a16e3f7865ad10fe9a47e84d2a9ca474e93add9731518fb51187eecd00fb2ab8252ada06d430844bb84f05e6d3451835670ed483a368a04c146cd8644dcf5672cd10fd4b0439e771b0ec0a645ba3e7d789f968574721f6092969969f5"}, {0xdd, 0xeb, "842327794909b753809b279694c5164b16028e5e27a5b94267356e31faf6fdd7493ff2ea36ad516991d7759e4cdc6376fd448730dce5b87eb040a074e380dac25fc837650710303a78e6710f18dcdc3c6f759d012b4e5e05acbf465085b3e08bb029f086a575c5dfa228f81cc7069c6398cf13e35b2589b6bb24dcafa5d7792286a2741de36c12fda118fa306cbe94ea35e911ff95eba732473d50f2d588c4d5b71b54e6c78458bced70593f04bc0bc118c9ccd7ce6af61ce537350291a6eb79b499c677cd018359d7a574b83c1f8d587567c64d393a7e778995112cea4c0529acdf406aeae68708833dc2"}, {0xdd, 0x23, "a806b084734f7b0e06e312ae985e68b8941eae2a35c96d296109d61115407a2f8a9be9"}, {0xdd, 0xfc, "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"}, {0xdd, 0x58, "a9df8624b32155fee54f2cdb0dee9608610ce7debaf3629968a80ea7b7b70931ec1039822fc4f6e45ed0dc96fffa4f47d35df7b029f73d29bf1275266d4259368a7a2e140b1d8463fb29c9cf34f28ac7aafa8d6c573cac3b"}, {0xdd, 0x91, "a97b7822075370e44a0159e5f5573de11f875dbd7552569144a21576ddeb3e15b300ac6fafa707ba88f9f2a45d5062259dafe42dbe89babd1e75c8aebe498b17bb243c4e23b98842f4a8a0e209d843a8d94064c58dfb0c63f40c844ee0ce191cbc726959dd24066d31a66e55fa90d23a43670d9e9cb1c8c17f13abbf086ec7d80f79ab6c7c6e1a16b767232abeb7b607c6"}, {0xdd, 0x61, "f782ab96c231250c19e0352b060e8cea6b4a64a0680327bd93c411f3adb47c77d2d2ab62e0fc58960e3a04dd855174b4e4419b8a5f674f058f84b5ad375397f8731bd29841066c8672177f78e246836d9fc2e163dbc3d7909b9177a793d4987722"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x7, 0x80, [@sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x4}]}, 0x7a8}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f00000009c0)=0x1) ioctl$sock_netdev_private(r0, 0x89fb, &(0x7f0000000a00)="6e43ec7da0bf9b39a65f5d15f7522077ba850546429b83d39f959615f218f42c1e99390fc44b0754cb4ec54feae24e11b854e6f25dd6334ad381541df5a5d45a9f525f489fe0cd4ee352c6bb7039333133d2757a0feb65521fb021164df5df48ff925c753b00da0067490eff5263540bfba3c4778a45309c210229d88f59401b18140b06c1534fa3465f8f21b3f0402ca0c706b15d61ce94160cef530d266844d1a9b81c0f03ae415434c63c8d72fe4e4fe089baa0fbcfe64cf1ec6f8b60f857f2f8e55246e68ac6ef18210fe89a4e56ff716e506b0671d5ba88340a") sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000001900)={&(0x7f0000000b00), 0xc, &(0x7f00000018c0)={&(0x7f0000000b40)={0xd68, r1, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x440, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7b8b, 0x100, 0x81, 0x3, 0x200, 0x0, 0x0, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0xfff, 0x5, 0x1, 0x200, 0xd, 0x416, 0xf000]}}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x1, 0x8}, {0x3, 0x4}, {0x0, 0x9}, {0x0, 0x8}, {0x5}, {0x5, 0x1}, {0x1, 0x5}, {0x1, 0x6}, {0x7, 0x7}, {0x3, 0x4}, {0x2, 0x1}, {0x7, 0x6}, {0x2}, {0x4, 0x8}, {0x4, 0x5}, {0x5, 0x2}, {0x1, 0x6}, {0x6, 0x7}, {0x5, 0x7}, {0x7, 0x4}, {0x5, 0x1}, {0x6, 0x6}, {0x5, 0x8}, {0x2, 0xa}, {0x2, 0x2}, {0x4}, {0x3, 0x6}, {0x5, 0x6}, {0x1, 0x9}, {0x0, 0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x2}, {0x1, 0xa}, {0x0, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x0, 0x4}, {0x2, 0x3}, {0x7, 0x6}, {0x3, 0x5}, {0x1, 0x3}, {0x3, 0x1}, {0x7, 0xa}, {0x6, 0x6}, {0x1, 0x6}, {0x1, 0x5}, {0x1, 0x9}, {0x1, 0x1}, {0x3}, {0x1, 0x2}, {0x0, 0x9}, {0x4, 0x7}, {0x3, 0x9}, {0x2, 0x5}, {0x6, 0x3}, {0x5, 0x3}, {0x4, 0x2}, {0x6, 0x3}, {0x6, 0x6}, {0x5, 0x7}, {0x4, 0x7}, {0x1, 0x1}, {0x1, 0x8}, {0x6, 0x1}, {0x5}, {0x7, 0x3}, {0x0, 0x1}, {0x6, 0xa}, {0x7}, {0x7, 0x6}, {0x2, 0x9}, {0x3, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe5, 0x7fff, 0xffff, 0x9, 0x6, 0x564d, 0x1, 0xdbf]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0x30, 0x1, 0x36, 0x24, 0x34]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x2, 0x4, 0x29a, 0x3, 0x1000, 0x8, 0x1ff]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x4, 0x8}, {0x7, 0x9}, {0x3, 0x5}, {0x2, 0x1}, {0x2, 0x2}, {0x7, 0x7}, {0x6, 0x2}, {0x5, 0x6}, {0x4, 0x1}, {0x2, 0xa}, {0x4}, {0x2, 0x2}, {0x7}, {0x6, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x1, 0x2}, {0x2, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x4, 0x5, 0x48, 0x5, 0x2, 0x12, 0x6, 0xc, 0x12, 0x3, 0x6c, 0x4, 0x48, 0xc, 0x2, 0x4, 0x36, 0x1, 0x5, 0x3, 0x6c]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x0, 0x18, 0x38, 0x18, 0x3, 0x2, 0x60, 0x2, 0x0, 0x1, 0x2, 0x6, 0x5, 0x30, 0x83a366a1853bc085, 0x36, 0x6c, 0x6, 0x4, 0x9, 0x60, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x5a9, 0xffff, 0x7, 0xffff, 0x0, 0x800, 0x8fa5]}}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x0, 0x2}, {0x1, 0x1}, {0x4, 0xa}, {0x4, 0x1}, {0x6, 0x1}, {0x1, 0x6}, {0x6, 0x2}, {0x1, 0x3}, {0x1, 0x9}, {0x0, 0x5}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x5, 0x12, 0x48, 0x16, 0x1b, 0x16, 0x6, 0x1, 0x60, 0x16, 0xb, 0x3, 0x1, 0x30, 0x1, 0x1b, 0x5, 0x48, 0x6c, 0xb, 0x9, 0x6c, 0x30, 0x36, 0x12, 0x24, 0x6d, 0x6c, 0x5, 0x5]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x81, 0x400, 0x6ff1, 0x5, 0xc, 0x1656, 0x9]}}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x0, 0x9}, {0x6, 0x3}, {0x2, 0xa}, {0x0, 0x7}, {0x4, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x9, 0x7b, 0x4, 0xdf, 0x400, 0x800, 0x2376]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xff01, 0x5, 0x81, 0xfffe, 0x6, 0x6, 0xffff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x5, 0xc, 0x5, 0x9, 0x2, 0x2, 0x12, 0x1, 0x4, 0x6, 0x6c, 0x30, 0x36, 0xb, 0x16, 0x3, 0x6c]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x3, 0x5, 0x9, 0x2, 0x9, 0xb, 0x48, 0xb, 0x18, 0x1, 0x6c, 0x24, 0x16, 0x30, 0x9, 0x36, 0xc, 0xb, 0x3, 0x60, 0x5, 0xc, 0x6, 0x46, 0x16, 0xb, 0xc, 0x48, 0x3, 0x24, 0x49]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0xa8, 0x3, 0x2, 0x200, 0x9, 0x2]}}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xc, 0x16, 0x6, 0x36, 0x76, 0x9, 0x18, 0x48, 0x24, 0x9, 0x1b, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x6, 0x6}, {0x7, 0x6}, {0x1}, {0x6, 0x2}, {0x3, 0x4}, {0x5}, {0x5, 0x6}, {0x5, 0xa}, {0x5, 0x8}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x4, 0xb, 0x24, 0x36, 0x1b, 0x60]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6, 0x12, 0x9, 0x9, 0x24, 0x6, 0x30, 0x5]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x9, 0xc, 0x5, 0xb, 0x3, 0x18, 0x16, 0x4, 0x4, 0x36, 0x4, 0x5, 0x60, 0x1, 0x36, 0x23, 0x1, 0x30, 0x9, 0x3]}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x5, 0xa}, {0x6, 0x3}, {0x4, 0x2}, {0x5, 0x5}, {0x0, 0x2}, {0x1, 0x6}, {0x0, 0x7}, {0x6, 0x3}, {0x1, 0x4}, {0x7, 0x3}, {0x5, 0x7}, {0x6, 0x9}, {0x3, 0x1}, {0x0, 0xa}, {0x3, 0x4}, {0x7}, {0x1, 0x8}, {0x1, 0x3}, {0x1, 0xa}, {0x5, 0x6}, {0x1}, {0x6, 0x8}]}]}, @NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x3, 0x5}, {0x0, 0x8}, {0x2, 0x2}, {0x7, 0x4}, {0x5, 0x4}, {0x5, 0x4}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1b, 0x6c, 0x3, 0xb, 0x18, 0x48, 0x3, 0x6c, 0xc7, 0x6c, 0x30, 0x5, 0x4, 0x16, 0x1b, 0xc, 0xb, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x4, 0x8}, {0x6, 0x5}, {0x5, 0x9}, {0x1, 0x8}, {0x0, 0x5}, {0x0, 0xa}, {0x7, 0x1}, {0x2, 0x8}, {0x0, 0x2}, {0x4, 0x2}, {0x6, 0xa}, {0x0, 0xa}, {0x4, 0x5}, {0x3, 0x7}, {0x4, 0x8}, {0x5, 0x7}, {0x0, 0x3}, {0x6, 0x4}, {0x3, 0x6}, {0x2, 0x8}, {0x0, 0x7}, {0x7, 0x3}, {0x6, 0x6}, {0x7, 0x9}, {0x5, 0x5}, {0x0, 0x4}, {0x2, 0x9}, {0x0, 0x7}, {0x2, 0x6}, {0x5, 0x2}, {0x1, 0x4}, {0x7, 0x6}, {0x3, 0xa}, {0x4}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x6}, {0x5, 0x3}, {0x2, 0x4}, {0x1, 0xa}, {0x5, 0x9}, {0x0, 0x6}, {0x4, 0xa}, {0x6, 0x1}, {}, {0x5, 0x5}, {0x1, 0x9}, {0x5, 0x2}, {0x4, 0x3}, {0x6, 0x6}, {0x3, 0x4}, {0x2}, {0x6}, {0x1, 0x1}, {}, {0x3, 0xb}, {0x1, 0x2}, {0x6, 0x3}, {}, {0x7, 0x9}, {0x3, 0x8}, {0x1, 0x8}, {0x1, 0x7}, {0x2, 0x3}, {0x1, 0x9}, {0x4, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x8, 0xe, 0x3, 0xeab, 0x3ff, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x5, 0x4, 0x2950, 0x7, 0x8, 0x2, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x28, 0x7ff, 0xffff, 0xe, 0x3, 0x6, 0xf60, 0x1]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xc, 0x1b, 0x60, 0x9, 0xc, 0x18, 0x60, 0x60, 0x60, 0x24, 0x30, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0xdba, 0x8000, 0x7, 0xb472, 0x9, 0x1, 0x1e15]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x4f}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x5ebe, 0x6, 0x401, 0xaf7e, 0x1000, 0x8, 0xfff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x3, 0x2}, {0x6, 0xa}, {0x3, 0x5}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x8, 0x36, 0xb, 0x30, 0x36, 0x79, 0x4, 0x24, 0x48, 0x4, 0x1b, 0x6c, 0x48]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x5, 0x7ff, 0x3, 0x0, 0x9, 0x9, 0xfff]}}]}]}, @NL80211_ATTR_TX_RATES={0xac, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x24, 0x30, 0x6, 0x5, 0x60, 0x48, 0x1, 0x30, 0x1, 0x1b, 0x3, 0x2, 0x18, 0x16, 0x6, 0x12, 0x48, 0x18, 0x78, 0xd, 0x1b, 0x3, 0x58, 0x48, 0x60, 0x1, 0x12, 0x12, 0x5]}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x6, 0x4}, {0x0, 0x1}, {0x5, 0x5}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x9}, {0x2, 0x3}, {0x1, 0x3}, {0x2, 0x2}, {0x1, 0x4}, {0x0, 0x7}, {0x3, 0x9}, {0x3, 0x5}, {0x3, 0x8}, {0x6, 0x5}, {0x2, 0x7}, {0x6, 0x6}, {0x1, 0x9}, {0x1, 0x7}, {0x7, 0xa}, {0x4, 0x8}, {}, {0x5, 0x7}, {0x4, 0x7}, {0x5, 0x8}, {0x3, 0x6}, {0x0, 0x5}, {0x5, 0x8}, {0x0, 0x9}, {0x1, 0x7}, {0x6}, {0x5, 0x5}, {0x1, 0x1}, {0x1, 0xa}, {0x2}]}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0xc]}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xc1, 0x8, 0x6, 0x4, 0xfff0, 0x2, 0xfaf1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1, 0x8001, 0x8, 0x2, 0x2, 0x6, 0x1]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x20c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0x5, 0x4, 0x2, 0xf5e5, 0x6, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x0, 0xa4de, 0x8, 0x0, 0x9, 0x6, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0xb, 0x5]}]}, @NL80211_BAND_2GHZ={0xb8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3d, 0x2, [{0x1, 0x8}, {0x3, 0x2}, {0x4, 0x5}, {0x5, 0x5}, {0x2, 0x8}, {0x5, 0x1}, {0x5, 0x4}, {0x7, 0x6}, {0x1, 0x3}, {0x5, 0x8}, {0x1, 0x8}, {0x1, 0x7}, {0x4, 0x5}, {0x0, 0x2}, {0x0, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x0, 0x8}, {0x1, 0x6}, {0x4, 0x5}, {0x7, 0x3}, {0x3, 0x5}, {0x6, 0x5}, {0x2, 0xa}, {0x5, 0x5}, {0x7, 0x3}, {0x4, 0x5}, {0x0, 0xa}, {0x0, 0x5}, {0x0, 0x7}, {0x0, 0x3}, {0x3, 0x1}, {0x2, 0x3}, {0x6, 0x7}, {0x3, 0x8}, {0x5, 0x7}, {0x7, 0x2}, {0x3, 0x7}, {0x4, 0x3}, {0x5, 0x4}, {0x6, 0x3}, {0x1, 0x7}, {0x4, 0x8}, {0x2, 0x9}, {0x6, 0x2}, {0x4, 0x6}, {0x0, 0x3}, {0x4, 0x3}, {0x5, 0x9}, {0x4, 0x5}, {0x3, 0xa}, {0x0, 0x1}, {0x6, 0xa}, {0x0, 0x5}, {0x7, 0x8}, {0x2, 0x2}, {0x1, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x39c9, 0xce, 0x5, 0xa, 0x4, 0xfff, 0x2, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4dcb, 0x5, 0x2c7a, 0x6, 0x5, 0x8, 0x0, 0xc]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x200, 0x1000, 0x9, 0x2, 0x1, 0x6, 0x5]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x0, 0x3, 0x8, 0x48, 0x30, 0x6c, 0x36, 0x6c, 0x6c, 0x30, 0x4, 0x9, 0x4, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x3, 0x0, 0xfe01, 0x0, 0xfffe, 0xfffd, 0x7]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x3, 0x8, 0x767d, 0x7, 0x7fff, 0x10, 0x1000]}}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x18, 0x1b, 0x0, 0x0, 0x5, 0x12, 0x48, 0x1, 0xb, 0x66, 0x24, 0xc, 0x5, 0x0, 0x4, 0x30, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7, 0x500, 0xffff, 0x2, 0x3, 0x0, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xe11, 0xa, 0x8, 0x8, 0x8, 0x8000, 0x1f1]}}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x7, 0x3, 0x2915, 0x4f, 0x7f, 0xfffa]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x1, 0x0, 0xfff, 0x401, 0x7ff, 0x8]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x4, 0xa}, {0x1, 0x7}, {0x1}, {0x3}, {0x5, 0x8}, {0x4, 0x7}, {0x2, 0x8}, {0x1, 0x2}, {0x6, 0x3}, {0x3, 0x8}, {0x2, 0x3}, {0x3, 0x9}, {0x0, 0x6}, {0x3, 0x4}, {0x4, 0xa}, {0x1, 0x5}, {0x7, 0x9}, {0x5, 0x7}, {0x5, 0x8}, {0x3, 0x7}, {0x1, 0x7}, {0x5, 0xa}, {0x4, 0xa}, {0x3, 0x2}, {0x2, 0x9}, {0x1}, {0x5, 0x9}, {0x6}, {0x7, 0xa}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x6}, {0x3, 0x9}, {0x7, 0x7}, {0x0, 0xa}, {0x1, 0x2}, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0x9}, {0x1, 0x4}, {0x2, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa482, 0xfff8, 0x68a6, 0x1ff, 0x4, 0x6, 0xb]}}]}]}, @NL80211_ATTR_TX_RATES={0x180, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x16, 0x24, 0x18, 0x24, 0x12, 0x24, 0x18, 0xc, 0x30, 0x4, 0x1, 0x1b, 0x1, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x2, 0x7}, {0x3, 0x6}, {0x4, 0x8}, {0x7, 0x9}, {0x5, 0x4}, {0x0, 0x8}, {0x5, 0x4}, {0x6, 0x2}, {0x2, 0xa}, {0x2, 0x6}, {0x4, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x6, 0x5}, {0x1}, {0x1, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x58, 0x9, 0x904b, 0x3ff, 0x0, 0x8001, 0xe]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x9, 0xb, 0x24, 0x1, 0x9]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1, 0x9, 0x48, 0x60, 0x60, 0xb, 0x4, 0x12, 0xc, 0x3, 0x3, 0x30, 0x12, 0x2, 0x1, 0x30, 0x16, 0x1b, 0x30, 0x16, 0x24, 0x1, 0x12, 0x4, 0x6c, 0x18, 0x4, 0x6, 0x6c, 0x1b, 0x4, 0x30]}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x2, 0x7}, {0x1, 0x8}, {0x5, 0x6}, {0x1, 0xa}, {0x3, 0x9}, {0x4, 0x6}, {0x3, 0x5}, {0x6, 0x5}, {0x4, 0x5}, {0x2, 0x9}, {0x7, 0x1}, {0x2, 0x3}, {0x0, 0x3}, {0x2, 0x8}, {0x2, 0x4}, {0x0, 0x7}, {0x7, 0x1}, {0x6, 0x6}, {0x2, 0xa}, {0x5}, {0x0, 0xa}, {0x2, 0xa}, {0x6, 0x9}, {0x3, 0x7}, {0x3, 0x9}]}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x1, 0x2}, {0x1, 0x5}, {0x2, 0xa}, {0x0, 0x4}, {0x4, 0x8}, {0x3, 0x5}, {0x2, 0x6}, {0x7, 0x8}, {0x1, 0x2}, {0x5, 0x4}, {0x7}, {0x1, 0x7}, {0x0, 0xa}, {0x5, 0x6}, {0x6, 0x5}, {0x5, 0x4}, {0x6, 0x5}]}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x0, 0x3, 0x4, 0x2, 0xfff, 0x2, 0x2]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0x36, 0x48, 0x36, 0x30, 0x1, 0x2, 0xc, 0x6, 0x48, 0x9, 0x1, 0x5, 0x48, 0x16, 0xc, 0x5, 0x0, 0x1, 0x2, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x36, 0x1b, 0x5, 0x0, 0x48, 0x6, 0xc, 0x30, 0x6c, 0x60, 0x4, 0x12, 0x5, 0x2c, 0x18, 0x5, 0x6c, 0x24, 0x6c, 0x12, 0x6, 0x5, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1800, 0x1, 0xb3d, 0x5, 0x40, 0x5ec, 0x4, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0xe5, 0x4, 0x59e, 0xbe, 0xff28, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x10, 0x2, 0x3ff, 0x2, 0x8, 0x8, 0x6]}}]}]}, @NL80211_ATTR_TX_RATES={0x2e4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0xc, 0x12, 0xc, 0x16, 0x9, 0x36, 0x18, 0x60, 0x30, 0xc]}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6c]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x6}, {0x0, 0x19}, {0x0, 0xa}, {0x1, 0x6}, {0x1, 0x6}, {0x3, 0x5}, {0x4, 0x3}, {0x0, 0x4}, {0x7, 0x5}, {0x5, 0x2}, {0x5, 0xa}, {0x0, 0x6}, {0x0, 0x9}, {0x3}, {0x2, 0x4}, {0x6, 0x3}, {0x5, 0x6}, {0x7, 0x1}, {0x0, 0x4}, {0x3, 0x3}, {0x7, 0xa}, {0x5, 0x8}, {0x4, 0x4}, {0x0, 0x5}, {0x7, 0x6}, {0x0, 0x9}, {0x4, 0x4}, {0x4, 0x5}, {0x1, 0x7}, {0x4, 0x4}]}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x5, 0x2}, {0x4, 0x3}, {0x1, 0x9}, {0x0, 0x3}, {0x5, 0x4}, {0x6}, {0x6, 0x5}, {0x5}, {0x7, 0x3}, {0x0, 0x7}, {0x2, 0x6}, {0x5, 0x9}, {0x1, 0x3}, {0x2}, {0x1, 0x6}, {0x7}, {0x4, 0x1}, {0x6}, {0x6}, {0x3, 0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x7}, {0x2}, {0x7}, {0x2, 0x1}, {0x4}, {0x4, 0x7}, {0x3, 0x5}, {0x1, 0x1}, {0x0, 0x2}, {0x1, 0x7}, {0x1, 0x7}, {0x3, 0x9}, {0x2}, {0x7, 0x3}, {0x0, 0x6}, {0x1, 0x7}, {0x7, 0x5}, {0x7, 0x4}, {0x2, 0x3}, {0x0, 0x9}, {0x1, 0x6}, {0x5, 0x5}, {0x1, 0x9}, {0x2, 0x8}, {0x7, 0x1}, {0x6, 0xa}, {0x7, 0x3}, {0x0, 0x5}, {0x5, 0x3}, {0x0, 0x9}, {0x1, 0x3}, {0x0, 0x4}, {}, {0x5, 0x2}, {0x0, 0x6}, {0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x1}, {0x1, 0x8}, {0x6, 0x6}, {0x4, 0x9}, {0x5}, {0x0, 0xa}, {0x0, 0x2}, {0x0, 0x9}, {0x4, 0x7}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x1, 0x5}, {0x4, 0x9}, {0x3, 0x7}, {0x3, 0x8}, {0x6, 0x2}, {0x2, 0x4}, {0x5, 0x3}, {0x7, 0x3}, {0x1, 0x6}, {0x2, 0x3}, {0x7, 0x6}, {0x2}, {0x5, 0x6}, {0x1, 0x4}, {0x2, 0x8}, {0x0, 0x8}, {0x2, 0x5}, {0x0, 0xa}, {0x1, 0x7}, {0x3, 0x5}, {0x0, 0x7}, {0x2, 0x2}, {0x6, 0x2}, {0x0, 0x9}, {0x0, 0x9}, {0x4, 0x5}, {0x1, 0x8}, {0x0, 0x3}, {0x0, 0x2}, {0x4}, {0x7, 0x8}, {0x1, 0x2}, {0x7, 0xa}, {0x0, 0x2}, {0x6, 0x1}, {0x3, 0x1}, {0x3, 0x6}, {0x7, 0x5}, {0x3, 0x1}, {0x5}, {0x6}, {0x6, 0x6}, {0x4, 0x4}, {0x5, 0x3}, {0x1}, {0x1, 0x9}, {0x4, 0x4}, {0x7, 0x2}, {0x6}, {0x1, 0x2}, {0x7, 0x7}]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0xdb8cf48e487a1dfd}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0x8598, 0x5, 0xffff, 0x7, 0x1, 0x4]}}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x4, 0x8}, {0x2, 0x8}, {0x5, 0x2}, {0x6, 0xa}, {0x7, 0x2}, {0x0, 0x2}, {0x5, 0x8}, {0x5, 0x3}, {0x7, 0x3}, {0x7, 0xa}, {0x6, 0x2}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x9}, {0x6, 0x3}, {0x5, 0x8}, {0x3, 0x2}, {0x3, 0xa}, {}, {0x0, 0x8}, {0x7, 0x4}, {0x1, 0x9}, {0x2, 0x1}, {0x3, 0x1}, {0x7, 0xa}, {0x4}, {0x4, 0x5}, {0x6, 0x3}, {0x3, 0x6}, {}, {0x6, 0x3}, {0x1, 0x1}, {0x1}, {0x0, 0x2}, {0x4, 0x2}, {0x3}, {0x7}, {0x0, 0xa}, {0x2, 0x6}, {0x1, 0x1}, {0x4, 0x7}, {0x7}, {0x5, 0x7}, {0x5}, {0x1, 0x9}, {0x7, 0x7}, {0x0, 0x8}, {0x4, 0xa}, {0x1, 0xa}, {0x3, 0x6}, {0x5, 0x1}, {0x2, 0x3}, {0x0, 0x9}, {0x7, 0x2}, {0x7, 0x7}, {0x4, 0x4}, {0x7, 0x8}, {0x1, 0x7}, {0x2, 0x3}, {0x1}, {0x0, 0x9}, {0x7, 0x1}, {0x1, 0x3}]}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0xa8d1, 0x4, 0x8, 0xfffd, 0xfffe, 0x3, 0x3e63]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff8, 0x4, 0x4, 0x2, 0x6, 0x800, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3ff, 0x7, 0x4, 0x9ca, 0x4, 0x6, 0x89d3]}}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x3, 0xb, 0x4, 0x48, 0x18, 0x30, 0x60, 0x24, 0x36, 0x30, 0xb, 0x12, 0x5, 0x9, 0x12, 0x30, 0x9, 0x6, 0x16]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x12, 0xc, 0x0, 0xb, 0x5, 0x24, 0x5, 0x48, 0x30, 0x9, 0x30, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xfff, 0xe, 0xfffa, 0x1, 0xc, 0xfffd, 0x7f]}}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0xb, 0x9, 0x18, 0x60, 0xc, 0x6c, 0x60, 0x12, 0xc, 0xb, 0x5, 0x18, 0x2, 0xc, 0x48, 0x1, 0x9, 0x3, 0xb, 0x16, 0x1b, 0x18, 0x36, 0x3]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1b, 0x24, 0x3, 0x16, 0x12, 0x2, 0x44, 0x36]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x24, 0x24, 0x0, 0x3, 0x60, 0x12, 0xb, 0x2, 0x36, 0x1b, 0x2, 0x2, 0x24, 0x9, 0x60, 0x36, 0x16, 0x24, 0x2, 0x30, 0x16, 0x3, 0x18, 0x24, 0x60, 0x6c, 0x48, 0x18, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0x81, 0x6, 0x67, 0x3ff, 0x7, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x4, 0xd85, 0x8, 0xf, 0x9, 0x5, 0x3a]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1, 0x60, 0x12, 0xb, 0x9, 0x2, 0x24, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x2, 0x1, 0x6, 0x7, 0x2, 0x7, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x0, 0x1, 0xb, 0x9, 0x5, 0x5, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8001, 0x8, 0x10, 0x7, 0x9, 0x1, 0xfffc]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xfff9, 0x1, 0x320e, 0x1ff, 0x1, 0x2, 0x5]}}]}]}, @NL80211_ATTR_TX_RATES={0x128, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x6, 0x8}, {0x0, 0x5}, {0x7, 0x1}, {0x7, 0x8}, {0x1, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0xab, 0x1, 0x4, 0x4, 0x40, 0x6, 0x12]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x4, 0x6}, {0x6, 0xa}, {0x1, 0x9}, {0x2, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x5, 0x7, 0x5, 0x7, 0x9, 0x7b18, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x41e, 0xaba2, 0x4, 0xda, 0x58c3, 0x7f, 0x2, 0x200]}}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0x0, 0x1, 0x5, 0xf, 0xff, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x5, 0x1, 0x7f, 0xfff, 0x400, 0x7, 0xa]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf30, 0x4f2, 0x7, 0x4, 0x0, 0x6, 0x6, 0x4]}}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2a, 0x2, [{0x7, 0x2}, {0x6, 0x1}, {0x0, 0x2}, {0x2, 0x9}, {0x7, 0x5}, {0x4, 0x5}, {0x6, 0x5}, {0x1}, {0x4, 0x6}, {0x3, 0xa}, {0x0, 0x7}, {0x1, 0xa}, {0x1}, {0x4, 0x2}, {0x1, 0x4}, {0x1, 0x2}, {0x2, 0x4}, {0x1, 0x4}, {0x2}, {0x4, 0x5}, {0x1}, {0x2, 0x3}, {0x6, 0x3}, {0x4, 0x7}, {0x2, 0x6}, {0x0, 0x3}, {0x1, 0x2}, {0x0, 0xa}, {0x6}, {0x3, 0x2}, {0x6}, {0x5, 0x8}, {0x0, 0x1}, {0x0, 0x2}, {0x0, 0x8}, {}, {0x6, 0x9}, {0x4, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x321, 0x5, 0x6, 0x1ff, 0x4, 0x40, 0x80, 0x2]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x6c, 0x3, 0x1, 0x18, 0x9, 0x57, 0x16, 0x30, 0x36, 0x30, 0x1b, 0x18, 0x48, 0x48, 0x1, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1c9, 0x3f9a, 0x7d9, 0x3, 0xd2, 0x1, 0x6, 0x8]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0xc8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfff3, 0x1, 0x40, 0x7, 0x2, 0x2, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff0, 0x2, 0xf50b, 0xfffa, 0xf8ae, 0x7f, 0x9, 0x7828]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x2, 0x3, 0x0, 0xfff, 0x8, 0x7, 0x7f]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x36, 0x24, 0x24, 0x5, 0x60, 0x30, 0x9, 0x4, 0x24, 0x60, 0x48, 0x6c, 0xc, 0xc, 0x30, 0x5, 0x30, 0x24, 0x20, 0x2c, 0xb, 0x1b, 0x12, 0x4, 0x60]}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x16, 0x1, 0x4, 0xb, 0x30, 0x5, 0x6, 0x36, 0x1b, 0x1, 0x1b, 0x6c, 0x4, 0x36, 0x36, 0x2, 0x1, 0x6, 0x5, 0x5, 0x30, 0x4, 0x30, 0x4e, 0x1, 0x18, 0x3, 0x6]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x0, 0x9, 0x60, 0x6c, 0x1b, 0xc, 0x4, 0x16, 0x1b, 0x16, 0x16, 0x1, 0x12, 0x1b, 0x24, 0x4b, 0x36, 0x6, 0x5, 0x30, 0xc]}]}]}]}, 0xd68}, 0x1, 0x0, 0x0, 0x4}, 0x4c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001940), 0x40000, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000001980)=0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001cc0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001a40)={0x21c, r1, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x13a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0xfe00, 0x5, 0x5, 0xfff5, 0x6ca]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_FRAME={0x198, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x1d}, @device_a, @device_a, @initial, {0x6, 0x6}, @value=@ver_80211n={0x0, 0x7ffa, 0x2, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, 0x88a1, 0xa, @device_b, {0x0, 0x14, @random="3b1158e2218c6b6a31edd9e462c57effdabfe2b8"}, @val={0x1, 0x7, [{0x1}, {0x3, 0x1}, {0x6}, {0x3}, {0x18}, {0xc, 0x1}, {0x6, 0x1}]}, @void, [{0xdd, 0x11, "c9e9ebb1475610511d4f2293e636c35be4"}, {0xdd, 