last executing test programs: 2m47.938571482s ago: executing program 2 (id=761): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) (async) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) read$alg(r0, &(0x7f0000000300)=""/74, 0x4a) (async, rerun: 32) r1 = socket(0x1e, 0x4, 0x0) (rerun: 32) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) sendmmsg(r1, &(0x7f00000030c0), 0x0, 0x9200000000000000) 2m47.746236207s ago: executing program 2 (id=763): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f00000001c0)=0x400000001, 0x401) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x100bf28, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, 0xfffff805}, 0x1c) sendto$inet6(r5, 0x0, 0x3d, 0x4088010, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) accept4(r11, 0x0, 0x0, 0x800) 2m46.692154158s ago: executing program 2 (id=774): syz_emit_ethernet(0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaa05aaff7fffff02ff86dd604dd31800246b8abcfffffffffc0000000000000fc5e29880dd941b01fe8000"/58, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="90020000907800000302fe06e2d4c3d90303030502000000"], 0x0) (async) syz_emit_ethernet(0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaa05aaff7fffff02ff86dd604dd31800246b8abcfffffffffc0000000000000fc5e29880dd941b01fe8000"/58, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="90020000907800000302fe06e2d4c3d90303030502000000"], 0x0) r0 = socket(0x1, 0x80802, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) (async) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r2, 0x0, 0x0, 0x800) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) recvfrom(r3, 0x0, 0x0, 0x10020, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1, 0xffffffffffffffff}, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)}, 0x193}, {{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002280)=""/147, 0x93}, {&(0x7f0000002340)=""/68, 0x44}], 0x2, &(0x7f00000027c0)=""/188, 0xbc}, 0x8}], 0x2, 0x60, 0x0) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000180)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003b0000000a0000000d0085a168d0bf46d32345653600648d04000b000209000049935ade4a460c89b6ec0cffc6ff7f000000000000d89058ba86c902000020004a32000402160005000a0000000000e000e218d1ddf679d538", 0x79, 0x0, 0x0, 0x0) (async) sendto$inet6(r5, &(0x7f0000000180)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003b0000000a0000000d0085a168d0bf46d32345653600648d04000b000209000049935ade4a460c89b6ec0cffc6ff7f000000000000d89058ba86c902000020004a32000402160005000a0000000000e000e218d1ddf679d538", 0x79, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000000300), &(0x7f0000000380)=0x4) socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb3400450000b000000000001190780000000000000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b577037ad3c0a0da7c270998bc412cd683df0445942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1d19cb307b3472ab9cdb042d2643fcb"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x38, 0x41, 0x1, 0x70bd29, 0x80000004, {0x1}, [@nested={0x4, 0x48}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0x10, 0x0, 0x1, [@nested={0x5, 0x3, 0x0, 0x1, [@generic="f3"]}, @typed={0x8, 0x2, 0x0, 0x0, @pid}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r7}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f00000000c0)=0xfe, 0x4) (async) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f00000000c0)=0xfe, 0x4) recvmmsg(r6, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) (async) recvmmsg(r6, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r9}, 0xc) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4011) 2m46.206806772s ago: executing program 2 (id=780): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f00000001c0)={0x6, 'team_slave_0\x00', {0x1}, 0x40}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51b23}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40044) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f0000000140)={{@_ha_fsid={[0x80000000, 0x5]}, {0x3, 0x4, 0x1, 0x4}}, {{[0xfffffff7, 0x8, 0xffff, 0x7]}, 0x0, 0x2, 0x1, 0x0, &(0x7f0000000040)=[{{@align=0xa0e5, {0x101, 0x3, 0x9, 0x1}}, 0x3, 0x0, ':.)\x00'}, {{@_ha_fsid={[0x2, 0xfffffff7]}, {0x4c3, 0x0, 0x7, 0xffffffffffffa7b9}}, 0x1, 0x0, 'gre\x00'}, {{@_ha_fsid={[0x16b5]}, {0xb, 0x3, 0x6, 0xb3}}, 0x7f, 0x0, '\x00'}, {{@_ha_fsid={[0xa71f, 0x8]}, {0xa2, 0x9, 0x9, 0x1}}, 0xc, 0x0, '{s\x00'}, {{@align=0x2, {0x6, 0x0, 0xffffff9e, 0x1}}, 0x6, 0x0, '\x00'}, {{@_ha_fsid={[0x9, 0x6]}, {0x9, 0x1a, 0x8, 0x5}}, 0x737, 0x0, '\x00'}, {{@align, {0x4, 0x40, 0x5, 0x58}}, 0x6, 0x0, 'gre\x00'}]}}) 2m46.040298612s ago: executing program 2 (id=782): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$cgroup_int(r2, &(0x7f0000001480)=0x2, 0x12) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000280)={'wlan0\x00', 0xb002}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x28, r6, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x2c, r9, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf9}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) 2m44.213141326s ago: executing program 2 (id=802): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8010) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1400000027000100f6ff0700fedbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080) 2m30.53954195s ago: executing program 4 (id=895): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x4000800) 2m30.213422495s ago: executing program 4 (id=899): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000640)=ANY=[@ANYBLOB="9b72"], 0x4) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266000c0002"], 0x48}}, 0x0) (async) r2 = socket$inet6(0xa, 0x5, 0x2) setsockopt$inet6_int(r2, 0x29, 0x17, &(0x7f00000000c0)=0x40, 0x4) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000005c0)=0x0) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="f6e6dd2e819c7f3b7dcf2db00ee67b597d25ad64558622420d9d655b5a03777f90a48a52babf13fba2d9d07f0533d982fd2905b4dc90be6a3e06d7b2420456116e0d5d5ece4a1a96981ddf208af5a1285b9922e0a7d8111f2ae7c9818872e51a59", 0x61}, {&(0x7f0000000240)="448999baae6700b1d523b02181b39e2cb62643a86570def043226929d600c2732b72e5d2933cd2279186ea8f9f9cf3c49c6596e9419f44b0c1514940f5338e62082b00403a04bfbbd69f2710588610b4e42b1f9f5989d9b464bb8e4d037e05afcda943c3a25b20d740ec751c2d994b964a8d", 0x72}], 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x190}}, {{&(0x7f0000000600)=@nfc={0x27, r3, 0x1, 0x7}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000680)="651cb0f7ac193f39448a7092c32263e048ad0d73c0f97ec809612f271ded35f9b8212519b630a235d28f67d0094c67a0da1c1a858a0f42f0be024ed7e596193b2eb29f4565b47e7ffc20a65be33f5278c7ce7ec9d2fb588205ca74dfe058fdd216e7aad50c6daef995b8b5537eba7a19d8bc424bca587ed0f51ceb4d58cf5d544babe4d153fb980134df22838e2037f6af78515c17ddbf9c4747da5bb571023f4d7e70521122354d8da9974768e6a4e12e7439ca88347cbdde1288fd05494b917f1c5f2917eeece9c3b4d58a425a2616edbcb875eac29fad15dc0f43a14b4dad", 0xe0}, {&(0x7f0000000780)="41a845b933cd5db33dbc91a977ab6d05ea36bd64aa2577dce5b366d95855740989ea8b2987e3d3d3ee2e0250a4a98d0913b1ec9b449355134ffe5586820ede4de1539fb5954081e45f9afee996fed4c31c9084b95eb59a6b11c24fd03ec75599e9d913b0e94e07f83f58dd5b6c665066a12cb17640158ef729f8841e6029cc3cc333d88a062c38ae28ddc0ae03b1967a21e44351c2ae5b58ac64939955e2d9ec60f5434a", 0xa4}, {&(0x7f0000000840)="b7226beffd9e00472a32ea41de61b697abd48315f793d3e7153c0c2489275a524d912e39c5c1b01a2bac2f5b485f79dd6fd2b703d8c89feba4bf6d735027cda8f60ac286aa9752204bfa82d6a519b36cb391a9e56abb2a00c79ca0edae025251ac593f960ec84701a3918fecebc666a6ee", 0x71}], 0x3, &(0x7f0000000900)=[{0x110, 0xff, 0x1ff, "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"}, {0xa0, 0x10c, 0x4, "351436f7d86779ca299b34d8f8f6d3cd7a5bccbfed2ae1f745b4d36b0b45daae73cbfe6d6c1f5dc707039571a5b39a52e9c37939ccc3e5ac42f02d978d6a6169ec351804cc2c18672c704c987e165937fa5878455bb5f6f13bef7d3d355c9ff575674e922af8ff55af7e0fded51f10d2de73465b18939c7148e0154cbbfbcaffa9b73be9f340b60be62ebfbe27"}], 0x1b0}}], 0x2, 0xd0ec) 2m29.867577331s ago: executing program 4 (id=903): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x11, r2, 0x3cd30000) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0xb, 0x1173, 0xa2, 0x100, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000ffffffffa000f2710263d2ac", 0x0, 0xe505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xd}, 0x2e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000500)='syzkaller\x00', 0x4}, 0x94) 2m29.440727197s ago: executing program 4 (id=907): r0 = socket$inet6(0xa, 0x800, 0x7fffffff) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {0x0, 0x0, 0x6}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x5}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)=""/17, 0x11}, 0x7}], 0x1, 0x23, 0x0) r2 = socket(0x10, 0x80003, 0x0) write(r2, &(0x7f0000000400)="240000001e005f0214f9f4e6ff0804000a000000fc0000000000aa0008000f00fd000000", 0x24) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r2) sendto$inet6(r0, 0x0, 0x0, 0x200c084, &(0x7f0000000200)={0xa, 0xe20, 0xfffffffc, @remote, 0x3}, 0x1c) 2m29.304090714s ago: executing program 4 (id=908): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) unshare(0x22020600) write$nci(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="61030204030002e0000c0b0266967d5575d554e3fdeaf112582dae995cba1fbd920204bdaee37131feab91aed8db939243c3932eb6f5e056d3b0a8cb19c00b5d990f8c6ea5ef97c2295266ec3db25c0ead7a704157ddae3f95bf13c9160d5ec7f3dc994a5f769532b3a67052acbcc86783d1834cb6a4cb38bf1fb882a3d7e3f5bc0543d2eab8a1fdea2e3cccf99e0a27a641095d3c1deaa92f259954bf87d460591490193c499a704cf918d768e7cd6713b5ecd4fd24f3649a453d15defd2eccdaeafb9ac7b2005119abb5fc3486d420186a801511b89d86280108deb76ff4793989ec6bcdbeb51f0ad54fc52a63491ed2b752d0d6d2484c3906d1a8009274a00347b69918588a828d1c4f15025040c09d4f430bf2c8e99ab0900e72dd3772e7760f190781"], 0xc) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000180)={0x1f, 0x3, @none}, 0xe) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000600)={r5, &(0x7f00000001c0)='nfc\x00', 0x30000, &(0x7f0000000300)={@_ha_fsid={[0x5, 0x6]}, {0x7, 0x8, 0x40, 0x8000}}, 0x3, &(0x7f0000000500), &(0x7f0000000540)=0x88}) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600000003e70400000006000000180100002020702500000000002020207b9af8ff00000000ac9100000000000037010000f8ffffffb702000008000000b70300000000000054000000060000005d93000000000000b50302000000000085000000b8000000b7000000000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) accept4$bt_l2cap(r5, 0x0, &(0x7f0000000140), 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x702, 0x36, 0x0, &(0x7f0000000380)="e460334470b8d480eb20c15286dda4fba8285e2e31ca72823a29dad4781041a996430bbe5ecac76a351df831cdb98842af6450b2abf5", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m29.170969607s ago: executing program 32 (id=802): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8010) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1400000027000100f6ff0700fedbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080) 2m28.210026044s ago: executing program 4 (id=915): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x1, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f00000001c0)={0x12, {{0x29, 0x0, 0x4000000, @loopback, 0x1}}}, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1400000027000100f6ff0700fedbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req={0x2000000, 0xf, 0x1, 0x6a}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801000000000000004"], 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x32, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000080), &(0x7f0000000380)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000700)={r5, &(0x7f0000000300), &(0x7f0000000600)=""/240}, 0x20) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r7 = socket(0x10, 0x803, 0x0) tee(r6, r7, 0x3, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, &(0x7f00000005c0)=""/240, 0x3e, 0xf0, 0x1}, 0x20) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}]}, &(0x7f0000000240)='GPL\x00', 0x2, 0x89, &(0x7f0000000400)=""/137, 0x41000, 0x42, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffff2, '\x00', 0x0, r8, 0x0, 0x3}, 0x50) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) close(0x4) 2m12.988318882s ago: executing program 33 (id=915): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x1, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f00000001c0)={0x12, {{0x29, 0x0, 0x4000000, @loopback, 0x1}}}, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1400000027000100f6ff0700fedbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req={0x2000000, 0xf, 0x1, 0x6a}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801000000000000004"], 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x32, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000080), &(0x7f0000000380)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000700)={r5, &(0x7f0000000300), &(0x7f0000000600)=""/240}, 0x20) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r7 = socket(0x10, 0x803, 0x0) tee(r6, r7, 0x3, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, &(0x7f00000005c0)=""/240, 0x3e, 0xf0, 0x1}, 0x20) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}]}, &(0x7f0000000240)='GPL\x00', 0x2, 0x89, &(0x7f0000000400)=""/137, 0x41000, 0x42, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffff2, '\x00', 0x0, r8, 0x0, 0x3}, 0x50) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) close(0x4) 4.347910951s ago: executing program 6 (id=2006): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22ffe6) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x40, 0x1, 0xc, 0x5}, {0x6, 0x0, 0x0, 0x1}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101401, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.175349359s ago: executing program 6 (id=2010): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xa6b4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 3.076933171s ago: executing program 3 (id=2011): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="04005b000600650040000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) close(r3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910380000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 2.760627084s ago: executing program 3 (id=2012): r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000040)={0x0, 0xf0, "854a61d23958ec069cabebeb1055313e1f32da33171c74ebf1c00ebe097165baa02b7ef4bb48ddafbddfcc68038b5a30967d1aa6bb0ef047338589bed0339bfc1dce4c158fe4fdbf2f27939148b1dda968faf84a69d74e40fe990726afe62ff1fb9ec5d147d7e4541a13b1d1397b34620fc24ce43f660ea1746a090762ff2d9a8f04f4542be710deede487f7601e5c9ae3f6afd642fad99104d2ec79c7742612f3ab81fc308859be0a7d6ffceef19d13db6ed5541af76f14cc227ce5f4d919eb3fdca1d5cafdc2fbd23efa8d9783be951d4071f524e87856ebd9f89ed4491c15ddc9f057b83ee2ea4f88679e03e2d952"}) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) (async) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000080)={r2, 0x1, 0x6, @local}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xd9, &(0x7f00000001c0)=""/217, 0x41100, 0x8}, 0x94) 2.76019977s ago: executing program 0 (id=2013): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xd) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r3}]}}}]}, 0x38}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x1000, @empty}}, 0x7fff, 0x0, 0xd78e, 0x40, 0x5a1, 0x0, 0x7}, 0x9c) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) (async) r6 = socket$kcm(0xa, 0x2, 0x0) (async) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r9, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x3b, 0x80001, 0x6f}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x2, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r1, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa14000700000000000000000080"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x14}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000000)=0x3) (async) ioctl$PPPIOCGIDLE(r10, 0x8010743f, &(0x7f00000004c0)) 2.759678872s ago: executing program 5 (id=2014): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) (async) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x4}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x8, 0xfff2}, {0x1, 0xc}, {0x8, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) accept(r1, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000240)=0x80) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0ea796cfd16", 0x8}], 0x1}], 0x1, 0x40800) 2.298494974s ago: executing program 0 (id=2016): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000080), 0x0}}, @fadd={0x58, 0x114, 0x6, {{}, 0x0, 0x0}}], 0xb0}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@gettfilter={0x3c, 0x2e, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffe0, 0xffff}, {0xd, 0xb}, {0xfff1, 0x1}}, [{0x8}, {0x6a, 0xb, 0x1}, {0x8, 0xb, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) (async) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, 0x0, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) close(r8) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 2.183831511s ago: executing program 3 (id=2017): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x3, 0x1) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) sendmsg$inet(r1, &(0x7f0000001040)={&(0x7f0000000080)={0x2, 0xffff, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000000000000000000070000007e0b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x4c004) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1d, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000300)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3c}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x48090) 2.140233152s ago: executing program 1 (id=2018): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000004d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf, 0x8, 0x21, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) getsockopt$inet6_tcp_int(r1, 0x6, 0x2, 0x0, &(0x7f0000000500)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0}, 0x20) 2.028715972s ago: executing program 6 (id=2019): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000280)={0x10000014}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1b, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a440000000c0a01040000000000000000050000060900020073797a31000000000900010073797a31000000001800038014000080100001800c00028008000180fffffffd1400000011000100000000000a"], 0x6c}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="37ec000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket(0x11, 0x2, 0x10001) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{0xae9, 0x8}, {0xfffffff6, 0x2}]}}) setsockopt$inet6_int(r0, 0x29, 0xd0, &(0x7f0000000280)=0x1000, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000040)=0xffffffff) ioctl$PPPIOCSNPMODE(r10, 0x4008744b, &(0x7f0000000440)={0x21, 0x2}) 1.888897653s ago: executing program 1 (id=2020): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbff}, 0x4b}, 0x1, 0x0, 0x0, 0x4044080}, 0x4000804) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x80, 0x381, 0x6, 0xdb, {{0x17, 0x4, 0x3, 0x11, 0x5c, 0x67, 0x0, 0x5, 0x2f, 0x0, @private=0xa010101, @broadcast, {[@timestamp_addr={0x44, 0x2c, 0xcc, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x800}, {@multicast1, 0x9}, {@empty, 0x40}, {@local, 0x39c}, {@rand_addr=0x64010101, 0xfffffffe}]}, @noop, @noop, @generic={0x83, 0x4, "21f4"}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0x58, [@broadcast, @dev={0xac, 0x14, 0x14, 0x1b}, @rand_addr=0x64010101]}]}}}}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)="15a72c92317f7e01e4d362a567b7afeaf856e1076c86b12ce1f071c2d7f6a5784e96821adaa07d9b86e632128fadaaa3fc15ed745ab9d1dea42151ddeef938f917750f483b0b77d3a9647959666e4bc4b553548abeb47a979990edc60d94eace614b0e10796da742f58dff9db93f821cf96a59cc6ea6a47a04722657babb54a99ec40057bad6fe821775f81e5bc2c7e5e16ee8644bef7a470dcf65a817d7be101edf6bcc4f0502cbf4049641d8c9a8afac50f34a9876bd7bd8d43b97580d72f6", 0xc0}], 0x1, &(0x7f0000000380)=[@ip_retopts={{0x6c, 0x0, 0x7, {[@end, @lsrr={0x83, 0x1b, 0x91, [@remote, @local, @dev={0xac, 0x14, 0x14, 0x3d}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @rr={0x7, 0xb, 0xa3, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}, @ssrr={0x89, 0x1b, 0x7b, [@multicast1, @empty, @empty, @loopback, @multicast1, @multicast1]}, @timestamp={0x44, 0x10, 0x94, 0x0, 0x9, [0x6, 0x0, 0x3]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @private=0xa010100, @private=0xa010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @private=0xa010102}}}, @ip_retopts={{0x74, 0x0, 0x7, {[@lsrr={0x83, 0x2b, 0x8a, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xf}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x16}, @loopback]}, @rr={0x7, 0xb, 0xed, [@multicast2, @private=0xa010101]}, @end, @ssrr={0x89, 0x1f, 0xb2, [@dev={0xac, 0x14, 0x14, 0x3d}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @empty, @private=0xa010102, @empty]}, @ssrr={0x89, 0xb, 0xcf, [@local, @multicast1]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x140}}], 0x1, 0x840) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$XFS_IOC_FSGEOMETRY(r4, 0x8100587e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720a00fef8ffffff71a4f1ff0000000071302000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00ff040400007203fdff00000000e500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xb83297c01978451f}, 0x48) 1.875374638s ago: executing program 5 (id=2021): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b04, &(0x7f0000000040)={'wlan0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newchain={0x2c, 0x1e, 0x1, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xe, 0x1}, {0x10, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2c}}, 0x44004) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r2, 0x20, &(0x7f0000000340)={&(0x7f0000000200)=""/194, 0xc2, 0x0, &(0x7f0000000300)=""/19, 0x13}}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r1, 0xffffffffffffffff, 0x4, 0x0, @val=@tracing={r5, 0x9}}, 0x20) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r6) 1.761763346s ago: executing program 0 (id=2022): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffffd, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xfffd, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) connect$can_bcm(0xffffffffffffffff, &(0x7f00000001c0), 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006000e"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="911061000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x8, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 1.70867002s ago: executing program 3 (id=2023): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000100)=""/212, 0xd4, 0x0, &(0x7f0000000200)=""/204, 0xcc}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8, 0x40000}, [@ldst={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xea, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) r1 = socket$inet_icmp(0x2, 0x2, 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={r2, @broadcast, @local}, 0xc) 1.657289519s ago: executing program 1 (id=2024): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'hsr0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x8006361, 0xfffff0bf, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b936, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000005000000080000000f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES16=r4, @ANYBLOB="0000000000000000b7080000a40b756f8e09000000007b8af2ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'hsr0\x00', 0x2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) close(r1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x8006361, 0xfffff0bf, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) close(r6) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b936, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x4890) (async) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000005000000080000000f"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES16=r4, @ANYBLOB="0000000000000000b7080000a40b756f8e09000000007b8af2ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 1.548374138s ago: executing program 5 (id=2025): r0 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$XFS_IOC_FSGETXATTRA(r0, 0x801c582d, &(0x7f0000000000)) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f00000002c0)={{r1}, r2, 0x8, @inherit={0x50, &(0x7f0000000240)={0x1, 