0xc2, "2bf2a5f81513a494b5056501acee802ddcd7e38a07a67d11df9c9aa9cda5426440ae21d4e38d843db95f6507c600a71cb19d615442398b31281b08a768870e07ad457a735f09983a72e14073e6ad4db54919c9cb3c58ecd1571eb36b504b81313fb57ec3953510092e30b06eaa64baa13b4fcf50c9bab1afe75de2ba5a7e9bb3c8eb8005690fce1c90389b05f91c3ebd0cf7ac67d1de2346593a906dddfd0415fac52cdff5fc64df6d16da7e7f142a7339b05f57134050b268a5eab347aca60e65f9"}, {0xdd, 0x76, "41d3b947b062adc8e765623ce9945231bdd4b0f1654fd3a4ab3ed982cdea940d38ac1a4b77fe5f70752a569eacb50aa00c220c2556ec29bf1c497a1818171d2039b8750d67fe19bea1c059d703060b8c6cf72d18866f1145b9f63688df876b02f5b22a835da12000d5670fcc7d4b31f15d982745beb5"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffe}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x21c}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000001d00)={0x1, [0x0]}, &(0x7f0000001d40)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001dc0)={r4, 0x10, &(0x7f0000001d80)=[@in={0x2, 0x4e24, @empty}]}, &(0x7f0000001e00)=0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001ec0)=@nat={'nat\x00', 0x1b, 0x5, 0x6b0, 0x268, 0x268, 0xffffffff, 0x4a8, 0x4a8, 0x5e0, 0x5e0, 0xffffffff, 0x5e0, 0x5e0, 0x5, &(0x7f0000001e40), {[{{@uncond, 0x0, 0x208, 0x268, 0x0, {}, [@common=@rt={{0x138}, {0x7, [0x8001, 0x6], 0x2, 0x1, 0x1, [@remote, @dev={0xfe, 0x80, '\x00', 0x2e}, @rand_addr=' \x01\x00', @loopback, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @loopback}, @empty, @dev={0xfe, 0x80, '\x00', 0x28}, @dev={0xfe, 0x80, '\x00', 0x12}, @remote, @loopback, @dev={0xfe, 0x80, '\x00', 0x27}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}], 0x3}}, @common=@inet=@tcpmss={{0x28}, {0x1, 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, [0xff, 0xff000000, 0xffffffff, 0xffffffff], 0x4e20, 0x4e21, 0x4e22, 0x4e24, 0x3ff, 0x8, 0x1, 0x8, 0x1}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x87, 0x3, 0x10, 0x5, 0x0, 0x183}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x4, @ipv6=@empty, @ipv4=@loopback, @gre_key=0x5729, @gre_key=0x7}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x5c, 0x3, 0xa, 0x0, 0x1d, 0x108, 0x1034}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x14, @ipv6=@remote, @ipv4=@rand_addr=0x64010102, @port=0x4e24, @gre_key=0x6}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x6, 0x2, 0x0, [0x1ff, 0x6, 0xa60, 0x7, 0x3d3b, 0x3, 0x8b, 0xfffc, 0x3, 0x5, 0x3, 0x4, 0x7, 0x1ff, 0x40, 0x5], 0xe}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x5, @ipv6=@local, @ipv4=@remote, @port=0x4e24, @port=0x4e23}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x710) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000002600)={0x14a, {{0xa, 0x4e24, 0x7ff, @remote, 0x7fff}}}, 0x88) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000026c0)={'wlan0\x00'}) sendmsg$nl_route(r0, &(0x7f00000027c0)={&(0x7f0000002700), 0xc, &(0x7f0000002780)={&(0x7f0000002740)=@getrule={0x14, 0x22, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000002800)=0x2c04, 0x4) ioctl$PPPIOCDISCONN(r2, 0x7439) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002840)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002880)={r6, 0xffffffffffffffff}, 0x4) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000029c0)={&(0x7f00000028c0), 0xc, &(0x7f0000002980)={&(0x7f0000002900)={0x58, 0x9, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_ADT={0x44, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_virt_wifi\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x88}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0xc1) syz_genetlink_get_family_id$tipc2(&(0x7f0000002a00), r0) pwrite64(r7, &(0x7f0000002a40)="cd2c0bf6cbb4ac2b0c12dd80253b2fe29bbf866ee4008e2ccc1eb54f2d84bd334ad42991a987be37a9be0c467ab022f65ece85335a651a2fd5b161c152e92f5b4d5d8cc3ea2a7f0c358b41f5e95dbec63f495c0364b599906e94b8366bac710276306837ae89a8e2124f0892844062c875e2bca62b927a82b0d09c6a53bdf245ab216882b4ebd7c5e8204cd552", 0x8d, 0x7) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000002c80)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002b40)={0xcc, r1, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x33, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x6}, @broadcast, @device_a, @from_mac, {0x3, 0x67e}}, @tdls_disc_req={0xc, 0xa, {0x4, {0x65, 0x12, {@random="29f62736af26", @device_a, @broadcast}}}}}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x6a79, 0xc, 0x0]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xbd5}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x3c, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x26}, @broadcast, @broadcast, @random="c87a7759500f", {0x7}, @value=@ver_80211n={0x0, 0x6, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x20, @val={0x8c, 0x18, {0x748, "9a633d918c77", @long="47219ffd022ab50024e9c2816ce9f003"}}}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40040}, 0x4000081) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r8, &(0x7f0000002ec0)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002d40)={0x140, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xcc5a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5d}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a3b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff26b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3534}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x5}, 0x20008000) 1.425347952s ago: executing program 2 (id=2734): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0xc, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000940)=0x8, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db328a2c14e0f643c06004dc33a47d3a158da988456d30026b433186f53cdcdb93acd92458d1f8d07387c894722bf306a10470d50f5cb1ece9ef7ffffffffffffffcd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef45118ee26d7b48241847bf9e343e", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 1.424741039s ago: executing program 3 (id=2735): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) listen(r4, 0x0) accept$ax25(r4, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x1000000, 0xe, 0x0, &(0x7f0000000400)="e0b9547ed387c6e950a4e1f95bec", 0x0, 0xf, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r5}, 0x18) nanosleep(&(0x7f0000000bc0)={0x0, 0x3938700}, 0x0) socket$inet6(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r7 = accept(r2, &(0x7f0000000440)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0x80) connect$netlink(r7, &(0x7f0000000380)=@unspec, 0xc) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r8, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r2], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) close(r1) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x4, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800) sendmsg$nl_route(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=ANY=[@ANYBLOB="280000001100010027bd7000ffdbdf2500000000", @ANYRES32=r8, @ANYBLOB="c000000000140000ef4da59a0f000800"], 0x28}, 0x1, 0x0, 0x0, 0x60000145}, 0x40804) 1.4217002s ago: executing program 4 (id=2736): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@generic={0x71, 0x0, 0x1, 0x4b}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0xd}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x6c, 0x0, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3b, 0xe, {{{}, {}, @broadcast, @device_a, @random="8126360e6e04"}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x7, 0x3, 0x3f, 0x26}}}}, @NL80211_ATTR_IE_ASSOC_RESP={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x2}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x6c}}, 0x20000014) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000740)={&(0x7f0000000300), 0xc, &(0x7f0000000540)={&(0x7f00000006c0)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xd, 0x4e}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1f9}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x657}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xa8f}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe39}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r7) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x2c, r8, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8316}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7ce}]}, 0x2c}}, 0x4c0c4) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000e673000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x11, &(0x7f0000001540)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r13}, 0xc) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=@newqdisc={0xbc, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {0xfff1, 0xffea}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x4}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x1000}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x6}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x9, [0x5, 0xf, 0xa, 0xb, 0x7, 0x1, 0x0, 0xe, 0x6, 0xc, 0x4, 0x10, 0x10, 0xe, 0x5, 0x2], 0x0, [0x7, 0x1, 0x101, 0x6, 0x1, 0x1, 0xfff9, 0xfff, 0x0, 0xf, 0xfff7, 0x0, 0x0, 0x7, 0x3000, 0x4], [0x67, 0x8, 0x1ff, 0x8, 0x3a, 0x9, 0x5, 0x3ff, 0x3, 0x3, 0x6b, 0x6, 0x2, 0x6, 0x400, 0xd]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x9}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) r14 = socket$kcm(0x11, 0x3, 0x0) r15 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r14, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0xdd86, r16, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e105000000", 0x16}], 0x1}, 0x0) 1.302881852s ago: executing program 2 (id=2737): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003b00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) r4 = epoll_create(0x200) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)={0x8000003c}) (async) epoll_wait(r4, &(0x7f0000000000)=[{}], 0x1, 0x10001) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x6, 0x2, 0x0, 0x2}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xc1160cbda5ab1ab}]}}}]}, 0x64}}, 0x20000000) (async) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 1.267188252s ago: executing program 0 (id=2739): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000dd00050001000600000005000400000000000900020073797a3100000000050005000a00000011000300686173683a69702c706f727400000000"], 0x4c}}, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@bridge_getneigh={0x54, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2002a}, [@IFLA_VF_PORTS={0x34, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "35b09c8913d4e54116b80106a24c0986"}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a86aa2ba3d5b61023bf6361a435c368c"}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044840}, 0x20000800) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x18) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x400) ppoll(&(0x7f0000000100)=[{r7, 0x1a0}], 0x1, 0x0, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r7, 0x1) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x8, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, {0xb}, {0xb, 0xffff}, {0xa, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) bind$xdp(r3, &(0x7f0000000140)={0x2c, 0x4, r8, 0x12}, 0x10) listen(r4, 0xfffffffd) r9 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) sendmsg$unix(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="4f5f072a0db0e67d613178efcfe3a6054a0ca7f8e4cef47737bbc530093b9307b2828900b1ed8131e71b43e3909b35fa0a1964d2e1739c46bbb5732e95ad8ae39b90c89cb5cf53c25512e3668ede45982f290503f507caad3499871769e7e2827220fa5158dc339619beea2c86a2a170d62d9f5820dcbf21cecf5e9a51ca518d13237fa5d734cd6e23dd8d7cdbf2477f8cb68f0fc0417a10d062b49bebb3a9bf0293987ba25e78a53eb71c450e7dd594ae8635a37ffd177a864bcf517989c49ea7e621e4c67099b64f91a475dcc1de7aae52dfaf5a2e6afc425f6f32a82f720a6e95b8f001b2156a001bcba8e6077d139770ff868541", 0xf6}], 0x1, 0x0, 0x0, 0x20000800}, 0x20040000) 1.122960579s ago: executing program 6 (id=2740): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (rerun: 32) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee38", 0x14}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000000c0)=""/77, 0x4d}, {&(0x7f0000000280)=""/19, 0x13}], 0x2}, 0x0) socketpair(0x1, 0x2, 0x1ff, &(0x7f0000000000)={0xffffffffffffffff}) (async) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x87}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44040}, 0x10) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) (rerun: 32) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r4, 0x0, 0xfffe}, 0x38) (async) r5 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002d00)=""/4096, 0x1000}], 0x1}, 0x4}], 0x1, 0x2, 0x0) bind$alg(r5, &(0x7f0000000400)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000520ba7f26d1317449ba517000c0000000c00000003000000020000000000000f04000000005f00"], 0x0, 0x27}, 0x28) r6 = accept4(r5, 0x0, 0x0, 0x800) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 1.076905315s ago: executing program 4 (id=2741): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e24000000000000009dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f00000000c0)="ea3d8100", 0x4, 0xb01, &(0x7f0000000000)={0x11, 0x8100, r2}, 0x14) socket(0x15, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0xbc, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x28, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x14000000}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xffff}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xbc}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003d80)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x1e}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20001091}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 878.464752ms ago: executing program 6 (id=2742): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES64=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r3) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x48, r4, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}]}, 0x48}}, 0x4) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x34, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r5, {0xffe0, 0x9}, {0x0, 0x9}, {0xa, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x8, 0x2, [@TCA_FW_POLICE={0x4}]}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4) 755.026599ms ago: executing program 0 (id=2743): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000b0a500007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x40, &(0x7f00000002c0)="c235535a17ac64791bbe00309033", 0x0, 0x7fffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2) 720.318061ms ago: executing program 0 (id=2744): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) (async) sendmsg$nl_route_sched_retired(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x8}, {0x2}}, [@f_tcindex={{0xc}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00140000000280", 0x2a}, {&(0x7f0000000400)="6a718e5e", 0x4}], 0x2}, 0x0) (async) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) (async) sendmsg$can_bcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004000)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x4000010) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x2c}}, 0x0) 550.577241ms ago: executing program 6 (id=2745): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010140)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) unshare(0x60400) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r1, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map, 0xffffffffffffffff, 0xf3c5227cb953423c, 0x2010, 0x0, @value=r3}, 0x20) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x7, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000160001000000180095000000000000000500feff00000200950000000000000015510bf1abf0898100512397dced63225aa89c217ca929c3509ab300e56441a8ff5e12f6037102dee6dda45103be1fb4a9657e4ff22c80bdac3745d367e11b898fb15a4a9997d3c4"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) connect$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x3}}, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20) r7 = accept$alg(r6, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="024068a4e7679ffdbe27d632768df5", 0xf}, {&(0x7f0000000300)="86fe", 0x2}], 0x2, 0x0, 0x0, 0x34044005}, 0x20044151) recvmmsg(r7, &(0x7f0000000500), 0x0, 0x2000, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@ipv6_deladdrlabel={0x2c, 0x49, 0x2, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, 0x0, 0xfffffff9}, [@IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_LABEL={0x8, 0x2, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008840}, 0x8000) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, 0x0) write$nci(r3, &(0x7f0000000080)=@NCI_OP_RF_DISCOVER_SELECT_RSP={0x1, 0x0, 0x2, 0x4, 0x8, 0x1}, 0x4) 446.863366ms ago: executing program 4 (id=2746): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500007f00000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500007f00000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) unshare(0x20000000) (async) unshare(0x20000000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r5) socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x71bd26, 0x80000, {0x0, 0x0, 0x0, r8, {0xa, 0xffff}, {0x5, 0xb}, {0x4, 0x3}}, [@qdisc_kind_options=@q_rr={{}, {0x0, 0x2, {0x9, "6d288be9ed009d91aa2718b45092a7dd"}}}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x8, 0x9, 0x5, 0xfffffffe, 0x0, 0x401, 0x4}}, {0x0, 0x2, [0x4, 0xdd7, 0xe]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0xb9}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x71bd26, 0x80000, {0x0, 0x0, 0x0, r8, {0xa, 0xffff}, {0x5, 0xb}, {0x4, 0x3}}, [@qdisc_kind_options=@q_rr={{}, {0x0, 0x2, {0x9, "6d288be9ed009d91aa2718b45092a7dd"}}}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x8, 0x9, 0x5, 0xfffffffe, 0x0, 0x401, 0x4}}, {0x0, 0x2, [0x4, 0xdd7, 0xe]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0xb9}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) socket$inet6(0xa, 0x800000000000002, 0x0) (async) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r9, 0x29, 0x43, &(0x7f0000000600)=0x7, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000200), &(0x7f0000000340)=0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) r12 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) write$rfkill(r12, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000001ac0)={0x0, 0x7f00, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, r11, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1937}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x3c}}, 0x20000000) 429.37367ms ago: executing program 0 (id=2747): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@ptr, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x8, [{0x4, 0x1, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f, 0x2e, 0x61, 0x0]}}, &(0x7f0000000380)=""/3, 0x46, 0x3, 0x1}, 0x28) 358.222366ms ago: executing program 6 (id=2748): sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x108, 0x4, 0x9, 0x9, 0xe, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x10000000) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) sendmsg$inet6(r2, 0x0, 0xc4) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f00)=@bpf_lsm={0x1d, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000009000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000", @ANYRES32, @ANYRESHEX=r1, @ANYRES32], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$kcm(0x29, 0x2, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x7813, 0x10000003, 0x0, 0x81, 0x1ff, 0x1}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) recvmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x2100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2, 0xfffffffe, 0x400000}}, 0x2e) close(r5) r7 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000001740)={0xd92, {{0xa, 0x4e20, 0x7fff, @private1, 0x10}}, {{0xa, 0x4e21, 0x5, @mcast1, 0x449a}}}, 0x108) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) 246.277496ms ago: executing program 2 (id=2749): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}, 0x8a}}, {{0xa, 0x0, 0x10001, @local}}}, 0x108) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3}}}, 0x108) (async) r2 = socket(0x80000000000000a, 0x2, 0x0) close(0x3) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) (async) close(0x4) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000", @ANYRES64=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x83, &(0x7f0000000080), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) r6 = socket(0x2, 0x80805, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x806000) (async) unshare(0x2c020400) (async) writev(r7, 0x0, 0x0) (async) write$tun(r7, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000400)=@assoc_value={0x0, 0x5}, 0x8) 245.931516ms ago: executing program 0 (id=2750): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0xfffe}, 0xe) listen(r1, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000cc0), &(0x7f0000000d00)=0x4) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a", 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000100001000000a701552100000000000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000e08000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000640c00024000000000000000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000880)={@link_local, @remote, @val={@void, {0x8100, 0x1, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x18, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @loopback, @multicast1}, {0x2001, 0x880b, 0x2, 0x0, @opaque="fddc606e6597bced93fa56f4865efb45a2e3a231b7e0565cf59718074c479f86eb89c02913feb3360f30ab79286dbd80d65c736315f3154426ed17adc0f1754bebac9f4248a4df5ad7aee3c0368f8bcfdb7f824c4fec2454e7699dcf6ec0fe5ecbb2b25cf3746f5977f86d6e09768e64762226417b61c8679b6a02e027e66273b3ebb36533acbb9bbbcb836c179a6989849bcb1c0747218fac98bcf1579b0429e25a82"}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, &(0x7f00000000c0)) 235.798503ms ago: executing program 3 (id=2751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg1\x00', 0x2}) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000100)={{0x2, 0x4e1c, @remote}, {0x304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x7e, {0x2, 0x4e25, @empty}}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x325) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20000400) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0xd}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000780)={0x20, r5, 0x1, 0x709d2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4004001) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={0x28, r5, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0xc880) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x15, 0x0, 0x7, 0xb1e, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x8000, 0x3}}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x168, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x154, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x40000003}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe6, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xbc, 0x3, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xea3, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x16fc, 0x1}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0xc, 0x8, {0x5, 0x2}}}}]}]}, 0x168}}, 0x0) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000006000000000000000900000018420000020000d2000000000000000018971095c05efcbd538085e17e2f192b0100002020000000000000001000207b1af8ff00000000bfa1000000000701b7030000ffff0000850000000e0000001d23000000000000000000000000000005000000", @ANYRES32=r12, @ANYBLOB="00000000320600009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x40f00, 0x8, '\x00', r9, 0x0, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x2, 0x3, 0x6837, 0x400}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000280)=[r12], &(0x7f0000000440)=[{0x5, 0x5, 0xa, 0x9}, {0x3, 0x3, 0x3, 0x2}, {0x5, 0x5, 0xb, 0xb}, {0x2, 0x2, 0xe}, {0x1, 0x2, 0x1, 0x4}, {0x2, 0x5, 0xf, 0xa}, {0x5, 0x5, 0x0, 0xa}, {0x2, 0x2, 0xe, 0x5}, {0x5, 0x5, 0x7, 0x7}, {0x5, 0x3, 0xf, 0xc}], 0x10, 0x69}, 0x94) 209.552818ms ago: executing program 6 (id=2752): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x11, 0x4, 0x4, 0x5}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r1, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRES32=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@restrict={0xc, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x2e, 0x3e, 0x0, 0x5f, 0x0]}}, &(0x7f00000003c0)=""/217, 0x2b, 0xd9, 0x0, 0x8}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r4, 0x20, &(0x7f0000000680)={&(0x7f0000000540)=""/137, 0x89, 0x0, &(0x7f0000000600)=""/110, 0x6e}}, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904020800000000000000fe50a10a000600014002020c60ad307e0e357b4dd80a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb79164815ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x90202, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000000c0)={'veth0_vlan\x00'}) 96.715532ms ago: executing program 2 (id=2753): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) r1 = socket(0x10, 0x803, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001700000008000a00", @ANYRES32=r3], 0x24}}, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) close(0x3) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0) (async) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x30}], 0x1, 0x0) (async) setsockopt(0xffffffffffffffff, 0xb, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000140), 0x0, 0x2}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x4, 0x1, 0x2d, 0x0, 0x0, 0xfd, 0x5, 0x0, 0xfc, 0x0, 0x0, 0xfc}, 0xe) (async) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000040)={r9, 0xb}, 0x8) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000400)=r0, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c00000052000100000000000000ff080200000008000100", @ANYRES64], 0x1c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 96.293276ms ago: executing program 0 (id=2754): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000100)=0x4) readv(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x58}}, 0x0) 294.814µs ago: executing program 6 (id=2755): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3800000206c2fc658b4db7150df95b58afe06157c6f192d600004ca7a3d7e618bb641b3d64e4dc42c0915ffe9efb6131313b4bd853", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="140004006e696376663000000000000000000000080005000a0000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2400c890) 0s ago: executing program 2 (id=2756): socket(0x2, 0x80805, 0x0) (async) r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f0000000000)=0x5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 0s ago: executing program 2 (id=2759): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c000280081f0180000000000800014000000000180001800d00010073796e70726f787900000000040002808f99a20900010073797a30000000000900020073797a3200000000140000001100010000000000000000006df8ffffffffffff3cc329c23981c7bf0000000a5bf997876c47"], 0xa0}}, 0x0) close(0x3) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) kernel console output (not intermixed with test programs): eftover after parsing attributes in process `syz.4.531'. [ 153.426720][ T8084] netlink: 'syz.4.531': attribute type 2 has an invalid length. [ 153.434473][ T8084] netlink: 3 bytes leftover after parsing attributes in process `syz.4.531'. [ 153.514735][ T8095] tipc: Failed to remove unknown binding: 66,1,1/1404215195:533627208/533627210 [ 153.533095][ T8095] netlink: zone id is out of range [ 153.538597][ T8095] netlink: zone id is out of range [ 153.549047][ T8095] netlink: zone id is out of range [ 153.558551][ T8095] netlink: zone id is out of range [ 153.569158][ T8095] netlink: zone id is out of range [ 153.574876][ T8095] netlink: zone id is out of range [ 153.581308][ T8095] netlink: zone id is out of range [ 153.588345][ T8095] netlink: zone id is out of range [ 153.595362][ T8095] netlink: zone id is out of range [ 153.636725][ T8097] netlink: 44 bytes leftover after parsing attributes in process `syz.2.535'. [ 153.647962][ T8097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.535'. [ 153.659039][ T8097] netlink: 28 bytes leftover after parsing attributes in process `syz.2.535'. [ 153.700549][ T8097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.535'. [ 153.717952][ T8097] netlink: 2 bytes leftover after parsing attributes in process `syz.2.535'. [ 153.727739][ T8097] netlink: 28 bytes leftover after parsing attributes in process `syz.2.535'. [ 153.736683][ T8101] netlink: 124 bytes leftover after parsing attributes in process `syz.4.536'. [ 153.767606][ T8097] netlink: 24 bytes leftover after parsing attributes in process `syz.2.535'. [ 154.181443][ T8127] tc_dump_action: action bad kind [ 154.605659][ T8151] Bluetooth: MGMT ver 1.23 [ 154.621339][ T8150] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.629287][ T8150] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.953582][ T8214] netlink: 'syz.2.567': attribute type 31 has an invalid length. [ 157.131456][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 157.645422][ T8248] tipc: Enabled bearer , priority 0 [ 157.662525][ T8237] gre0: entered promiscuous mode [ 157.673652][ T8237] gre0: entered allmulticast mode [ 157.837295][ T8237] tipc: Disabling bearer [ 157.990051][ T8259] netlink: 'syz.4.578': attribute type 1 has an invalid length. [ 158.195805][ T8258] bond2: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 158.246110][ T8258] bond2: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 158.323228][ T8239] netlink: 'syz.1.572': attribute type 2 has an invalid length. [ 158.950674][ T8282] tipc: Enabled bearer , priority 0 [ 158.982143][ T8282] syzkaller0: entered promiscuous mode [ 158.987706][ T8282] syzkaller0: entered allmulticast mode [ 159.036391][ T8283] __nla_validate_parse: 18 callbacks suppressed [ 159.036415][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.584'. [ 159.101522][ T8282] tipc: Resetting bearer [ 159.146739][ T8280] tipc: Resetting bearer [ 159.181096][ T8280] tipc: Disabling bearer [ 159.236895][ T30] audit: type=1107 audit(1765260334.511:2): pid=8293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='HRg }nznu#2 }66{<%N!R^Cf@B@eEtX`SlY7 [ 159.236895][ T30] A׎qBwaF 2T9VljW0+/pjx>ݴKO'64n1UybKu\6ɋ%ZF4xx2u.ڎEKTlX+ws4 T' [ 159.553885][ T8305] net_ratelimit: 36 callbacks suppressed [ 159.553909][ T8305] openvswitch: netlink: Flow actions attr not present in new flow. [ 159.624302][ T8319] openvswitch: netlink: Flow actions attr not present in new flow. [ 159.799596][ T8322] syzkaller0: entered promiscuous mode [ 159.819627][ T8322] syzkaller0: entered allmulticast mode [ 159.951195][ T8326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.595'. [ 160.160847][ T8337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.599'. [ 160.254041][ T8337] hsr_slave_0: left promiscuous mode [ 160.294053][ T8337] hsr_slave_1: left promiscuous mode [ 160.419965][ T8353] netlink: 16 bytes leftover after parsing attributes in process `syz.3.603'. [ 160.567953][ T8360] netlink: 44 bytes leftover after parsing attributes in process `syz.2.605'. [ 160.605359][ T8360] netlink: 35 bytes leftover after parsing attributes in process `syz.2.605'. [ 160.632446][ T8360] netlink: 'syz.2.605': attribute type 6 has an invalid length. [ 160.652942][ T8360] netlink: 'syz.2.605': attribute type 5 has an invalid length. [ 160.680497][ T8360] netlink: 35 bytes leftover after parsing attributes in process `syz.2.605'. [ 160.743110][ T8360] netlink: 'syz.2.605': attribute type 4 has an invalid length. [ 160.793366][ T8366] netlink: 'syz.2.605': attribute type 4 has an invalid length. [ 160.852123][ T8360] netlink: 56 bytes leftover after parsing attributes in process `syz.2.605'. [ 161.122358][ T8385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.613'. [ 161.170887][ T8385] netlink: 30 bytes leftover after parsing attributes in process `syz.3.613'. [ 161.301757][ T8394] xt_hashlimit: max too large, truncated to 1048576 [ 161.375721][ T8396] vlan2: entered allmulticast mode [ 161.391237][ T8396] dummy0: entered allmulticast mode [ 161.419290][ T8397] netlink: 'syz.1.617': attribute type 29 has an invalid length. [ 161.467749][ T8400] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 161.501208][ T8396] netlink: 'syz.1.617': attribute type 29 has an invalid length. [ 161.686708][ T8403] netlink: 'syz.3.619': attribute type 12 has an invalid length. [ 161.694835][ T8405] netlink: 'syz.0.615': attribute type 11 has an invalid length. [ 161.694866][ T8405] netlink: 'syz.0.615': attribute type 11 has an invalid length. [ 162.004808][ T8415] validate_nla: 1 callbacks suppressed [ 162.004832][ T8415] netlink: 'syz.3.622': attribute type 13 has an invalid length. [ 162.109529][ T50] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.131377][ T50] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.132781][ T8415] netlink: 'syz.3.622': attribute type 13 has an invalid length. [ 162.139658][ T50] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.192638][ T50] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.928367][ T8463] tipc: Enabled bearer , priority 0 [ 163.015455][ T8463] tipc: Disabling bearer [ 163.506539][ T8496] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 163.523419][ T8496] netlink: 'syz.2.644': attribute type 8 has an invalid length. [ 163.784446][ T8470] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 164.157215][ T8515] __nla_validate_parse: 19 callbacks suppressed [ 164.157241][ T8515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.652'. [ 164.235644][ T8515] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 164.275493][ T8515] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 164.321444][ T8515] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 164.367284][ T8530] sctp: [Deprecated]: syz.1.656 (pid 8530) Use of struct sctp_assoc_value in delayed_ack socket option. [ 164.367284][ T8530] Use struct sctp_sack_info instead [ 164.391452][ T8531] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 164.443996][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.658'. [ 164.456449][ T8531] bond0: (slave bridge0): Releasing backup interface [ 164.473362][ T8531] bridge_slave_0: left allmulticast mode [ 164.479577][ T8531] bridge_slave_0: left promiscuous mode [ 164.487451][ T8531] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.501462][ T8531] bridge_slave_1: left allmulticast mode [ 164.507175][ T8531] bridge_slave_1: left promiscuous mode [ 164.513792][ T8531] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.525583][ T8531] bond0: (slave bond_slave_0): Releasing backup interface [ 164.539115][ T8531] bond0: (slave bond_slave_1): Releasing backup interface [ 164.549609][ T8538] netlink: 'syz.4.657': attribute type 10 has an invalid length. [ 164.564910][ T8531] team0: Port device team_slave_0 removed [ 164.582315][ T8531] team0: Port device team_slave_1 removed [ 164.589287][ T8531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.597560][ T8531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.607516][ T8531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.615490][ T8531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.625555][ T8531] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 164.681734][ T8538] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 164.703343][ T8538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.712756][ T8538] bond0: (slave wlan1): Opening slave failed [ 164.815176][ T8542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.659'. [ 164.905618][ T8548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.661'. [ 164.962573][ T8548] vlan0: entered promiscuous mode [ 164.967787][ T8548] bond0: entered promiscuous mode [ 165.018718][ T8555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.663'. [ 165.028458][ T8555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.663'. [ 165.069860][ T8562] netlink: 'syz.2.663': attribute type 10 has an invalid length. [ 165.086057][ T2996] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.110488][ T2996] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.120889][ T8558] netlink: 32 bytes leftover after parsing attributes in process `syz.3.665'. [ 165.138975][ T8562] team0: Port device netdevsim0 added [ 165.148138][ T2996] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.183494][ T2996] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.245274][ T8558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.665'. [ 165.357944][ T8572] netlink: 164 bytes leftover after parsing attributes in process `syz.0.669'. [ 165.388815][ T8569] netlink: 'syz.1.667': attribute type 1 has an invalid length. [ 165.483891][ T8580] netlink: 76 bytes leftover after parsing attributes in process `syz.4.671'. [ 165.497269][ T8575] bond2 (unregistering): Released all slaves [ 165.731529][ T8589] rdma_op ffff8880323359f0 conn xmit_rdma 0000000000000000 [ 165.824594][ T8594] team1: entered promiscuous mode [ 165.829813][ T8594] team1: entered allmulticast mode [ 166.133847][ T8609] dummy0: entered promiscuous mode [ 166.147355][ T8609] macvtap1: entered promiscuous mode [ 166.166213][ T8609] macvtap1: entered allmulticast mode [ 166.181820][ T8613] dummy0: left promiscuous mode [ 166.222896][ T8616] xt_CT: You must specify a L4 protocol and not use inversions on it [ 166.363491][ T8620] IPv6: Can't replace route, no match found [ 166.889556][ T8649] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 166.930166][ T8649] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 166.963952][ T8649] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 167.038004][ T8663] sctp: [Deprecated]: syz.4.693 (pid 8663) Use of int in maxseg socket option. [ 167.038004][ T8663] Use struct sctp_assoc_value instead [ 167.509659][ T8684] gretap0: entered promiscuous mode [ 167.547478][ T8684] vlan2: entered promiscuous mode [ 168.505520][ T8750] SET target dimension over the limit! [ 168.552460][ T8752] syzkaller0: entered promiscuous mode [ 168.558021][ T8752] syzkaller0: entered allmulticast mode [ 169.084525][ T8779] batadv_slave_0: entered promiscuous mode [ 169.106249][ T34] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x22 [ 169.132624][ T8779] netlink: 'syz.1.725': attribute type 1 has an invalid length. [ 169.277342][ T8796] bond2: (slave bridge3): making interface the new active one [ 169.299447][ T8796] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 169.899578][ T8825] __nla_validate_parse: 48 callbacks suppressed [ 169.899603][ T8825] netlink: 24 bytes leftover after parsing attributes in process `syz.1.733'. [ 169.941552][ T8825] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 169.982451][ T8825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.733'. [ 170.102300][ T8826] xfrm0: entered promiscuous mode [ 170.107531][ T8826] xfrm0: entered allmulticast mode [ 170.714536][ T8850] netlink: 'syz.2.737': attribute type 10 has an invalid length. [ 170.727810][ T8850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.742333][ T8850] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 170.771415][ T8853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.738'. [ 170.788153][ T8850] macvtap1: entered promiscuous mode [ 170.799667][ T8850] macvtap1: entered allmulticast mode [ 170.801634][ T8848] Bluetooth: MGMT ver 1.23 [ 170.806859][ T8850] dummy0: entered allmulticast mode [ 170.831838][ T8850] dummy0: entered promiscuous mode [ 170.842202][ T8848] netlink: 44 bytes leftover after parsing attributes in process `syz.1.736'. [ 170.851466][ T8850] team0: Device macvtap1 failed to register rx_handler [ 170.862594][ T8850] dummy0: left allmulticast mode [ 170.868891][ T8850] dummy0: left promiscuous mode [ 171.360861][ T8885] netlink: 'syz.0.743': attribute type 3 has an invalid length. [ 171.403115][ T8888] netlink: 'syz.1.744': attribute type 1 has an invalid length. [ 171.445367][ T8888] netlink: 'syz.1.744': attribute type 1 has an invalid length. [ 171.624818][ T8901] netlink: 364 bytes leftover after parsing attributes in process `syz.0.746'. [ 172.153509][ T8924] netlink: 'syz.2.753': attribute type 10 has an invalid length. [ 172.195038][ T8924] netlink: 2 bytes leftover after parsing attributes in process `syz.2.753'. [ 172.220872][ T8924] team0: entered promiscuous mode [ 172.226917][ T8924] team_slave_0: entered promiscuous mode [ 172.236394][ T8928] netlink: 'syz.0.751': attribute type 1 has an invalid length. [ 172.237905][ T8924] team_slave_1: entered promiscuous mode [ 172.250115][ T8924] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 172.261826][ T8924] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.269375][ T8924] bridge0: port 3(team0) entered blocking state [ 172.276755][ T8924] bridge0: port 3(team0) entered disabled state [ 172.284247][ T8924] team0: entered allmulticast mode [ 172.289445][ T8924] team_slave_0: entered allmulticast mode [ 172.295962][ T8924] team_slave_1: entered allmulticast mode [ 172.303375][ T8924] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 199.774981][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 212.096891][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 212.097264][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 212.103530][ T5851] Bluetooth: hci0: command 0x0406 tx timeout [ 212.103589][ T5155] Bluetooth: hci1: command 0x0406 tx timeout [ 227.188492][ T8944] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 227.239196][ T8944] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 227.314172][ T8944] bond2 (unregistering): Released all slaves [ 227.435995][ T8953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.759'. [ 227.466859][ T8941] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 227.811756][ T8966] netlink: 28 bytes leftover after parsing attributes in process `syz.0.761'. [ 227.834125][ T8966] netlink: 28 bytes leftover after parsing attributes in process `syz.0.761'. [ 227.862079][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.762'. [ 227.876205][ T8969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.762'. [ 227.886863][ T8969] netlink: 'syz.1.762': attribute type 14 has an invalid length. [ 227.896054][ T8969] netlink: 'syz.1.762': attribute type 12 has an invalid length. [ 228.063768][ T8975] vlan2: entered promiscuous mode [ 228.075570][ T8975] vlan2: entered allmulticast mode [ 228.088488][ T8975] hsr_slave_1: entered allmulticast mode [ 228.111035][ T8981] syzkaller1: entered promiscuous mode [ 228.116580][ T8981] syzkaller1: entered allmulticast mode [ 228.240527][ T8986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.766'. [ 228.368589][ T8993] netlink: 20 bytes leftover after parsing attributes in process `syz.2.768'. [ 228.421024][ T8995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.769'. [ 228.874482][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.775'. [ 228.931845][ T9021] netlink: 'syz.2.775': attribute type 4 has an invalid length. [ 229.072006][ T9028] netlink: 'syz.3.776': attribute type 1 has an invalid length. [ 229.104508][ T9027] netlink: 56 bytes leftover after parsing attributes in process `syz.0.777'. [ 229.405169][ T9042] netlink: 'syz.1.779': attribute type 15 has an invalid length. [ 230.785040][ T9093] syzkaller1: entered promiscuous mode [ 230.791037][ T9093] syzkaller1: entered allmulticast mode [ 230.863460][ T9092] bond2: entered promiscuous mode [ 230.869183][ T9092] 8021q: adding VLAN 0 to HW filter on device bond2 [ 231.386964][ T9102] tipc: Enabled bearer , priority 0 [ 231.409485][ T9102] syzkaller0: entered promiscuous mode [ 231.437402][ T9102] syzkaller0: entered allmulticast mode [ 231.561962][ T9102] tipc: Resetting bearer [ 231.593227][ T9101] tipc: Resetting bearer [ 231.611397][ T30] audit: type=1107 audit(1765260406.891:3): pid=9111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='H' [ 231.673896][ T9101] tipc: Disabling bearer [ 232.222337][ T30] audit: type=1107 audit(1765260407.501:4): pid=9137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='H' [ 232.239506][ T9142] SET target dimension over the limit! [ 232.250150][ T9143] netlink: 'syz.0.812': attribute type 1 has an invalid length. [ 232.385541][ T9156] tipc: Cannot configure node identity twice [ 232.392872][ T9156] tipc: Cannot configure node identity twice [ 232.402302][ T9150] syzkaller0: entered promiscuous mode [ 232.408435][ T9150] syzkaller0: entered allmulticast mode [ 232.587905][ T9159] bond3: option arp_validate: invalid value (18446744073491447809) [ 232.638642][ T9159] bond3 (unregistering): Released all slaves [ 232.663351][ T9172] __nla_validate_parse: 9 callbacks suppressed [ 232.663385][ T9172] netlink: 24 bytes leftover after parsing attributes in process `syz.1.819'. [ 233.551319][ T9197] netlink: 'syz.0.824': attribute type 4 has an invalid length. [ 233.874672][ T9209] netlink: 60 bytes leftover after parsing attributes in process `syz.2.827'. [ 233.949192][ T9210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.828'. [ 233.971096][ T9210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.828'. [ 234.040537][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.829'. [ 234.049412][ T9214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.829'. [ 234.087140][ T9214] netlink: 'syz.1.829': attribute type 11 has an invalid length. [ 234.102341][ T9210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.828'. [ 234.127820][ T9210] hsr_slave_0: left promiscuous mode [ 234.163432][ T9222] netlink: 'syz.3.831': attribute type 10 has an invalid length. [ 234.201990][ T9222] bond0: (slave wlan1): Opening slave failed [ 234.230469][ T9218] netlink: 76 bytes leftover after parsing attributes in process `syz.2.830'. [ 234.422105][ T9231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.833'. [ 234.438204][ T9237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.832'. [ 234.714505][ T9247] syzkaller0: entered promiscuous mode [ 234.720071][ T9247] syzkaller0: entered allmulticast mode [ 234.829606][ T9260] netlink: 'syz.1.839': attribute type 1 has an invalid length. [ 234.904792][ T9260] bond3: entered promiscuous mode [ 234.910549][ T9260] 8021q: adding VLAN 0 to HW filter on device bond3 [ 235.068877][ T9260] bond3: (slave bridge4): making interface the new active one [ 235.077134][ T9260] bridge4: entered promiscuous mode [ 235.091550][ T9260] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 235.542014][ T9297] xt_hashlimit: size too large, truncated to 1048576 [ 236.042748][ T9309] veth1_macvtap: left promiscuous mode [ 236.198113][ T9318] openvswitch: netlink: Message has 10 unknown bytes. [ 236.411366][ T9329] netlink: 'syz.0.856': attribute type 1 has an invalid length. [ 236.552281][ T9336] sch_tbf: burst 2 is lower than device dummy0 mtu (1514) ! [ 236.669322][ T9344] sch_tbf: burst 2 is lower than device dummy0 mtu (1514) ! [ 236.766418][ T9347] netlink: 'syz.0.861': attribute type 1 has an invalid length. [ 236.823089][ T9347] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 237.157085][ T9360] netlink: 'syz.3.863': attribute type 6 has an invalid length. [ 237.217671][ T9360] netlink: 'syz.3.863': attribute type 6 has an invalid length. [ 237.661261][ T9383] netlink: 'syz.0.871': attribute type 1 has an invalid length. [ 237.832909][ T9372] netlink: 'syz.1.867': attribute type 4 has an invalid length. [ 237.851905][ T9390] af_packet: tpacket_rcv: packet too big, clamped from 92 to 4294967272. macoff=96 [ 237.872789][ T9381] syz_tun: entered allmulticast mode [ 237.949903][ T9383] 8021q: adding VLAN 0 to HW filter on device bond3 [ 237.976090][ T9387] vlan2: entered promiscuous mode [ 237.982112][ T9387] bond3: entered promiscuous mode [ 237.987584][ T9387] vlan2: entered allmulticast mode [ 237.993586][ T9387] bond3: entered allmulticast mode [ 238.226721][ T9367] syz_tun: left allmulticast mode [ 238.819453][ T9411] netlink: 'syz.4.875': attribute type 2 has an invalid length. [ 238.879222][ T9415] netlink: 'syz.4.875': attribute type 2 has an invalid length. [ 238.957671][ T9411] !9: entered promiscuous mode [ 238.975542][ T9402] nbd: couldn't find device at index 536870912 [ 238.989269][ T9415] !9: left promiscuous mode [ 239.064493][ T9416] __nla_validate_parse: 14 callbacks suppressed [ 239.064520][ T9416] netlink: 96 bytes leftover after parsing attributes in process `syz.1.878'. [ 239.412892][ T9438] netlink: 'syz.2.885': attribute type 1 has an invalid length. [ 239.474814][ T9442] netlink: 28 bytes leftover after parsing attributes in process `syz.2.885'. [ 239.639701][ T9445] sit1: entered promiscuous mode [ 239.876997][ T9467] netlink: 24 bytes leftover after parsing attributes in process `syz.2.891'. [ 240.209882][ T9482] netlink: 356 bytes leftover after parsing attributes in process `syz.4.894'. [ 241.747671][ T9496] netlink: 52 bytes leftover after parsing attributes in process `syz.0.898'. [ 241.803843][ T9492] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.841816][ T9500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.895'. [ 241.873984][ T9494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.898'. [ 241.943672][ T9492] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.084732][ T9492] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.165778][ T9492] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 242.176954][ T9492] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 242.190041][ T9492] team0: Port device netdevsim0 removed [ 242.199048][ T9492] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.415462][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.525227][ T9492] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.742756][ T9519] netlink: 164 bytes leftover after parsing attributes in process `syz.3.902'. [ 242.761888][ T9519] netlink: 164 bytes leftover after parsing attributes in process `syz.3.902'. [ 242.773693][ T9519] netlink: 60 bytes leftover after parsing attributes in process `syz.3.902'. [ 243.219335][ T9550] sit0: entered promiscuous mode [ 243.785488][ T9581] tipc: Enabled bearer , priority 0 [ 243.803438][ T9581] syzkaller0: entered promiscuous mode [ 243.809281][ T9581] syzkaller0: entered allmulticast mode [ 243.873532][ T9581] tipc: Resetting bearer [ 243.911128][ T9580] tipc: Resetting bearer [ 243.962852][ T9580] tipc: Disabling bearer [ 244.170660][ T9603] netlink: 'syz.3.927': attribute type 13 has an invalid length. [ 244.190342][ T9602] netlink: 'syz.0.928': attribute type 1 has an invalid length. [ 244.408678][ T9603] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.416471][ T9603] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.636059][ T9603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.663260][ T9603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.938692][ T9595] lec:lec_atm_close: lec0: Shut down! [ 244.959451][ T2996] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.978147][ T2996] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.988027][ T2996] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.998459][ T2996] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.036692][ T2996] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.053357][ T2996] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.090532][ T3481] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.098968][ T3481] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.356472][ T9654] netlink: 'syz.2.936': attribute type 1 has an invalid length. [ 245.364748][ T9654] __nla_validate_parse: 6 callbacks suppressed [ 245.364771][ T9654] netlink: 252 bytes leftover after parsing attributes in process `syz.2.936'. [ 245.837526][ T9668] x_tables: duplicate underflow at hook 1 [ 245.876578][ T9681] netlink: 40 bytes leftover after parsing attributes in process `syz.3.945'. [ 245.932421][ T9686] netlink: 'syz.3.945': attribute type 2 has an invalid length. [ 245.952801][ T9686] netlink: 132 bytes leftover after parsing attributes in process `syz.3.945'. [ 245.985287][ T9690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.304082][ T9697] netlink: 'syz.1.948': attribute type 6 has an invalid length. [ 246.374026][ T9704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.507579][ T9704] tipc: Enabling of bearer rejected, failed to enable media [ 247.263818][ T30] audit: type=1107 audit(1765260422.541:5): pid=9731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='H' [ 247.862205][ T9745] syzkaller0: entered promiscuous mode [ 247.903199][ T9745] syzkaller0: entered allmulticast mode [ 247.929628][ T9765] netlink: 16 bytes leftover after parsing attributes in process `syz.0.962'. [ 248.713764][ T9781] netlink: 40 bytes leftover after parsing attributes in process `syz.2.967'. [ 248.822378][ T9781] netlink: 72 bytes leftover after parsing attributes in process `syz.2.967'. [ 250.236158][ T9791] kthread_run failed with err -4 [ 250.693099][ T9819] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 251.044680][ T9841] netlink: 100 bytes leftover after parsing attributes in process `syz.0.978'. [ 251.055157][ T9841] netlink: 100 bytes leftover after parsing attributes in process `syz.0.978'. [ 251.175806][ T9845] netlink: 16 bytes leftover after parsing attributes in process `syz.2.980'. [ 251.185183][ T9845] netlink: 16 bytes leftover after parsing attributes in process `syz.2.980'. [ 252.003710][ T9883] bond4: Unable to set down delay as MII monitoring is disabled [ 252.056383][ T9883] bond4 (unregistering): Released all slaves [ 252.410469][ T9905] netlink: 60 bytes leftover after parsing attributes in process `syz.3.999'. [ 252.457225][ T9909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.996'. [ 252.593187][ T9907] netlink: 'syz.0.997': attribute type 4 has an invalid length. [ 253.869366][ T9958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1012'. [ 254.097524][ T9970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.127313][ T9970] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1014'. [ 255.201654][ T9960] tipc: Enabled bearer , priority 0 [ 255.209410][ T9963] syzkaller0: entered promiscuous mode [ 255.216612][ T9963] syzkaller0: entered allmulticast mode [ 255.346837][ T9979] netlink: 'syz.2.1016': attribute type 4 has an invalid length. [ 255.366177][ T9975] tipc: Resetting bearer [ 255.393454][ T9983] netlink: 'syz.4.1017': attribute type 1 has an invalid length. [ 255.398630][ T9984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1015'. [ 255.404274][ T9985] netlink: 'syz.2.1016': attribute type 4 has an invalid length. [ 255.443414][ T9975] tipc: Disabling bearer [ 256.089953][T10024] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1027'. [ 256.100652][T10020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1026'. [ 256.313794][T10031] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1027'. [ 256.407596][T10043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1032'. [ 256.407596][T10044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1032'. [ 256.535576][T10050] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1031'. [ 257.015803][T10069] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1037'. [ 257.057167][T10074] xt_hashlimit: max too large, truncated to 1048576 [ 257.078251][T10075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1038'. [ 257.686255][T10106] tipc: Enabled bearer , priority 0 [ 257.738406][T10106] tipc: Disabling bearer [ 258.521648][T10152] netlink: 'syz.4.1057': attribute type 2 has an invalid length. [ 258.533781][T10152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1057'. [ 258.652903][T10163] netlink: 'syz.2.1058': attribute type 5 has an invalid length. [ 258.701262][T10164] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0 [ 258.862807][T10167] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1062'. [ 258.875741][T10172] netlink: 'syz.0.1061': attribute type 4 has an invalid length. [ 258.898153][T10167] netlink: 'syz.1.1062': attribute type 1 has an invalid length. [ 258.948194][T10178] netlink: 'syz.3.1063': attribute type 5 has an invalid length. [ 259.003602][T10167] 8021q: adding VLAN 0 to HW filter on device bond4 [ 259.261025][T10191] pim6reg: entered allmulticast mode [ 259.615949][T10211] xt_CT: You must specify a L4 protocol and not use inversions on it [ 259.793480][T10223] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:0 [ 260.306968][T10245] netlink: 'syz.0.1083': attribute type 7 has an invalid length. [ 260.849254][T10269] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20000 [ 260.971040][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 261.121324][T10264] __nla_validate_parse: 9 callbacks suppressed [ 261.121346][T10264] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1084'. [ 261.168069][T10248] bond3: option miimon: invalid value (18446744073709551607) [ 261.216108][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.246906][T10248] bond3: option miimon: allowed values 0 - 2147483647 [ 261.361266][T10248] bond3 (unregistering): Released all slaves [ 261.469828][T10288] pimreg: entered allmulticast mode [ 261.476931][T10287] pimreg: left allmulticast mode [ 261.541762][T10294] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1095'. [ 261.577342][T10290] netlink: 'syz.0.1095': attribute type 15 has an invalid length. [ 261.586026][T10290] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1095'. [ 261.810807][T10306] pimreg: entered allmulticast mode [ 262.006745][T10318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1102'. [ 262.029818][T10319] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1103'. [ 262.043304][T10314] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 262.053334][T10316] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1103'. [ 262.074314][T10318] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1102'. [ 262.369355][T10344] xt_NFQUEUE: number of queues (65532) out of range (got 118598) [ 262.388741][T10344] netlink: 'syz.0.1109': attribute type 21 has an invalid length. [ 262.416514][T10344] netlink: 'syz.0.1109': attribute type 1 has an invalid length. [ 262.450661][T10344] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1109'. [ 262.735262][T10362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1115'. [ 262.745391][T10364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1112'. [ 262.774312][T10363] erspan0: entered promiscuous mode [ 263.136470][T10383] TCP: TCP_TX_DELAY enabled [ 264.238003][T10431] syzkaller0: entered promiscuous mode [ 264.261349][T10431] syzkaller0: entered allmulticast mode [ 264.601433][T10449] netlink: 'syz.2.1134': attribute type 12 has an invalid length. [ 265.068295][T10470] netlink: 'syz.3.1140': attribute type 21 has an invalid length. [ 265.172914][T10475] syzkaller0: entered promiscuous mode [ 265.178479][T10475] syzkaller0: entered allmulticast mode [ 265.239747][T10475] tipc: Enabled bearer , priority 0 [ 265.267133][T10474] tipc: Resetting bearer [ 265.363396][T10474] tipc: Disabling bearer [ 266.216632][T10524] tipc: Enabled bearer , priority 0 [ 266.225949][T10524] syzkaller0: entered promiscuous mode [ 266.232807][T10524] syzkaller0: entered allmulticast mode [ 266.321971][T10524] tipc: Resetting bearer [ 266.353121][T10523] tipc: Resetting bearer [ 266.400330][T10523] tipc: Disabling bearer [ 266.541941][T10547] __nla_validate_parse: 10 callbacks suppressed [ 266.541964][T10547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1160'. [ 266.605830][T10550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1162'. [ 266.663652][T10509] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 266.669998][T10509] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 266.692896][T10509] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 266.698923][T10509] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 266.717061][T10509] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 266.725898][T10509] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 266.765789][T10509] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 266.772383][T10509] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 266.805543][T10509] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 266.821267][T10509] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 266.857884][T10560] bridge6: entered promiscuous mode [ 266.864495][T10560] bridge6: entered allmulticast mode [ 267.051760][T10571] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1167'. [ 267.226436][T10584] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1171'. [ 267.378497][T10595] netlink: 'syz.4.1175': attribute type 10 has an invalid length. [ 267.396266][T10595] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.405441][T10595] team0: entered promiscuous mode [ 267.412640][T10595] bond0: (slave team0): Enslaving as an active interface with an up link [ 267.885125][T10618] netlink: 'syz.3.1180': attribute type 1 has an invalid length. [ 267.949157][T10619] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1180'. [ 268.282670][T10628] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1183'. [ 269.171993][T10676] tipc: Enabled bearer , priority 0 [ 269.184950][T10678] tipc: Resetting bearer [ 269.207854][T10675] tipc: Disabling bearer [ 269.363158][T10687] tipc: Enabled bearer , priority 0 [ 269.403029][T10687] syzkaller0: entered promiscuous mode [ 269.408626][T10687] syzkaller0: entered allmulticast mode [ 269.554181][T10686] tipc: Resetting bearer [ 269.614843][T10686] tipc: Disabling bearer [ 269.912477][T10718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1206'. [ 270.063177][T10722] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 270.117670][T10722] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 270.133483][T10722] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 270.154110][T10730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1210'. [ 270.181217][T10729] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 270.188483][T10729] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 270.393476][T10744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1213'. [ 270.447293][T10744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1213'. [ 270.561972][T10755] netlink: 'syz.2.1216': attribute type 13 has an invalid length. [ 270.579088][ T2134] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.752271][ T2134] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.762418][T10771] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 270.773601][T10771] syzkaller0: entered promiscuous mode [ 270.780777][T10771] syzkaller0: entered allmulticast mode [ 270.818394][ T2134] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.849152][ T2134] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.924632][T10755] tipc: Enabled bearer , priority 0 [ 270.951541][T10753] tipc: Resetting bearer [ 271.034532][T10753] tipc: Disabling bearer [ 271.261125][T10796] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 271.554084][T10812] __nla_validate_parse: 10 callbacks suppressed [ 271.554178][T10812] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1232'. [ 271.706921][T10814] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 271.751823][T10818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1234'. [ 271.780978][T10818] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1234'. [ 271.830838][T10818] geneve3: entered promiscuous mode [ 271.836147][T10818] geneve3: entered allmulticast mode [ 272.473127][T10827] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1236'. [ 272.876681][T10840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1242'. [ 272.900820][T10847] netlink: 'syz.2.1244': attribute type 4 has an invalid length. [ 272.912507][T10840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1242'. [ 272.951629][T10840] netlink: 'syz.1.1242': attribute type 18 has an invalid length. [ 272.989787][T10853] lo: Caught tx_queue_len zero misconfig [ 273.029083][T10859] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1245'. [ 273.308742][T10880] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 273.426669][T10880] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1251'. [ 273.587932][T10891] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1254'. [ 273.597727][T10891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1254'. [ 274.225173][T10918] bond4: entered allmulticast mode [ 274.239191][T10918] 8021q: adding VLAN 0 to HW filter on device bond4 [ 275.397351][T11006] xt_hashlimit: size too large, truncated to 1048576 [ 275.633364][T11016] x_tables: duplicate underflow at hook 1 [ 275.827485][T11018] tipc: Started in network mode [ 275.849857][T11018] tipc: Node identity 4, cluster identity 4711 [ 275.863737][T11018] tipc: Node number set to 4 [ 276.179166][T11043] netlink: 'syz.2.1292': attribute type 6 has an invalid length. [ 276.205563][T11043] netlink: 'syz.2.1292': attribute type 6 has an invalid length. [ 276.231949][T11043] netlink: 'syz.2.1292': attribute type 1 has an invalid length. [ 276.384484][T11043] bond4: (slave bridge4): making interface the new active one [ 276.407898][T11043] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 276.900845][T11089] __nla_validate_parse: 2 callbacks suppressed [ 276.900865][T11089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1298'. [ 276.917695][T11102] netlink: 'syz.3.1300': attribute type 1 has an invalid length. [ 276.961543][T11089] bond3: option ad_actor_sys_prio: invalid value (0) [ 276.968601][T11089] bond3: option ad_actor_sys_prio: allowed values 1 - 65535 [ 276.983401][T11089] bond3 (unregistering): Released all slaves [ 278.309736][T11155] netlink: 'syz.2.1308': attribute type 4 has an invalid length. [ 278.327894][T11155] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1308'. [ 278.382993][T11155] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1308'. [ 278.392592][T11155] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 278.607669][T11165] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1310'. [ 278.616963][T11165] tc_dump_action: action bad kind [ 279.295203][T11189] netlink: 'syz.4.1318': attribute type 27 has an invalid length. [ 279.392910][T11193] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1319'. [ 279.446033][T11193] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1319'. [ 279.509750][T11196] tipc: Enabled bearer , priority 0 [ 279.625401][T11204] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1322'. [ 279.653793][T11192] tipc: Disabling bearer [ 279.686116][T11206] netlink: 'syz.2.1323': attribute type 11 has an invalid length. [ 279.857982][T11213] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1323'. [ 280.002451][T11206] ip6tnl0: Caught tx_queue_len zero misconfig [ 280.264516][T11220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1325'. [ 280.817266][T11244] tipc: New replicast peer: 255.255.255.255 [ 280.829097][T11244] tipc: Enabled bearer , priority 10 [ 281.509671][T11272] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1341'. [ 281.679623][T11274] bond3: Unable to set down delay as MII monitoring is disabled [ 281.702523][T11274] bond3 (unregistering): Released all slaves [ 282.593380][T11308] __nla_validate_parse: 2 callbacks suppressed [ 282.593400][T11308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1351'. [ 282.610460][T11308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1351'. [ 282.611512][T11317] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1352'. [ 282.739852][T11319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1354'. [ 282.781960][T11319] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1354'. [ 283.340513][T11348] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1360'. [ 284.276645][T11387] wg1: entered promiscuous mode [ 284.289018][T11387] wg1: entered allmulticast mode [ 284.497581][T11403] netlink: 'syz.2.1379': attribute type 22 has an invalid length. [ 284.586588][T11408] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1380'. [ 284.809774][T11420] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1382'. [ 284.822611][T11417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1383'. [ 284.832119][T11417] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1383'. [ 284.850402][T11420] openvswitch: netlink: ufid size 164 bytes