0x1, 0xa, 0x200, {0x29, 0xe9, 0x3, 0x6, 0xe6ed}, [0x0]}}, @subvolid=0x7}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f00000013c0)={r4, &(0x7f00000012c0)='&+\\)\xf0}\xdf/\x00', 0x80201, &(0x7f0000001300)={@_ha_fsid={[0x80, 0x1]}, {0x4, 0xfa6, 0x8, 0x5}}, 0x7ff, &(0x7f0000001340), &(0x7f0000001380)=0x40}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001440), r5) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x28, r6, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}}, 0x20000810) sendmsg$inet6(r5, &(0x7f0000001a00)={&(0x7f0000001540)={0xa, 0x4e22, 0x1, @private2, 0x1}, 0x1c, &(0x7f0000001840)=[{&(0x7f0000001580)="ebc95ff7b5fea6d773fa673c30322b90efb9a9f8bc03704de299041e4f4c97ea88c1d9c94805a1a74dab99ecaedbe6ec86275974d52b4ff4d250566e85069277bc3865581cb17a23189462b7086b4705c44a47c06a66a6526f50dc41575637c715d56ef43a4ed95850a106e202635b2316cf413da4e238e966e791d228f68aebc5d59a14cb2467", 0x87}, {&(0x7f0000001640)="dd2db96fe8e288ffd277f4c3469ec4fb7bb318ce96f58b97aee30adaf69953b0c35fc1f7711937d11a59d3693128d04cfc55de00f91510fde189b2bb94a998ce495a509ce3a522f4939868ee37aa9ed964211675ff7ab52ffbb3aa01ffd61176e55d57a3e714d3858eaf9b53aa85fd1855bd2b14cf6dc6bb0894349bff52ff0f9976f898fe8041a8a9db5bbf196d805da4113b9315500a58090019577a2eca0c5bfd43a6773cfaa6cf80b662b5626e4957bfcd382a28426f554b7c6814d253a5472a4a8edbf378885c0498941c3b0823db2b096b16bc77", 0xd7}, {&(0x7f0000001740)="1adb0ec26b05a128e757b9d9250f7c3c661b05801848bd7e9f3f099f54d23fa84bf09521fda1c99348fdff029436c67c95507de5404b8b88dd063ad4d2842295f76ab59b068b13a7b4f0b43b0d51b11d390c4b75e7d3a6343118b81bf77c0d830937f58edce2b3cf294e8cd1a4edcd413ba3bccd53092fbc1e01c158a0e51864e03b742d7d124561a67838517f4cd0393c7302962299fbffe54b6026aa54810e8cae7071b8064b3caf0c0f8853bfe4e3fe64ca869b1a159d9349b66bef6f11486cb21afada391bf4223d17505614387658f5f839c8b6669aa47323", 0xdb}], 0x3, &(0x7f0000001880)=[@dstopts_2292={{0x28, 0x29, 0x4, {0xff, 0x1, '\x00', [@pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x2c, 0x0, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts={{0x58, 0x29, 0x37, {0x62, 0x8, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @enc_lim={0x4, 0x1, 0x6}, @jumbo={0xc2, 0x4, 0x9}, @calipso={0x7, 0x20, {0x0, 0x6, 0x43, 0x8000, [0x6, 0x4, 0x5]}}, @hao={0xc9, 0x10, @empty}]}}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x3b, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xf7}, @enc_lim={0x4, 0x1, 0xf1}, @jumbo, @pad1]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x32, 0x0, '\x00', [@ra={0x5, 0x2, 0x3}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0xfc71}}, @rthdrdstopts={{0x40, 0x29, 0x37, {0x0, 0x4, '\x00', [@pad1, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @ra]}}}], 0x168}, 0x40010) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001a80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001ac0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001b00)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001b40)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001b80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r7, &(0x7f0000001c80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x60, r8, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000001d00), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000001d40)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000001d80)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000001dc0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r7, &(0x7f0000001ec0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={0x5c, r13, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008811}, 0x4) r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r17, &(0x7f0000002080)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002040)={&(0x7f0000001f40)={0xcc, r8, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_SEC_DEVICE={0x30, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x3}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x4}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x81}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x5}]}, @NL802154_ATTR_SEC_DEVICE={0x54, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x4}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x7ff}, @NL802154_DEV_ATTR_KEY_MODE={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0xcc}, 0x1, 0x0, 0x0, 0x24048001}, 0x4000811) r18 = accept$inet6(0xffffffffffffffff, &(0x7f00000020c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000002100)=0x1c) ioctl$EXT4_IOC_GET_ES_CACHE(r18, 0xc020662a, &(0x7f0000002140)={0x5, 0x9, 0x4, 0x1, 0x2, 0x0, [{0x1, 0x4, 0xffff, '\x00', 0x1000}, {0xe, 0x9, 0xe3bd, '\x00', 0x1680}]}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000002200)={0x0, 0xffffff09}, &(0x7f0000002240)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r18, 0x84, 0xa, &(0x7f0000002280)={0x100, 0xfbff, 0x3, 0x81, 0x5, 0x10, 0x7, 0x4, r19}, &(0x7f00000022c0)=0x20) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f00000023c0)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x18000112}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8906}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x80) 1.461427545s ago: executing program 3 (id=2026): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000000000000000850000ca20000000000a01030000000000000000070000000900010073797a300000000088000000090a0104000000000000000007000000080000000900020073797a302db3000000000800010073797a3000000000080005400000002f4400128014000180090001006c6173740000000004000280200001800e000100636f6e6e6c696d69740000000c000280080001405638c73bddd5c2ff08000100647570002000034000000106140000001000010000000000000000000084000a00000000"], 0xd0}}, 0x804) 1.40600308s ago: executing program 0 (id=2027): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000300e00000020000000000000000000000000000000000000000000000000000003bbcd68600000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000100000000000000002000000010000000000000000000000ff0f00000000000073b4ffffffffffffffffffffffffffff0000000000000000000000001000000000000000000000200200000000000000fffffffffffffffffe"], 0xb8}}, 0x4004) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x3, 0x3}, 0x6) (async, rerun: 64) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087"], 0xb8}}, 0x2c000010) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$inet(0x2, 0x4, 0x4) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x0, [0x9, 0x949, 0xf]}, &(0x7f00000000c0)=0x44) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 1.220995593s ago: executing program 1 (id=2028): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x844}, 0xc000802) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x11, 0x0, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) 1.165323465s ago: executing program 5 (id=2029): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0) socket$igmp(0x2, 0x3, 0x2) mmap(&(0x7f00006f3000/0x1000)=nil, 0x1000, 0x2, 0x2010, r0, 0xffffd000) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r1, 0x913e0000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0) mmap(&(0x7f0000707000/0x2000)=nil, 0x2000, 0x3, 0x12, r4, 0xc3ceb000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) socket(0x2a, 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r9) sendmsg$NLBL_CALIPSO_C_ADD(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r10, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000010) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x74, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r8, {0x1, 0xfff2}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @dev={0xac, 0x14, 0x14, 0x5a}}, @TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @multicast}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x12}, @TCA_FLOWER_KEY_UDP_DST_MASK={0x6, 0x26, 0x5}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @private0}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r1, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r11, 0x0) mmap(&(0x7f00009b8000/0x3000)=nil, 0x3000, 0xe, 0x4010, r11, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 1.159682306s ago: executing program 6 (id=2030): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000100000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000004100)=@bloom_filter={0x1e, 0x3, 0x7, 0x60e, 0x65040, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0xf}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x6}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000240)={{0x88, @broadcast, 0x4e23, 0x2, 'fo\x00', 0x10, 0x5, 0x33}, {@broadcast, 0x4e22, 0x1, 0x40, 0xffffff7f, 0xfffffff5}}, 0x44) 1.151223808s ago: executing program 3 (id=2031): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) connect$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x3, {0x2}, 0xff}, 0x18) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) close(0x4) 835.252767ms ago: executing program 6 (id=2032): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x15, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) unshare(0x30010080) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ed071, 0xffffffffffffffff, 0xfffff000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) 612.700228ms ago: executing program 0 (id=2033): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) (async, rerun: 32) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x6c, 0x3, 0x8, 0x401, 0x0, 0x0, {0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x809b}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xa5}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x71ee}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000050) (rerun: 32) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x24, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {{0x8004, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x100, 0x0, 0x0, {[@generic={0x8, 0x10, "9753d19222b83ecfdb6ebbe04c11"}]}}}}}}}}, 0x0) 610.860222ms ago: executing program 5 (id=2034): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = accept4(r1, &(0x7f00000000c0)=@xdp, &(0x7f0000000140)=0x80, 0x80000) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x17, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000002500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000024c0)={&(0x7f0000000340)={0x215c, r4, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffffff80, 0x68}}}}, [@NL80211_ATTR_TID_CONFIG={0x608, 0x11d, 0x0, 0x1, [{0x2bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xf}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2a4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xb, 0x0, 0x48, 0x60, 0x30, 0x6c, 0x36, 0x3, 0x52, 0x36, 0x16, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x0, 0xa}, {0x2, 0x6}, {0x4, 0x9}, {0x1, 0x2}, {0x7, 0x6}, {0x6, 0x6}, {0x1, 0x2}, {0x2, 0x6}, {0x2, 0x5}, {0x1, 0x8}, {0x6, 0x2}, {0x2, 0x7}, {0x2, 0xa}, {0x5, 0x3}, {0x0, 0x3}, {0x7, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0xe}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x40, 0x1, 0xf, 0x4, 0x7, 0x5, 0xfffb]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x16, 0x12, 0x12, 0x16, 0x1b, 0x5, 0x6, 0x5, 0x24, 0x60, 0x18, 0x30, 0x1b, 0x1, 0x60, 0x6c, 0x3, 0x9, 0x60, 0x36, 0x12, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffc, 0xff, 0x6, 0x9, 0x6, 0xb3, 0x8, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe4, 0x2, 0x81, 0x6e, 0x9, 0x6, 0xfff, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xb, 0x2, [{0x4, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x7, 0x9}, {0x0, 0x5}, {0x3, 0x6}, {0x0, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0xe7a, 0x3, 0x3ff, 0xa, 0x7f, 0x9, 0x4]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0xa}, {0x4, 0xa}, {0x3, 0x6}, {0x0, 0x9}, {0x4, 0x4}, {0x4, 0x7}, {0x1, 0xa}, {0x6, 0x3}, {0x1, 0x9}, {0x2, 0xa}, {0x3, 0x6}, {0x5, 0x2}, {0x3, 0x4}, {0x0, 0x8}, {0x1, 0x3}, {0x4, 0x2}, {0x7, 0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x2}, {0x3, 0x3}, {0x7}, {0x3}, {0x0, 0x6}, {0x3, 0x4}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x36]}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xff, 0x5, 0x2, 0x0, 0xa3, 0xa, 0x3000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x589, 0xcb5e, 0xfffd, 0x9d69, 0x1e42, 0xd778]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x7, 0x2}, {0x3, 0x5}, {0x4}, {0x6}, {0x0, 0x6}, {0x1, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x8, 0x4, 0x200, 0x8, 0x7bf, 0x2, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x8b, 0x401, 0x2, 0x1c0, 0x6, 0x1, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0xbbb, 0x3, 0x7, 0x1b6c, 0x57, 0xe]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x12, 0x1, 0x18, 0x24, 0x60, 0x60, 0x2, 0x6c, 0x60, 0x6c, 0x0, 0x24, 0x48, 0x3, 0x1, 0x9, 0x30, 0x12, 0x36, 0x9, 0x6c, 0x18, 0xc, 0xc, 0x9, 0x60, 0x6c]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x113, 0x9c96, 0x8001, 0xd3, 0x6, 0x8, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x4, 0x4, 0x3fec, 0x2, 0xbae, 0x0, 0x1000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0xfff8, 0x3, 0x40, 0x2, 0x2, 0x7fff, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x4, 0x1}, {0x1, 0x6}, {0x7, 0x8}, {0x6}, {0x2, 0x3}, {0x4, 0x2}, {0x0, 0x5}, {0x3, 0x5}, {0x0, 0x5}, {0x1, 0x7}, {0x4, 0x5}, {0x5, 0x2}, {0x7, 0x7}, {0x0, 0x4}, {0x0, 0x6}, {0x6, 0x3}, {0x4, 0x7}, {0x0, 0x9}, {0x2, 0xa}, {0x3, 0x5}, {0x3, 0x3}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0xa}, {0x5, 0x3}, {0x4, 0x8}, {0x4, 0x8}, {0x3, 0x5}, {0x5, 0x8}, {0x0, 0x9}, {0x3, 0xa}, {0x6, 0x1}, {0x2, 0x7}, {0x3}, {0x2, 0xa}, {0x5, 0x1}, {0x5, 0xa}, {0x0, 0x7}, {0x4, 0x1}, {0x4, 0xa}, {0x1, 0x7}, {0x6, 0x2}, {0x1, 0x4}, {0x2, 0x4}, {0x3, 0x6}, {0x1, 0x2}, {0x7, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x6fae, 0x3, 0x0, 0x5372, 0x1, 0x1, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x71, 0x0, 0x5, 0x3, 0x5800, 0xf200, 0x7, 0xc38]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x9, 0x6, 0x36, 0x12, 0x2, 0xb, 0x1, 0x18, 0x16, 0x1, 0x18, 0x9, 0x2, 0x1, 0xe3, 0x6, 0x46, 0x24, 0x6, 0x24, 0x3]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8d}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xc04c}]}, {0x150, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x34, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x5, 0x18, 0x36, 0x16, 0x5, 0x12, 0x36, 0x60, 0x18, 0x0, 0x4, 0x16, 0x5, 0x4, 0x4, 0x6, 0x12, 0x9, 0x6c, 0xb, 0xc, 0x30, 0xf, 0x4, 0x2, 0x36, 0x48, 0x16, 0x1b, 0x1, 0x5, 0x60]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x118, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x1, 0x5}, {0x3, 0x6}, {0x4, 0x9}, {0x5, 0x8}, {0x4, 0x9}, {0x7, 0x7}, {0x3, 0xa}, {0x6, 0x2}, {0x0, 0x2}, {0x6, 0x7}, {0x0, 0x5}, {0x0, 0x6}, {0x2}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x1, 0x2}, {0x1, 0x9}, {0x5, 0x6}, {}, {0x1, 0xa}, {0x1, 0x5}, {0x6, 0x7}, {0x0, 0x3}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x4}, {0x1}, {0x1, 0xa}, {0x7, 0x9}, {}, {0x1, 0x5}, {0x1, 0x4}, {0x6, 0x3}, {0x6, 0xa}, {0x6}, {0x2, 0x3}, {0x6, 0x7}, {0x6, 0x5}, {0x5, 0x3}, {0x2, 0x4}, {0x3}, {0x7, 0x6}, {0x1, 0x3}, {0x1, 0x7}, {0x3, 0x6}, {0x6, 0x1}, {0x6, 0x2}, {0x6, 0x7}, {0x5, 0x4}, {0x3, 0x9}, {0x4, 0x5}, {0x3, 0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x7, 0x5}, {0x6, 0x3}, {0x2, 0x8}, {0x4, 0xa}, {0x1, 0x7}, {0x4, 0x9}, {0x2, 0x4}, {0x0, 0x5}, {0x0, 0x7}, {0x2, 0x2}, {0x0, 0x2}, {0x6, 0x3}, {0x1, 0x9}, {0x7, 0x7}, {0x6, 0x6}, {0x0, 0x6}, {0x4, 0x4}, {0x5, 0x4}, {0x1, 0x6}, {0x5, 0x5}, {0x4, 0x6}, {0x6}]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x4, 0xa}, {0x7, 0x5}, {0x1, 0x9}, {0x3, 0xa}, {0x4}, {}, {0x0, 0x9}, {0x1, 0x6}, {0x0, 0x1}, {0x5, 0xa}, {0x5, 0x8}, {0x5, 0x1}, {0x7, 0x4}, {0x3, 0x4}, {0x0, 0x6}, {0x1, 0x6}, {0x6}, {0x3}, {0x6}, {0x0, 0x6}, {0x5, 0x7}, {0x1, 0x8}, {0x0, 0x7}, {0x2, 0x9}, {0x4, 0x9}, {0x0, 0x1}, {0x2, 0x9}, {0x0, 0x5}, {0x5}]}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x1, 0x36, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x8, 0xf, 0x7, 0xe0, 0x37c, 0x621, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x2, 0x1b, 0xc, 0x9, 0x79, 0x16, 0x60, 0x17, 0x24, 0x6, 0x4, 0x18, 0x48, 0x3c, 0x1b, 0x1]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x18, 0x36, 0x24, 0x30, 0x36, 0x9, 0x1, 0x4]}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x48, 0x3, 0x3, 0x5, 0x1, 0xc, 0x2, 0x12, 0xb, 0xc, 0x24, 0x6, 0x3, 0x6c]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x81}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x95}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0xf4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xb8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xf800, 0x5, 0x7, 0xea3e, 0xc9, 0x7fff, 0x4]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x6, 0xb, 0xb, 0x3, 0x30, 0x60, 0xb, 0xc, 0x1, 0x24]}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x4, 0x5}, {0x7, 0x5}, {0x3, 0x3}, {0x1, 0x7}, {0x4, 0x5}, {0x6, 0xa}, {0x0, 0x4}, {0x6, 0x9}, {0x4, 0x3}, {0x5, 0x6}, {0x3, 0x9}, {0x5, 0x8}, {0x0, 0x5}, {0x4, 0x9}, {0x1, 0x6}, {0x4, 0x9}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x68d8, 0x4, 0x6, 0x3, 0x0, 0x81, 0x1, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7, 0x800, 0x5, 0x658, 0xf0aa, 0x4, 0x6]}}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x0, 0x6, 0x15, 0xfff8, 0xfff9, 0x6, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x70}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x25}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xea}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xdd}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x38}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x56}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7c}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xde}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x34}]}]}, @NL80211_ATTR_TID_CONFIG={0x47c, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x1fc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x85}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x7, 0x6}, {0x6, 0x5}, {0x1, 0xa}, {0x6, 0x9}, {0x3, 0x8}, {0x1, 0x8}, {0x5, 0x7}, {0x3}, {0x4, 0xa}, {0x1, 0x9}, {0x6, 0xa}, {0x2, 0x3}, {0x0, 0x1}, {0x7, 0x4}, {0x4, 0x5}, {0x0, 0x5}, {0x5, 0x5}, {0x3, 0x4}, {0x6}, {0x3, 0x9}, {0x7, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x6, 0x4}, {0x5, 0x9}, {0x1, 0x2}, {0x2, 0xa}, {0x7, 0x1}, {0x0, 0x6}, {0x4, 0x3}, {0x1, 0x6}, {0x1, 0x3}, {0x5, 0x4}, {0x7, 0x9}, {0x6, 0x3}, {0x0, 0x4}, {0x0, 0x1}, {0x4, 0xa}, {0x2, 0x5}, {0x0, 0xa}, {0x5, 0x2}, {0x2, 0x6}, {0x0, 0x5}, {0x4, 0x7}, {0x7, 0x1}, {0x5, 0x8}, {0x4, 0x2}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0x2}, {0x6, 0x2}, {0x3, 0x3}, {0x0, 0x4}, {0x7, 0x1}, {0x4}, {0x0, 0x5}, {0x6, 0x2}, {0x0, 0x1}, {0x7, 0x8}, {0x4, 0x5}, {0x4, 0x3}, {0x5, 0x9}, {0x6, 0x1}, {0x0, 0x5}, {0x6, 0x8}, {0x7, 0x2}, {0x2, 0x4}, {0x1, 0x8}, {0x0, 0x1}, {0x7, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x7, 0x0, 0x2, 0x5, 0x200, 0xa]}}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x60, 0x1, 0xc, 0x3, 0x1, 0x1b, 0x24, 0x1, 0x5, 0x48, 0xb, 0x18, 0xb, 0xc, 0x60, 0x9, 0x48, 0x1]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x2, 0x9, 0x16, 0x48, 0x30, 0x6, 0x6c, 0x30, 0xb, 0x24, 0x1b, 0x18, 0xc, 0xb, 0x6, 0x1, 0xb, 0x6, 0x3, 0x3, 0x4, 0x60, 0x2, 0x9, 0x1, 0x2]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xb0c, 0x8, 0x2, 0x7fff, 0xc370, 0x7, 0x6, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x5, 0x5, 0x24, 0x0, 0x1b, 0x1e, 0x16, 0x2, 0xb, 0x68, 0x6c, 0x3, 0x18, 0x6, 0x6c, 0x2, 0x6, 0x1b, 0x60, 0x5, 0xc, 0x2, 0x24, 0x6c]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xf801, 0x600, 0x9, 0xffff, 0x7, 0x746c, 0x101]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x36, 0x1, 0x4, 0x6d, 0x48, 0x1, 0x30, 0x9, 0xc, 0xc, 0x1c, 0x16, 0x3, 0x6c, 0x0, 0x12, 0x48, 0x30, 0x1b, 0x9, 0x0, 0x60, 0x2, 0x6c, 0xb, 0x60, 0x6, 0xc, 0x5]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6e, 0x14, 0x6c, 0x4, 0x1d, 0xc, 0x36, 0x5, 0x5, 0x0, 0x1b, 0x24, 0x3, 0x18, 0x5, 0x60, 0x16, 0x3, 0xb, 0x36, 0x1, 0x12, 0x9, 0x30, 0x24, 0x3, 0x1, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8, 0x3, 0x8, 0x2, 0x9, 0x4bb]}}]}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x10}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7d}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x77}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x174, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x170, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x5, 0xf001, 0xff, 0x5, 0x0, 0xf32b, 0x3e83]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x6, 0x1}, {0x5, 0x1}, {0x7, 0x2}, {0x5, 0x8}, {0x5, 0x4}, {0x0, 0x1}, {0x0, 0x7}, {0x3, 0x2}, {0x7, 0x6}, {0x3, 0x6}, {0x0, 0x8}, {0x4}, {0x7, 0x3}, {0x3, 0x3}, {0x2, 0x1}, {0x3}, {0x1, 0x2}, {0x7, 0x8}, {0x5, 0x4}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x4}, {0x6, 0x5}, {0x5, 0x6}, {0x4, 0x8}, {0x7, 0x2}, {0x6}, {0x5, 0x7}, {}, {0x6, 0xa}, {0x6, 0x3}, {0x5, 0x8}, {0x0, 0x8}, {0x7, 0x5}, {0x6, 0x4}, {0x4}, {0x7, 0x1}, {0x7, 0x1}, {0x4, 0x5}, {0x7, 0x3}, {0x5, 0x3}, {0x0, 0x9}, {0x6, 0xa}, {0x0, 0x2}, {0x3, 0x6}, {0x6, 0x4}, {0x2, 0x6}, {0x0, 0x8}, {0x1}, {0x4}, {0x3, 0xa}, {0x2, 0x6}, {0x6, 0xa}, {0x3, 0xa}, {0x5, 0x4}, {0x0, 0x4}, {0x7, 0x4}, {0x5, 0x9}, {0x6, 0x8}, {0x1, 0x5}, {0x3, 0x3}, {0x7, 0x3}, {0x6, 0x1}, {0x1, 0x6}, {0x5, 0x2}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x400, 0xfff, 0x7, 0xfd, 0x8, 0x4, 0xe]}}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x18, 0x2, 0xb, 0xc, 0x6c, 0x18, 0x1, 0xf, 0x0, 0x1b, 0x2, 0x2, 0xb, 0x18, 0x3, 0x1, 0x30, 0x3, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xd, 0xf801, 0x80, 0x80, 0xfffb, 0x6, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xc, 0x1ff, 0x9, 0x477, 0x9, 0x9, 0x800]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x10, 0x40, 0x3e, 0x9, 0x2cd, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3ff, 0x3e, 0x12da, 0x1, 0xfffb, 0xde4, 0x10]}}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x2, 0x5}, {0x2, 0x6}, {0x4, 0x1}, {0x5, 0x2}, {0x0, 0x2}, {0x1, 0x4}, {0x5}, {0x6, 0xa}, {0x0, 0x7}, {0x0, 0x1}, {0x7, 0x3}, {0x4, 0x3}, {0x3, 0x8}, {0x1, 0x8}, {0x1}, {0x0, 0xa}, {0x4}, {0x6, 0x6}, {0x5, 0x5}, {0x0, 0x1}, {0x2}, {0x5, 0x3}, {0x1, 0xa}, {0x1, 0xa}, {0x2, 0x8}, {0x3, 0x2}, {0x6}, {0x5, 0x4}, {0x6, 0x8}, {0x4, 0x5}, {0x6, 0x2}, {0x6, 0x9}, {0x7}, {0x5, 0x1}, {0x1, 0x7}, {0x6, 0x5}, {0x2, 0x2}, {0x1}, {0x5, 0x2}, {0x3, 0xa}, {0x5, 0x7}, {0x5, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x6, 0x5, 0x6, 0xff73, 0x80, 0x1, 0x5]}}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x24}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x850, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4a}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xff}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdc}]}, {0x100, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x83}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x238}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe6}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xac, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc2, 0x0, 0x4, 0x8773, 0x1000, 0x800, 0x100, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7, 0x0, 0x1bf, 0xe53, 0x8, 0x10, 0x7]}}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x5, 0x5}, {0x2, 0x5}, {0x1, 0x2}, {0x5, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x4, 0x3}, {0x3, 0x6}, {0x2, 0x5}, {0x0, 0x4}, {0x3, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xfff8, 0x2, 0x2, 0xff69, 0x401, 0x80, 0x9]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0xc, 0x30, 0x4, 0x4, 0x48, 0x4, 0x18, 0x24, 0x60, 0x48, 0x60]}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x3, 0x6, 0xb, 0x3, 0xb, 0x1b, 0x6c, 0x1b, 0x48, 0x18, 0x6, 0x1, 0x48, 0x6a, 0x2, 0x16, 0x6]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xea}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa3}]}, {0xfc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7ff}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x74}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x5, 0x7}, {0x1, 0x5}, {0x5}, {0x3, 0xa}, {0x5, 0x3}, {0x1, 0x2}, {0x2, 0x8}, {0x2}, {0x4, 0x8}, {0x7, 0x8}, {0x2, 0xa}, {0x6, 0x2}, {0x6, 0x2}, {0x3, 0x2}, {0x0, 0x9}, {0x6}, {0x1, 0x9}, {0x2, 0x2}, {}, {0x2, 0x2}, {0x6, 0x8}, {0x5, 0x4}, {}, {0x3, 0x4}, {0x5, 0x9}, {0x2, 