exceeds the range (1, 16) [ 284.858622][T11420] openvswitch: netlink: Message has 75 unknown bytes. [ 285.461123][T11437] bond3: option miimon: invalid value (18446744073709551607) [ 285.468755][T11437] bond3: option miimon: allowed values 0 - 2147483647 [ 285.482425][T11437] bond3 (unregistering): Released all slaves [ 285.596411][T11454] x_tables: duplicate underflow at hook 1 [ 285.932197][T11457] xt_cgroup: invalid path, errno=-2 [ 286.022213][T11475] IPVS: set_ctl: invalid protocol: 4 10.1.1.2:20001 [ 286.174146][T11486] x_tables: duplicate underflow at hook 2 [ 286.180291][T11483] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 286.195708][T11481] wireguard0: entered promiscuous mode [ 286.216013][T11481] wireguard0: entered allmulticast mode [ 286.264856][T11481] team0: Device wireguard0 is of different type [ 286.463786][T11502] tipc: Enabled bearer , priority 0 [ 286.548487][T11502] syzkaller0: entered promiscuous mode [ 286.554580][T11502] syzkaller0: entered allmulticast mode [ 286.564447][T11502] tipc: Resetting bearer [ 286.583906][T11500] tipc: Resetting bearer [ 286.659104][T11520] x_tables: duplicate underflow at hook 2 [ 286.735638][T11524] sctp: [Deprecated]: syz.0.1408 (pid 11524) Use of struct sctp_assoc_value in delayed_ack socket option. [ 286.735638][T11524] Use struct sctp_sack_info instead [ 287.799085][T11500] tipc: Disabling bearer [ 287.944149][T11530] __nla_validate_parse: 5 callbacks suppressed [ 287.944168][T11530] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1411'. [ 287.983605][T11530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1411'. [ 288.015216][T11541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1413'. [ 288.085110][T11543] netlink: 'syz.0.1415': attribute type 10 has an invalid length. [ 288.162456][T11543] `: Failed to send options change via netlink (err -105) [ 288.183446][T11546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1416'. [ 288.200537][T11543] `: Port device dummy0 added [ 288.247567][T11548] team0: Device is already in use. [ 288.434532][T11553] tipc: Enabled bearer , priority 0 [ 288.453385][T11553] syzkaller0: entered promiscuous mode [ 288.465104][T11553] syzkaller0: entered allmulticast mode [ 288.501556][T11560] netlink: 'syz.2.1422': attribute type 10 has an invalid length. [ 288.520867][T11560] veth0_vlan: left promiscuous mode [ 288.529369][T11553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1419'. [ 288.538954][T11553] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1419'. [ 288.558633][T11560] veth0_vlan: entered promiscuous mode [ 288.584207][T11560] team0: Device veth0_vlan failed to register rx_handler [ 288.648444][T11567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1424'. [ 288.680447][T11552] tipc: Resetting bearer [ 288.744681][T11552] tipc: Disabling bearer [ 288.925191][T11575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1427'. [ 289.013320][T11575] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1427'. [ 289.030534][T11580] 8021q: VLANs not supported on ip6tnl0 [ 289.042476][T11575] 8021q: adding VLAN 0 to HW filter on device bond3 [ 289.690431][T11603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1434'. [ 290.659732][ T9622] IPVS: starting estimator thread 0... [ 290.771491][T11654] IPVS: using max 27 ests per chain, 64800 per kthread [ 292.009720][T11718] Cannot find del_set index 4 as target [ 292.033071][T11720] netlink: 'syz.3.1466': attribute type 10 has an invalid length. [ 292.221977][T11725] gretap1: entered allmulticast mode [ 292.252161][T11726] syzkaller0: entered promiscuous mode [ 292.265828][T11726] syzkaller0: entered allmulticast mode [ 292.416215][T11735] ip6erspan0: entered allmulticast mode [ 292.882043][ T9613] IPVS: starting estimator thread 0... [ 292.921317][T11756] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 292.990335][T11762] IPVS: using max 24 ests per chain, 57600 per kthread [ 293.039200][T11767] __nla_validate_parse: 7 callbacks suppressed [ 293.039221][T11767] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1476'. [ 293.125796][T11767] openvswitch: netlink: Flow actions attr not present in new flow. [ 293.285557][T11775] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1478'. [ 294.158763][T11796] bond4: option packets_per_slave: invalid value (1048582) [ 294.171149][T11796] bond4: option packets_per_slave: allowed values 0 - 65535 [ 294.208531][T11796] bond4 (unregistering): Released all slaves [ 294.401612][T11812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1484'. [ 294.763690][T11822] bridge0: entered promiscuous mode [ 294.781674][T11822] bridge0: port 3(vlan4) entered blocking state [ 294.812119][T11822] bridge0: port 3(vlan4) entered disabled state [ 294.842853][T11822] vlan4: entered allmulticast mode [ 294.852807][T11822] bridge0: entered allmulticast mode [ 294.884552][T11822] vlan4: left allmulticast mode [ 294.889491][T11822] bridge0: left allmulticast mode [ 294.924182][T11822] bridge0: left promiscuous mode [ 294.939796][T11833] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1488'. [ 295.362964][T11857] xt_socket: unknown flags 0x50 [ 295.423666][T11856] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1491'. [ 295.431786][T11867] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1494'. [ 295.694360][T11877] sctp: [Deprecated]: syz.4.1496 (pid 11877) Use of int in maxseg socket option. [ 295.694360][T11877] Use struct sctp_assoc_value instead [ 295.974736][T11890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1500'. [ 296.082366][T11897] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1503'. [ 296.115120][T11894] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1501'. [ 296.137423][T11890] 8021q: adding VLAN 0 to HW filter on device bond5 [ 296.161133][T11896] bond5: (slave macvlan5): Error -22 calling dev_set_mtu [ 296.280708][T11885] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1497'. [ 296.424665][T11908] IPv6: sit2: Disabled Multicast RS [ 296.643541][T11917] netlink: 'syz.3.1506': attribute type 298 has an invalid length. [ 296.652479][T11923] sctp: [Deprecated]: syz.4.1507 (pid 11923) Use of int in max_burst socket option deprecated. [ 296.652479][T11923] Use struct sctp_assoc_value instead [ 296.732636][T11926] tipc: Enabling of bearer rejected, failed to enable media [ 297.053735][T11942] ip6_vti0: Caught tx_queue_len zero misconfig [ 300.546502][T11963] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 300.605998][T11965] __nla_validate_parse: 1 callbacks suppressed [ 300.606018][T11965] netlink: 212320 bytes leftover after parsing attributes in process `syz.2.1523'. [ 300.744411][T11972] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1525'. [ 300.900488][T11983] netlink: 'syz.2.1527': attribute type 1 has an invalid length. [ 300.925382][T11983] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 301.190092][T12009] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1536'. [ 301.371445][T12009] xt_cgroup: invalid path, errno=-2 [ 301.470953][T12032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1540'. [ 301.480794][T12032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.489248][T12032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.547429][T12034] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1541'. [ 301.661959][T12041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1542'. [ 301.748823][T12041] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 301.876801][T12051] netlink: 'syz.3.1546': attribute type 298 has an invalid length. [ 322.664082][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.094081][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 432.297130][T12071] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1552'. [ 432.306478][T12071] netlink: 'syz.3.1552': attribute type 7 has an invalid length. [ 432.317300][T12071] netlink: 'syz.3.1552': attribute type 8 has an invalid length. [ 432.330253][T12071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1552'. [ 432.758652][T12093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1555'. [ 432.872135][T12101] netlink: 'syz.3.1558': attribute type 3 has an invalid length. [ 432.900254][T12101] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1558'. [ 432.994913][T12112] tipc: Enabled bearer , priority 0 [ 433.005683][T12112] syzkaller0: entered promiscuous mode [ 433.011843][T12112] syzkaller0: entered allmulticast mode [ 433.289501][T12120] syzkaller0: entered promiscuous mode [ 433.305949][T12120] syzkaller0: entered allmulticast mode [ 433.413227][T12136] netlink: 'syz.4.1567': attribute type 21 has an invalid length. [ 434.807278][T12136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1567'. [ 434.829691][T12100] tipc: Resetting bearer [ 434.859312][T12100] tipc: Disabling bearer [ 435.023360][ T9630] tipc: Node number set to 2078688131 [ 435.124366][T12174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1572'. [ 435.135709][T12180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1571'. [ 435.315001][T12191] netlink: 'syz.2.1575': attribute type 2 has an invalid length. [ 435.356792][T12191] netlink: 'syz.2.1575': attribute type 1 has an invalid length. [ 435.446802][T12202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1576'. [ 435.585774][T12212] tipc: Enabled bearer , priority 0 [ 435.625787][T12212] syzkaller0: entered promiscuous mode [ 435.640511][T12212] syzkaller0: entered allmulticast mode [ 435.722808][T12212] tipc: Resetting bearer [ 435.744938][T12211] tipc: Resetting bearer [ 435.846503][T12211] tipc: Disabling bearer [ 436.722581][T12276] tipc: Enabled bearer , priority 0 [ 436.757039][T12276] syzkaller0: entered promiscuous mode [ 436.775981][T12276] syzkaller0: entered allmulticast mode [ 436.814622][T12281] dvmrp0: entered allmulticast mode [ 436.889414][T12276] tipc: Resetting bearer [ 437.188253][T12303] netlink: 'syz.0.1610': attribute type 26 has an invalid length. [ 437.205330][T12303] tipc: Enabling of bearer rejected, failed to enable media [ 437.369614][T12307] bond5: option tlb_dynamic_lb: invalid value (5) [ 437.383640][T12307] bond5 (unregistering): Released all slaves [ 437.505283][T12274] tipc: Resetting bearer [ 437.531101][T12274] tipc: Disabling bearer [ 437.742507][T12325] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1613'. [ 437.786571][T12325] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1613'. [ 437.860640][T12333] tipc: Cannot configure node identity twice [ 437.895364][T12325] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1613'. [ 437.904471][T12325] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1613'. [ 437.939708][T12335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1618'. [ 437.990370][T12337] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1617'. [ 438.035485][T12339] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1619'. [ 438.061422][T12337] xt_CT: No such helper "netbios-ns" [ 438.075022][T12339] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1619'. [ 438.136409][T12346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1620'. [ 438.166780][T12346] hsr_slave_0: left promiscuous mode [ 438.187582][T12346] hsr_slave_1: left promiscuous mode [ 438.312612][T12357] syzkaller0: entered promiscuous mode [ 438.318305][T12357] syzkaller0: entered allmulticast mode [ 438.541000][T12375] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1627'. [ 438.703383][T12380] netlink: 'syz.3.1629': attribute type 1 has an invalid length. [ 438.732649][ T30] audit: type=1800 audit(1765260614.001:6): pid=12378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1628" name="memory.events" dev="tmpfs" ino=1677 res=0 errno=0 [ 438.941741][T12399] netpci0: tun_chr_ioctl cmd 1074025677 [ 438.954074][T12399] netpci0: linktype set to 6 [ 439.063456][T12409] Unknown options in mask b7f2 [ 439.087206][T12412] netpci0: tun_chr_ioctl cmd 1074025678 [ 439.104965][T12412] netpci0: group set to 0 [ 439.142014][T12416] Unknown options in mask b7f2 [ 439.237885][T12421] xt_ecn: cannot match TCP bits for non-tcp packets [ 439.257109][T12423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.650840][T12442] nbd0: detected capacity change from 0 to 127 [ 439.683362][ T5841] block nbd0: Receive control failed (result -32) [ 439.685314][T12447] tipc: Enabled bearer , priority 0 [ 439.746314][T12454] syzkaller0: entered promiscuous mode [ 439.755206][T12450] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 439.779789][T12454] syzkaller0: entered allmulticast mode [ 439.864414][T12447] tipc: Resetting bearer [ 439.878056][T12446] tipc: Resetting bearer [ 439.905308][T12446] tipc: Disabling bearer [ 439.916628][T12466] netlink: 'syz.2.1652': attribute type 10 has an invalid length. [ 440.247133][T12477] bond5: option arp_validate: invalid value (18446744073491447809) [ 440.267455][T12477] bond5 (unregistering): Released all slaves [ 441.021528][T12527] netlink: 'syz.4.1671': attribute type 10 has an invalid length. [ 441.072724][T12527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.085168][T12527] batadv0: entered promiscuous mode [ 441.091246][T12527] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 441.589265][T12555] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 441.602297][T12555] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 441.612369][T12564] netlink: 'syz.3.1682': attribute type 12 has an invalid length. [ 441.620620][T12564] netlink: 'syz.3.1682': attribute type 29 has an invalid length. [ 441.628724][T12562] netlink: 'syz.3.1682': attribute type 12 has an invalid length. [ 441.641371][T12562] netlink: 'syz.3.1682': attribute type 29 has an invalid length. [ 442.044500][ T174] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 442.365669][T12611] netlink: 'syz.2.1695': attribute type 17 has an invalid length. [ 443.220651][T12634] netlink: 'syz.2.1705': attribute type 6 has an invalid length. [ 443.321246][T12644] __nla_validate_parse: 32 callbacks suppressed [ 443.321265][T12644] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1708'. [ 443.484993][T12651] netlink: 'syz.2.1709': attribute type 7 has an invalid length. [ 443.493920][T12651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1709'. [ 444.082364][T12679] tipc: Enabled bearer , priority 0 [ 444.092773][T12679] syzkaller0: entered promiscuous mode [ 444.106895][T12679] syzkaller0: entered allmulticast mode [ 444.179312][T12683] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1719'. [ 444.189254][T12683] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1719'. [ 444.207986][T12679] tipc: Resetting bearer [ 444.223188][T12677] tipc: Resetting bearer [ 444.273519][T12677] tipc: Disabling bearer [ 444.542294][T12698] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1723'. [ 444.571578][T12696] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 444.708841][T12708] syzkaller0: entered promiscuous mode [ 444.724081][T12708] syzkaller0: entered allmulticast mode [ 445.135651][T12722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1730'. [ 445.150233][T12722] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1730'. [ 445.379836][T12735] x_tables: duplicate underflow at hook 2 [ 445.544565][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.716612][T12740] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1735'. [ 445.736965][T12737] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1734'. [ 445.928004][T12748] tunl0: Caught tx_queue_len zero misconfig [ 446.547153][T12771] syzkaller0: entered promiscuous mode [ 446.556676][T12771] syzkaller0: entered allmulticast mode [ 446.635413][T12776] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1741'. [ 447.264233][T12808] C: renamed from team_slave_0 [ 448.473576][T12812] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 448.482553][T12812] tipc: Enabled bearer , priority 10 [ 448.844117][T12836] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 448.870490][T12836] SET target dimension over the limit! [ 449.018892][T12844] __nla_validate_parse: 4 callbacks suppressed [ 449.018932][T12844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1764'. [ 449.102884][T12846] netlink: 'syz.2.1766': attribute type 1 has an invalid length. [ 449.118332][T12849] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1766'. [ 449.262493][T12850] team0 (unregistering): Port device team_slave_0 removed [ 449.271770][T12850] team0 (unregistering): Port device team_slave_1 removed [ 449.295542][T12849] 8021q: adding VLAN 0 to HW filter on device bond7 [ 449.552484][T12863] netlink: 'syz.2.1768': attribute type 12 has an invalid length. [ 449.583566][T12865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1770'. [ 449.600305][ T9630] tipc: Node number set to 3758096385 [ 449.640049][T12867] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1770'. [ 449.682235][T12867] 8021q: adding VLAN 0 to HW filter on device bond5 [ 449.722968][T12865] vlan1: entered promiscuous mode [ 449.734937][T12865] bond5: entered promiscuous mode [ 449.852055][T12867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1770'. [ 450.416682][T12900] x_tables: duplicate underflow at hook 1 [ 450.449007][T12907] netlink: 'syz.2.1777': attribute type 29 has an invalid length. [ 450.476051][T12907] netlink: 'syz.2.1777': attribute type 29 has an invalid length. [ 450.632273][T12911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1778'. [ 450.692184][T12913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1778'. [ 450.755540][T12915] netlink: 'syz.2.1779': attribute type 1 has an invalid length. [ 450.773850][T12915] netlink: 'syz.2.1779': attribute type 6 has an invalid length. [ 450.782515][T12915] netlink: 'syz.2.1779': attribute type 3 has an invalid length. [ 451.937880][T12929] sit1: entered promiscuous mode [ 452.253479][T12936] tipc: Enabled bearer , priority 0 [ 452.261466][T12936] syzkaller0: entered promiscuous mode [ 452.278522][T12936] syzkaller0: entered allmulticast mode [ 452.356347][T12936] tipc: Resetting bearer [ 452.366988][T12948] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20004 [ 452.382250][T12945] `: Port device dummy0 removed [ 452.414754][T12949] netlink: 'syz.2.1789': attribute type 1 has an invalid length. [ 452.423427][T12945] bond0: (slave bond_slave_0): Releasing backup interface [ 452.468060][T12945] bond0: (slave bond_slave_1): Releasing backup interface [ 452.531115][T12945] `: Port device team_slave_0 removed [ 452.569318][T12945] `: Port device team_slave_1 removed [ 452.584814][T12945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.597032][T12945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.606474][T12945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.615180][T12945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.685028][T12935] tipc: Resetting bearer [ 452.707593][T12935] tipc: Disabling bearer [ 506.974045][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.413716][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 598.968449][T12975] netlink: 'syz.2.1794': attribute type 21 has an invalid length. [ 598.979957][T12977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1795'. [ 598.991007][T12975] netlink: 'syz.2.1794': attribute type 1 has an invalid length. [ 598.998936][T12975] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1794'. [ 599.018866][T12970] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1792'. [ 599.028358][T12970] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1792'. [ 599.075523][T12976] sctp: [Deprecated]: syz.4.1796 (pid 12976) Use of struct sctp_assoc_value in delayed_ack socket option. [ 599.075523][T12976] Use struct sctp_sack_info instead [ 599.258308][T12992] team0: Caught tx_queue_len zero misconfig [ 599.539436][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 599.550329][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 599.558405][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 599.567309][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 599.578360][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 599.602413][T13014] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1803'. [ 599.616317][T13014] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1803'. [ 599.719413][T13016] tipc: Can't bind to reserved service type 1 [ 600.135032][T13008] chnl_net:caif_netlink_parms(): no params data found [ 600.299203][T13052] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1813'. [ 600.314228][T13008] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.322082][T13008] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.329513][T13008] bridge_slave_0: entered allmulticast mode [ 600.331715][T13052] IPVS: dh: FWM 3 0x00000003 - no destination available [ 600.340812][T13008] bridge_slave_0: entered promiscuous mode [ 600.351872][T13008] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.353058][T13050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1815'. [ 600.359181][T13008] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.375643][T13008] bridge_slave_1: entered allmulticast mode [ 600.383660][T13008] bridge_slave_1: entered promiscuous mode [ 600.449068][T13008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.464161][T13008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.533149][T13060] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1816'. [ 600.536284][T13008] team0: Port device team_slave_0 added [ 600.574171][T13008] team0: Port device team_slave_1 added [ 600.623117][T13008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.630669][T13008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.657484][T13008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.672157][T13008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.679146][T13008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.707422][T13008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.773109][T13008] hsr_slave_0: entered promiscuous mode [ 600.780588][T13008] hsr_slave_1: entered promiscuous mode [ 600.966390][T13072] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1820'. [ 601.033318][T13008] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 601.045687][T13008] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 601.073058][T13008] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 601.093814][T13008] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 601.165992][T13082] netlink: 'syz.3.1821': attribute type 2 has an invalid length. [ 601.230845][T13008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.263215][T13008] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.307419][T11053] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.315140][T11053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.347679][T11053] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.354982][T11053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.610198][ T5841] Bluetooth: hci5: command tx timeout [ 601.670565][T13102] x_tables: duplicate underflow at hook 1 [ 602.107083][T13008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.316402][T13125] netlink: 'syz.4.1829': attribute type 4 has an invalid length. [ 602.371091][T13132] netlink: 'syz.4.1829': attribute type 4 has an invalid length. [ 602.923711][T13149] syzkaller0: entered promiscuous mode [ 602.929404][T13149] syzkaller0: entered allmulticast mode [ 603.098634][T13137] bond0: Caught tx_queue_len zero misconfig [ 603.131006][T13137] netlink: 'syz.2.1831': attribute type 2 has an invalid length. [ 603.141123][T13008] veth0_vlan: entered promiscuous mode [ 603.161190][T13008] veth1_vlan: entered promiscuous mode [ 603.175987][T13137] !: entered promiscuous mode [ 603.434842][T13008] veth0_macvtap: entered promiscuous mode [ 603.474518][T13008] veth1_macvtap: entered promiscuous mode [ 603.605625][T13183] netlink: 'syz.0.1841': attribute type 1 has an invalid length. [ 603.691959][ T5841] Bluetooth: hci5: command tx timeout [ 604.717205][T13183] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 604.767981][T13008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 604.824450][T13008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 604.839404][T11067] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.857314][T11067] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.873947][T13192] netlink: 'syz.2.1843': attribute type 10 has an invalid length. [ 604.888228][T11067] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.929524][T11067] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.946453][T13192] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 605.017736][ T4526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.046323][ T4526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.111780][ T174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.125762][ T174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.257334][T13208] sctp: [Deprecated]: syz.0.1846 (pid 13208) Use of int in max_burst socket option. [ 605.257334][T13208] Use struct sctp_assoc_value instead [ 605.312959][T13219] vxcan3: entered allmulticast mode [ 605.349832][T13221] syzkaller1: entered promiscuous mode [ 605.356868][T13221] syzkaller1: entered allmulticast mode [ 605.770614][ T5841] Bluetooth: hci5: command tx timeout [ 606.156970][T13219] Cannot find set identified by id 0 to match [ 606.344614][T13245] __nla_validate_parse: 6 callbacks suppressed [ 606.344634][T13245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1855'. [ 607.064005][T13276] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1865'. [ 607.249346][T13283] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1865'. [ 607.328370][T13293] netlink: 'syz.0.1869': attribute type 10 has an invalid length. [ 607.459845][T13298] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1868'. [ 607.564623][T13301] IPVS: length: 81 != 8 [ 607.568878][T13301] IPVS: length: 81 != 8 [ 607.619727][T13294] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1868'. [ 607.850471][ T5841] Bluetooth: hci5: command tx timeout [ 607.937234][T13321] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1873'. [ 607.947226][T13321] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1873'. [ 608.032702][T13323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1874'. [ 608.041869][T13323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1874'. [ 608.078598][T13321] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1873'. [ 608.095382][T13332] tipc: Enabled bearer , priority 0 [ 608.104974][T13332] syzkaller0: entered promiscuous mode [ 608.111190][T13332] syzkaller0: entered allmulticast mode [ 608.144802][T13332] netlink: 'syz.2.1878': attribute type 1 has an invalid length. [ 608.222069][T13332] 8021q: adding VLAN 0 to HW filter on device bond8 [ 608.254420][T13347] openvswitch: netlink: Flow key attr not present in new flow. [ 608.278339][T13345] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 608.316620][T13332] tipc: Resetting bearer [ 608.327701][T13332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.460232][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.730168][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.970367][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.260441][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.496693][T13415] xt_TPROXY: Can be used only with -p tcp or -p udp [ 609.541289][T13416] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 609.550485][T13415] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 610.117243][T13438] geneve2: entered promiscuous mode [ 610.245492][T13438] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.330104][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.451487][T13440] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.459321][T13440] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.514181][T13456] netlink: 'syz.4.1906': attribute type 1 has an invalid length. [ 610.601424][T13440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 610.616443][T13440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 610.817384][T13461] netlink: 'syz.2.1907': attribute type 1 has an invalid length. [ 610.831282][T13457] bond4: (slave vcan0): The slave device specified does not support setting the MAC address [ 610.853585][T13457] bond4: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 610.889104][T13457] bond4: (slave vcan0): making interface the new active one [ 610.901824][T13457] bond4: (slave vcan0): Enslaving as an active interface with an up link [ 610.915583][ T174] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.959910][T13438] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.001041][ T174] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.011909][ T174] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.023181][ T174] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.323710][T13438] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.370126][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.452489][T13488] netlink: 'syz.2.1916': attribute type 1 has an invalid length. [ 611.553634][T13438] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.579592][T13495] __nla_validate_parse: 14 callbacks suppressed [ 611.579612][T13495] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1916'. [ 611.618020][T13488] bond9: entered promiscuous mode [ 611.623796][T13488] 8021q: adding VLAN 0 to HW filter on device bond9 [ 611.632865][T13495] bond9: entered allmulticast mode [ 611.727409][T13498] tipc: Started in network mode [ 611.732945][T13498] tipc: Node identity a292fb185cff, cluster identity 4711 [ 611.740317][T13498] tipc: Enabled bearer , priority 0 [ 611.748107][T13498] syzkaller0: entered promiscuous mode [ 611.754104][T13498] syzkaller0: entered allmulticast mode [ 611.802548][T13501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1919'. [ 611.831765][T13498] tipc: Resetting bearer [ 611.838151][T13498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.864672][T13488] bond9: (slave bridge7): making interface the new active one [ 611.872793][T13488] bridge7: entered promiscuous mode [ 611.878278][T13488] bridge7: entered allmulticast mode [ 611.888615][T13488] bond9: (slave bridge7): Enslaving as an active interface with an up link [ 611.911469][T13497] tipc: Resetting bearer [ 611.927725][T13497] tipc: Disabling bearer [ 611.939193][T13503] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1919'. [ 611.948683][ T2063] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.019635][ T3014] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.042203][ T3014] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.067826][ T3014] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.395788][T13512] netlink: 'syz.2.1922': attribute type 8 has an invalid length. [ 612.521458][T13518] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1924'. [ 612.871101][T13538] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1930'. [ 612.898284][T13206] IPVS: starting estimator thread 0... [ 613.002623][T13543] IPVS: using max 26 ests per chain, 62400 per kthread [ 613.115295][T13552] lo speed is unknown, defaulting to 1000 [ 613.125553][T13552] lo speed is unknown, defaulting to 1000 [ 613.137189][T13552] lo speed is unknown, defaulting to 1000 [ 613.156105][T13555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1934'. [ 613.169231][T13552] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 613.180226][T13555] nbd: illegal input index 1012137984 [ 613.207950][T13552] lo speed is unknown, defaulting to 1000 [ 613.226887][T13552] lo speed is unknown, defaulting to 1000 [ 613.242887][T13552] lo speed is unknown, defaulting to 1000 [ 613.259380][T13552] lo speed is unknown, defaulting to 1000 [ 613.285729][T13552] lo speed is unknown, defaulting to 1000 [ 613.322139][T13552] lo speed is unknown, defaulting to 1000 [ 613.467325][T13561] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 613.477291][T13564] lo speed is unknown, defaulting to 1000 [ 613.525376][T13565] lo speed is unknown, defaulting to 1000 [ 613.770993][T13581] netlink: 'syz.5.1940': attribute type 1 has an invalid length. [ 613.852486][T13583] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1940'. [ 614.030239][T13583] hsr_slave_1 (unregistering): left promiscuous mode [ 614.300759][T13598] lo speed is unknown, defaulting to 1000 [ 614.394506][T13605] netlink: 'syz.5.1944': attribute type 1 has an invalid length. [ 614.433137][T13605] netlink: 'syz.5.1944': attribute type 8 has an invalid length. [ 614.686898][T13619] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1948'. [ 614.867035][T13621] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1949'. [ 614.910324][T13629] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 614.918129][T13629] syzkaller1: linktype set to 260 [ 615.183773][T13646] lo speed is unknown, defaulting to 1000 [ 615.202583][T13649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1956'. [ 615.747243][T13678] pim6reg1: entered promiscuous mode [ 615.752829][T13678] pim6reg1: entered allmulticast mode [ 615.904466][T13688] ipvlan2: entered promiscuous mode [ 615.915949][T13688] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 615.937122][T13684] tipc: Enabling of bearer rejected, failed to enable media [ 615.957846][T13687] lo speed is unknown, defaulting to 1000 [ 616.348214][T13695] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 616.348932][T13673] delete_channel: no stack [ 616.532604][T13704] macsec2: entered promiscuous mode [ 616.537882][T13704] macsec2: entered allmulticast mode [ 616.561835][T13702] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 616.582260][T13702] __nla_validate_parse: 1 callbacks suppressed [ 616.582279][T13702] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1970'. [ 616.702153][ T9630] IPVS: starting estimator thread 0... [ 616.746295][T13716] openvswitch: netlink: Message has 4 unknown bytes. [ 616.776745][T13716] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 616.820249][T13715] IPVS: using max 30 ests per chain, 72000 per kthread [ 617.055700][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032341400: rx timeout, send abort [ 617.111503][T13736] raw_sendmsg: syz.3.1981 forgot to set AF_INET. Fix it! [ 617.551937][T13764] bond10: entered promiscuous mode [ 617.557422][T13764] bond10: entered allmulticast mode [ 617.563395][T13764] 8021q: adding VLAN 0 to HW filter on device bond10 [ 617.571612][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032341400: abort rx timeout. Force session deactivation [ 617.642400][T13767] lo speed is unknown, defaulting to 1000 [ 617.850173][ T5841] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 617.895096][T13782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 618.097408][T13790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1997'. [ 618.404957][T13809] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2002'. [ 619.177938][T13848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2008'. [ 619.219353][T13856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2010'. [ 619.532777][T13871] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 619.701171][T13896] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2020'. [ 619.975254][T13918] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2027'. [ 620.126258][T13927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2029'. [ 620.186041][T13929] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2031'. [ 620.213111][T13931] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2030'. [ 620.334389][T13937] netlink: 'syz.4.2033': attribute type 3 has an invalid length. [ 620.483898][T13941] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 620.549791][T13956] netlink: 'syz.4.2036': attribute type 3 has an invalid length. [ 620.801571][T13979] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 621.177303][T14002] syzkaller1: entered promiscuous mode [ 621.183144][T14002] syzkaller1: entered allmulticast mode [ 621.724767][T14024] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 622.148835][T14045] __nla_validate_parse: 5 callbacks suppressed [ 622.148856][T14045] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2055'. [ 622.166347][T14045] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 622.173649][T14045] IPv6: NLM_F_CREATE should be set when creating new route [ 622.180988][T14045] IPv6: NLM_F_CREATE should be set when creating new route [ 622.249103][T14046] bond6: option miimon: invalid value (18446744073709551607) [ 622.256984][T14046] bond6: option miimon: allowed values 0 - 2147483647 [ 622.293727][T14046] bond6 (unregistering): Released all slaves [ 622.341425][T14060] tipc: Enabled bearer , priority 0 [ 622.357068][T14042] lo speed is unknown, defaulting to 1000 [ 622.387408][T14060] tipc: Disabling bearer [ 622.451764][T14064] netlink: 'syz.4.2060': attribute type 1 has an invalid length. [ 622.611561][T14064] 8021q: adding VLAN 0 to HW filter on device bond5 [ 622.638530][T14080] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2065'. [ 622.693189][T14069] 8021q: adding VLAN 0 to HW filter on device bond5 [ 622.707166][T14084] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2066'. [ 622.710366][T14069] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address [ 622.728004][T14069] bond5: (slave vxcan5): Error -95 calling set_mac_address [ 622.742759][T14083] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2065'. [ 622.786609][T14072] batadv0: entered promiscuous mode [ 622.791591][T14083] nbd: device at index 64 is going down [ 622.825339][T14072] macvtap0: entered promiscuous mode [ 622.839731][T14072] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 622.895132][T14072] batadv0: left promiscuous mode [ 622.933034][T14090] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2067'. [ 622.964422][T14078] veth13: entered promiscuous mode [ 622.974448][T14078] bond5: (slave veth13): Enslaving as an active interface with a down link [ 623.193591][T14097] x9: renamed from bridge_slave_0 [ 623.334701][T14103] netlink: 'syz.0.2069': attribute type 9 has an invalid length. [ 623.359781][T14103] netlink: 'syz.0.2069': attribute type 11 has an invalid length. [ 623.384774][T14103] netlink: 'syz.0.2069': attribute type 12 has an invalid length. [ 623.399400][T14103] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.2069'. [ 624.293216][T14120] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2074'. [ 624.317847][T14120] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2074'. [ 624.384865][T14127] netlink: 2816 bytes leftover after parsing attributes in process `syz.3.2078'. [ 624.426276][T14130] macvtap1: entered allmulticast mode [ 624.444483][T14130] mac80211_hwsim hwsim30 wlan0: entered allmulticast mode [ 624.467265][T14130] mac80211_hwsim hwsim30 wlan0: left allmulticast mode [ 624.539368][T14141] netlink: 'syz.3.2078': attribute type 21 has an invalid length. [ 624.567784][T14138] netlink: 'syz.3.2078': attribute type 146 has an invalid length. [ 624.648230][T14141] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2078'. [ 625.076820][T14159] netlink: 'syz.2.2085': attribute type 2 has an invalid length. [ 625.354052][T14163] netlink: 'syz.2.2086': attribute type 2 has an invalid length. [ 625.379577][T14163] 9: entered promiscuous mode [ 625.463807][T14167] openvswitch: netlink: Message has 4 unknown bytes. [ 625.703338][T14182] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 626.169449][T14178] lo speed is unknown, defaulting to 1000 [ 626.603834][T14213] netlink: 'syz.0.2099': attribute type 9 has an invalid length. [ 626.651948][T14216] SET target dimension over the limit! [ 626.681158][T14213] bond6: entered promiscuous mode [ 626.686730][T14213] 8021q: adding VLAN 0 to HW filter on device bond6 [ 627.028548][T14235] netlink: 'syz.4.2108': attribute type 12 has an invalid length. [ 627.347379][T14253] __nla_validate_parse: 6 callbacks suppressed [ 627.347398][T14253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2112'. [ 627.532053][T14266] netlink: 'syz.4.2116': attribute type 1 has an invalid length. [ 627.541064][T14267] netlink: 'syz.4.2116': attribute type 1 has an invalid length. [ 627.596360][T14267] bond6: entered promiscuous mode [ 627.602409][T14267] 8021q: adding VLAN 0 to HW filter on device bond6 [ 627.629646][T14272] bridge0: port 3(macvtap0) entered blocking state [ 627.640800][T14272] bridge0: port 3(macvtap0) entered disabled state [ 627.670494][T14272] macvtap0: entered allmulticast mode [ 627.672695][T14274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2118'. [ 627.675946][T14272] bridge0: entered allmulticast mode [ 627.693745][T14272] macvtap0: left allmulticast mode [ 627.698987][T14272] bridge0: left allmulticast mode [ 627.764936][T14271] bridge0: port 3(macvtap0) entered blocking state [ 627.785209][T14271] bridge0: port 3(macvtap0) entered disabled state [ 627.793932][T14271] macvtap0: entered allmulticast mode [ 627.801270][T14271] bridge0: entered allmulticast mode [ 627.811121][T14271] macvtap0: left allmulticast mode [ 627.816410][T14271] bridge0: left allmulticast mode [ 627.835224][T14280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2120'. [ 627.844472][T14280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2120'. [ 627.915815][T14268] 8021q: adding VLAN 0 to HW filter on device bond7 [ 627.925613][T14268] bond6: (slave bond7): making interface the new active one [ 627.933403][T14268] bond7: entered promiscuous mode [ 627.939272][T14268] bond6: (slave bond7): Enslaving as an active interface with an up link [ 628.068709][T14282] lo speed is unknown, defaulting to 1000 [ 628.351376][T14301] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2126'. [ 628.360597][T14301] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2126'. [ 628.372227][T14301] macvlan0: entered allmulticast mode [ 628.377659][T14301] veth1_vlan: entered allmulticast mode [ 628.462153][T14306] netlink: 'syz.4.2128': attribute type 12 has an invalid length. [ 628.475147][T14306] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2128'. [ 628.690649][T14311] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2130'. [ 628.814678][T14321] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2130'. [ 629.104087][T14335] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2135'. [ 629.388903][T14341] lo speed is unknown, defaulting to 1000 [ 629.432058][T14348] netlink: 'syz.0.2139': attribute type 11 has an invalid length. [ 629.530735][ T9628] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 629.670549][ T9628] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 629.723317][T14359] lo speed is unknown, defaulting to 1000 [ 629.856629][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.331346][ T2063] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 630.380905][T14391] sctp: [Deprecated]: syz.4.2149 (pid 14391) Use of struct sctp_assoc_value in delayed_ack socket option. [ 630.380905][T14391] Use struct sctp_sack_info instead [ 631.035788][T14429] netpci0: tun_chr_ioctl cmd 1074025678 [ 631.042532][T14429] netpci0: group set to 0 [ 631.163144][T14434] netlink: 'syz.4.2162': attribute type 1 has an invalid length. [ 631.209215][T14434] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 631.223728][T14434] bond4: (slave vcan1): Enslaving as a backup interface with an up link [ 631.383427][T11076] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 631.393115][T11076] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 631.680470][ T9630] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 631.858665][T14462] lo speed is unknown, defaulting to 1000 [ 632.483607][T14487] __nla_validate_parse: 12 callbacks suppressed [ 632.483626][T14487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2178'. [ 632.527726][T14485] lo speed is unknown, defaulting to 1000 [ 632.565431][T14491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2179'. [ 632.946264][T14500] tipc: Enabling not permitted [ 632.962108][T14500] tipc: Enabling of bearer rejected, failed to enable media [ 632.997182][T14501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2182'. [ 633.007225][T14501] tipc: Enabling of bearer rejected, failed to enable media [ 633.146526][T14500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2182'. [ 633.156186][T14500] tipc: Enabling of bearer rejected, failed to enable media [ 633.321325][T14506] netlink: 'syz.3.2184': attribute type 1 has an invalid length. [ 633.699405][T14529] tipc: Enabled bearer , priority 0 [ 633.723540][T14529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2190'. [ 633.744389][T14529] syzkaller0: entered promiscuous mode [ 633.749918][T14529] syzkaller0: entered allmulticast mode [ 633.810710][T14523] tipc: Resetting bearer [ 633.822002][T14521] tipc: Resetting bearer [ 633.852315][T14521] tipc: Disabling bearer [ 634.013358][T14547] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2196'. [ 634.116601][T14550] lo speed is unknown, defaulting to 1000 [ 634.264611][T14562] netlink: 'syz.0.2200': attribute type 1 has an invalid length. [ 634.274169][T14562] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2200'. [ 634.449830][T14569] lo speed is unknown, defaulting to 1000 [ 634.584738][T14573] tipc: Enabled bearer , priority 0 [ 634.621318][T14573] syzkaller0: entered promiscuous mode [ 634.647126][T14573] syzkaller0: entered allmulticast mode [ 634.776224][T14577] tipc: Resetting bearer [ 634.805485][T14572] tipc: Resetting bearer [ 634.851370][T14572] tipc: Disabling bearer [ 635.039703][T14591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2208'. [ 635.173979][T14596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2209'. [ 635.264156][T14598] tipc: Enabling of bearer rejected, already enabled [ 635.406451][T14604] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 635.458980][T14607] syzkaller0: entered promiscuous mode [ 635.469747][T14607] syzkaller0: entered allmulticast mode [ 635.497938][T14612] syzkaller1: entered promiscuous mode [ 635.504993][T14612] syzkaller1: entered allmulticast mode [ 635.690497][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 635.710978][T14618] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2217'. [ 637.642848][T14670] bond8: option lacp_active: invalid value (8) [ 637.651729][T14670] bond8 (unregistering): Released all slaves [ 637.695899][T14671] lo speed is unknown, defaulting to 1000 [ 637.826775][T14679] IPv6: Can't replace route, no match found [ 637.943362][T14681] __nla_validate_parse: 2 callbacks suppressed [ 637.943380][T14681] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2231'. [ 638.086014][T14687] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2232'. [ 638.172562][T14689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2234'. [ 638.503926][T14704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2238'. [ 638.543021][T14705] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2238'. [ 638.553118][T14704] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2238'. [ 638.987243][T14724] bond8: ARP target 9.0.0.0 is already present [ 638.994426][T14724] bond8: option arp_ip_target: invalid value (9) [ 639.002439][T14724] bond8 (unregistering): Released all slaves [ 639.588918][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 639.598642][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 639.608795][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 639.624324][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 639.637828][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 639.707541][T14754] lo speed is unknown, defaulting to 1000 [ 640.003134][T14769] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 640.050809][T14754] chnl_net:caif_netlink_parms(): no params data found [ 640.581923][T14754] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.589154][T14754] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.647130][T14754] bridge_slave_0: entered allmulticast mode [ 640.673032][T14754] bridge_slave_0: entered promiscuous mode [ 640.704720][T14754] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.731122][T14754] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.746644][T14819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2263'. [ 640.750562][T14754] bridge_slave_1: entered allmulticast mode [ 640.783780][T14754] bridge_slave_1: entered promiscuous mode [ 640.792392][T14819] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2263'. [ 640.953619][T14754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 641.003169][T14754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 641.122482][T14837] netlink: 'syz.2.2270': attribute type 21 has an invalid length. [ 641.188457][T14837] netlink: 'syz.2.2270': attribute type 1 has an invalid length. [ 641.213337][T14837] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2270'. [ 641.243891][T14754] team0: Port device team_slave_0 added [ 641.300617][T14754] team0: Port device team_slave_1 added [ 641.306381][T14842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2271'. [ 641.614204][T14754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.625910][T14754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.654557][T14754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.671684][T14754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.678960][T14754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.706670][ T5841] Bluetooth: hci6: command tx timeout [ 641.713835][T14754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.872047][T14754] hsr_slave_0: entered promiscuous mode [ 641.888253][T14754] hsr_slave_1: entered promiscuous mode [ 641.896266][T14754] debugfs: 'hsr0' already exists in 'hsr' [ 641.903268][T14754] Cannot create hsr debugfs directory [ 641.993358][T14852] lo speed is unknown, defaulting to 1000 [ 642.856123][T14754] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 642.903916][T14754] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 642.958778][T14754] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 643.014053][T14754] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 643.166804][T14935] netlink: 'syz.4.2291': attribute type 1 has an invalid length. [ 643.211750][T14935] __nla_validate_parse: 5 callbacks suppressed [ 643.211782][T14935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2291'. [ 643.247198][T14754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.260814][T14935] netlink: 'syz.4.2291': attribute type 28 has an invalid length. [ 643.268673][T14935] netlink: 'syz.4.2291': attribute type 3 has an invalid length. [ 643.276975][T14935] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2291'. [ 643.323647][T14754] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.368240][T11053] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.375487][T11053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.432932][T11053] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.440126][T11053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.540830][T14951] sch_tbf: burst 96 is lower than device lo mtu (65503) ! [ 643.639296][T14955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2297'. [ 643.651056][T14955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2297'. [ 643.772879][ T5841] Bluetooth: hci6: command tx timeout [ 643.958450][T14754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.570219][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 644.823145][T15014] nbd: must specify a size in bytes for the device [ 644.834105][T14754] veth0_vlan: entered promiscuous mode [ 644.862453][T14754] veth1_vlan: entered promiscuous mode [ 644.983397][T14754] veth0_macvtap: entered promiscuous mode [ 645.017403][T14754] veth1_macvtap: entered promiscuous mode [ 645.081496][T14754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 645.115040][T14754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 645.139253][ T4526] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.171513][ T4526] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.196492][ T4526] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.221056][ T4526] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.409892][ T2132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.421670][ T2132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.497053][ T2132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.516195][ T2132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.604731][T15052] netlink: 'syz.3.2319': attribute type 11 has an invalid length. [ 645.818984][T13206] IPVS: starting estimator thread 0... [ 645.851581][ T5841] Bluetooth: hci6: command tx timeout [ 645.910321][T15074] IPVS: using max 27 ests per chain, 64800 per kthread [ 645.995190][T15073] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 646.033457][T15081] tipc: Enabling of bearer rejected, already enabled [ 646.087659][T15081] tipc: Enabling of bearer rejected, failed to enable media [ 646.176502][T15090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2326'. [ 646.242241][T15099] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2328'. [ 646.469019][T15115] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2330'. [ 646.562420][T15113] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 646.568665][T15113] syzkaller1: linktype set to 260 [ 646.585315][T15119] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2334'. [ 646.601454][T15117] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2333'. [ 646.613557][T15117] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2333'. [ 647.044908][T15040] hid-generic 0005:0006:5508.0001: hidraw0: BLUETOOTH HID vc3.34 Device [syz0] on aa:aa:aa:aa:aa:aa [ 647.065665][T15133] block nbd0: reconnected socket [ 647.179317][T15131] lo speed is unknown, defaulting to 1000 [ 647.192398][ T5841] block nbd0: Receive control failed (result -32) [ 647.757323][T15163] syzkaller1: entered promiscuous mode [ 647.763181][T15163] syzkaller1: entered allmulticast mode [ 647.930530][ T5841] Bluetooth: hci6: command tx timeout [ 648.108273][T15172] netlink: 'syz.0.2349': attribute type 21 has an invalid length. [ 648.130451][T15172] netlink: 'syz.0.2349': attribute type 4 has an invalid length. [ 648.158062][T15172] netlink: 'syz.0.2349': attribute type 5 has an invalid length. [ 648.228935][T15181] netlink: 'syz.0.2349': attribute type 5 has an invalid length. [ 648.248721][T15172] __nla_validate_parse: 70 callbacks suppressed [ 648.248743][T15172] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2349'. [ 648.385864][T15183] lo speed is unknown, defaulting to 1000 [ 648.679438][T15187] lo speed is unknown, defaulting to 1000 [ 648.901348][T15217] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 648.921812][T15217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2361'. [ 648.982910][T15220] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 649.137283][T15227] mpoa:mpoad_close: () going down [ 649.312130][T15235] sctp: [Deprecated]: syz.4.2364 (pid 15235) Use of int in max_burst socket option deprecated. [ 649.312130][T15235] Use struct sctp_assoc_value instead [ 649.443606][T15240] wg1 speed is unknown, defaulting to 1000 [ 649.449744][T15240] wg1 speed is unknown, defaulting to 1000 [ 649.457144][T15240] wg1 speed is unknown, defaulting to 1000 [ 649.480517][T15240] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 649.516040][T15241] xt_TCPMSS: Only works on TCP SYN packets [ 649.544738][T15243] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2367'. [ 649.589800][T15240] wg1 speed is unknown, defaulting to 1000 [ 649.597333][T15245] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 649.599187][T15240] wg1 speed is unknown, defaulting to 1000 [ 649.613869][T15240] wg1 speed is unknown, defaulting to 1000 [ 649.650344][T15240] wg1 speed is unknown, defaulting to 1000 [ 649.658825][T15240] wg1 speed is unknown, defaulting to 1000 [ 649.669704][T15246] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2367'. [ 649.670528][T15240] wg1 speed is unknown, defaulting to 1000 [ 649.686373][T15240] wg1 speed is unknown, defaulting to 1000 [ 649.695006][T15240] wg1 speed is unknown, defaulting to 1000 [ 650.079119][T15262] netlink: 'syz.0.2372': attribute type 21 has an invalid length. [ 650.117403][T15264] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2373'. [ 650.119144][T15262] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2372'. [ 650.184123][T15267] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2373'. [ 650.200187][T15262] netlink: 'syz.0.2372': attribute type 5 has an invalid length. [ 650.214584][T15262] netlink: 'syz.0.2372': attribute type 6 has an invalid length. [ 650.241146][T15262] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2372'. [ 650.694115][T15297] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2385'. [ 650.735804][T15297] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2385'. [ 650.813305][T15303] pim6reg1: entered promiscuous mode [ 650.818957][T15303] pim6reg1: entered allmulticast mode [ 651.053103][T15314] netlink: 'syz.0.2390': attribute type 4 has an invalid length. [ 651.076403][T15313] syz_tun: entered allmulticast mode [ 651.203730][T15320] netlink: 'syz.2.2392': attribute type 6 has an invalid length. [ 651.310953][T15323] netlink: 'syz.0.2394': attribute type 2 has an invalid length. [ 651.518329][T15334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 652.902342][T15392] x_tables: duplicate underflow at hook 1 [ 652.913257][T15395] No such timeout policy "syz1" [ 652.941535][ T30] audit: type=1800 audit(1765260828.211:7): pid=15393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2417" name="blkio.bfq.time_recursive" dev="tmpfs" ino=130 res=0 errno=0 [ 653.254265][T15417] __nla_validate_parse: 12 callbacks suppressed [ 653.254285][T15417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2423'. [ 653.330067][T15417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2423'. [ 653.405986][T15422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2424'. [ 653.589231][T15429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2427'. [ 653.736901][T15433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2427'. [ 653.877439][T15436] validate_nla: 3 callbacks suppressed [ 653.877459][T15436] netlink: 'syz.0.2429': attribute type 1 has an invalid length. [ 653.905525][T15436] gretap1: entered allmulticast mode [ 654.067066][T15449] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2433'. [ 654.149206][T15450] lo speed is unknown, defaulting to 1000 [ 654.187568][T15450] wg1 speed is unknown, defaulting to 1000 [ 654.312250][T15452] netlink: 'syz.4.2434': attribute type 1 has an invalid length. [ 654.324854][T15457] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2435'. [ 654.435466][T15464] netlink: 'syz.2.2438': attribute type 10 has an invalid length. [ 654.601348][T15464] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 654.829424][T15483] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input5 [ 654.894315][T15475] lo speed is unknown, defaulting to 1000 [ 654.932334][T15466] lo speed is unknown, defaulting to 1000 [ 654.939081][T15475] wg1 speed is unknown, defaulting to 1000 [ 654.948050][T15472] lo speed is unknown, defaulting to 1000 [ 654.987997][T15466] wg1 speed is unknown, defaulting to 1000 [ 655.102417][T15472] wg1 speed is unknown, defaulting to 1000 [ 655.192000][T15498] netlink: 'syz.3.2445': attribute type 2 has an invalid length. [ 655.247148][T15498] netlink: 'syz.3.2445': attribute type 2 has an invalid length. [ 655.395751][T15505] sctp: [Deprecated]: syz.2.2446 (pid 15505) Use of struct sctp_assoc_value in delayed_ack socket option. [ 655.395751][T15505] Use struct sctp_sack_info instead [ 655.526262][T15511] xt_hashlimit: max too large, truncated to 1048576 [ 655.849492][T15504] lo speed is unknown, defaulting to 1000 [ 655.858222][T15504] wg1 speed is unknown, defaulting to 1000 [ 656.991761][T15558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2463'. [ 657.063106][T15560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2464'. [ 657.108452][T15556] lo speed is unknown, defaulting to 1000 [ 657.132849][T15556] wg1 speed is unknown, defaulting to 1000 [ 657.555204][T15584] syzkaller0: entered promiscuous mode [ 657.572591][T15584] syzkaller0: entered allmulticast mode [ 657.625188][T15594] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2472'. [ 658.743932][T15577] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 659.404685][T15601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2474'. [ 659.566157][T15621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2482'. [ 659.608297][T15628] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2483'. [ 659.802125][T15638] x_tables: duplicate underflow at hook 2 [ 659.951670][T15651] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2487'. [ 660.029899][T15655] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2490'. [ 660.218770][T15657] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2491'. [ 660.459453][T15664] tipc: Enabled bearer , priority 0 [ 660.472020][T15665] tipc: Enabling of bearer rejected, already enabled [ 660.483228][T15664] syzkaller0: entered promiscuous mode [ 660.488946][T15664] syzkaller0: entered allmulticast mode [ 660.522262][T15663] tipc: Resetting bearer [ 660.611470][T15663] tipc: Disabling bearer [ 660.657629][T15670] team0: entered promiscuous mode [ 660.686876][T15670] team_slave_0: entered promiscuous mode [ 660.712966][T15670] team_slave_1: entered promiscuous mode [ 660.729056][T15670] team0: entered allmulticast mode [ 660.749265][T15670] team_slave_0: entered allmulticast mode [ 660.759679][T15670] team_slave_1: entered allmulticast mode [ 660.777362][T15670] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2495'. [ 660.787063][T15670] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 660.802888][T15677] netlink: 'syz.3.2498': attribute type 9 has an invalid length. [ 660.869956][T15675] tipc: Enabling of bearer rejected, already enabled [ 660.972449][ T5841] Bluetooth: hci6: command tx timeout [ 661.017071][T15688] openvswitch: netlink: Unknown nsh attribute 0 [ 661.035951][T15688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 661.126204][T15694] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2504'. [ 661.361980][T15712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2510'. [ 661.466102][T15722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2513'. [ 661.538610][T15720] macsec3: entered allmulticast mode [ 661.545593][T15720] macsec0: entered allmulticast mode [ 661.685309][T15731] bond9: (slave veth7): Enslaving as an active interface with an up link [ 661.868159][T15743] lo speed is unknown, defaulting to 1000 [ 661.877197][T15743] wg1 speed is unknown, defaulting to 1000 [ 662.949353][T15769] syzkaller0: entered promiscuous mode [ 662.965380][T15769] syzkaller0: entered allmulticast mode [ 663.132722][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 663.156079][T15788] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 664.563829][T15775] tipc: Enabled bearer , priority 0 [ 664.573337][T15784] __nla_validate_parse: 3 callbacks suppressed [ 664.573359][T15784] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2526'. [ 664.609410][T15784] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2526'. [ 664.619762][T15776] syzkaller0: entered promiscuous mode [ 664.641103][T15776] syzkaller0: entered allmulticast mode [ 664.761551][T15771] tipc: Resetting bearer [ 664.829848][T15771] tipc: Disabling bearer [ 665.011622][T15817] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2537'. [ 665.066557][T15822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2540'. [ 665.077709][T15822] netlink: 42 bytes leftover after parsing attributes in process `syz.3.2540'. [ 665.158021][T15825] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2540'. [ 665.190946][T15825] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2540'. [ 665.210849][T15825] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2540'. [ 665.366602][T15835] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2543'. [ 665.411283][T15819] netlink: 'syz.2.2538': attribute type 1 has an invalid length. [ 665.419149][T15819] netlink: 'syz.2.2538': attribute type 4 has an invalid length. [ 665.426998][T15819] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2538'. [ 665.437209][T15819] netlink: 'syz.2.2538': attribute type 1 has an invalid length. [ 665.445362][T15819] netlink: 'syz.2.2538': attribute type 4 has an invalid length. [ 665.955911][T15858] lo speed is unknown, defaulting to 1000 [ 665.967458][T15858] wg1 speed is unknown, defaulting to 1000 [ 666.029387][T15837] lo speed is unknown, defaulting to 1000 [ 666.084970][T15863] ip6gretap2: entered allmulticast mode [ 666.109196][T15869] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 666.125031][T15837] wg1 speed is unknown, defaulting to 1000 [ 666.640294][T15888] nbd4: detected capacity change from 0 to 63 [ 666.823426][ T5841] block nbd4: Receive control failed (result -32) [ 666.852580][T15906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 667.403847][T15926] veth5: entered allmulticast mode [ 667.774206][T15955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 667.822490][T15959] netlink: 'syz.4.2578': attribute type 4 has an invalid length. [ 667.901658][T15965] netlink: 'syz.0.2579': attribute type 3 has an invalid length. [ 667.912671][T15959] netlink: 'syz.4.2578': attribute type 4 has an invalid length. [ 667.934962][T15965] syz_tun: left allmulticast mode [ 667.940974][T15965] pimreg: left allmulticast mode [ 668.045663][T15975] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 668.061962][T15975] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 668.081761][T15971] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 668.474115][T16002] pim6reg1: entered promiscuous mode [ 668.491271][T16002] pim6reg1: entered allmulticast mode [ 668.497622][T15997] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 669.113057][T16024] netlink: 'syz.3.2600': attribute type 11 has an invalid length. [ 669.312299][T16039] x_tables: duplicate underflow at hook 1 [ 669.393016][T16039] No such timeout policy "syz1" [ 669.462700][T16049] syzkaller1: entered promiscuous mode [ 669.468243][T16049] syzkaller1: entered allmulticast mode [ 669.727721][T16058] __nla_validate_parse: 24 callbacks suppressed [ 669.727741][T16058] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2608'. [ 670.008003][T16064] 8021q: adding VLAN 0 to HW filter on device bond1 [ 670.112967][T16072] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2612'. [ 670.431046][T16086] netlink: 'syz.6.2614': attribute type 2 has an invalid length. [ 670.479387][T16086] : entered promiscuous mode [ 670.492823][T16088] netlink: 'syz.3.2615': attribute type 4 has an invalid length. [ 670.601128][T16089] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2614'. [ 670.702997][T16096] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2616'. [ 670.732517][T16098] lo speed is unknown, defaulting to 1000 [ 670.753094][T16100] bridge_slave_0: entered promiscuous mode [ 670.768573][T16098] wg1 speed is unknown, defaulting to 1000 [ 671.157562][T16112] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2621'. [ 671.358817][T16125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2625'. [ 671.416743][T16127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2627'. [ 671.551565][T16130] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:20000 [ 672.228560][ T5841] block nbd1: Receive control failed (result -32) [ 672.306133][T16154] lo speed is unknown, defaulting to 1000 [ 672.322353][T16154] wg1 speed is unknown, defaulting to 1000 [ 672.498679][T16162] netlink: 'syz.4.2636': attribute type 3 has an invalid length. [ 672.520660][T16162] netlink: 'syz.4.2636': attribute type 1 has an invalid length. [ 672.548128][T16162] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.2636'. [ 672.772401][T16162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2636'. [ 672.826820][T16162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2636'. [ 673.286410][T16169] delete_channel: no stack [ 673.686808][T16217] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 