0x8}, {0x2, 0x8}, {0x7}, {0x0, 0x2}, {0x2, 0x5}, {0x1, 0x6}, {0x5, 0xa}, {0x4, 0xa}, {0x0, 0x6}, {0x4, 0x5}, {0x0, 0x4}, {0x7, 0x8}, {0x2, 0x1}, {0x5, 0x5}, {0x4, 0x5}, {0x6, 0x6}, {0x4, 0x4}, {0x3, 0xa}, {0x7, 0x2}, {0x6, 0x3}, {0x4, 0x5}, {0x7, 0x5}, {0x4, 0x3}, {0x2, 0x8}, {0x5}, {0x7, 0x9}, {0x1, 0x7}, {0x2, 0x6}, {0x4, 0x6}, {0x4, 0x7}, {0x2}, {0x5, 0x1}, {0x3, 0x5}, {0x4, 0xa}, {0x4, 0xa}, {0x1, 0xa}, {0x3, 0x8}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x3, 0x12, 0x12, 0x9, 0x16, 0x9, 0x48, 0x60, 0x3, 0x36, 0x12, 0x60, 0x1, 0x1b, 0x4, 0x6, 0x3, 0x24, 0x5, 0x0, 0x3b, 0x6c, 0x30]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x6, 0x5}, {0x0, 0x8}, {0x3, 0x7}, {0x3, 0x9}, {0x6, 0x9}, {0x4, 0x3}, {0x0, 0xa}, {0x2, 0x1}, {0x1, 0x3}, {0x2, 0x5}, {0x1, 0x6}, {0x5, 0x3}, {0x6, 0xa}, {0x5, 0x5}, {0x5, 0x4}, {0x0, 0x2}, {0x3, 0x1}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x40, 0xfff9, 0x0, 0xa, 0x9, 0x4, 0xfffc]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x16}]}, {0x250, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xcd, 0x7, 0xf000, 0x9, 0x7fff, 0x9a11, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8000, 0x7, 0x5, 0xf800, 0x2, 0x10, 0xe33f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x9, 0x3ccd, 0x4, 0x4, 0x2, 0x400, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x3, 0x5}, {0x2, 0x2}, {0x5, 0x9}, {0x1, 0x5}, {0x1, 0x4}, {0x6, 0x4}, {0x1, 0x8}, {0x3}, {0x3, 0x6}, {0x2, 0x8}, {0x5, 0x6}, {0x5, 0x8}, {0x3, 0x9}, {0x7, 0x9}, {}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x19, 0x45, 0x400, 0x5, 0x1ff, 0x5, 0x1]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x101, 0xce4b, 0x54, 0x0, 0x2, 0xc25c, 0x7]}}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x12, 0x3, 0x9, 0x36, 0x48, 0x4, 0x12, 0x4, 0x2, 0x0, 0x16, 0x18, 0x16, 0x24, 0x2, 0x60, 0x60, 0x30, 0x16, 0x18, 0x3, 0x1, 0x2d, 0x3, 0x12, 0x16, 0x36, 0x16, 0x0]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xc, 0x3, 0x24, 0x5, 0x1, 0x13, 0x30, 0x9, 0xc, 0x36, 0x48, 0x48]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x7, 0x4}, {0x6, 0x8}, {0x3, 0x7}, {0x1}, {0x3, 0x6}, {0x2, 0x6}, {0x2, 0x1}, {0x5, 0x3}, {0x6, 0xa}, {0x4, 0x8}, {0x5, 0x1}, {0x0, 0x6}, {0x3, 0x2}, {0x5, 0x6}, {0x6, 0x2}, {0x3}, {0x6, 0x3}, {0x5, 0x6}, {0x7}, {0x1, 0x1}, {0x1, 0x9}, {0x0, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x1}, {0x6, 0x8}, {0x7, 0x9}, {0x4, 0x8}, {0x4, 0x9}, {}, {0x5}, {0x5}, {0x0, 0x3}, {0x0, 0x2}, {0x6, 0x1}, {0x4, 0x9}, {0x7, 0x6}, {0x5, 0x5}, {0x4, 0x8}, {0x3, 0x8}, {0x1, 0x9}, {0x1, 0x1}, {0x3, 0x4}, {0x6, 0x3}, {0x6, 0x5}, {0x6, 0x3}, {0x2, 0x5}, {0x1, 0x5}, {0x5, 0x1}, {0x6, 0xa}, {0x0, 0xa}, {0x1, 0x7}, {0x4, 0xa}, {0x4, 0x6}, {0x5, 0x5}, {0x6, 0x3}, {0x3, 0x2}, {0x7, 0x8}, {0x0, 0x3}, {0x5, 0x1}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x0, 0x8}, {0x6, 0x2}, {0x6, 0x2}, {0x1}, {0x7, 0xa}, {0x7}, {0x0, 0x3}, {0x6, 0x2}, {0x4, 0x8}, {0x0, 0x4}, {0x7, 0x8}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x7}]}, @NL80211_TXRATE_LEGACY={0x4}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x6, 0xa}, {0x6}, {0x7, 0xa}, {0x7, 0x5}, {0x0, 0x2}, {0x3, 0x6}, {0x4, 0x7}, {0x5, 0x8}, {0x0, 0x2}, {0x0, 0x5}, {0x6, 0x17}, {0x7, 0x5}, {0x7, 0x6}, {0x0, 0x4}, {0x6, 0x4}, {0x1, 0x1}, {0x3, 0x8}, {0x4, 0x4}, {0x1, 0x7}, {0x1, 0x4}, {0x2, 0x2}, {0x1, 0x1}, {0x3, 0x8}, {0x0, 0x9}, {0x4, 0x8}, {0x2, 0x5}, {0x5, 0x4}, {0x6, 0x2}, {0x1, 0x1}, {0x7, 0x3}, {0x6}, {0x7, 0x1}, {0x2, 0x3}, {0x0, 0x2}, {0x6, 0x8}, {0x6, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1, 0x30, 0x3, 0x2, 0x16, 0x12, 0x12, 0x6, 0x3, 0x9, 0x16, 0x1b, 0x48, 0x12, 0x18, 0x30, 0x16, 0x12, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x81, 0x4, 0xf, 0x5, 0x84, 0x5b36, 0x928e]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x5, 0xffff, 0x4, 0x81, 0x734, 0x0, 0x6]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x18, 0x30, 0x2, 0x1b, 0x4, 0x24, 0x6c, 0x20, 0x16, 0x30, 0x9]}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x80, 0x3, 0x68, 0x8001, 0x7, 0x265, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x8, 0x3, 0x5, 0x4, 0x667e, 0x7, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x22f34ee8}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}, {0x7c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x5c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1, 0x11, 0x6c, 0x3, 0x1, 0x18, 0x36, 0x60, 0x24]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfe01, 0x5, 0x7, 0x2, 0x3, 0x0, 0x8, 0x1]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x7261a4a68b5f855b}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3538, 0x7, 0x2ae, 0x6, 0x1000, 0x2, 0xf5]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x200}]}, {0x134, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7, 0x5, 0xffff, 0x89, 0x3, 0x3, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8, 0x3, 0x7786, 0x9, 0x8, 0x6, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x7, 0xe, 0x8152, 0x1, 0x5, 0x30, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x6, 0x9}, {0x1, 0x6}, {0x1, 0x6}, {0x2, 0x7}, {0x1, 0x4}, {0x0, 0x9}, {0x6, 0xa}, {0x6, 0x3}, {0x5, 0x7}, {0x6, 0x6}, {0x1, 0x6}, {0x1, 0x2}, {0x1, 0x2}, {0x5, 0x1}, {0x5, 0x9}, {0x1}, {0x6, 0xa}, {0x5, 0x4}, {0x3, 0x8}, {0x7, 0x2}, {}, {0x5, 0x5}, {0x1, 0x3}, {0x7, 0xa}, {0x1, 0x6}, {0x1, 0x7}, {0x3, 0x7}, {0x7, 0x2}, {0x3, 0x9}, {0x1, 0x1}, {0x0, 0x3}, {0x1, 0x4}, {0x3, 0x1}, {0x0, 0x7}, {0x2, 0x8}, {0x4, 0xa}, {0x6, 0x7}, {0x7, 0x9}, {0x6, 0xa}, {0x4}, {0x6, 0x8}, {0x5, 0x1}, {0x7, 0x5}, {0x3, 0x8}, {0x6, 0x1}, {0x1, 0x6}, {0x0, 0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x7, 0x5}, {}, {0x1, 0x6}, {0x2, 0x6}, {0x1, 0x1}, {0x2}, {0x0, 0xa}, {0x7, 0xa}, {0x6, 0x3}, {0x3, 0x3}]}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x6, 0x2, 0x2, 0x80, 0x1000, 0x4000, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x5, 0x0, 0x3, 0x4, 0xb, 0x9039, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x81, 0x1, 0x8, 0x0, 0xd, 0xa, 0x4]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7e}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x69}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x1f0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffff8699}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x68, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x4, 0xa2, 0x51, 0x1000, 0x8001, 0x400, 0x6]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x3, 0x3, 0xc, 0xc, 0x36, 0xc, 0x1b, 0xc, 0x48, 0x5, 0x16, 0x5, 0x36, 0x36, 0x36, 0x30, 0x4, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xfffb, 0xf4d9, 0x1, 0x1, 0x7, 0x9, 0x3]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x48, 0x1b, 0x48, 0x1, 0x48, 0xb, 0xc, 0x16, 0x1b, 0x6, 0x24, 0x1b, 0x28, 0x30, 0x36, 0x6, 0xc, 0xb, 0x30, 0x30, 0x0, 0xb, 0x4, 0x16, 0x4, 0x6, 0x24, 0x12, 0x6c, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x5, 0x0, 0x4, 0x8, 0x800, 0x61, 0xfb9e]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff21, 0x4, 0x4, 0x933d, 0xfff7, 0x6, 0xf, 0x9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x3, 0x8, 0x80, 0x1, 0x1, 0x0, 0x3]}}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0xcd6b, 0x8, 0x8, 0x7fff, 0x8, 0x9, 0xffff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8a6b, 0x1, 0x4, 0x4, 0x4, 0x7, 0x4, 0x1000]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x5, 0xa}, {0x1, 0x7}, {0x4, 0x2}, {0x6, 0xa}, {0x1, 0x5}, {0x5, 0x2}, {0x4, 0x3}, {0x1}, {0x1, 0x2}, {0x7, 0x9}, {0x1, 0x4}, {0x0, 0x6}, {0x2, 0x2}, {0x0, 0x9}, {0x7, 0x8}, {0x7, 0x7}, {0x3, 0x1}, {0x1, 0x5}, {0x0, 0xa}, {0x3, 0x6}, {0x2, 0x7}, {0x0, 0x9}, {0x4, 0x3}, {0x3, 0x8}, {0x5, 0x4}, {0x7, 0x2}, {0x5, 0x14}, {}, {0x0, 0x4}, {0x6, 0xa}]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x4, 0x60, 0x16, 0x12, 0x6c, 0x1, 0x3, 0x9, 0x60, 0x4, 0xb, 0xb, 0x12, 0x1, 0x6, 0x12, 0x6, 0x4]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x18, 0x70, 0x2, 0x60, 0x9, 0xe, 0x5, 0x1b, 0x62, 0x3, 0x6, 0x18, 0x1b, 0x36, 0x30, 0xc, 0x5, 0x5e, 0x6, 0x61, 0x30, 0x6c]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x1c, 0x6c]}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x9b0, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xb1d}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x1fc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1e4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x1, 0x8}, {0x1, 0x8}, {0x4, 0x9}, {0x3, 0x9}, {0x0, 0x4}, {0x4}, {0x6}, {0x4}, {0x1, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x8, 0x3, 0x8001, 0x2, 0x2, 0x1]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x2, 0x5}, {0x1, 0xa}, {0x1, 0x3}, {0x6, 0x2}, {0x4, 0x5}, {0x3, 0x8}, {0x1, 0x9}, {0x3, 0x7}, {0x7, 0x1}, {0x0, 0xa}, {0x6, 0x2}, {0x1, 0x8}, {0x6, 0x5}, {0x4, 0x9}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0xa}, {0x0, 0x5}, {0x1, 0x9}, {0x5, 0x2}, {0x7, 0x8}, {0x1, 0x2}, {0x6, 0x3}, {0x2, 0x8}, {0x4, 0x8}, {0x0, 0x1}, {0x2, 0x9}, {0x6, 0x8}, {0x1, 0x8}, {}, {0x7, 0x9}, {0x1, 0xa}, {0x6, 0x2}, {0x7}, {0x0, 0x4}, {0x5, 0x3}, {0x6, 0x7}, {0x5, 0x8}, {0x4, 0x7}, {0x3, 0xa}, {0x4, 0x8}, {0x5, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x7}, {0x5, 0x1}, {0x0, 0x7}, {0x0, 0x1}, {0x6, 0x2}, {0x4, 0x1}, {0x2, 0x4}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x24, 0x2, 0xc, 0x36, 0x1, 0x36, 0x48, 0x12, 0x4, 0x0, 0x0, 0x12]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x48, 0x56, 0xc, 0x3, 0x16, 0x9, 0x36, 0x6, 0x1b, 0x78, 0x12, 0x1b, 0xb, 0x60, 0x3, 0x13, 0x36, 0x6c, 0xc, 0x4]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x2, 0x5, 0x24]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x101, 0x2, 0xfb89, 0x8, 0x7, 0x5, 0x200]}}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3e, 0x9, 0x1, 0x84, 0x2, 0xa, 0x100, 0xdd5b]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x4}, {0x3, 0x7}, {0x7, 0x3}, {0x0, 0x5}, {0x2, 0x4}, {0x0, 0x9}, {0x4, 0x9}, {0x4}, {0x6, 0x2}, {0x4, 0x6}, {0x3, 0x9}, {0x0, 0x4}, {0x7, 0x9}, {0x7, 0xa}, {0x7}, {0x3, 0x1}, {0x4, 0x6}, {0x5, 0x1}, {0x5, 0x6}, {0x0, 0x7}, {}, {0x4, 0x8}, {0x1, 0x9}, {0x1, 0x6}, {0x3, 0xa}, {0x6, 0x4}, {0x0, 0x7}, {0x4, 0x5}, {0x0, 0x9}, {0x6, 0x8}, {0x1, 0xa}, {0x3, 0x3}, {0x0, 0x1}, {0x1, 0xa}, {0x2, 0xa}, {0x6, 0x5}, {0x2, 0x6}, {0x7, 0x8}, {}, {0x2, 0x8}, {0x1}, {0x6}]}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xc, 0x24, 0x3, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4d, 0x5, 0xd, 0x1000, 0x7, 0x3ff, 0x4, 0x5]}}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd5, 0x9, 0xfffc, 0x510, 0x8, 0x9, 0x100, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7e1b, 0x7fff, 0x4, 0xca, 0x40, 0x0, 0x9, 0x140]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x35}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}]}, {0x2a0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x74}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x65}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3c}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x250, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xf0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x2, 0x12, 0x18, 0x48, 0x9, 0xb, 0x60, 0x30, 0x1b, 0x2, 0x2, 0x4, 0x24, 0x60, 0x2, 0x4, 0x0, 0x4, 0x48, 0x48, 0xb, 0x2e, 0x36, 0x6c, 0x5, 0x1b, 0x18, 0x30, 0x1b]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x6, 0x9}, {0x4, 0xa}, {0x3, 0x6}, {0x6}, {0x2, 0x4}, {0x3, 0x5}, {0x7, 0x3}, {0x4, 0x4}, {0x0, 0x8}, {0x2, 0xa}, {}, {0x6, 0x1}, {0x2, 0x3}, {0x1, 0x8}, {0x5, 0x9}, {0x5, 0x5}, {0x2, 0x4}, {0x6, 0x4}, {0x5, 0x1}, {0x7, 0x8}, {0x3, 0x4}, {0x0, 0xa}, {0x3}, {0x6, 0x4}, {0x2, 0x2}, {0x2, 0x2}, {0x7, 0x2}, {0x7}, {0x3, 0x5}, {0x6, 0x2}, {0x7, 0x8}, {0x5, 0x9}, {0x3, 0x3}, {0x0, 0xa}, {0x2, 0xa}, {0x3, 0x5}, {0x3, 0x4}, {0x1, 0x1}, {0x6, 0x5}, {0x1, 0x8}, {}, {0x0, 0x2}, {0x3, 0xa}, {}, {0x1, 0x5}, {0x5}, {0x7, 0x8}, {0x0, 0xa}, {0x3, 0x7}, {0x3, 0x4}, {0x7, 0x5}, {0x3, 0x1}, {0x1}, {0x1, 0x9}, {0x7, 0x3}, {0x5, 0xa}, {0x6, 0x1}]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x4, 0x6}, {0x4, 0x3}, {0x0, 0x3}, {0x7, 0x9}, {}, {0x7}, {0x4, 0x8}, {0x5, 0x3}, {0x0, 0xa}, {0x3, 0x4}, {0x1, 0x2}, {0x2}, {0x3, 0x8}, {0x6, 0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x6}, {0x0, 0xa}, {0x6, 0x7}, {0x4, 0x1}, {0x7, 0x9}, {0x6, 0x3}, {0x4, 0x9}, {0x4, 0xa}, {0x5, 0x5}, {0x1, 0x5}, {0x2, 0x4}, {0x4, 0x3}, {0x1, 0x1}, {0x7, 0x5}, {0x7, 0x1}, {0x7}, {0x2, 0xa}, {0x3, 0x8}, {0x5, 0x8}, {0x6, 0x7}, {0x7, 0x7}, {0x6, 0xa}, {0x0, 0x1}, {0x0, 0x4}, {0x2, 0x9}, {0x7, 0xa}, {0x0, 0x5}, {0x4, 0x16}, {0x2, 0x9}, {0x0, 0x6}, {0x4, 0xa}, {0x5, 0x5}, {0x3, 0x2}, {0x5, 0xa}, {0x0, 0x4}, {0x6, 0x9}, {0x2, 0x1}, {0x1, 0x3}, {0x1, 0x4}, {0x3, 0x1}, {0x6, 0x6}, {0x1, 0x8}, {0x2, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0xfffb, 0x5a, 0x8000, 0x0, 0x7, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x75, 0x6, 0xffff, 0x4, 0xfffb, 0x9, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1c, 0x2, [{0x0, 0x1}, {0x0, 0x6}, {0x0, 0x9}, {0x3, 0x9}, {0x1, 0x3}, {0x3, 0x2}, {0x1, 0xa}, {0x7, 0x9}, {0x1, 0x5}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x7}, {0x6, 0xa}, {0x5, 0x1}, {0x0, 0x8}, {0x2, 0x7}, {0x4, 0x3}, {0x1, 0x1}, {0x6, 0x2}, {0x2}, {0x2, 0x6}, {}, {0x7, 0x2}, {0x4, 0x7}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6, 0x6, 0xe]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0x0, 0x6, 0x1, 0x500, 0x8001, 0xb1]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xfffa, 0x800, 0x8001, 0x9, 0x4000, 0xfff, 0x7]}}]}, @NL80211_BAND_2GHZ={0xdc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x7, 0x6}, {0x5, 0x9}, {0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x2}, {0x5, 0x8}, {0x1, 0x6}, {0x1, 0x3}, {0x7, 0x3}, {0x3, 0x3}, {0x5, 0x7}, {0x4}, {0x0, 0x4}, {0x0, 0x4}, {0x1, 0x1}, {0x3, 0x5}, {}, {0x2}, {0x0, 0x4}, {0x7, 0x2}, {0x0, 0x4}, {0x2, 0x9}, {0x7, 0x5}, {0x2}, {0x7, 0x4}, {0x3, 0x2}, {0x2, 0x5}, {0x6}, {0x5, 0x7}, {0x6, 0x6}, {0x3, 0x9}, {0x5, 0x9}, {0x3, 0x9}, {0x4, 0x7}, {0x3, 0xa}, {0x3, 0x5}, {0x6, 0x1}, {0x5, 0x1}, {0x2, 0x2}, {0x4, 0x7}, {0x1, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8000, 0xd, 0xbb3e, 0xd4, 0x8000, 0x6, 0x7]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x2, 0x12, 0x5, 0x5, 0x1e, 0x6, 0x1b, 0x18, 0x0, 0x6, 0x1, 0xc, 0x1b, 0x6c, 0x3, 0x5, 0x3, 0x44, 0x2, 0xb, 0x36, 0x34, 0x16, 0x6c, 0x9, 0x19, 0xc, 0x9, 0x6, 0x4, 0x16]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x2, 0x18, 0x3, 0x60, 0xc, 0x2, 0x6, 0x1b, 0x12, 0x4, 0xc, 0x24, 0x16, 0x30, 0x1, 0x6, 0x9, 0x12, 0x6, 0x9, 0x4, 0x30, 0x30]}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x5, 0x3}, {0x0, 0x1b}, {0x0, 0x5}, {0x5}, {0x0, 0x8}, {0x0, 0x7}, {0x6, 0x6}, {0x1, 0x3}, {0x0, 0x8}, {0x1, 0x1}, {0x0, 0x2}, {0x3, 0x1}, {0x6}, {0x1, 0x4}, {0x3, 0x7}, {0x3, 0x8}, {0x1, 0x4}, {0x6}, {0x6, 0x9}, {0x7, 0x7}, {0x1, 0x8}, {0x7, 0x3}, {0x5}, {0x1, 0x8}, {0x1, 0x3}, {0x0, 0x5}, {0x5, 0x2}, {0x3, 0x4}, {0x0, 0x8}, {0x5}, {0x4, 0x7}, {0x4, 0x2}, {0x0, 0x9}, {0x0, 0xa}, {0x5, 0x3}, {0x5, 0x3}, {0x1, 0x4}, {0x4, 0x9}, {0x1, 0x7}, {0x5, 0x9}, {0x3, 0x4}, {0x2}, {0x0, 0x4}, {0x1, 0xa}, {0x0, 0x8}, {0x5, 0x4}, {0x3, 0x6}, {0x7, 0x4}, {0x0, 0x1}, {0x7, 0x3}, {0x6, 0x4}, {0x3, 0x6}, {0x4, 0x7}, {0x6}, {0x2, 0x3}, {0x5, 0x2}]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x6, 0x2}, {0x3, 0x2}, {0x7, 0x6}, {0x7, 0x2}, {0x7, 0x9}, {0x6, 0x5}, {0x5, 0x3}, {0x3, 0x1}, {0x6, 0x5}, {0x4, 0x4}, {0x4, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0x0, 0x0, 0x8, 0x5b6a, 0x200, 0x2, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x46c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1f8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0xd, 0x1c00, 0xff93, 0xf, 0x8000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0xb8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x7}, {0x0, 0x1}, {0x5, 0x8}, {0x1, 0x3}, {0x6, 0x5}, {0x2, 0x4}, {0x4, 0x4}, {0x1, 0x6}, {0x6, 0x9}, {0x5, 0x8}, {0x6}, {0x1, 0xa}, {0x6, 0x7}, {0x0, 0x5}, {0x0, 0x7}, {0x5, 0x2}, {0x1, 0x6}, {0x5, 0x1}, {0x3, 0xa}, {0x5, 0x2}, {0x1}, {0x5, 0x7}, {0x0, 0x7}, {0x7, 0x4}, {0x7, 0x5}, {0x6, 0x1}, {0x0, 0x2}, {0x7, 0xa}, {0x3, 0x5}, {0x5, 0x9}, {0x4, 0x4}, {0x7, 0x3}, {0x5, 0x6}, {0x5, 0x5}, {0x0, 0x1}, {0x5, 0x3}, {0x5, 0x8}, {0x4, 0x6}, {0x1, 0x8}, {0x5, 0x2}, {0x3, 0x9}, {0x2, 0x1}, {0x5, 0x8}, {0x4, 0x4}, {0x5}, {0x3, 0xa}, {0x3, 0x3}, {0x0, 0x4}, {0x0, 0x6}, {0x3, 0x8}, {0x2, 0x3}, {0x5, 0x5}, {0x0, 0xa}, {0x1, 0x2}, {0x3, 0x4}, {0x5, 0x4}, {0x6, 0x5}, {0x3, 0x4}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1b, 0x4b, 0x2, 0x6, 0x48, 0x2c27d6fb979a4173, 0x1, 0x4, 0x1b, 0x2, 0x30, 0x5a, 0x48, 0x60, 0xc, 0x1c, 0x6c, 0x5, 0x24, 0x3, 0x48, 0xc, 0x5, 0x1b, 0x6, 0x1b, 0x30, 0x18, 0x36, 0x5, 0x9, 0x36]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x4, 0x9}, {0x6, 0x8}, {0x6, 0x7}, {0x1, 0x6}, {0x6}, {0x3, 0x5}, {0x7, 0x7}, {0x1, 0xa}, {0x4, 0x4}, {0x3, 0x1}, {0x2, 0x8}, {0x3, 0x6}, {0x5}, {0x1, 0xa}, {0x1}, {0x3, 0x3}, {0x3, 0x1}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x2, 0x1b, 0x4, 0x0, 0x1, 0x18, 0x48, 0x6, 0x5, 0x6, 0x1b, 0x18, 0x1b, 0x36, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x5, 0x10, 0x6, 0xfffc, 0xe9, 0x7, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xe10, 0x100, 0x3, 0x8, 0x3, 0x62dc, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6c, 0x3, 0x2f, 0x30, 0x12, 0x6, 0x60]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x12, 0x1b, 0x1, 0xc, 0x6c, 0x6c, 0x9, 0x32, 0x6, 0x30, 0x18, 0x60, 0x60, 0x12, 0x1b, 0x5, 0x24, 0x36, 0xc, 0x0, 0x16, 0x24, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3, 0x9c, 0x5, 0x8, 0x1, 0xe86, 0xfff7]}}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x1, 0x5}, {0x6, 0x1}, {0x2, 0x8}, {0x6}, {0x1, 0x7}, {0x6, 0x3}, {0x0, 0x5}, {0x1, 0x7}, {0x4}, {0x1, 0x7}, {0x1, 0x2}, {0x4, 0x2}, {0x1, 0x3}, {0x1, 0xa}, {0x4, 0x8}, {0x2, 0x2}, {0x3, 0x6}, {0x3, 0xa}, {0x1, 0x8}, {0x0, 0x7}, {0x4, 0x2}, {0x3, 0x7}, {0x5, 0x1}, {0x4, 0x9}, {0x6, 0x1}, {0x6, 0x8}, {0x3, 0x9}, {0x3, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff9, 0x1, 0xd04, 0x6, 0xfc00, 0x1, 0x0, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7, 0x1, 0x8, 0x0, 0x4, 0x1, 0x200]}}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x4, 0x3}, {0x2, 0x2}, {0x1, 0x5}, {}, {0x7, 0x2}, {0x1, 0x1}, {0x6, 0x4}, {0x7, 0x8}, {0x2, 0x1}, {0x5, 0x9}, {0x1, 0x9}, {0x0, 0x1}, {0x5, 0x7}, {0x6, 0xa}, {0x4, 0x1}, {0x1}, {0x1, 0x2}, {0x1, 0xa}, {0x5, 0x7}, {0x2, 0x1}, {0x0, 0x6}, {0x0, 0x5}, {0x5, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x1, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x4, 0x7}, {0x0, 0x9}, {0x7, 0xa}, {0x1, 0x6}, {0x3, 0x7}, {0x2, 0x7}, {0x6, 0xa}, {0x2, 0x6}, {0x5, 0x1}, {0x7, 0x4}, {0x5, 0xa}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x254, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xa, 0x7, 0x8ff7, 0x2, 0x3, 0x2, 0x1]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x5, 0xe, 0x6, 0x2, 0xc, 0x12, 0x12, 0x60, 0x48, 0x1, 0x3ec5531c78984978, 0x6, 0x48, 0x9, 0x48, 0x18, 0x3, 0x1b]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1b, 0xc, 0x13, 0xc, 0x51, 0x4, 0x24, 0x4, 0x4, 0x1, 0x3, 0x4, 0x9, 0x16, 0x2, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x800, 0x0, 0x8, 0x9, 0x7, 0x200, 0x8001]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x60, 0x12, 0x1b, 0x12, 0xb]}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x0, 0xdc, 0x9, 0xd, 0x8a, 0xe5, 0xef89]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x5, 0x8, 0x63b, 0x0, 0x7fff, 0x44c, 0x4]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x3, 0x3, 0xd, 0x1, 0x4, 0xb, 0x7]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x28, 0x6, 0x12, 0x4, 0x4, 0x60, 0x1, 0x12, 0x2, 0x6f, 0x68, 0x4, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x8, 0x4, 0x9, 0x1, 0x4, 0x7, 0x6]}}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0xfb, 0x78, 0x6, 0x200, 0x40, 0xffff]}}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0xf, 0x12, 0x60, 0x1, 0x6, 0x30, 0xc, 0x24]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x7, 0x3}, {0x0, 0x4}, {0x2, 0x1}, {0x4, 0x4}, {0x6, 0xa}, {0x2, 0x9}, {0x2, 0x7}, {0x5, 0xa}, {0x3, 0x2}, {0x2, 0x5}, {0x4, 0x3}, {0x5, 0x3}, {0x2, 0x4}, {0x6, 0x4}, {0x6, 0xa}, {0x7, 0x1}, {0x5, 0xa}, {0x6, 0x7}, {0x2, 0x2}, {0x1, 0xa}, {0x0, 0x5}, {0x5, 0x2}, {0x1, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7108, 0x400, 0x0, 0x6, 0x2, 0x5, 0x10, 0xa5]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x36, 0x30, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x0, 0x5}, {0x1, 0x4}, {0x5}, {0x0, 0x6}, {0x2, 0x7}, {0x7, 0x9}, {0x4, 0x7}, {0x5, 0x6}, {0x3, 0x7}, {0x3, 0x3}, {0x2, 0xa}, {0x4, 0x8}, {0x2, 0x6}, {0x2, 0x7}, {0x1, 0x9}, {0x7, 0x2}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x3}, {0x3, 0x7}, {0x5, 0x3}, {0x1, 0x6}, {0x3, 0x4}, {0x3, 0x8}, {0x7}, {0x0, 0x6}, {0x0, 0x4}, {0x2}, {0x5, 0x9}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x60, 0x4, 0x16b4ea158839c386]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x5, 0x60, 0x6c]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x38, 0x5, 0x8, 0x2, 0x55c9, 0xffff, 0x7e0]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0xfff7, 0x0, 0x1, 0x8efb, 0x400, 0x3]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0xc, 0x6, 0x1, 0x9, 0xf4a, 0x7]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x80, 0x6, 0x7, 0xd237, 0x4, 0x9, 0xf]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1f}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7a}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x378, 0x11d, 0x0, 0x1, [{0x2f8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2ec, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x4, 0x3ff, 0x0, 0xd9, 0x7d, 0x3, 0xffff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0x13, 0x0, 0x329, 0xfff, 0xc, 0x779]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x5, 0x3}, {0x7, 0x8}, {0x2, 0x7}, {0x3, 0x8}, {0x2, 0x2}, {0x3, 0xa}, {0x3, 0x3}, {0x5, 0x2}, {0x0, 0x5}, {0x3, 0x7}, {0x2, 0xa}, {0x7, 0xa}, {0x5, 0x6}, {0x2, 0x8}, {0x0, 0x3}, {0x5, 0x1}, {0x0, 0x8}, {0x2, 0x5}, {0x3, 0x1}, {0x6, 0x2}, {0x4, 0x6}, {0x2, 0x4}, {0x0, 0x5}, {0x3, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0xcf32, 0x1, 0x676, 0x101, 0xff, 0x0, 0x9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x4, 0x0, 0xbd44, 0x2, 0x5, 0x5, 0xe574]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x6, 0x81, 0x763, 0x5, 0x9, 0xff, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8, 0x4, 0x100, 0x0, 0x9, 0x689, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x2d7d, 0x400, 0x80f, 0x1dc, 0x0, 0x9, 0x1]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x0, 0x9, 0xee69, 0x1, 0x1, 0x8001, 0x100]}}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x2, 0x6, 0xc, 0x48, 0x12, 0x9e59258246ec397a, 0x30, 0x30, 0x18, 0x18, 0x9, 0x24, 0x60, 0x6c, 0x3, 0x50, 0xc, 0x5, 0x6c, 0x6, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0xb, 0x18, 0x3, 0x6c, 0x12, 0x1, 0x2, 0x6, 0xc, 0x6c, 0x6c, 0x1, 0x12, 0x4, 0x3, 0x6c, 0x56, 0x30, 0x60, 0xb, 0x36, 0x3, 0xc, 0x12, 0xb, 0xb, 0x48, 0x48, 0x36, 0xb, 0xc, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x6, 0x48, 0x36, 0x24, 0x0, 0x3, 0xb, 0x18, 0x0, 0x31, 0x9, 0x36, 0x1, 0x24, 0x6c, 0x0, 0x2, 0xb, 0x12, 0x3, 0x12, 0x16, 0x18]}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x48, 0x9, 0xc, 0xc, 0x5, 0x7c, 0x36, 0x12, 0x24, 0x30, 0x60, 0x11, 0x60, 0x6, 0x48, 0xa, 0x60, 0x16, 0x1b, 0x1b, 0x36, 0x1b, 0x1, 0x18, 0x18, 0x6c, 0x2]}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x3, 0x7}, {0x0, 0x5}, {0x0, 0x9}, {0x7, 0x5}, {0x5}, {0x7, 0xa}, {0x5, 0x4}, {0x6, 0x2}, {0x4, 0xa}, {0x2, 0x3}, {0x7, 0x5}, {0x0, 0x3}, {0x7, 0x6}, {0x2, 0x5}, {0x4}, {0x7, 0x3}, {0x4, 0x1}, {0x4, 0x7}, {0x3, 0x7}, {0x2, 0x2}, {0x2, 0x3}, {0x6, 0xa}, {0x5, 0x1}, {0x5, 0x7}, {0x7, 0xa}, {0x7, 0xc}, {0x0, 0x1}, {0x7, 0xa}, {0x7, 0x7}, {0x6, 0x6}, {0x1, 0x5}, {0x4, 0x8}, {0x5, 0x5}, {0x0, 0x4}, {0x0, 0x6}, {0x0, 0xa}, {0x3, 0x4}, {0x4, 0xa}, {0x6, 0xa}, {0x1, 0x4}, {0x7, 0x6}, {0x0, 0x1}, {0x1, 0x3}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x16, 0x1, 0x36, 0x6c, 0x6c, 0x9, 0x6c, 0x24, 0x47, 0xc, 0x6, 0x2e, 0x30]}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xb, 0xc66, 0x401, 0x16, 0x100, 0x400, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x6, 0x9}, {0x6, 0x8}, {0x6, 0xa}, {0x1}, {0x4, 0x2}, {0x6, 0x4}, {0x3, 0x9}, {0x1, 0x4}, {0x1, 0x7}, {0x5, 0x3}, {0x6, 0x6}, {0x6, 0x7}, {0x1, 0x3}, {0x6, 0xa}, {0x0, 0x8}, {0x7, 0x9}, {0x6, 0x8}, {0x3, 0x3}, {0x3, 0x5}, {0x7, 0x3}, {0x0, 0x8}, {0x5, 0x1}, {0x0, 0x9}, {0x0, 0x9}, {0x4, 0x3}, {0x2, 0x9}, {0x0, 0x3}, {0x1, 0x3}, {0x3, 0x8}, {0x1, 0x6}, {0x3, 0x2}, {0x6, 0x2}, {0x4, 0x1}, {0x4, 0x6}, {0x4, 0x7}, {0x5, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xf000, 0x3, 0x2, 0x200, 0x2, 0xb, 0x1ff]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x9, 0x2762, 0x0, 0x1ff, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x3, 0x4, 0x7f, 0xd, 0x8, 0x9, 0xf191]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x4, 0x1}, {0x0, 0x6}, {0x7, 0x8}, {0x4, 0x2}, {0x0, 0xa}, {0x0, 0x5}, {0x0, 0x4}, {0x6, 0x4}, {0x1, 0x8}, {0x7, 0x1}, {0x1, 0x2}, {0x2, 0x4}, {0x1}, {0x2}, {0x2, 0x9}, {0x5, 0x8}, {0x4, 0x4}, {0x0, 0x9}, {0x1, 0x8}, {0x0, 0xa}, {0x4, 0x4}, {}, {0x0, 0x5}, {0x4, 0x5}, {0x7}, {0x1, 0x7}, {0x6, 0x8}, {0x1, 0x8}, {0x4, 0x7}, {0x6, 0x6}, {0x6, 0x5}, {0x5, 0x1}, {0x5, 0x9}, {0x0, 0x3}, {0x4, 0x7}, {0x0, 0xa}, {0x4, 0x4}, {0x5, 0x2}, {0x2, 0x9}, {0x2, 0x4}, {0x2, 0x2}, {0x4, 0x6}, {0x2}, {0x1, 0x5}, {0x6, 0x6}, {0x6, 0x3}, {0x1, 0x2}, {0x1, 0x9}, {0x4}, {0x3, 0xa}, {0x6, 0x3}, {0x3, 0x7}, {0x1, 0x6}, {0x2, 0x3}, {0x0, 0x9}, {0x2, 0x6}, {0x5, 0x2}, {0x0, 0x8}, {0x4, 0x2}]}]}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8c}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x14}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffb8f}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x140, 0x11d, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd6}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xac, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x6, 0x6, 0x36, 0x24, 0x4, 0x48, 0x18, 0x1, 0x48, 0x30, 0x48, 0x5, 0x1, 0x1, 0xb]}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x8001, 0xc2, 0x9, 0xfff, 0x8679, 0x6, 0xffc0]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x2f, 0x2, 0x24, 0x36, 0x48, 0xb, 0x2, 0x48, 0xc, 0x44, 0x5, 0x24, 0x48, 0x60, 0x1, 0x30, 0xc, 0x60, 0x38, 0x24, 0xc, 0x18, 0x18, 0x12, 0xb, 0x4, 0x6c, 0x24, 0x9, 0x2, 0x36, 0x4]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x0, 0x0, 0x5, 0x9, 0x30, 0x48, 0x36, 0x30, 0x2, 0x60, 0x36, 0x1b, 0x6c, 0x6c, 0x18, 0xc, 0x1b, 0x36, 0x9, 0x6]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdf}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x18}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x24}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7f}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x90}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x53}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}]}, 0x215c}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) bind$l2tp6(r1, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181ef3e00000003feffff7f10001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) 466.902412ms ago: executing program 1 (id=2035): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, @multicast}]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000600)={0x4, {{0x2, 0x0, @multicast2}}}, 0x90) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0xe, 0x4, 0x380, 0xffffffff, 0x0, 0xe8, 0xe8, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x3}}, @common=@unspec=@state={{0x28}, {0x8}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xc, 0x1, "88fd3be4a329e4aa550278fab834f02cf0ba964ab7094538e15cfa5b407a"}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0x0, 0x0, 'wg1\x00', 'pim6reg1\x00', {}, {0xff}, 0x0, 0x2, 0x46}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x4], 0x1}}, @common=@inet=@multiport={{0x50}, {0x2, 0x7, [0x4e20, 0x4e24, 0x4e21, 0x4e24, 0x4e21, 0x4e22, 0x4e23, 0x4e20, 0x4e22, 0x4e23, 0x4e23, 0x4e21, 0x4e22, 0x4e24, 0x4e24], [0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1], 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x1, 0x2, 0x0, 0x2, 0x0, 0x3], 0x3, 0x2}, {0x0, [0x1, 0x5, 0x4, 0x1, 0x5, 0x6], 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, r4, 0x11, 0x70bd2d, 0x25dfdbfc, {0x1b}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2005c890}, 0x1000c810) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003340)=ANY=[@ANYBLOB="c812000019ff7f00000020010000000000000000000000000000ac1414aa0000000000006a5478b300000000000000000005000000040a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x12c8}, 0x1, 0x0, 0x0, 0x80}, 0x0) 366.253275ms ago: executing program 6 (id=2036): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0x20000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x58}, 0x1, 0x7}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$6lowpan_enable(r3, &(0x7f0000000d80)='1', 0x1) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x14c, r4, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x400}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0xc27}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc}, {0xc, 0x90, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xfe}, {0xc, 0x90, 0x1}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000004) accept4$x25(0xffffffffffffffff, &(0x7f00000001c0)={0x9, @remote}, &(0x7f0000000200)=0x12, 0x80000) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x1c, r9, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x3000000}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000002340)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r9, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x20, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "049dc2bdc9e2622851f827162d0a0a8a"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040010}, 0x4800) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)={@fallback=r6, r6, 0x2f}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@fallback=r6, r11, 0x2f, 0x2030, 0x4, @void, @void, @value=r12}, 0x20) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x5c, r13, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_SEC_KEY={0x40, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0000000000f4ffff0a00"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x300}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xff}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r13, 0x800, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) 140.640447ms ago: executing program 0 (id=2037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffea1, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x1c8, 0x1c8, 0x98, 0x0, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x7fffff80, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x0, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xff, 0x2, [0x4, 0x36, 0x1d, 0x1c, 0x23, 0x1e, 0x2c, 0x7, 0x1e, 0x7, 0x2d, 0x37, 0x30, 0x9, 0x3b, 0x16], 0x0, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) (async, rerun: 32) socket(0x10, 0x3, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) (async, rerun: 32) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (rerun: 32) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x3}, {0xfff3, 0x6}, {0x8, 0x9}}}, 0x24}}, 0x48045) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet(r6, &(0x7f0000000d00)=[{{&(0x7f0000000c80)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000c00)='e', 0x1}], 0x1}}], 0x1, 0x4000) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) (async) shutdown(r6, 0x1) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async, rerun: 64) connect$inet(r7, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) (async) sendto$inet(r7, &(0x7f00000002c0)="ab", 0x1, 0x24040855, 0x0, 0x0) (async) recvmmsg(r7, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/38, 0x26}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00), 0x3e}, 0x2}], 0x2, 0x2, 0x0) sendmsg(r7, &(0x7f0000000300)={0x0, 0x37, 0x0}, 0x0) (async) r8 = socket(0x10, 0x803, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r8) (async) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x437, 0x70bc27, 0x0, {0x0, 0x0, 0x0, r9, 0x50561}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r7}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt(r8, 0x511, 0x6, &(0x7f00000001c0)=""/59, &(0x7f00000002c0)=0x3b) 137.272986ms ago: executing program 5 (id=2038): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000240)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) r4 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r4, &(0x7f0000000040)={0x23, 0x7, 0x8, 0x6}, 0x10) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@delchain={0x44, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2f}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) accept$inet(r1, 0x0, &(0x7f0000000140)) r6 = socket$unix(0x1, 0x1, 0x0) accept$unix(r6, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000080)='dctcp', 0x5) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40091) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_ID={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1900000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000100000000000000000000000000000000000000000000000020eebc23e62d668379439ecac86aa5b0e1fa7d0bc851870389231acfaaa5e3375984f77e71ae891dc30a1ba15e55ab5352979fd74976859a2935f4c2"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r10, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc) 0s ago: executing program 1 (id=2039): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r0, r1, &(0x7f00000000c0)=0x8, 0x80000b657) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000000e00)=""/4101, 0x0, 0xc}, 0x22) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x100000000, 0x1}) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x20b7ee}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x3, 0x1, 0x0, 0xf, 0x0, 0x7, [{0x3, 0x801, 0x5}]}]}, {0x0, [0x4f, 0x0, 0x30]}}, &(0x7f00000006c0)=""/262, 0x35, 0x106, 0x9}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32844, 0xc1}}, 0x20}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r5, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x1c, r3, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8141ba5ccf7ef84}, 0x0) kernel console output (not intermixed with test programs): l slaves [ 164.075207][ T8352] netlink: 16 bytes leftover after parsing attributes in process `syz.3.590'. [ 164.224023][ T8342] vlan2: entered allmulticast mode [ 164.248540][ T8342] bridge3: entered allmulticast mode [ 164.317651][ T8349] bridge3: port 1(erspan0) entered blocking state [ 164.362659][ T8349] bridge3: port 1(erspan0) entered disabled state [ 164.401836][ T8349] erspan0: entered allmulticast mode [ 164.411973][ T8360] netlink: 'syz.2.594': attribute type 1 has an invalid length. [ 164.445864][ T8349] erspan0: entered promiscuous mode [ 164.506406][ T8349] bridge3: port 1(erspan0) entered blocking state [ 164.514476][ T8349] bridge3: port 1(erspan0) entered forwarding state [ 164.783913][ T8360] 8021q: adding VLAN 0 to HW filter on device bond3 [ 164.804341][ T8379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.599'. [ 164.961119][ T8368] bond3: (slave veth3): Enslaving as an active interface with a down link [ 165.001299][ T8369] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 165.014906][ T8369] bond3: (slave batadv1): making interface the new active one [ 165.025657][ T8369] batadv1: entered promiscuous mode [ 165.033349][ T8369] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 165.274987][ T8392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.601'. [ 165.276494][ T8390] netlink: 16 bytes leftover after parsing attributes in process `syz.0.600'. [ 165.300045][ T8391] syzkaller1: entered promiscuous mode [ 165.329524][ T8391] syzkaller1: entered allmulticast mode [ 165.370461][ T8396] ip6gre1: entered promiscuous mode [ 165.377225][ T8396] ip6gre1: entered allmulticast mode [ 165.591797][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 166.018173][ T8427] syzkaller1: entered promiscuous mode [ 166.035841][ T8426] xt_TCPMSS: Only works on TCP SYN packets [ 166.056869][ T8427] syzkaller1: entered allmulticast mode [ 166.654246][ T8416] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 166.890097][ T8426] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.899211][ T8426] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.628557][ T8426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.710424][ T8426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.661926][ T1157] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.703322][ T6770] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.891574][ T6785] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.911052][ T6785] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.403913][ T8514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.608876][ T8520] __nla_validate_parse: 2 callbacks suppressed [ 169.608895][ T8520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.625'. [ 169.751675][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 169.761548][ T5621] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 170.203191][ T8540] netlink: 16 bytes leftover after parsing attributes in process `syz.1.632'. [ 170.422652][ T8509] tipc: Started in network mode [ 170.433078][ T8509] tipc: Node identity 7f000001, cluster identity 4711 [ 170.467872][ T8509] tipc: Enabled bearer , priority 10 [ 170.568604][ T8560] netlink: 'syz.1.638': attribute type 1 has an invalid length. [ 171.346112][ T8600] xt_hashlimit: size too large, truncated to 1048576 [ 171.540338][ T5621] Bluetooth: hci4: link tx timeout [ 171.547303][ T5621] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.558467][ T5621] Bluetooth: hci4: link tx timeout [ 171.567120][ T5621] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.612612][ T8464] tipc: Node number set to 2130706433 [ 172.290860][ T8638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.656'. [ 172.888870][ T8669] netlink: 'syz.0.665': attribute type 4 has an invalid length. [ 172.946662][ T8671] netlink: 16 bytes leftover after parsing attributes in process `syz.3.666'. [ 172.956047][ T8671] netlink: 16 bytes leftover after parsing attributes in process `syz.3.666'. [ 173.055215][ T8671] netlink: 'syz.3.666': attribute type 6 has an invalid length. [ 173.352937][ T8696] netlink: 'syz.3.672': attribute type 10 has an invalid length. [ 173.374018][ T8696] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 173.397572][ T8697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.673'. [ 173.406812][ T8696] team0: Port device netdevsim1 added [ 173.591774][ T5621] Bluetooth: hci4: command 0x0405 tx timeout [ 173.801198][ T8712] netlink: 'syz.4.677': attribute type 3 has an invalid length. [ 173.838232][ T8712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.677'. [ 174.258220][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.683'. [ 174.360617][ T8746] ip6t_rpfilter: unknown options [ 174.514543][ T8747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.686'. [ 174.557751][ T8747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.686'. [ 174.624099][ T8746] netlink: 36 bytes leftover after parsing attributes in process `syz.2.686'. [ 174.845251][ T8771] xt_hashlimit: size too large, truncated to 1048576 [ 175.245325][ T8792] syz_tun: entered allmulticast mode [ 175.342262][ T8792] pim6reg: entered allmulticast mode [ 175.360691][ T8792] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 175.539388][ T8808] lo speed is unknown, defaulting to 1000 [ 175.557266][ T8808] lo speed is unknown, defaulting to 1000 [ 175.560118][ T8813] netlink: 80 bytes leftover after parsing attributes in process `syz.2.702'. [ 175.645297][ T8808] lo speed is unknown, defaulting to 1000 [ 175.695185][ T8808] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 175.772544][ T8808] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 175.799450][ T8817] sctp: [Deprecated]: syz.2.703 (pid 8817) Use of int in max_burst socket option. [ 175.799450][ T8817] Use struct sctp_assoc_value instead [ 175.824612][ T8808] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 175.842963][ T8817] netlink: 24 bytes leftover after parsing attributes in process `syz.2.703'. [ 175.859859][ T8817] netlink: 24 bytes leftover after parsing attributes in process `syz.2.703'. [ 175.952581][ T8808] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 176.111691][ T8808] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 176.163060][ T6770] batadv1: left promiscuous mode [ 176.276095][ T8843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.710'. [ 176.345536][ T8845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.710'. [ 176.375996][ T8808] lo speed is unknown, defaulting to 1000 [ 176.400753][ T8847] syz_tun: entered promiscuous mode [ 176.412048][ T8847] macsec0: entered allmulticast mode [ 176.418136][ T8847] syz_tun: entered allmulticast mode [ 176.444350][ T8847] syz_tun: left allmulticast mode [ 176.456549][ T8847] syz_tun: left promiscuous mode [ 176.500276][ T8808] lo speed is unknown, defaulting to 1000 [ 176.546462][ T8808] lo speed is unknown, defaulting to 1000 [ 176.588364][ T8808] lo speed is unknown, defaulting to 1000 [ 176.678280][ T8808] lo speed is unknown, defaulting to 1000 [ 176.809365][ T8870] nbd: socks must be embedded in a SOCK_ITEM attr [ 177.111786][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 177.243110][ T5640] udevd[5640]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 177.266334][ T8898] netlink: 92 bytes leftover after parsing attributes in process `syz.4.721'. [ 177.485707][ T8903] netlink: 20 bytes leftover after parsing attributes in process `syz.3.723'. [ 177.763704][ T8906] lo speed is unknown, defaulting to 1000 [ 177.779951][ T8925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.729'. [ 178.309165][ T8949] x_tables: duplicate underflow at hook 1 [ 178.342003][ T8945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.733'. [ 179.591692][ T9000] netlink: 'syz.1.750': attribute type 1 has an invalid length. [ 179.685620][ T8998] __nla_validate_parse: 3 callbacks suppressed [ 179.685637][ T8998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.749'. [ 179.702204][ T8998] ovs-system: left promiscuous mode [ 179.707942][ T8998] Virtual device ovs-system asks to queue packet! [ 179.908616][ T5630] udevd[5630]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 179.945597][ T5639] udevd[5639]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 180.262658][ T9028] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 180.377321][ T9031] sch_fq: defrate 8 ignored. [ 180.413152][ T9031] netlink: 'syz.3.756': attribute type 10 has an invalid length. [ 180.546234][ T9036] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.758'. [ 180.591069][ T9031] team0 (unregistering): Port device team_slave_0 removed [ 180.638626][ T9031] team0 (unregistering): Port device team_slave_1 removed [ 180.672818][ T9031] team0 (unregistering): Port device netdevsim1 removed [ 180.778759][ T9050] netlink: 'syz.3.756': attribute type 2 has an invalid length. [ 180.870104][ T9031] netlink: 28 bytes leftover after parsing attributes in process `syz.3.756'. [ 181.200014][ T9077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.763'. [ 181.294484][ T9069] bond1: left promiscuous mode [ 181.305009][ T9069] team0: left promiscuous mode [ 181.321106][ T9069] team_slave_0: left promiscuous mode [ 181.329892][ T9069] team_slave_1: left promiscuous mode [ 181.363586][ T9069] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.387431][ T9069] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 181.416489][ T9069] ipip0: left promiscuous mode [ 181.430910][ T9091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.471307][ T9071] bond_slave_0: entered promiscuous mode [ 181.479472][ T9071] bond_slave_1: entered promiscuous mode [ 181.542232][ T9074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.766'. [ 181.555013][ T9095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.588391][ T9091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.600649][ T9086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.766'. [ 181.671269][ T9101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.770'. [ 182.086961][ T9121] netlink: 24 bytes leftover after parsing attributes in process `syz.2.774'. [ 182.098620][ T9120] netlink: 24 bytes leftover after parsing attributes in process `syz.2.774'. [ 182.143244][ T9120] openvswitch: netlink: IPv4 tunnel dst address is zero [ 182.193085][ T9129] sctp: [Deprecated]: syz.0.776 (pid 9129) Use of struct sctp_assoc_value in delayed_ack socket option. [ 182.193085][ T9129] Use struct sctp_sack_info instead [ 183.086009][ T9167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.307961][ T9175] netlink: 60 bytes leftover after parsing attributes in process `syz.0.788'. [ 183.353823][ T9175] bridge_slave_1: left allmulticast mode [ 183.371054][ T9175] bridge_slave_1: left promiscuous mode [ 183.380711][ T9175] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.427894][ T9175] bridge_slave_0: left allmulticast mode [ 183.458869][ T9175] bridge_slave_0: left promiscuous mode [ 183.466051][ T9175] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.151562][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 184.754171][ T9247] ip_tables: iptables: counters copy to user failed while replacing table [ 185.028131][ T6770] tipc: Subscription rejected, illegal request [ 185.052249][ T9260] __nla_validate_parse: 2 callbacks suppressed [ 185.052268][ T9260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.806'. [ 185.300743][ T9268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.807'. [ 185.538022][ T9279] ip6gretap2: entered promiscuous mode [ 185.601285][ T9279] batman_adv: batadv0: Adding interface: ip6gretap2 [ 185.620921][ T9279] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 185.711500][ T9279] batman_adv: batadv0: Not using interface ip6gretap2 (retrying later): interface not active [ 186.408028][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.817'. [ 186.978778][ T9304] syz.0.814 (9304) used greatest stack depth: 18088 bytes left [ 187.204257][ T9343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.821'. [ 187.680645][ T9362] syzkaller0: entered promiscuous mode [ 187.705492][ T9362] syzkaller0: entered allmulticast mode [ 188.464961][ T9400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.833'. [ 190.334294][ T9399] netlink: 20 bytes leftover after parsing attributes in process `syz.1.832'. [ 190.354408][ T9400] ipvlan3: entered allmulticast mode [ 190.359804][ T9400] syz_tun: entered allmulticast mode [ 190.566548][ T9433] netlink: 36 bytes leftover after parsing attributes in process `syz.1.836'. [ 190.698919][ T9445] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:20001 [ 190.827884][ T9452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.957195][ T9456] pimreg: entered allmulticast mode [ 190.973762][ T9456] pimreg: left allmulticast mode [ 191.000037][ T9458] syzkaller1: entered promiscuous mode [ 191.005881][ T9458] syzkaller1: entered allmulticast mode [ 191.025097][ T9458] netlink: 12 bytes leftover after parsing attributes in process `syz.4.843'. [ 191.075213][ T9458] netlink: 'syz.4.843': attribute type 10 has an invalid length. [ 191.115453][ T9458] netlink: 2 bytes leftover after parsing attributes in process `syz.4.843'. [ 191.164851][ T9458] wg2: entered promiscuous mode [ 191.176824][ T9458] wg2: entered allmulticast mode [ 191.183099][ T9458] team0: Device wg2 is of different type [ 191.248346][ T9467] ip_tables: iptables: counters copy to user failed while replacing table [ 191.479895][ T9478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.848'. [ 191.504481][ T9478] netlink: 20 bytes leftover after parsing attributes in process `syz.4.848'. [ 191.554719][ T9484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.850'. [ 191.788708][ T9497] IPVS: set_ctl: invalid protocol: 115 172.20.20.18:20065 [ 191.943902][ T9501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.852'. [ 191.967624][ T9501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.852'. [ 192.055209][ T9508] xt_hashlimit: size too large, truncated to 1048576 [ 192.158812][ T9516] netlink: 16 bytes leftover after parsing attributes in process `syz.4.852'. [ 192.461633][ T9497] bridge0: port 3(team0) entered disabled state [ 192.469598][ T9497] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.477538][ T9497] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.910989][ T9497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.961839][ T9497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.498370][ T984] lo speed is unknown, defaulting to 1000 [ 193.506194][ T9518] syzkaller0: entered promiscuous mode [ 193.522706][ T9518] syzkaller0: entered allmulticast mode [ 193.529894][ T984] syz0: Port: 1 Link DOWN [ 193.576646][ T9526] ovs-system: entered promiscuous mode [ 193.631588][ T6769] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.666414][ T6769] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.696452][ T6769] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.714676][ T6769] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.395759][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.700171][ T9568] syzkaller0: entered promiscuous mode [ 194.721708][ T9568] syzkaller0: entered allmulticast mode [ 195.327704][ T9615] bond0: (slave gretap0): Opening slave failed [ 195.368679][ T9615] xt_hashlimit: max too large, truncated to 1048576 [ 195.647458][ T9631] __nla_validate_parse: 4 callbacks suppressed [ 195.647480][ T9631] netlink: 564 bytes leftover after parsing attributes in process `syz.3.872'. [ 196.196467][ T9647] netlink: 'syz.3.875': attribute type 1 has an invalid length. [ 196.221071][ T9650] netlink: 36 bytes leftover after parsing attributes in process `syz.3.875'. [ 196.350796][ T9647] 8021q: adding VLAN 0 to HW filter on device bond6 [ 196.397672][ T9659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.878'. [ 196.637918][ T9671] netlink: 16 bytes leftover after parsing attributes in process `syz.1.880'. [ 196.654696][ T9667] bridge4: entered promiscuous mode [ 196.660269][ T9667] bridge4: entered allmulticast mode [ 196.864945][ T9674] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 196.955359][ T9681] netlink: 16 bytes leftover after parsing attributes in process `syz.4.884'. [ 196.965048][ T9684] tc_dump_action: action bad kind [ 197.217181][ T9689] bond7: (slave bond_slave_1): Device is not our slave [ 197.225960][ T9689] bond7: option active_slave: invalid value (bond_slave_1) [ 197.243226][ T9689] bond7 (unregistering): Released all slaves [ 197.303118][ T9692] netlink: 128 bytes leftover after parsing attributes in process `syz.4.884'. [ 197.351821][ T9692] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 197.647628][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.888'. [ 197.671694][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.888'. [ 198.182102][ T9717] hsr0: entered allmulticast mode [ 198.210419][ T9717] hsr_slave_0: entered allmulticast mode [ 198.216664][ T9717] hsr_slave_1: entered allmulticast mode [ 198.223534][ T9717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.895'. [ 198.237612][ T9717] hsr_slave_0: left promiscuous mode [ 198.253370][ T9721] netlink: 'syz.0.896': attribute type 1 has an invalid length. [ 198.253931][ T9717] hsr_slave_1: left promiscuous mode [ 198.261309][ T9721] netlink: 256 bytes leftover after parsing attributes in process `syz.0.896'. [ 198.293930][ T9717] hsr0 (unregistering): left allmulticast mode [ 199.831318][ T5621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 199.844976][ T5621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 199.855340][ T5621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 199.863962][ T5621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 199.872242][ T5621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 200.237692][ T9765] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 200.344799][ T9798] netlink: 'syz.3.913': attribute type 1 has an invalid length. [ 200.415746][ T9796] can: request_module (can-proto-0) failed. [ 200.573312][ T9781] lo speed is unknown, defaulting to 1000 [ 200.758328][ T9814] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 201.916543][ T5621] Bluetooth: hci5: command tx timeout [ 202.768517][ T9781] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.784311][ T9781] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.810189][ T9781] bridge_slave_0: entered allmulticast mode [ 202.849294][ T9781] bridge_slave_0: entered promiscuous mode [ 202.887566][ T9837] netlink: 'syz.1.922': attribute type 1 has an invalid length. [ 202.971168][ T9781] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.979487][ T9781] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.987216][ T9781] bridge_slave_1: entered allmulticast mode [ 202.995659][ T9781] bridge_slave_1: entered promiscuous mode [ 203.007372][ T9844] bond3: entered promiscuous mode [ 203.014022][ T9844] bond3: entered allmulticast mode [ 203.019704][ T9844] 8021q: adding VLAN 0 to HW filter on device bond3 [ 203.107768][ T9849] __nla_validate_parse: 5 callbacks suppressed [ 203.107787][ T9849] netlink: 32 bytes leftover after parsing attributes in process `syz.1.922'. [ 203.149086][ T9842] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 203.174887][ T9842] bond5: left promiscuous mode [ 203.297026][ T9842] bridge4: left promiscuous mode [ 203.327056][ T9837] bridge3: entered promiscuous mode [ 203.335247][ T9837] bridge3: entered allmulticast mode [ 203.343341][ T9837] bond3: (slave bridge3): Enslaving as a backup interface with an up link [ 203.357642][ T6781] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 203.415749][ T9844] bridge4: entered promiscuous mode [ 203.421218][ T9844] bridge4: entered allmulticast mode [ 203.430761][ T9844] bond3: (slave bridge4): Enslaving as a backup interface with a down link [ 203.489559][ T9781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.499170][ T1157] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 203.547122][ T9844] bridge5: entered promiscuous mode [ 203.554687][ T9844] bridge5: entered allmulticast mode [ 203.561042][ T9844] bond3: (slave bridge5): Enslaving as a backup interface with a down link [ 203.575694][ T9781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.683872][ T9781] team0: Port device team_slave_0 added [ 203.700397][ T9781] team0: Port device team_slave_1 added [ 203.714649][ T9848] lo speed is unknown, defaulting to 1000 [ 203.809134][ T9781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.826144][ T9781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.868174][ T9781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.922134][ T9781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.937381][ T9781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.964456][ T9781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.986573][ T9855] tipc: New replicast peer: 255.255.255.255 [ 203.993064][ T5621] Bluetooth: hci5: command tx timeout [ 204.004895][ T9855] tipc: Enabled bearer , priority 10 [ 204.156298][ T9868] netlink: 128 bytes leftover after parsing attributes in process `syz.1.928'. [ 204.174146][ T9781] hsr_slave_0: entered promiscuous mode [ 204.181031][ T9781] hsr_slave_1: entered promiscuous mode [ 204.187653][ T9781] debugfs: 'hsr0' already exists in 'hsr' [ 204.193727][ T9781] Cannot create hsr debugfs directory [ 204.560267][ T9873] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 205.061411][ T9889] bridge3: port 1(erspan0) entered disabled state [ 205.275163][ T9889] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.281997][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 205.288119][ T9889] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.341796][ T9889] bond_slave_0: left promiscuous mode [ 205.356847][ T9889] bond_slave_1: left promiscuous mode [ 205.749554][ T9889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.803239][ T9889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.832731][ T9889] xfrm0: left allmulticast mode [ 206.072237][ T5621] Bluetooth: hci5: command tx timeout [ 207.555928][ T9889] bond3: left allmulticast mode [ 207.601818][ T9889] vlan2: left allmulticast mode [ 207.607585][ T9889] bridge3: left allmulticast mode [ 207.691021][ T9889] bridge4: left allmulticast mode [ 207.711643][ T6788] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.720695][ T6788] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.731982][ T9781] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 207.745524][ T9781] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 207.756754][ T5615] tipc: Node number set to 49693245 [ 207.771715][ T6769] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.801467][ T6769] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.823571][ T9781] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 207.880564][ T9781] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 207.917972][ T9781] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 207.949654][ T9906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.976253][ T9781] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 207.997773][ T9909] netlink: 20 bytes leftover after parsing attributes in process `syz.1.941'. [ 208.003271][ T6785] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.042295][ T6785] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.076045][ T6785] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.103397][ T6785] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.134898][ T9781] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 208.152564][ T5621] Bluetooth: hci5: command tx timeout [ 208.166310][ T9781] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 208.184488][ T9907] netlink: 24 bytes leftover after parsing attributes in process `syz.3.939'. [ 208.462847][ T9781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.486847][ T9933] netlink: 64 bytes leftover after parsing attributes in process `syz.1.944'. [ 208.500252][ T9781] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.514681][ T9934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.945'. [ 208.525388][ T6788] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.532652][ T6788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.553195][ T9933] ip6gre1: entered promiscuous mode [ 208.558501][ T9933] ip6gre1: entered allmulticast mode [ 208.577776][ T6788] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.585021][ T6788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.673071][ T9934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.945'. [ 209.267955][ T9967] netlink: 'syz.1.949': attribute type 1 has an invalid length. [ 209.369044][ T9967] 8021q: adding VLAN 0 to HW filter on device bond4 [ 209.432300][ T9961] netlink: 44 bytes leftover after parsing attributes in process `syz.1.949'. [ 209.714289][ T9981] tipc: Enabled bearer , priority 0 [ 209.735989][ T9981] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 209.891786][ T9989] netlink: zone id is out of range [ 209.939356][ T9989] netlink: zone id is out of range [ 209.964370][ T9989] netlink: get zone limit has 4 unknown bytes [ 210.126231][ T9781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.211745][ T30] audit: type=1804 audit(1787537137.545:6): pid=10000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.954" name="/newroot/215/cgroup.controllers" dev="tmpfs" ino=1116 res=1 errno=0 [ 210.286957][ T30] audit: type=1800 audit(1787537137.545:7): pid=10000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.954" name="cgroup.controllers" dev="tmpfs" ino=1116 res=0 errno=0 [ 210.537213][T10010] netlink: 'syz.1.956': attribute type 21 has an invalid length. [ 210.556326][T10012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.955'. [ 210.577309][T10013] netlink: 20 bytes leftover after parsing attributes in process `syz.3.957'. [ 210.588883][T10010] netlink: 'syz.1.956': attribute type 22 has an invalid length. [ 210.599526][T10012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.955'. [ 210.611304][T10010] netlink: 'syz.1.956': attribute type 23 has an invalid length. [ 210.652875][T10010] netlink: 'syz.1.956': attribute type 25 has an invalid length. [ 210.705166][T10010] netlink: 96 bytes leftover after parsing attributes in process `syz.1.956'. [ 210.723065][T10016] bond5 (unregistering): Released all slaves [ 210.872760][ T5722] tipc: Node number set to 3087750200 [ 211.097575][T10037] netlink: 'syz.1.959': attribute type 6 has an invalid length. [ 211.108308][ T9781] veth0_vlan: entered promiscuous mode [ 211.132950][ T9781] veth1_vlan: entered promiscuous mode [ 211.220717][ T9781] veth0_macvtap: entered promiscuous mode [ 211.283786][ T9781] veth1_macvtap: entered promiscuous mode [ 211.319040][ T9781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.334497][T10042] netlink: 24 bytes leftover after parsing attributes in process `syz.0.961'. [ 211.377151][ T9781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.583327][ T6781] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.624975][ T6781] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.702876][T10055] netlink: 'syz.1.965': attribute type 39 has an invalid length. [ 211.766902][T10057] bridge: RTM_NEWNEIGH with invalid ether address [ 211.805373][ T6781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.814895][ T6769] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.827774][ T6769] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.833820][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 211.845635][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 211.851899][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 211.857183][ T6781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.128684][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.166601][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.462658][T10079] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 212.564436][T10085] netlink: 'syz.3.970': attribute type 1 has an invalid length. [ 212.584171][T10088] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 212.645829][T10085] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 212.699160][T10094] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 213.444078][T10105] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 214.023540][T10145] __nla_validate_parse: 1 callbacks suppressed [ 214.023559][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.978'. [ 214.041243][T10146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.979'. [ 215.012599][T10169] team0: entered promiscuous mode [ 215.019608][T10169] team_slave_0: entered promiscuous mode [ 215.025988][T10169] team_slave_1: entered promiscuous mode [ 215.035484][T10169] team0: entered allmulticast mode [ 215.040685][T10169] team_slave_0: entered allmulticast mode [ 215.047153][T10169] team_slave_1: entered allmulticast mode [ 215.054452][T10169] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.105933][T10174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.368238][T10191] netdevsim netdevsim1: Direct firmware load for .® failed with error -2 [ 215.379155][T10191] netdevsim netdevsim1: Falling back to sysfs fallback for: .® [ 215.677415][T10200] netlink: 8 bytes leftover after parsing attributes in process `syz.5.994'. [ 215.847368][T10205] netlink: 112 bytes leftover after parsing attributes in process `syz.5.996'. [ 215.879918][ T5626] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 215.906774][ T5626] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 215.919513][ T5626] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 215.930919][ T5626] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 215.944724][ T5626] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 216.279935][T10220] IPv6: NLM_F_CREATE should be specified when creating new route [ 216.323464][T10220] syzkaller0: entered promiscuous mode [ 216.342451][T10220] syzkaller0: entered allmulticast mode [ 217.127719][T10226] netlink: 15672 bytes leftover after parsing attributes in process `syz.1.1001'. [ 217.168434][T10226] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1001'. [ 217.190642][T10226] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1001'. [ 217.219406][T10226] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1001'. [ 217.362902][T10206] lo speed is unknown, defaulting to 1000 [ 217.474872][T10248] xt_bpf: check failed: parse error [ 217.494367][T10243] bond0: (slave bond_slave_0): Releasing backup interface [ 217.542010][T10250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1007'. [ 217.543136][T10243] bond0: (slave bond_slave_1): Releasing backup interface [ 217.570940][T10243] team_slave_0: left promiscuous mode [ 217.584511][T10243] team_slave_0: left allmulticast mode [ 217.619220][T10243] team0: Port device team_slave_0 removed [ 217.627933][T10243] team_slave_1: left promiscuous mode [ 217.633680][T10243] team_slave_1: left allmulticast mode [ 217.640724][T10243] team0: Port device team_slave_1 removed [ 217.648376][T10243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.657898][T10243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.669223][T10243] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 217.695174][T10254] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1009'. [ 217.993836][ T5632] Bluetooth: hci6: command tx timeout [ 218.219542][T10272] syzkaller0: entered promiscuous mode [ 218.266886][T10272] syzkaller0: entered allmulticast mode [ 218.830595][T10206] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.851884][T10206] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.859677][T10206] bridge_slave_0: entered allmulticast mode [ 218.869802][T10206] bridge_slave_0: entered promiscuous mode [ 218.883552][T10321] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.903347][T10206] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.911281][T10206] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.925440][T10206] bridge_slave_1: entered allmulticast mode [ 218.940244][T10206] bridge_slave_1: entered promiscuous mode [ 218.998879][T10325] openvswitch: netlink: IP tunnel dst address not specified [ 219.014069][T10325] netlink: 'syz.3.1024': attribute type 1 has an invalid length. [ 219.053291][T10206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.086723][T10206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.152073][T10328] tc_dump_action: action bad kind [ 219.160764][T10206] team0: Port device team_slave_0 added [ 219.172246][T10327] vlan3: entered allmulticast mode [ 219.178592][T10327] bridge0: port 3(vlan3) entered blocking state [ 219.185390][T10327] bridge0: port 3(vlan3) entered disabled state [ 219.194105][T10327] vlan3: entered promiscuous mode [ 219.202874][T10206] team0: Port device team_slave_1 added [ 219.248929][T10206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.259407][T10206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.315747][T10206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.362825][T10206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.399548][T10206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.428680][T10206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.564064][T10338] netlink: Invalid conntrack helper [ 219.581772][T10338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.626381][T10206] hsr_slave_0: entered promiscuous mode [ 219.645739][T10206] hsr_slave_1: entered promiscuous mode [ 219.658560][T10206] debugfs: 'hsr0' already exists in 'hsr' [ 219.664675][T10206] Cannot create hsr debugfs directory [ 219.808626][T10355] __nla_validate_parse: 3 callbacks suppressed [ 219.808645][T10355] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1030'. [ 219.831088][T10355] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1030'. [ 220.075000][ T5632] Bluetooth: hci6: command tx timeout [ 220.227331][T10368] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1035'. [ 220.267343][T10368] netlink: 'syz.1.1035': attribute type 9 has an invalid length. [ 220.312401][T10368] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1035'. [ 220.409352][T10377] netlink: 'syz.5.1037': attribute type 1 has an invalid length. [ 220.440730][T10378] netlink: 'syz.3.1036': attribute type 1 has an invalid length. [ 220.452612][T10378] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1036'. [ 220.795036][T10392] netlink: 'syz.1.1041': attribute type 1 has an invalid length. [ 220.836752][T10206] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 220.865651][T10206] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 220.883744][T10206] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 220.888094][T10392] netlink: 'syz.1.1041': attribute type 1 has an invalid length. [ 220.907225][T10206] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 220.924206][T10206] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 220.933195][T10392] netlink: 'syz.1.1041': attribute type 3 has an invalid length. [ 220.951832][T10392] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1041'. [ 220.969208][T10206] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 220.986910][T10393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1041'. [ 221.007536][T10206] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 221.034674][T10206] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 221.060448][T10396] SET target dimension over the limit! [ 221.338760][T10416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1047'. [ 221.397824][T10417] bond5: entered promiscuous mode [ 221.403800][T10417] 8021q: adding VLAN 0 to HW filter on device bond5 [ 221.452770][T10421] syzkaller1: entered allmulticast mode [ 221.495836][T10421] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1048'. [ 221.508075][T10206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.766884][T10206] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.855107][ T6770] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.862394][ T6770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.935153][ T6781] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.942427][ T6781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.153404][ T5632] Bluetooth: hci6: command tx timeout [ 222.472617][T10463] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1058'. [ 222.626813][T10473] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 223.987993][T10206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.187780][T10526] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 224.231944][ T5632] Bluetooth: hci6: command tx timeout [ 224.863128][T10561] __nla_validate_parse: 2 callbacks suppressed [ 224.863147][T10561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1078'. [ 224.945630][T10206] veth0_vlan: entered promiscuous mode [ 225.019336][T10206] veth1_vlan: entered promiscuous mode [ 225.151036][T10206] veth0_macvtap: entered promiscuous mode [ 225.203989][T10206] veth1_macvtap: entered promiscuous mode [ 225.278081][T10206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.322503][T10206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.501533][ T6769] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.526928][ T6769] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.569294][ T6769] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.579211][ T6769] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.205074][T10576] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 228.345048][ T6769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.366348][ T6769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.458234][ T6781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.489385][ T6781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.510110][T10624] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 228.624316][T10628] geneve3: entered promiscuous mode [ 228.663533][ T6769] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 60035 - 0 [ 228.682875][ T6769] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 60035 - 0 [ 228.699703][ T6769] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 60035 - 0 [ 228.734382][ T6769] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 60035 - 0 [ 229.012039][T10650] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1099'. [ 229.028521][T10653] x_tables: duplicate underflow at hook 1 [ 229.219611][T10650] §: renamed from sit0 (while UP) [ 229.293582][T10660] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1102'. [ 229.860073][T10650] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.867854][T10650] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.971255][T10650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.990081][T10650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.235718][ T6769] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.256951][ T6769] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.332090][T10678] netlink: 'syz.6.1105': attribute type 361 has an invalid length. [ 230.342080][ T6788] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.342128][ T6788] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.489462][T10685] openvswitch: netlink: Missing key (keys=200040, expected=80) [ 230.500657][T10683] openvswitch: netlink: Missing key (keys=200040, expected=80) [ 230.698896][T10693] pim6reg1: entered promiscuous mode [ 230.712240][T10693] pim6reg1: entered allmulticast mode [ 230.874579][T10707] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1113'. [ 230.884251][T10707] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 231.416800][T10692] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 231.713979][T10717] netlink: 8388 bytes leftover after parsing attributes in process `syz.1.1116'. [ 231.875423][T10735] team0: left promiscuous mode [ 231.892698][T10735] team0: left allmulticast mode [ 231.987457][T10735] tipc: Resetting bearer [ 232.059314][T10735] syzkaller0: left promiscuous mode [ 232.087866][T10735] syzkaller0: left allmulticast mode [ 232.106883][T10735] ip6gretap2: left promiscuous mode [ 232.257174][T10751] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1126'. [ 232.481228][T10760] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1130'. [ 232.510009][T10761] netlink: 'syz.5.1131': attribute type 21 has an invalid length. [ 232.531997][T10760] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1130'. [ 232.541091][T10761] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1131'. [ 232.591614][T10760] syzkaller1: entered promiscuous mode [ 232.600784][T10760] syzkaller1: entered allmulticast mode [ 232.640990][ T9533] hid-generic 0005:07C0:5505.0001: item fetching failed at offset 0/1 [ 232.654328][T10761] netlink: 'syz.5.1131': attribute type 4 has an invalid length. [ 232.664311][ T9533] hid-generic 0005:07C0:5505.0001: probe with driver hid-generic failed with error -22 [ 232.674554][T10761] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1131'. [ 232.697180][T10760] ªªªªªª: renamed from vlan0 [ 232.769131][T10776] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1134'. [ 232.932534][T10783] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1136'. [ 232.961511][T10783] netlink: 'syz.3.1136': attribute type 2 has an invalid length. [ 232.982926][T10783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1136'. [ 233.194358][ T6769] bond3: (slave bridge3): link status up again after 0 ms [ 233.231566][ T6769] bond3: (slave bridge3): link status up again after 0 ms [ 233.261456][ T6769] bond3: (slave bridge3): link status up again after 0 ms [ 233.301483][ T6769] bond3: (slave bridge3): link status up again after 0 ms [ 233.321474][ T6778] bond3: (slave bridge3): link status up again after 0 ms [ 233.342353][ T6778] bond3: (slave bridge3): link status up again after 0 ms [ 233.400432][T10783] syzkaller1: entered promiscuous mode [ 233.407562][T10783] syzkaller1: entered allmulticast mode [ 233.513252][ T6778] net_ratelimit: 5 callbacks suppressed [ 233.513272][ T6778] bond3: (slave bridge3): link status up again after 0 ms [ 233.568454][ T6769] bond3: (slave bridge3): link status up again after 0 ms [ 233.578537][ T6769] bond3: (slave bridge3): failed to get link speed/duplex [ 233.732437][ T6780] bond3: (slave bridge3): failed to get link speed/duplex [ 233.964513][ T6769] bond3: (slave bridge3): failed to get link speed/duplex [ 234.120047][ T6788] bond3: (slave bridge3): failed to get link speed/duplex [ 234.410129][T10842] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 234.437753][T10842] bond4 (unregistering): Released all slaves [ 234.492612][ T6769] bond3: (slave bridge3): failed to get link speed/duplex [ 234.643694][ T6781] bond3: (slave bridge3): failed to get link speed/duplex [ 234.700729][T10855] ip6gre1: entered promiscuous mode [ 234.710576][T10855] ip6gre1: entered allmulticast mode [ 234.731000][ T6781] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 234.758290][T10865] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 234.767842][ T6781] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 234.775643][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 234.802126][ T6778] bond3: (slave bridge3): failed to get link speed/duplex [ 234.932197][ T6769] bond3: (slave bridge3): failed to get link speed/duplex [ 235.392580][T10887] netlink: 'syz.6.1161': attribute type 4 has an invalid length. [ 235.592337][ T8472] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 235.692293][ T5722] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 235.828541][T10912] erspan0: left allmulticast mode [ 235.836710][T10912] erspan0: left promiscuous mode [ 235.850628][T10912] bridge3: port 1(erspan0) entered disabled state [ 235.867207][T10903] smbdirect: ib_dev[syz0] removed [ 235.893149][T10912] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.916525][T10912] bridge_slave_1: left allmulticast mode [ 235.932534][T10912] bridge_slave_1: left promiscuous mode [ 235.938483][T10912] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.954701][T10912] bond0: (slave bond_slave_0): Releasing backup interface [ 235.966185][T10912] bond0: (slave bond_slave_1): Releasing backup interface [ 235.976168][T10912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.003853][T10912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.143457][T10930] xt_hashlimit: max too large, truncated to 1048576 [ 236.254205][T10935] __nla_validate_parse: 6 callbacks suppressed [ 236.254224][T10935] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1173'. [ 236.408447][T10946] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1174'. [ 236.434106][T10935] veth7: entered allmulticast mode [ 236.520188][ T6780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.559290][ T6780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.626189][T10948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.646723][T10953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1178'. [ 236.826668][T10964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1181'. [ 236.838839][T10964] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1181'. [ 236.849528][T10964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1181'. [ 236.858935][T10964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1181'. [ 236.876267][T10966] sctp: [Deprecated]: syz.1.1179 (pid 10966) Use of int in max_burst socket option. [ 236.876267][T10966] Use struct sctp_assoc_value instead [ 237.395782][T10982] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1188'. [ 237.507977][T10985] dvmrp8: entered allmulticast mode [ 237.564936][T10993] netlink: 'syz.0.1191': attribute type 11 has an invalid length. [ 237.570557][T10992] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1190'. [ 237.627179][T10995] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1192'. [ 237.710441][T10998] netlink: 'syz.3.1193': attribute type 1 has an invalid length. [ 237.890189][T10998] bond7: entered promiscuous mode [ 237.916314][T10998] 8021q: adding VLAN 0 to HW filter on device bond7 [ 237.979147][T11007] macvtap1: entered allmulticast mode [ 238.046758][T11011] bond7: (slave bridge6): making interface the new active one [ 238.057562][T11011] bridge6: entered promiscuous mode [ 238.073199][T11011] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 238.135929][T11021] netlink: 'syz.5.1199': attribute type 21 has an invalid length. [ 238.168889][T11025] xt_CT: You must specify a L4 protocol and not use inversions on it [ 238.269646][T11030] lo speed is unknown, defaulting to 1000 [ 238.279193][T11030] lo speed is unknown, defaulting to 1000 [ 238.286225][T11030] lo speed is unknown, defaulting to 1000 [ 238.302052][T11030] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 238.320332][T11030] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 238.337795][T11030] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 238.462273][T11030] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 238.552127][ T6788] net_ratelimit: 21 callbacks suppressed [ 238.552148][ T6788] bond3: (slave bridge3): failed to get link speed/duplex [ 238.576217][T11030] lo speed is unknown, defaulting to 1000 [ 238.598015][T11030] lo speed is unknown, defaulting to 1000 [ 238.638610][T11030] lo speed is unknown, defaulting to 1000 [ 238.649554][T11030] lo speed is unknown, defaulting to 1000 [ 238.665138][T11030] lo speed is unknown, defaulting to 1000 [ 238.679832][T11030] lo speed is unknown, defaulting to 1000 [ 238.686199][ T6778] bond3: (slave bridge3): failed to get link speed/duplex [ 238.699939][T11030] lo speed is unknown, defaulting to 1000 [ 238.803567][ T6788] bond3: (slave bridge3): failed to get link speed/duplex [ 238.874325][T11052] netlink: 'syz.3.1206': attribute type 11 has an invalid length. [ 238.882795][T11051] netlink: 'syz.3.1206': attribute type 11 has an invalid length. [ 238.923494][ T6780] bond3: (slave bridge3): failed to get link speed/duplex [ 239.035057][ T6788] bond3: (slave bridge3): failed to get link speed/duplex [ 239.065492][T11065] netlink: 'syz.3.1207': attribute type 10 has an invalid length. [ 239.162490][ T6781] bond3: (slave bridge3): failed to get link speed/duplex [ 239.201971][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.281585][ T6778] bond3: (slave bridge3): failed to get link speed/duplex [ 239.401668][ T6769] bond3: (slave bridge3): failed to get link speed/duplex [ 239.511514][ T6780] bond3: (slave bridge3): failed to get link speed/duplex [ 239.621560][ T6780] bond3: (slave bridge3): failed to get link speed/duplex [ 240.061158][T11083] syzkaller0: entered promiscuous mode [ 240.068137][T11083] syzkaller0: entered allmulticast mode [ 240.238978][T11087] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 241.117290][T11025] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 241.438136][T11097] __nla_validate_parse: 7 callbacks suppressed [ 241.438155][T11097] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1216'. [ 241.488099][T11096] batman_adv: batadv0: Adding interface: macvtap1 [ 241.496139][T11096] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 241.506817][T11099] netlink: 'syz.1.1217': attribute type 1 has an invalid length. [ 241.531987][T11100] IPv6: Can't replace route, no match found [ 241.568076][T11096] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 241.767997][T11111] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1220'. [ 241.954161][T11120] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1223'. [ 241.980174][T11120] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1223'. [ 242.095020][T11120] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1223'. [ 242.116883][T11120] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1223'. [ 242.237540][T11131] xt_CT: You must specify a L4 protocol and not use inversions on it [ 242.267578][T11133] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1227'. [ 242.287111][T11133] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1227'. [ 242.320983][T11133] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1227'. [ 242.395913][T11133] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1227'. [ 242.777591][T11154] syzkaller1: entered promiscuous mode [ 242.810078][T11154] syzkaller1: entered allmulticast mode [ 243.088970][T11163] netlink: 'syz.0.1234': attribute type 4 has an invalid length. [ 243.122243][T11163] netlink: 'syz.0.1234': attribute type 4 has an invalid length. [ 243.167112][ T9528] lo speed is unknown, defaulting to 1000 [ 243.200474][ T9528] syz0: Port: 1 Link ACTIVE [ 243.275879][T11174] netlink: 'syz.3.1238': attribute type 1 has an invalid length. [ 243.289810][T11175] netlink: 'syz.3.1238': attribute type 1 has an invalid length. [ 243.418940][T11182] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 243.560134][T11189] xt_CT: No such helper "snmp_trap" [ 243.583156][ T6780] net_ratelimit: 31 callbacks suppressed [ 243.583174][ T6780] bond3: (slave bridge3): failed to get link speed/duplex [ 243.731507][ T6781] bond3: (slave bridge3): failed to get link speed/duplex [ 243.851482][ T6780] bond3: (slave bridge3): failed to get link speed/duplex [ 243.961591][ T6770] bond3: (slave bridge3): failed to get link speed/duplex [ 244.071459][ T6770] bond3: (slave bridge3): failed to get link speed/duplex [ 244.191533][ T6781] bond3: (slave bridge3): failed to get link speed/duplex [ 244.301554][ T6780] bond3: (slave bridge3): failed to get link speed/duplex [ 244.411625][ T6770] bond3: (slave bridge3): failed to get link speed/duplex [ 244.531482][ T6778] bond3: (slave bridge3): failed to get link speed/duplex [ 244.641590][ T6781] bond3: (slave bridge3): failed to get link speed/duplex [ 246.056233][T11167] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 246.363779][ T6770] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.393739][ T6770] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.421128][ T6770] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.439799][ T6770] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.728180][T11234] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 246.973267][T11248] netlink: 'syz.1.1257': attribute type 10 has an invalid length. [ 247.022453][T11248] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 247.047151][T11248] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 247.090876][T11248] team0: Port device netdevsim1 added [ 247.696683][T11267] x_tables: duplicate entry at hook 1 [ 247.837813][T11267] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.151768][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 248.307781][T11292] __nla_validate_parse: 4 callbacks suppressed [ 248.307801][T11292] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1267'. [ 248.392786][T11293] netlink: 'syz.3.1268': attribute type 4 has an invalid length. [ 248.444261][T11293] netlink: 'syz.3.1268': attribute type 4 has an invalid length. [ 248.677000][ T6770] net_ratelimit: 31 callbacks suppressed [ 248.677023][ T6770] bond3: (slave bridge3): failed to get link speed/duplex [ 248.759937][T11318] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1272'. [ 248.846970][T11318] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1272'. [ 248.860801][ T6778] bond3: (slave bridge3): failed to get link speed/duplex [ 248.938528][T11318] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1272'. [ 248.995854][T11318] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1272'. [ 249.032066][ T6781] bond3: (slave bridge3): failed to get link speed/duplex [ 249.082659][T11318] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1272'. [ 249.136183][T11318] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1272'. [ 249.146835][T11333] syzkaller0: entered allmulticast mode [ 249.153162][ T6778] bond3: (slave bridge3): failed to get link speed/duplex [ 249.199017][T11318] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1272'. [ 249.239963][T11318] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1272'. [ 249.252394][T11318] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1272'. [ 249.740183][T11359] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 249.953996][T11372] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 250.879719][ T6770] tipc: Subscription rejected, illegal request [ 252.844878][T11354] netlink: 'syz.5.1283': attribute type 34 has an invalid length. [ 252.855950][ T5273] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 252.868272][T11362] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 252.897433][T11407] vlan0: entered promiscuous mode [ 252.925198][T11407] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 252.972296][ T6769] bond3: (slave bridge3): failed to get link speed/duplex [ 253.101609][ T6785] bond3: (slave bridge3): failed to get link speed/duplex [ 253.282066][ T6785] bond3: (slave bridge3): failed to get link speed/duplex [ 253.412748][ T6778] bond3: (slave bridge3): failed to get link speed/duplex [ 253.610697][T11450] __nla_validate_parse: 218 callbacks suppressed [ 253.610716][T11450] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1302'. [ 253.677049][ T5632] block nbd2: Receive control failed (result -32) [ 253.861496][ T6788] net_ratelimit: 1 callbacks suppressed [ 253.861515][ T6788] bond3: (slave bridge3): failed to get link speed/duplex [ 254.021916][ T6769] bond3: (slave bridge3): failed to get link speed/duplex [ 254.152988][ T6788] bond3: (slave bridge3): failed to get link speed/duplex [ 254.283486][ T6788] bond3: (slave bridge3): failed to get link speed/duplex [ 254.422051][ T6788] bond3: (slave bridge3): failed to get link speed/duplex [ 254.444557][T11486] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1311'. [ 254.600954][T11486] ip6tnl5: entered allmulticast mode [ 254.626083][ T6788] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 254.652064][ T9533] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 254.660118][ T6788] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 254.773874][ T6770] bond3: (slave bridge3): failed to get link speed/duplex [ 254.781700][ T9533] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 254.953828][ T6769] bond3: (slave bridge3): failed to get link speed/duplex [ 255.001672][ T9533] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 255.050053][T11508] netlink: 'syz.0.1319': attribute type 6 has an invalid length. [ 255.082692][ T6769] bond3: (slave bridge3): failed to get link speed/duplex [ 255.225901][ T6781] bond3: (slave bridge3): failed to get link speed/duplex [ 255.300473][T11518] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1321'. [ 255.365431][ T6781] bond3: (slave bridge3): failed to get link speed/duplex [ 255.366353][T11518] unsupported nlmsg_type 40 [ 255.712749][T11538] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1328'. [ 255.750708][T11538] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1328'. [ 255.835394][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.879470][T11543] netlink: 'syz.0.1329': attribute type 16 has an invalid length. [ 255.929494][T11543] netlink: 'syz.0.1329': attribute type 3 has an invalid length. [ 255.968957][T11553] netlink: 'syz.5.1333': attribute type 8 has an invalid length. [ 255.970545][T11543] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.1329'. [ 256.287222][T11564] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1335'. [ 257.024086][T11595] netlink: 'syz.5.1342': attribute type 62 has an invalid length. [ 257.422061][T11614] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1346'. [ 257.436218][T11614] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1346'. [ 257.805574][ T30] audit: type=1800 audit(1787537185.145:8): pid=11620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1347" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=1467 res=0 errno=0 [ 257.989774][T11634] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1351'. [ 258.365842][T11645] bond4: ARP target 9.0.0.0 is already present [ 258.372734][T11645] bond4: option arp_ip_target: invalid value (9) [ 258.381069][T11645] bond4 (unregistering): Released all slaves [ 258.785969][T11673] __nla_validate_parse: 2 callbacks suppressed [ 258.785988][T11673] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1359'. [ 258.971896][ T6769] net_ratelimit: 27 callbacks suppressed [ 258.971916][ T6769] bond3: (slave bridge3): failed to get link speed/duplex [ 259.020371][T11697] netlink: 'syz.5.1367': attribute type 8 has an invalid length. [ 259.053580][T11697] netlink: 'syz.5.1367': attribute type 8 has an invalid length. [ 259.099140][T11697] netlink: 'syz.5.1367': attribute type 8 has an invalid length. [ 259.099169][T11698] syzkaller0: entered promiscuous mode [ 259.124837][T11698] syzkaller0: entered allmulticast mode [ 259.145945][T11697] netlink: 'syz.5.1367': attribute type 8 has an invalid length. [ 259.165778][T11697] netlink: 'syz.5.1367': attribute type 8 has an invalid length. [ 259.181560][ T6788] bond3: (slave bridge3): failed to get link speed/duplex [ 259.181571][T11697] netlink: 'syz.5.1367': attribute type 8 has an invalid length. [ 259.207905][T11697] netlink: 'syz.5.1367': attribute type 8 has an invalid length. [ 259.244586][T11697] netlink: 'syz.5.1367': attribute type 8 has an invalid length. [ 259.260759][T11697] netlink: 'syz.5.1367': attribute type 8 has an invalid length. [ 259.278960][T11697] netlink: 'syz.5.1367': attribute type 8 has an invalid length. [ 259.562489][ T6781] bond3: (slave bridge3): failed to get link speed/duplex [ 259.684603][ T6781] bond3: (slave bridge3): failed to get link speed/duplex [ 259.841563][ T6781] bond3: (slave bridge3): failed to get link speed/duplex [ 259.961942][ T6770] bond3: (slave bridge3): failed to get link speed/duplex [ 260.039728][T11724] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1372'. [ 260.068338][T11724] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1372'. [ 260.095655][T11719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1373'. [ 260.114493][ T6788] bond3: (slave bridge3): failed to get link speed/duplex [ 260.130045][T11720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1373'. [ 260.155976][T11731] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1374'. [ 260.261835][ T6788] bond3: (slave bridge3): failed to get link speed/duplex [ 260.391983][ T6770] bond3: (slave bridge3): failed to get link speed/duplex [ 260.534499][ T6788] bond3: (slave bridge3): failed to get link speed/duplex [ 260.943042][T11780] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1387'. [ 261.062288][T11783] bond9: Removing last ns target with arp_interval on [ 261.200218][T11798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1393'. [ 261.229119][T11787] bond1: option arp_validate: invalid value (8192) [ 261.243597][T11787] bond1 (unregistering): Released all slaves [ 261.658530][T11823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1398'. [ 261.923207][T11833] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 262.730837][T11877] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 262.744765][T11877] bond4 (unregistering): Released all slaves [ 262.798889][T11875] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1409'. [ 263.209578][T11887] 8021q: adding VLAN 0 to HW filter on device bond10 [ 263.214706][T11906] sctp: [Deprecated]: syz.6.1418 (pid 11906) Use of struct sctp_assoc_value in delayed_ack socket option. [ 263.214706][T11906] Use struct sctp_sack_info instead [ 263.518959][T11916] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 263.647990][T11918] bond10: entered promiscuous mode [ 263.662382][T11918] 8021q: adding VLAN 0 to HW filter on device bond10 [ 263.803260][T11937] __nla_validate_parse: 6 callbacks suppressed [ 263.803280][T11937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1427'. [ 263.833720][ T6788] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.862826][T11930] block nbd3: Unsupported socket: should be TCP or UNIX. [ 264.042640][ T6785] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.069489][ T6785] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.091576][ T6785] net_ratelimit: 24 callbacks suppressed [ 264.091596][ T6785] bond3: (slave bridge3): failed to get link speed/duplex [ 264.348637][ T6788] bond3: (slave bridge3): failed to get link speed/duplex [ 264.599476][T11955] validate_nla: 27 callbacks suppressed [ 264.599497][T11955] netlink: 'syz.0.1429': attribute type 4 has an invalid length. [ 264.678575][T11960] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1432'. [ 264.731515][ T6770] bond3: (slave bridge3): failed to get link speed/duplex [ 264.791740][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 264.891138][T11968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1432'. [ 264.932779][ T6781] bond3: (slave bridge3): failed to get link speed/duplex [ 264.944889][T11968] bridge_slave_1: left allmulticast mode [ 264.979351][T11968] bridge_slave_1: left promiscuous mode [ 264.990932][T11978] netlink: 'syz.0.1436': attribute type 23 has an invalid length. [ 265.015677][T11968] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.077407][T11968] bridge_slave_0: left