673.731533][T16217] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 673.766028][T16223] netlink: 'syz.3.2655': attribute type 11 has an invalid length. [ 673.846433][T16228] netlink: 'syz.4.2656': attribute type 4 has an invalid length. [ 673.917099][T16233] bridge: RTM_NEWNEIGH with invalid ether address [ 674.029691][T16236] tipc: Enabled bearer , priority 0 [ 674.053903][T16236] syzkaller0: entered promiscuous mode [ 674.068023][T16236] syzkaller0: entered allmulticast mode [ 674.087635][T16238] tipc: Enabling of bearer rejected, already enabled [ 674.119495][T16236] tipc: Resetting bearer [ 674.138324][T16234] tipc: Resetting bearer [ 674.167481][T16234] tipc: Disabling bearer [ 674.588803][T16256] bond0: (slave rose0): Enslaving as an active interface with an up link [ 674.792042][T16264] xt_CT: No such helper "snmp_trap" [ 674.976953][T16281] __nla_validate_parse: 3 callbacks suppressed [ 674.976972][T16281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2670'. [ 675.004620][T16281] hsr_slave_0: left promiscuous mode [ 675.013118][T16281] hsr_slave_1: left promiscuous mode [ 675.471810][T16295] nftables ruleset with unbound set [ 675.669285][T16307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 675.768562][T16314] tap0: tun_chr_ioctl cmd 1074025677 [ 675.774745][T16314] tap0: linktype set to 1 [ 675.953030][T16320] netlink: 300 bytes leftover after parsing attributes in process `syz.6.2682'. [ 676.093240][T16330] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2684'. [ 676.840215][T16367] x_tables: duplicate underflow at hook 1 [ 676.881120][T16366] IPVS: set_ctl: invalid protocol: 8 172.20.20.170:20000 [ 676.908822][T16366] IPVS: set_ctl: invalid protocol: 8 172.20.20.170:20000 [ 676.938503][T16366] IPVS: set_ctl: invalid protocol: 8 172.20.20.170:20000 [ 677.195263][T16376] lo speed is unknown, defaulting to 1000 [ 677.205129][T16378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2698'. [ 677.229132][T16376] wg1 speed is unknown, defaulting to 1000 [ 677.238843][T16381] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2697'. [ 677.269649][T16381] netlink: 'syz.6.2697': attribute type 1 has an invalid length. [ 677.279882][T16383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2696'. [ 677.324754][T16384] syzkaller1: entered promiscuous mode [ 677.345807][T16384] syzkaller1: entered allmulticast mode [ 677.374811][T16388] netlink: 'syz.0.2701': attribute type 1 has an invalid length. [ 677.397766][T16381] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2697'. [ 677.414412][T16381] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 677.493643][T16382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.503064][T11052] bond0: (slave team0): interface is now down [ 677.511408][T11052] bond0: (slave batadv0): interface is now down [ 677.607634][T16399] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2700'. [ 677.670890][ T4526] bond0: (slave team0): interface is now down [ 677.677146][ T4526] bond0: (slave batadv0): interface is now down [ 677.704232][ T4526] bond0: now running without any active interface! [ 677.753014][T16409] lo speed is unknown, defaulting to 1000 [ 677.766974][T16411] lo speed is unknown, defaulting to 1000 [ 677.779368][T16409] wg1 speed is unknown, defaulting to 1000 [ 677.788916][T16411] wg1 speed is unknown, defaulting to 1000 [ 677.860721][T16416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2705'. [ 677.935130][T16417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2705'. [ 678.044774][T16417] ip6tnl2: entered allmulticast mode [ 678.777479][T16451] lo speed is unknown, defaulting to 1000 [ 678.861112][T16451] wg1 speed is unknown, defaulting to 1000 [ 679.325662][T16476] nbd: must specify an index to disconnect [ 679.485995][T16414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.506348][T16414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.779689][T16501] netlink: 'syz.3.2725': attribute type 2 has an invalid length. [ 700.890998][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 775.290462][ T5841] Bluetooth: hci5: command 0x0406 tx timeout [ 776.177872][T16543] syzkaller0: entered promiscuous mode [ 776.184489][T16543] syzkaller0: entered allmulticast mode [ 776.313256][T16549] __nla_validate_parse: 8 callbacks suppressed [ 776.313284][T16549] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2738'. [ 776.406253][T16556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2735'. [ 776.520337][T16553] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2739'. [ 776.755108][T16565] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:1a to non-existent VLAN 2621 [ 777.217795][T16585] tipc: Enabled bearer , priority 0 [ 777.252950][T16585] syzkaller0: entered promiscuous mode [ 777.289414][T16585] syzkaller0: entered allmulticast mode [ 777.371771][T16593] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2746'. [ 777.382174][T16585] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2746'. [ 777.417799][T16602] netlink: 'syz.6.2752': attribute type 6 has an invalid length. [ 777.435948][T16586] tipc: Resetting bearer [ 777.451395][T16602] netlink: 176 bytes leftover after parsing attributes in process `syz.6.2752'. [ 777.452834][T16600] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 777.473223][T16600] pim6reg1: linktype set to 805 [ 777.485678][T16606] netlink: 'syz.0.2754': attribute type 5 has an invalid length. [ 777.509234][T16584] tipc: Resetting bearer [ 777.546898][T16584] tipc: Disabling bearer [ 777.562960][T16612] netlink: 'syz.6.2755': attribute type 10 has an invalid length. [ 777.586603][T16612] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2755'. [ 777.681300][T16612] geneve0: entered promiscuous mode [ 777.686900][T16612] geneve0: entered allmulticast mode [ 777.694883][ T31] INFO: task syz.5.2074:14120 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 777.729881][ T31] Not tainted syzkaller #0 [ 777.730325][T16612] team0: Failed to send options change via netlink (err -105) [ 777.746473][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 777.775938][ T31] task:syz.5.2074 state:D stack:22992 pid:14120 tgid:14117 ppid:13008 task_flags:0x400140 flags:0x00080002 [ 777.797475][T16612] team0: Port device geneve0 added [ 777.815342][T16626] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2759'. [ 777.816613][ T31] Call Trace: [ 777.858902][T16627] batadv2: entered promiscuous mode [ 777.864556][ T31] [ 777.870215][ T31] __schedule+0x14bc/0x5000 [ 777.874842][ T31] ? __pfx___schedule+0x10/0x10 [ 777.897298][T16627] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 777.905319][ T31] ? schedule+0x91/0x360 [ 777.909740][ T31] schedule+0x165/0x360 [ 777.916037][T16632] netlink: 'syz.0.2758': attribute type 10 has an invalid length. [ 777.924420][ T31] schedule_preempt_disabled+0x13/0x30 [ 777.946742][ T31] __mutex_lock+0x7e6/0x1350 [ 777.951917][ T31] ? __mutex_lock+0x5bb/0x1350 [ 777.956902][ T31] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 777.962971][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 777.970670][ T31] ? __nlmsg_put+0xef/0x1b0 [ 777.975441][ T31] ? genlmsg_put+0x137/0x2e0 [ 777.980624][ T31] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 777.986494][ T31] ? kernel_text_address+0xa5/0xe0 [ 777.993835][ T31] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 778.000473][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 778.006791][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 778.020376][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 778.057705][ T31] genl_rcv_msg+0x60e/0x790 [ 778.086390][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 778.117261][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 778.144247][ T31] netlink_rcv_skb+0x208/0x470 [ 778.162422][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 778.167540][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 778.209562][ T31] ? down_read+0x274/0x2e0 [ 778.223902][ T31] ? genl_rcv+0xd/0x40 [ 778.228080][ T31] genl_rcv+0x28/0x40 [ 778.232891][ T31] netlink_unicast+0x82f/0x9e0 [ 778.238136][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 778.245609][ T31] ? netlink_sendmsg+0x642/0xb30 [ 778.252115][ T31] ? skb_put+0x11b/0x210 [ 778.256424][ T31] netlink_sendmsg+0x805/0xb30 [ 778.262796][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 778.268124][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 778.273696][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 778.279108][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 778.285073][ T31] __sock_sendmsg+0x21c/0x270 [ 778.289799][ T31] ____sys_sendmsg+0x505/0x820 [ 778.310555][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 778.317096][ T31] ? import_iovec+0x74/0xa0 [ 778.331513][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 778.335182][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 778.344656][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 778.350129][ T31] ? futex_wait+0x285/0x360 [ 778.354714][ T31] ? __fget_files+0x2a/0x420 [ 778.359342][ T31] ? __fget_files+0x3a0/0x420 [ 778.380145][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 778.385272][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 778.410747][ T31] ? do_syscall_64+0xbe/0xf80 [ 778.416315][ T31] do_syscall_64+0xfa/0xf80 [ 778.421498][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.427607][ T31] ? clear_bhb_loop+0x60/0xb0 [ 778.433101][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.439029][ T31] RIP: 0033:0x7fb8ce38f749 [ 778.444072][ T31] RSP: 002b:00007fb8cf29e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 778.453124][ T31] RAX: ffffffffffffffda RBX: 00007fb8ce5e5fa0 RCX: 00007fb8ce38f749 [ 778.461684][ T31] RDX: 0000000020048000 RSI: 0000200000000000 RDI: 0000000000000008 [ 778.469695][ T31] RBP: 00007fb8ce413f91 R08: 0000000000000000 R09: 0000000000000000 [ 778.500589][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 778.508724][ T31] R13: 00007fb8ce5e6038 R14: 00007fb8ce5e5fa0 R15: 00007ffc69454e68 [ 778.530584][ T31] [ 778.542113][ T31] [ 778.542113][ T31] Showing all locks held in the system: [ 778.624367][ T31] 1 lock held by khungtaskd/31: [ 778.629290][ T31] #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 778.676455][ T31] 3 locks held by kworker/u8:12/3014: [ 778.690067][ T31] #0: ffff88801a069948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 778.703608][ T31] #1: ffffc9000bf17b80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 778.716278][ T31] #2: ffffffff8f2f55c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 778.727386][ T31] 2 locks held by getty/5589: [ 778.732180][ T31] #0: ffff88814dbb40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 778.742600][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 778.753618][ T31] 1 lock held by syz-executor/5831: [ 778.758842][ T31] #0: ffffffff8f2f55c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 778.768837][ T31] 3 locks held by kworker/1:13/9622: [ 778.774753][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 778.786396][ T31] #1: ffffc90005287b80 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 778.797452][ T31] #2: ffffffff8df477f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 778.809124][ T31] 2 locks held by syz.1.1680/12558: [ 778.816771][ T31] #0: ffffffff8f35d170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 778.827555][ T31] #1: ffffffff8e233a08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1660 [ 778.839485][ T31] 3 locks held by kworker/u8:1/14091: [ 778.845516][ T31] #0: ffff88802f5e7948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 778.859196][ T31] #1: ffffc900033d7b80 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 778.874619][ T31] #2: ffffffff8f2f55c8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 778.884753][ T31] 2 locks held by syz.5.2074/14120: [ 778.890652][ T31] #0: ffffffff8f35d170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 778.898906][ T31] #1: ffffffff8e233a08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 778.909661][ T31] 4 locks held by syz-executor/14754: [ 778.915774][ T31] #0: ffff888053a38ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 778.927394][ T31] #1: ffff888053a380c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0xff0 [ 778.938012][ T31] #2: ffffffff8f467308 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 778.948304][ T31] #3: ffff88807e49cb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 778.957804][ T31] 2 locks held by syz.3.2751/16600: [ 778.963088][ T31] #0: ffffffff8f2f55c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 778.974685][ T31] #1: ffffffff8df477f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 778.985881][ T31] 1 lock held by syz.0.2758/16628: [ 778.991695][ T31] #0: ffffffff8f2f55c8 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x323/0x1b20 [ 779.001298][ T31] 1 lock held by syz.0.2758/16632: [ 779.006447][ T31] #0: ffffffff8f2f55c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 779.016030][ T31] [ 779.018405][ T31] ============================================= [ 779.018405][ T31] [ 779.036217][ T31] NMI backtrace for cpu 0 [ 779.036250][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 779.036281][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 779.036293][ T31] Call Trace: [ 779.036301][ T31] [ 779.036310][ T31] dump_stack_lvl+0x189/0x250 [ 779.036341][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 779.036363][ T31] ? __pfx__printk+0x10/0x10 [ 779.036404][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 779.036428][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 779.036451][ T31] ? __pfx__printk+0x10/0x10 [ 779.036482][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 779.036514][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 779.036539][ T31] watchdog+0xf3c/0xf80 [ 779.036570][ T31] ? watchdog+0x1e2/0xf80 [ 779.036602][ T31] kthread+0x711/0x8a0 [ 779.036631][ T31] ? __pfx_watchdog+0x10/0x10 [ 779.036656][ T31] ? __pfx_kthread+0x10/0x10 [ 779.036682][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 779.036706][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 779.036730][ T31] ? __pfx_kthread+0x10/0x10 [ 779.036756][ T31] ret_from_fork+0x599/0xb30 [ 779.036790][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 779.036831][ T31] ? __switch_to_asm+0x39/0x70 [ 779.036854][ T31] ? __switch_to_asm+0x33/0x70 [ 779.036877][ T31] ? __pfx_kthread+0x10/0x10 [ 779.036902][ T31] ret_from_fork_asm+0x1a/0x30 [ 779.036944][ T31] [ 779.036952][ T31] Sending NMI from CPU 0 to CPUs 1: [ 779.184011][ C1] NMI backtrace for cpu 1 [ 779.184031][ C1] CPU: 1 UID: 0 PID: 16626 Comm: syz.2.2759 Not tainted syzkaller #0 PREEMPT(full) [ 779.184051][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 779.184062][ C1] RIP: 0010:vfree+0x281/0x400 [ 779.184089][ C1] Code: 9c 03 00 48 c7 c7 80 ed 76 8b be 71 0d 00 00 31 d2 e8 13 22 7c ff 2e 2e 2e 31 c0 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 07 <84> c0 75 14 44 8b 2b 44 39 ed 73 22 e8 4e 1e ab ff ff c5 e9 67 ff [ 779.184106][ C1] RSP: 0018:ffffc90003257910 EFLAGS: 00000246 [ 779.184122][ C1] RAX: 0000000000000000 RBX: ffff8880332b35ac RCX: 3d9d556188715400 [ 779.184136][ C1] RDX: ffff88804ad40000 RSI: ffffffff8d952009 RDI: ffffffff8bbfc660 [ 779.184149][ C1] RBP: 0000000000000214 R08: ffff8880b8940a03 R09: 1ffff11017128140 [ 779.184161][ C1] R10: dffffc0000000000 R11: ffffed1017128141 R12: ffff8880332b35a0 [ 779.184174][ C1] R13: ffffc90002fc0098 R14: 1ffff110066566b4 R15: 1ffff110066566b5 [ 779.184188][ C1] FS: 0000000000000000(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000 [ 779.184202][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 779.184215][ C1] CR2: 000055e03496c000 CR3: 0000000031e92000 CR4: 00000000003526f0 [ 779.184232][ C1] Call Trace: [ 779.184238][ C1] [ 779.184247][ C1] ? __pfx_kcov_close+0x10/0x10 [ 779.184270][ C1] kcov_close+0x28/0x50 [ 779.184289][ C1] __fput+0x44c/0xa70 [ 779.184313][ C1] task_work_run+0x1d4/0x260 [ 779.184338][ C1] ? __pfx_task_work_run+0x10/0x10 [ 779.184361][ C1] ? kmem_cache_free+0x197/0x620 [ 779.184382][ C1] ? do_exit+0x6c0/0x2310 [ 779.184406][ C1] do_exit+0x6c5/0x2310 [ 779.184429][ C1] ? do_raw_spin_lock+0x121/0x290 [ 779.184454][ C1] ? __pfx_do_exit+0x10/0x10 [ 779.184483][ C1] do_group_exit+0x21c/0x2d0 [ 779.184505][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 779.184529][ C1] get_signal+0x1285/0x1340 [ 779.184566][ C1] arch_do_signal_or_restart+0x9a/0x7a0 [ 779.184592][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 779.184614][ C1] ? __x64_sys_sendmsg+0x230/0x260 [ 779.184649][ C1] ? exit_to_user_mode_loop+0x55/0x4f0 [ 779.184668][ C1] exit_to_user_mode_loop+0x87/0x4f0 [ 779.184683][ C1] ? rcu_is_watching+0x15/0xb0 [ 779.184706][ C1] do_syscall_64+0x2e3/0xf80 [ 779.184728][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.184745][ C1] ? clear_bhb_loop+0x60/0xb0 [ 779.184765][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.184781][ C1] RIP: 0033:0x7f02c938f749 [ 779.184795][ C1] Code: Unable to access opcode bytes at 0x7f02c938f71f. [ 779.184804][ C1] RSP: 002b:00007f02c75f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 779.184821][ C1] RAX: 00000000000000a0 RBX: 00007f02c95e5fa0 RCX: 00007f02c938f749 [ 779.184833][ C1] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 779.184843][ C1] RBP: 00007f02c9413f91 R08: 0000000000000000 R09: 0000000000000000 [ 779.184854][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 779.184864][ C1] R13: 00007f02c95e6038 R14: 00007f02c95e5fa0 R15: 00007fff199b7938 [ 779.184886][ C1] [ 779.593511][T16626] bond0: (slave syz_tun): Releasing backup interface [ 779.732640][ T3014] team0: left allmulticast mode [ 779.737712][ T3014] C: left allmulticast mode [ 779.742485][ T3014] team_slave_1: left allmulticast mode [ 779.750043][ T3014] bridge0: port 3(team0) entered disabled state [ 779.766936][ T3014] bridge_slave_1: left allmulticast mode [ 779.773135][ T3014] bridge_slave_1: left promiscuous mode [ 779.779009][ T3014] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.792008][ T3014] bridge_slave_0: left allmulticast mode [ 779.797695][ T3014] bridge_slave_0: left promiscuous mode [ 779.822707][ T3014] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.877787][ T3014] tipc: Resetting bearer [ 780.400945][ T3014] bond4 (unregistering): (slave bridge4): Releasing active interface [ 780.584294][ T3014] tipc: Disabling bearer [ 780.639755][ T3014] bond9 (unregistering): (slave bridge7): Releasing backup interface [ 780.648357][ T3014] bridge7 (unregistering): left promiscuous mode [ 780.655224][ T3014] bridge7 (unregistering): left allmulticast mode [ 781.001299][ T3014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 781.011855][ T3014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 781.022238][ T3014] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 781.033962][ T3014] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 781.046709][ T3014] bond0 (unregistering): Released all slaves [ 781.149524][ T3014] bond1 (unregistering): Released all slaves [ 781.164948][ T3014] bond2 (unregistering): Released all slaves [ 781.179774][ T3014] bond3 (unregistering): Released all slaves [ 781.195437][ T3014] bond4 (unregistering): Released all slaves [ 781.313484][ T3014] bond5 (unregistering): Released all slaves [ 781.327469][ T3014] bond6 (unregistering): Released all slaves [ 781.429761][ T3014] bond7 (unregistering): Released all slaves [ 781.528823][ T3014] bond8 (unregistering): Released all slaves [ 781.634825][ T3014] bond9 (unregistering): Released all slaves [ 781.735756][ T3014] bond10 (unregistering): Released all slaves [ 781.890852][ T3014] : left promiscuous mode [ 781.974285][ T3014] !: left promiscuous mode [ 782.032226][ T3014] 9: left promiscuous mode [ 782.101632][ T3014] tipc: Left network mode [ 782.526294][ T3014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 782.534431][ T3014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 782.549198][ T3014] macsec0: left allmulticast mode [ 782.554646][ T3014] veth1_vlan: left allmulticast mode [ 782.939343][ T3014] team_slave_1 (unregistering): left promiscuous mode [ 782.950365][ T3014] team0 (unregistering): Port device team_slave_1 removed [ 782.986554][ T3014] C (unregistering): left promiscuous mode [ 782.993295][ T3014] team0 (unregistering): Port device C removed [ 783.657577][ T3014] IPVS: stop unused estimator thread 0... [ 783.728855][ T3014] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.811939][ T3014] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.866409][ T3014] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.955912][ T3014] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.049113][ T3014] bridge_slave_1: left allmulticast mode [ 784.055474][ T3014] bridge_slave_1: left promiscuous mode [ 784.062022][ T3014] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.073171][ T3014] bridge_slave_0: left allmulticast mode [ 784.078848][ T3014] bridge_slave_0: left promiscuous mode [ 784.085246][ T3014] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.274389][ T3014] geneve0 (unregistering): left promiscuous mode [ 784.282259][ T3014] geneve0 (unregistering): left allmulticast mode [ 784.291126][ T3014] team0: Port device geneve0 removed [ 784.438071][ T3014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 784.449126][ T3014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 784.459761][ T3014] bond0 (unregistering): Released all slaves [ 784.554759][ T3014] bond1 (unregistering): Released all slaves [ 786.052167][ T3014] : left promiscuous mode [ 786.249462][ T3014] hsr_slave_0: left promiscuous mode [ 786.256839][ T3014] hsr_slave_1: left promiscuous mode [ 786.267126][ T3014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 786.274690][ T3014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 786.283932][ T3014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 786.291494][ T3014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 786.312783][ T3014] veth1_macvtap: left promiscuous mode [ 786.318509][ T3014] veth0_macvtap: left promiscuous mode [ 786.325329][ T3014] veth1_vlan: left promiscuous mode [ 786.330824][ T3014] veth0_vlan: left promiscuous mode [ 786.747018][ T3014] team_slave_1 (unregistering): left promiscuous mode [ 786.753995][ T3014] team_slave_1 (unregistering): left allmulticast mode [ 786.764372][ T3014] team0 (unregistering): Port device team_slave_1 removed [ 786.803756][ T3014] team_slave_0 (unregistering): left promiscuous mode [ 786.814324][ T3014] team_slave_0 (unregistering): left allmulticast mode [ 786.825330][ T3014] team0 (unregistering): Port device team_slave_0 removed