allmulticast mode [ 265.091784][T11968] bridge_slave_0: left promiscuous mode [ 265.108053][T11968] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.242757][T11990] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1438'. [ 265.351939][T11986] syzkaller0: entered promiscuous mode [ 265.357796][T11986] syzkaller0: entered allmulticast mode [ 265.601514][ T6781] bond3: (slave bridge3): failed to get link speed/duplex [ 265.698372][T12001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.713561][ T6785] bond3: (slave bridge3): failed to get link speed/duplex [ 265.785814][T12001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.831480][ T6778] bond3: (slave bridge3): failed to get link speed/duplex [ 265.892440][T12009] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1442'. [ 265.918305][T12011] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1442'. [ 265.971439][ T6778] bond3: (slave bridge3): failed to get link speed/duplex [ 266.123113][ T6769] bond3: (slave bridge3): failed to get link speed/duplex [ 266.141081][T12023] netlink: 'syz.3.1446': attribute type 3 has an invalid length. [ 266.169409][T12023] netlink: 'syz.3.1446': attribute type 3 has an invalid length. [ 266.196224][T12026] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1447'. [ 266.211803][T12023] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1446'. [ 266.276655][ T6778] bond3: (slave bridge3): failed to get link speed/duplex [ 266.296829][T12036] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1449'. [ 266.439524][T12038] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1450'. [ 266.632975][T12038] lo speed is unknown, defaulting to 1000 [ 267.309312][T12087] ovs-s: entered promiscuous mode [ 267.343819][T12087] openvswitch: ovs-s: Dropping previously announced user features [ 267.697208][T12088] syzkaller1: entered promiscuous mode [ 267.760776][T12088] syzkaller1: entered allmulticast mode [ 267.993938][T12112] netlink: 'syz.0.1469': attribute type 1 has an invalid length. [ 268.113621][T12112] bond4: entered promiscuous mode [ 268.144638][T12112] 8021q: adding VLAN 0 to HW filter on device bond4 [ 268.284201][T12129] vlan3: entered allmulticast mode [ 268.289416][T12129] bond0: entered allmulticast mode [ 268.295207][T12129] bond_slave_0: entered allmulticast mode [ 268.305137][T12129] bond_slave_1: entered allmulticast mode [ 268.349955][T12127] tipc: Enabling of bearer rejected, failed to enable media [ 268.428772][T12136] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 268.841277][T12159] syzkaller0: entered promiscuous mode [ 268.863201][T12159] syzkaller0: entered allmulticast mode [ 268.915653][T12162] xt_CT: You must specify a L4 protocol and not use inversions on it [ 269.029170][T12167] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 269.213972][T12176] net_ratelimit: 16 callbacks suppressed [ 269.213994][T12176] ip_tables: iptables: counters copy to user failed while replacing table [ 269.233154][T12176] netlink: 'syz.5.1487': attribute type 13 has an invalid length. [ 269.249496][T12177] __nla_validate_parse: 6 callbacks suppressed [ 269.249516][T12177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1488'. [ 269.299414][T12179] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1487'. [ 269.461899][ T9528] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 269.553290][ T6769] bond3: (slave bridge3): failed to get link speed/duplex [ 269.692759][ T6769] bond3: (slave bridge3): failed to get link speed/duplex [ 269.793102][T12199] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1493'. [ 269.816178][T12201] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1494'. [ 269.845443][T12201] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 269.941953][ T6781] bond3: (slave bridge3): failed to get link speed/duplex [ 270.071504][ T1157] bond3: (slave bridge3): failed to get link speed/duplex [ 270.149666][T12220] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1498'. [ 270.201534][ T6778] bond3: (slave bridge3): failed to get link speed/duplex [ 270.247711][T12226] netlink: 'syz.0.1500': attribute type 1 has an invalid length. [ 270.279534][T12226] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1500'. [ 270.306877][T12226] netlink: 'syz.0.1500': attribute type 1 has an invalid length. [ 270.321532][ T6778] bond3: (slave bridge3): failed to get link speed/duplex [ 270.342648][T12228] netlink: 'syz.0.1500': attribute type 1 has an invalid length. [ 270.351118][T12228] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1500'. [ 270.376200][T12228] netlink: 'syz.0.1500': attribute type 1 has an invalid length. [ 270.391889][ T9533] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 270.461776][T12227] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1501'. [ 270.552336][ T1157] bond3: (slave bridge3): failed to get link speed/duplex [ 270.691886][ T6781] bond3: (slave bridge3): failed to get link speed/duplex [ 270.710976][T12248] sctp: [Deprecated]: syz.1.1505 (pid 12248) Use of struct sctp_assoc_value in delayed_ack socket option. [ 270.710976][T12248] Use struct sctp_sack_info instead [ 270.763125][T12248] smc: net device lo applied user defined pnetid SYZ0 [ 270.816406][T12248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1505'. [ 272.144424][T12294] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1518'. [ 273.699449][T12248] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 273.996090][T12307] gretap1: entered promiscuous mode [ 274.251904][ T1157] net_ratelimit: 31 callbacks suppressed [ 274.251926][ T1157] bond3: (slave bridge3): failed to get link speed/duplex [ 274.413063][ T1157] bond3: (slave bridge3): failed to get link speed/duplex [ 274.551640][ T6778] bond3: (slave bridge3): failed to get link speed/duplex [ 274.673142][ T1157] bond3: (slave bridge3): failed to get link speed/duplex [ 274.830408][T12350] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 274.850602][T12350] bond1 (unregistering): Released all slaves [ 275.033212][ T6778] bond3: (slave bridge3): failed to get link speed/duplex [ 275.078746][T12366] __nla_validate_parse: 1 callbacks suppressed [ 275.078767][T12366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1537'. [ 275.101204][T12368] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1538'. [ 275.114842][T12366] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1537'. [ 275.130954][T12366] netlink: 'syz.0.1537': attribute type 1 has an invalid length. [ 275.157018][T12366] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1537'. [ 275.171856][ T6778] bond3: (slave bridge3): failed to get link speed/duplex [ 275.279059][T12373] xt_TCPMSS: Only works on TCP SYN packets [ 275.375304][T12376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1537'. [ 275.429831][T12366] lo speed is unknown, defaulting to 1000 [ 275.511593][ T6781] bond3: (slave bridge3): failed to get link speed/duplex [ 275.562251][T12373] vlan3: left promiscuous mode [ 275.567672][T12373] bridge_slave_0: left promiscuous mode [ 275.574357][T12373] bridge0: port 3(vlan3) entered disabled state [ 275.691535][ T1157] bond3: (slave bridge3): failed to get link speed/duplex [ 276.021577][ T6778] bond3: (slave bridge3): failed to get link speed/duplex [ 276.164949][T12400] macsec2: entered promiscuous mode [ 276.178635][T12400] hsr0: entered promiscuous mode [ 276.208014][T12400] hsr0: left promiscuous mode [ 276.371558][ T6769] bond3: (slave bridge3): failed to get link speed/duplex [ 276.450498][T12417] pim6reg1: entered promiscuous mode [ 276.458866][T12417] pim6reg1: entered allmulticast mode [ 276.829589][T12435] netlink: 'syz.5.1556': attribute type 40 has an invalid length. [ 276.895070][T12437] vti0: entered promiscuous mode [ 276.908522][T12436] syzkaller0: left promiscuous mode [ 276.916053][T12436] syzkaller0: left allmulticast mode [ 277.152284][T12452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1563'. [ 277.161888][T12453] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1564'. [ 277.182961][T12452] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1563'. [ 277.659336][T12471] bridge0: port 3(vlan0) entered blocking state [ 277.667987][T12471] bridge0: port 3(vlan0) entered disabled state [ 277.675005][T12471] vlan0: entered allmulticast mode [ 277.680396][T12471] geneve0: entered allmulticast mode [ 277.688231][T12471] vlan0: entered promiscuous mode [ 277.693880][T12471] geneve0: entered promiscuous mode [ 278.175782][T12508] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1582'. [ 278.216638][T12510] netlink: 25440 bytes leftover after parsing attributes in process `syz.0.1581'. [ 278.545552][T12530] syzkaller1: entered allmulticast mode [ 279.371584][ T6770] net_ratelimit: 23 callbacks suppressed [ 279.371606][ T6770] bond3: (slave bridge3): failed to get link speed/duplex [ 279.502141][ T6788] bond3: (slave bridge3): failed to get link speed/duplex [ 279.631648][ T6770] bond3: (slave bridge3): failed to get link speed/duplex [ 279.743657][ T6770] bond3: (slave bridge3): failed to get link speed/duplex [ 279.861831][ T6769] bond3: (slave bridge3): failed to get link speed/duplex [ 279.981475][ T6778] bond3: (slave bridge3): failed to get link speed/duplex [ 280.091454][ T6769] bond3: (slave bridge3): failed to get link speed/duplex [ 280.194715][T12562] __nla_validate_parse: 2 callbacks suppressed [ 280.194733][T12562] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1595'. [ 280.221795][ T6769] bond3: (slave bridge3): failed to get link speed/duplex [ 280.343178][ T1157] bond3: (slave bridge3): failed to get link speed/duplex [ 280.471684][ T1157] bond3: (slave bridge3): failed to get link speed/duplex [ 280.672827][T12566] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.680725][T12566] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.777456][T12566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.794800][T12566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.877718][T12491] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 281.269897][T12576] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1600'. [ 281.311871][ T6778] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.338831][ T6778] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.404796][ T6788] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.451652][ T6788] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.539080][T12584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1597'. [ 282.519012][T12610] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1608'. [ 282.577709][T12610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1608'. [ 282.579973][T12614] tipc: Failed to remove unknown binding: 66,0,0/3087750200:785391810/785391812 [ 282.666529][T12614] tipc: Failed to remove unknown binding: 66,0,0/3087750200:785391810/785391811 [ 282.702434][T12614] tipc: Failed to remove unknown binding: 66,0,0/3087750200:785391810/785391812 [ 282.837054][T12614] tipc: Failed to remove unknown binding: 66,0,0/3087750200:785391810/785391811 [ 283.156650][T12628] syzkaller0: entered promiscuous mode [ 283.175534][T12634] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1617'. [ 283.204346][T12628] syzkaller0: entered allmulticast mode [ 283.222361][T12636] ieee802154 phy0 wpan0: encryption failed: -22 [ 283.313324][T12634] syz_tun (unregistering): left allmulticast mode [ 283.423241][T12643] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 283.440171][T12644] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1621'. [ 283.625461][T12650] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1623'. [ 283.661274][T12640] syzkaller0: entered promiscuous mode [ 283.677497][T12640] syzkaller0: entered allmulticast mode [ 283.737321][T12654] xt_hashlimit: size too large, truncated to 1048576 [ 283.852781][T12662] sctp: [Deprecated]: syz.1.1622 (pid 12662) Use of int in maxseg socket option. [ 283.852781][T12662] Use struct sctp_assoc_value instead [ 283.939731][T12667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1624'. [ 283.970370][T12667] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1624'. [ 284.422108][ T6770] net_ratelimit: 17 callbacks suppressed [ 284.422130][ T6770] bond3: (slave bridge3): failed to get link speed/duplex [ 284.708315][T12672] syzkaller0: entered promiscuous mode [ 284.781725][T12672] syzkaller0: entered allmulticast mode [ 284.822506][ T6769] bond3: (slave bridge3): failed to get link speed/duplex [ 285.223246][ T6769] bond3: (slave bridge3): failed to get link speed/duplex [ 285.343901][ T6781] bond3: (slave bridge3): failed to get link speed/duplex [ 285.681825][ T6769] bond3: (slave bridge3): failed to get link speed/duplex [ 285.825883][ T1157] bond3: (slave bridge3): failed to get link speed/duplex [ 285.961787][ T1157] bond3: (slave bridge3): failed to get link speed/duplex [ 286.091899][ T6769] bond3: (slave bridge3): failed to get link speed/duplex [ 286.139689][T12728] __nla_validate_parse: 1 callbacks suppressed [ 286.139707][T12728] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1643'. [ 286.232097][ T6770] bond3: (slave bridge3): failed to get link speed/duplex [ 286.364005][ T6769] bond3: (slave bridge3): failed to get link speed/duplex [ 286.488308][ T1157] IPVS: starting estimator thread 0... [ 286.601570][T12748] IPVS: using max 25 ests per chain, 60000 per kthread [ 286.677107][T12753] tipc: Enabled bearer , priority 0 [ 286.703492][T12753] syzkaller1: entered promiscuous mode [ 286.709509][T12753] syzkaller1: entered allmulticast mode [ 286.778936][T12753] syzkaller0: entered promiscuous mode [ 286.787024][T12753] syzkaller0: entered allmulticast mode [ 286.794629][T12753] tipc: Resetting bearer [ 287.341086][T12763] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:0 [ 288.087438][ T6769] tipc: Resetting bearer [ 288.163625][T12771] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 288.213349][T12777] syzkaller0: entered promiscuous mode [ 288.219344][T12777] syzkaller0: entered allmulticast mode [ 288.453517][T12752] tipc: Resetting bearer [ 288.930425][T12802] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1659'. [ 288.956020][T12804] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1660'. [ 288.978231][T12805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1660'. [ 288.988671][T12804] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1660'. [ 289.001810][T12804] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1660'. [ 289.024449][T12804] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1660'. [ 289.034721][T12804] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1660'. [ 289.058582][T12804] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1660'. [ 289.079762][T12804] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1660'. [ 291.950209][T12752] tipc: Disabling bearer [ 292.032573][ T6769] net_ratelimit: 4 callbacks suppressed [ 292.032597][ T6769] bond3: (slave bridge3): failed to get link speed/duplex [ 292.073457][T12798] ip6tnl0: Caught tx_queue_len zero misconfig [ 292.254250][T12810] netlink: 'syz.0.1662': attribute type 1 has an invalid length. [ 292.496765][T12824] xt_l2tp: v2 tid > 0xffff: 37482740 [ 292.504458][ T6769] bond3: (slave bridge3): failed to get link speed/duplex [ 292.554949][T12824] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 292.695885][ T6769] bond3: (slave bridge3): failed to get link speed/duplex [ 292.747565][T12830] Cannot find del_set index 1 as target [ 292.786886][T12830] __nla_validate_parse: 26 callbacks suppressed [ 292.786905][T12830] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1669'. [ 292.831888][ T6769] bond3: (slave bridge3): failed to get link speed/duplex [ 292.962456][ T6781] bond3: (slave bridge3): failed to get link speed/duplex [ 293.082120][ T6781] bond3: (slave bridge3): failed to get link speed/duplex [ 293.281608][ T6788] bond3: (slave bridge3): failed to get link speed/duplex [ 293.413691][ T6788] bond3: (slave bridge3): failed to get link speed/duplex [ 293.543150][ T6788] bond3: (slave bridge3): failed to get link speed/duplex [ 293.676462][ T1157] bond3: (slave bridge3): failed to get link speed/duplex [ 294.182014][T12871] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1678'. [ 294.392519][T12856] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1675'. [ 294.421911][T12856] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1675'. [ 294.914910][T12886] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1681'. [ 295.770834][T12908] team_slave_1: Caught tx_queue_len zero misconfig [ 295.794403][T12911] tls_set_device_offload: netdev not found [ 295.911160][T12914] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1692'. [ 296.026714][T12924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1693'. [ 296.070233][T12914] hsr_slave_1 (unregistering): left promiscuous mode [ 296.150926][T12925] gtp0: entered promiscuous mode [ 296.169123][T12925] gtp0: entered allmulticast mode [ 296.205780][T12925] team0: Port device gtp0 added [ 296.430279][T12918] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.443574][T12918] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 60035 - 0 [ 296.702766][T12918] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.716641][T12918] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 60035 - 0 [ 297.043117][T12918] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 297.065920][T12918] team0: Port device netdevsim1 removed [ 297.075730][T12918] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.087730][T12918] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 60035 - 0 [ 297.094642][T12944] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1700'. [ 297.153252][T12945] sch_tbf: burst 17636 is lower than device syzkaller0 mtu (65589) ! [ 297.269074][T12946] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1701'. [ 297.423065][T12918] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.462129][T12918] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 60035 - 0 [ 297.531643][ T6785] net_ratelimit: 20 callbacks suppressed [ 297.531664][ T6785] bond3: (slave bridge3): failed to get link speed/duplex [ 297.538043][T12959] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1705'. [ 297.680869][T12949] lo speed is unknown, defaulting to 1000 [ 297.691972][ T6778] bond3: (slave bridge3): failed to get link speed/duplex [ 297.811491][ T6788] bond3: (slave bridge3): failed to get link speed/duplex [ 298.191497][ T6781] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 60035 - 0 [ 298.200041][ T6781] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 298.287739][ T6781] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 60035 - 0 [ 298.307400][ T6781] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 298.335681][T12977] netlink: 4108 bytes leftover after parsing attributes in process `syz.0.1708'. [ 298.345950][ T6781] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 60035 - 0 [ 298.394727][ T6781] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 298.423491][ T6781] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 60035 - 0 [ 298.449402][ T6781] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 298.466892][T12977] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 298.503923][ T6788] bond3: (slave bridge3): failed to get link speed/duplex [ 298.932114][ T6769] bond3: (slave bridge3): failed to get link speed/duplex [ 298.954427][T12989] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.164021][T12996] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1711'. [ 299.767086][T12983] netlink: 2108 bytes leftover after parsing attributes in process `syz.1.1709'. [ 299.885532][ T1157] bond3: (slave bridge3): failed to get link speed/duplex [ 299.930576][T13021] tipc: Started in network mode [ 299.983945][T13021] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 300.015967][T13021] tipc: Enabled bearer , priority 7 [ 300.051745][ T1157] bond3: (slave bridge3): failed to get link speed/duplex [ 300.082348][T13019] xt_CT: No such helper "netbios-ns" [ 300.172575][ T6785] bond3: (slave bridge3): failed to get link speed/duplex [ 300.590501][T13053] netlink: 'syz.3.1724': attribute type 1 has an invalid length. [ 301.133786][ T9528] tipc: Node number set to 9480874 [ 301.192576][T13078] netlink: 'syz.5.1730': attribute type 1 has an invalid length. [ 301.482968][T13078] 8021q: adding VLAN 0 to HW filter on device bond1 [ 301.501762][T13096] netlink: 'syz.5.1730': attribute type 10 has an invalid length. [ 301.531359][T13096] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1730'. [ 301.700408][T13081] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 301.747923][T13083] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 301.768135][T13096] dummy0: entered promiscuous mode [ 301.809559][T13096] bond1: (slave dummy0): Removing an active aggregator [ 301.874623][T13096] bond1: (slave dummy0): Releasing backup interface [ 302.018081][T13108] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1737'. [ 302.307490][T13114] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1739'. [ 302.367898][T13117] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1741'. [ 302.555253][ T6786] net_ratelimit: 16 callbacks suppressed [ 302.555275][ T6786] bond3: (slave bridge3): failed to get link speed/duplex [ 302.939314][T13117] 8021q: adding VLAN 0 to HW filter on device bond1 [ 303.018609][ T6770] bond3: (slave bridge3): failed to get link speed/duplex [ 303.093553][T13139] netlink: 'syz.5.1744': attribute type 10 has an invalid length. [ 303.132703][T13139] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1744'. [ 303.151873][ T6785] bond3: (slave bridge3): failed to get link speed/duplex [ 303.293816][ T6768] bond3: (slave bridge3): failed to get link speed/duplex [ 303.455027][ T6785] bond3: (slave bridge3): failed to get link speed/duplex [ 303.514560][T13148] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1747'. [ 303.572015][T13148] netlink: 'syz.3.1747': attribute type 1 has an invalid length. [ 303.581460][ T6785] bond3: (slave bridge3): failed to get link speed/duplex [ 303.624183][T13152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.719273][T13152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.808019][T13148] 8021q: adding VLAN 0 to HW filter on device bond11 [ 303.828109][T13156] bond11: (slave dummy0): making interface the new active one [ 303.856607][T13156] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 303.879625][T13152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1746'. [ 303.905360][T13167] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1751'. [ 303.942332][ T6770] bond3: (slave bridge3): failed to get link speed/duplex [ 304.162170][T13158] nbd1: detected capacity change from 0 to 63 [ 304.172686][ T6768] bond3: (slave bridge3): failed to get link speed/duplex [ 304.229801][T13168] block nbd1: NBD_DISCONNECT [ 304.311729][ T6785] bond3: (slave bridge3): failed to get link speed/duplex [ 304.331674][T13168] block nbd1: Disconnected due to user request. [ 304.361094][T13177] ip6gre1: entered allmulticast mode [ 304.408712][T13168] block nbd1: shutting down sockets [ 304.451595][ T6785] bond3: (slave bridge3): failed to get link speed/duplex [ 304.488469][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 304.498450][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 304.506378][ C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 304.515985][ C0] Buffer I/O error on dev nbd1, logical block 1, async page read [ 304.523811][ C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 304.533501][ C0] Buffer I/O error on dev nbd1, logical block 2, async page read [ 304.541343][ C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 304.550909][ C0] Buffer I/O error on dev nbd1, logical block 3, async page read [ 304.558904][ T1614] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 304.572666][ T1614] Buffer I/O error on dev nbd1, logical block 0, async page read [ 304.583379][ T1614] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 304.593223][ T1614] Buffer I/O error on dev nbd1, logical block 1, async page read [ 304.601123][ T1614] Buffer I/O error on dev nbd1, logical block 2, async page read [ 304.609506][ T1614] Buffer I/O error on dev nbd1, logical block 3, async page read [ 304.621011][ T1614] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 304.631013][ T1614] Buffer I/O error on dev nbd1, logical block 0, async page read [ 304.638997][ T1614] Buffer I/O error on dev nbd1, logical block 1, async page read [ 304.648178][ T1614] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 304.658418][ T1614] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 304.668627][ T1614] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 304.679580][T12817] ldm_validate_partition_table(): Disk read failed. [ 304.700061][T12817] Dev nbd1: unable to read RDB block 0 [ 304.731182][T12817] nbd1: unable to read partition table [ 304.774733][T13182] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 304.806695][T12817] ldm_validate_partition_table(): Disk read failed. [ 304.883287][T12817] Dev nbd1: unable to read RDB block 0 [ 304.895903][T12817] nbd1: unable to read partition table [ 304.945065][T13190] netlink: 'syz.3.1758': attribute type 1 has an invalid length. [ 305.429214][T13198] wireguard0: entered promiscuous mode [ 305.435795][T13198] wireguard0: entered allmulticast mode [ 305.460825][T13205] Cannot find del_set index 4 as target [ 305.767549][T13226] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1760'. [ 305.825610][T13223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1766'. [ 305.838119][T13229] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20000 [ 305.883374][T13232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1769'. [ 306.134129][T13239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1771'. [ 306.162251][T13239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1771'. [ 306.213663][T13229] tipc: Enabled bearer , priority 0 [ 306.304402][T13243] netlink: 'syz.3.1772': attribute type 2 has an invalid length. [ 306.334196][T13243] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1772'. [ 306.790628][T13257] syzkaller0: entered promiscuous mode [ 306.814958][T13257] syzkaller0: entered allmulticast mode [ 307.355774][T13279] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1781'. [ 307.387145][ T9533] tipc: Node number set to 3527794052 [ 307.514070][ T5632] block nbd1: Receive control failed (result -32) [ 307.613675][ T6768] net_ratelimit: 15 callbacks suppressed [ 307.613695][ T6768] bond3: (slave bridge3): failed to get link speed/duplex [ 307.899355][T13289] bond13: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 308.009075][T13289] bond13 (unregistering): Released all slaves [ 308.205480][ T6768] bond3: (slave bridge3): failed to get link speed/duplex [ 308.352795][ T6770] bond3: (slave bridge3): failed to get link speed/duplex [ 308.496686][ T6785] bond3: (slave bridge3): failed to get link speed/duplex [ 308.580192][T13318] netlink: 'syz.1.1791': attribute type 1 has an invalid length. [ 308.591843][T13318] __nla_validate_parse: 18 callbacks suppressed [ 308.591864][T13318] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1791'. [ 308.613921][T13318] NCSI netlink: No device for ifindex 0 [ 308.621842][ T6785] bond3: (slave bridge3): failed to get link speed/duplex [ 308.732148][ T6768] bond3: (slave bridge3): failed to get link speed/duplex [ 308.861516][ T6768] bond3: (slave bridge3): failed to get link speed/duplex [ 309.012346][ T6768] bond3: (slave bridge3): failed to get link speed/duplex [ 309.075288][T13328] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1792'. [ 309.104624][T13328] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1792'. [ 309.171476][ T6768] bond3: (slave bridge3): failed to get link speed/duplex [ 309.210936][T13331] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1794'. [ 309.247518][T13331] syz_tun: entered promiscuous mode [ 309.268040][T13331] syz_tun: entered allmulticast mode [ 309.311893][ T6785] bond3: (slave bridge3): failed to get link speed/duplex [ 309.393718][T13339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1796'. [ 309.463246][T13339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1796'. [ 309.571108][T13339] ip6tnl1: entered promiscuous mode [ 310.109358][T13361] netlink: 'syz.3.1801': attribute type 1 has an invalid length. [ 310.264647][T13360] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1802'. [ 310.335123][T13362] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1802'. [ 311.718357][T13394] syzkaller0: entered promiscuous mode [ 311.741065][T13394] syzkaller0: entered allmulticast mode [ 312.605354][T13417] sctp: [Deprecated]: syz.3.1821 (pid 13417) Use of struct sctp_assoc_value in delayed_ack socket option. [ 312.605354][T13417] Use struct sctp_sack_info instead [ 312.651435][ T6770] net_ratelimit: 19 callbacks suppressed [ 312.651456][ T6770] bond3: (slave bridge3): failed to get link speed/duplex [ 312.782210][ T6770] bond3: (slave bridge3): failed to get link speed/duplex [ 312.911589][ T6770] bond3: (slave bridge3): failed to get link speed/duplex [ 313.082315][ T6780] bond3: (slave bridge3): failed to get link speed/duplex [ 313.211645][ T6770] bond3: (slave bridge3): failed to get link speed/duplex [ 313.341613][ T6786] bond3: (slave bridge3): failed to get link speed/duplex [ 313.398595][T13434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1824'. [ 313.472595][ T6770] bond3: (slave bridge3): failed to get link speed/duplex [ 313.611494][ T6788] bond3: (slave bridge3): failed to get link speed/duplex [ 313.763729][ T6788] bond3: (slave bridge3): failed to get link speed/duplex [ 313.923095][ T6788] bond3: (slave bridge3): failed to get link speed/duplex [ 314.214137][T13454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1827'. [ 314.294676][T13454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1827'. [ 314.389423][T13454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1827'. [ 314.523985][T13454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1827'. [ 314.613011][T13468] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1831'. [ 314.631462][T13454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1827'. [ 314.683863][T13454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1827'. [ 314.764733][T13454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1827'. [ 314.829196][T13454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1827'. [ 314.864354][T13468] bond2: option ad_actor_sys_prio: invalid value (0) [ 314.871115][T13468] bond2: option ad_actor_sys_prio: allowed values 1 - 65535 [ 314.894847][T13454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1827'. [ 315.005044][T13468] bond2 (unregistering): Released all slaves [ 315.655473][T13489] bond_slave_0: left promiscuous mode [ 315.683998][T13489] bond_slave_1: left promiscuous mode [ 316.160162][T13489] bond1: left allmulticast mode [ 316.172176][T13489] team0: left allmulticast mode [ 316.183290][T13489] team_slave_0: left allmulticast mode [ 316.193310][T13489] team_slave_1: left allmulticast mode [ 316.587548][T13489] bond3: left promiscuous mode [ 316.610110][T13489] bridge3: left promiscuous mode [ 316.623699][T13489] bridge4: left promiscuous mode [ 316.637994][T13489] bridge5: left promiscuous mode [ 316.660375][T13489] bond3: left allmulticast mode [ 316.676616][T13489] bridge3: left allmulticast mode [ 316.699008][T13489] bridge4: left allmulticast mode [ 316.712574][T13489] bridge5: left allmulticast mode [ 316.738695][T13489] ip6gre1: left promiscuous mode [ 316.751731][T13489] ip6gre1: left allmulticast mode [ 316.769337][T13489] bond5: left promiscuous mode [ 316.785173][T13489] geneve3: left promiscuous mode [ 316.889605][T13489] tipc: Resetting bearer [ 316.909120][T13489] syzkaller0: left promiscuous mode [ 316.922377][T13489] syzkaller0: left allmulticast mode [ 316.972101][T13489] vlan3: left allmulticast mode [ 316.978227][T13489] bond0: left allmulticast mode [ 316.991916][T13489] bond_slave_0: left allmulticast mode [ 317.004245][T13489] bond_slave_1: left allmulticast mode [ 317.017504][T13489] ip6tnl1: left promiscuous mode [ 317.038685][T13498] ì: renamed from bond_slave_0 [ 317.277454][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.292492][T13515] syzkaller0: entered promiscuous mode [ 317.320463][T13515] syzkaller0: entered allmulticast mode [ 317.381547][ T6778] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 60035 - 0 [ 317.410936][ T6778] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 317.451365][ T6778] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 60035 - 0 [ 317.492905][ T6778] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 317.526174][ T6778] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 60035 - 0 [ 317.558026][ T6778] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 317.608725][ T6778] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 60035 - 0 [ 317.647866][ T6778] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 319.172231][T13581] xt_hashlimit: size too large, truncated to 1048576 [ 319.249115][T13574] bond2: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 319.354457][ T5632] Bluetooth: hci4: command 0x0405 tx timeout [ 319.371766][T13555] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 319.386288][T13574] bond2 (unregistering): Released all slaves [ 319.408868][T13555] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 319.549057][T13588] __nla_validate_parse: 19 callbacks suppressed [ 319.549078][T13588] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1857'. [ 319.861913][T13555] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 319.890122][T13555] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 320.022888][T13555] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 320.239526][T13555] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 320.344139][T13555] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 320.383607][T13555] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 320.404231][T13562] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 320.510961][T13555] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 320.604338][T13555] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 320.855571][T13555] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 320.895200][T13555] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 321.544328][T13613] bond2: (slave macvlan2): Releasing active interface [ 321.730383][T13613] bond0 (unregistering): Released all slaves [ 321.842128][T13626] syzkaller0: left promiscuous mode [ 321.902790][T13626] syzkaller0: left allmulticast mode [ 322.099569][T13633] netlink: 'syz.6.1865': attribute type 1 has an invalid length. [ 322.180338][T13612] lo speed is unknown, defaulting to 1000 [ 322.880497][T13640] pimreg: entered allmulticast mode [ 323.171731][T13659] netlink: 'syz.3.1873': attribute type 15 has an invalid length. [ 324.683447][T13688] xt_hashlimit: size too large, truncated to 1048576 [ 325.054566][T13684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.280483][T13684] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 325.408257][T13684] net_ratelimit: 8 callbacks suppressed [ 325.408277][T13684] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 326.328364][T13717] netlink: 'syz.3.1885': attribute type 1 has an invalid length. [ 326.440146][T13721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1885'. [ 326.749685][T13717] bond0: entered promiscuous mode [ 326.755360][T13717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.763261][T13695] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1881'. [ 326.828650][T13695] netlink: 'syz.5.1881': attribute type 10 has an invalid length. [ 326.941186][T13719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.068578][T13719] bond0: (slave gre2): The slave device specified does not support setting the MAC address [ 327.132245][T13719] bond0: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 327.168479][T13719] bond0: (slave gre2): making interface the new active one [ 327.176395][T13719] gre2: entered promiscuous mode [ 327.184011][T13719] bond0: (slave gre2): Enslaving as an active interface with an up link [ 327.227571][T13721] bond0 (unregistering): (slave gre2): Releasing backup interface [ 327.246305][T13735] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1889'. [ 327.249863][T13721] gre2: left promiscuous mode [ 327.273671][T13721] bond0 (unregistering): Released all slaves [ 327.306344][T13688] netlink: 'syz.5.1881': attribute type 1 has an invalid length. [ 327.319859][T13695] team0: Device vxcan0 is of different type [ 327.465542][T13745] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1890'. [ 327.588520][T13736] syzkaller0: entered promiscuous mode [ 327.630761][T13736] syzkaller0: entered allmulticast mode [ 327.890641][T13756] Bluetooth: hci0: unsupported parameter 5135 [ 327.914771][T13756] Bluetooth: hci0: unsupported parameter 8192 [ 327.971384][T13756] Bluetooth: hci0: unsupported parameter 5135 [ 328.012703][T13756] Bluetooth: hci0: unsupported parameter 8192 [ 328.598531][T13768] ip6tnl1: entered allmulticast mode [ 328.765594][T13776] netlink: 'syz.0.1899': attribute type 1 has an invalid length. [ 328.817956][ T6778] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 328.857588][ T6657] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 328.867215][ T6778] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 329.057045][T13776] 8021q: adding VLAN 0 to HW filter on device bond5 [ 329.081749][ T9528] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 329.117759][T13782] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1899'. [ 329.315939][T13762] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1894'. [ 329.913413][ T9528] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 330.097652][T13800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1905'. [ 330.149002][T13804] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1907'. [ 330.166948][T13800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1905'. [ 330.340719][T13807] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 330.564107][T13816] netlink: 'syz.1.1909': attribute type 4 has an invalid length. [ 330.778299][T13815] lo speed is unknown, defaulting to 1000 [ 331.063657][T13833] syz.6.1911: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 331.178066][T13833] CPU: 1 UID: 0 PID: 13833 Comm: syz.6.1911 Not tainted syzkaller #0 PREEMPT(full) [ 331.178098][T13833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 331.178120][T13833] Call Trace: [ 331.178130][T13833] [ 331.178144][T13833] dump_stack_lvl+0xe8/0x150 [ 331.178195][T13833] warn_alloc+0x24c/0x270 [ 331.178230][T13833] ? __pfx_warn_alloc+0x10/0x10 [ 331.178255][T13833] ? xskq_create+0x56/0x220 [ 331.178278][T13833] ? xsk_setsockopt+0x52a/0x960 [ 331.178313][T13833] ? do_syscall_64+0x166/0x520 [ 331.178339][T13833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.178379][T13833] __vmalloc_node_range_noprof+0x12c/0x1730 [ 331.178438][T13833] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 331.178468][T13833] ? __kmalloc_cache_noprof+0x331/0x660 [ 331.178495][T13833] ? __kmalloc_cache_noprof+0x152/0x660 [ 331.178523][T13833] ? xskq_create+0x56/0x220 [ 331.178551][T13833] xskq_create+0x148/0x220 [ 331.178577][T13833] ? xsk_init_queue+0x8a/0xe0 [ 331.178602][T13833] xsk_init_queue+0x8a/0xe0 [ 331.178628][T13833] xsk_setsockopt+0x52a/0x960 [ 331.178662][T13833] ? __fget_files+0x2a/0x420 [ 331.178695][T13833] ? __pfx_xsk_setsockopt+0x10/0x10 [ 331.178730][T13833] ? __pfx_aa_sk_perm+0x10/0x10 [ 331.178776][T13833] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 331.178798][T13833] ? __pfx_xsk_setsockopt+0x10/0x10 [ 331.178835][T13833] do_sock_setsockopt+0x17c/0x1b0 [ 331.178874][T13833] __x64_sys_setsockopt+0x13d/0x1b0 [ 331.178914][T13833] do_syscall_64+0x166/0x520 [ 331.178938][T13833] ? trace_irq_disable+0x3b/0x140 [ 331.178968][T13833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.178991][T13833] ? clear_bhb_loop+0x70/0xc0 [ 331.179056][T13833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.179079][T13833] RIP: 0033:0x7f5eaed9e0d9 [ 331.179105][T13833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.179125][T13833] RSP: 002b:00007f5eafbe7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 331.179150][T13833] RAX: ffffffffffffffda RBX: 00007f5eaf026090 RCX: 00007f5eaed9e0d9 [ 331.179166][T13833] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 331.179180][T13833] RBP: 00007f5eaee35024 R08: 0000000000000004 R09: 0000000000000000 [ 331.179194][T13833] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.179208][T13833] R13: 00007f5eaf026128 R14: 00007f5eaf026090 R15: 00007ffe07178f48 [ 331.179244][T13833] [ 331.179869][T13833] Mem-Info: [ 331.496355][T13833] active_anon:8195 inactive_anon:0 isolated_anon:0 [ 331.496355][T13833] active_file:16 inactive_file:43230 isolated_file:0 [ 331.496355][T13833] unevictable:0 dirty:52 writeback:0 [ 331.496355][T13833] slab_reclaimable:11679 slab_unreclaimable:168899 [ 331.496355][T13833] mapped:42463 shmem:2340 pagetables:1484 [ 331.496355][T13833] sec_pagetables:0 bounce:0 [ 331.496355][T13833] kernel_misc_reclaimable:0 [ 331.496355][T13833] free:1218702 free_pcp:14200 free_cma:0 [ 331.638354][T13833] Node 0 active_anon:34280kB inactive_anon:0kB active_file:64kB inactive_file:172728kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:171252kB dirty:208kB writeback:0kB shmem:10760kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15896kB pagetables:5924kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 331.781845][T13833] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 331.889945][T13833] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 332.017138][T13833] lowmem_reserve[]: 0 2488 2488 2488 2488 [ 332.052397][T13833] Node 0 DMA32 free:915372kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37264kB inactive_anon:0kB active_file:64kB inactive_file:172728kB unevictable:0kB writepending:208kB zspages:0kB present:3129332kB managed:2547832kB mlocked:0kB bounce:0kB free_pcp:55256kB local_pcp:35760kB free_cma:0kB [ 332.208560][T13833] lowmem_reserve[]: 0 0 0 0 0 [ 332.234790][T13833] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:256kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 332.385257][T13833] lowmem_reserve[]: 0 0 0 0 0 [ 332.411836][T13833] Node 1 Normal free:3939476kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1004kB local_pcp:1004kB free_cma:0kB [ 332.490559][T13833] lowmem_reserve[]: 0 0 0 0 0 [ 332.495653][T13833] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 332.557875][T13833] Node 0 DMA32: 1588*4kB (UME) 1245*8kB (UME) 1016*16kB (UME) 1080*32kB (UME) 588*64kB (UME) 417*128kB (UME) 247*256kB (UM) 107*512kB (UM) 32*1024kB (UME) 7*2048kB (UM) 146*4096kB (UM) = 921272kB [ 332.655963][T13833] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 332.711581][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 332.712617][T13833] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 2*16kB (UM) 1*32kB (M) 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 2*2048kB (U) 960*4096kB (M) = 3939476kB [ 332.907637][T13833] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 333.008681][T13833] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 333.065818][T13833] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 333.139591][T13833] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 333.197498][T13833] 43764 total pagecache pages [ 333.240746][T13833] 0 pages in swap cache [ 333.259741][T13833] Free swap = 124996kB [ 333.270386][T13833] Total swap = 124996kB [ 333.280793][T13833] 2097051 pages RAM [ 333.341071][T13833] 0 pages HighMem/MovableOnly [ 333.375814][T13833] 428414 pages reserved [ 333.411728][T13833] 0 pages cma reserved [ 333.419575][T13869] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1923'. [ 334.270843][T13884] x_tables: duplicate underflow at hook 4 [ 334.390011][T13892] bond11: (slave dummy0): Releasing active interface [ 334.403813][T13895] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1931'. [ 334.668278][T13892] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 334.728245][T13904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1932'. [ 334.765663][T13904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1932'. [ 335.013406][T13904] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1932'. [ 335.224696][T13909] ip6gretap0: left promiscuous mode [ 335.248472][T13909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.260087][T13909] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.403654][T13909] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 335.443413][T13909] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 335.684415][ T6788] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 335.844348][ T6778] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 335.870218][T13935] netlink: 'syz.5.1938': attribute type 8 has an invalid length. [ 335.894493][ T6778] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 336.331639][ T6780] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 336.373952][T13946] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 336.475539][T13945] netlink: 'syz.1.1940': attribute type 3 has an invalid length. [ 336.594813][T13956] syzkaller0: entered promiscuous mode [ 336.624509][T13956] syzkaller0: entered allmulticast mode [ 337.422055][T13981] SET target dimension over the limit! [ 337.476054][T13974] lo speed is unknown, defaulting to 1000 [ 337.528836][T13981] bond0: (slave gretap0): Opening slave failed [ 337.749344][T13989] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 338.680740][T13996] syzkaller1: entered promiscuous mode [ 338.686612][T13996] syzkaller1: entered allmulticast mode [ 338.697027][T14009] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1958'. [ 338.709064][T14011] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1957'. [ 338.726520][T14009] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20004 [ 338.733056][T14010] netlink: 'syz.0.1959': attribute type 1 has an invalid length. [ 338.887994][T14018] netlink: 'syz.0.1959': attribute type 10 has an invalid length. [ 338.898524][T14018] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1959'. [ 339.044741][T14010] 8021q: adding VLAN 0 to HW filter on device bond7 [ 339.099318][T14025] PKCS7: Unknown OID: [4] (bad) [ 339.105325][T14025] PKCS7: Only support pkcs7_signedData type [ 339.219388][T14027] netlink: 'syz.5.1961': attribute type 1 has an invalid length. [ 339.282506][T14012] bond7: (slave veth9): Enslaving as a backup interface with a down link [ 339.309054][T14013] bond7: (slave dummy0): Enslaving as a backup interface with an up link [ 339.318470][T14018] dummy0: entered promiscuous mode [ 339.326413][T14018] bond7: (slave dummy0): Releasing backup interface [ 339.639496][T14027] 8021q: adding VLAN 0 to HW filter on device bond2 [ 339.795943][T14034] bond2: (slave geneve3): making interface the new active one [ 339.816842][T14034] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 339.851727][ T6788] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.891576][ T6788] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.081945][ T6770] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.132794][ T6770] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.359223][T14058] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1972'. [ 340.535312][T14072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1973'. [ 340.754435][T14070] lo speed is unknown, defaulting to 1000 [ 340.951874][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 341.315102][T14092] xt_hashlimit: Unknown mode mask FFF88A7B, kernel too old? [ 342.067754][T14127] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1986'. [ 343.210746][T14148] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1992'. [ 343.328435][T14148] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1992'. [ 343.360687][T14157] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 343.378393][T14148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.461905][T14153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.712538][T14168] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1997'. [ 343.731685][T14169] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1997'. [ 343.762310][T14172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1998'. [ 344.014450][T14177] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1999'. [ 344.496905][T14186] lo speed is unknown, defaulting to 1000 [ 345.012707][T14195] netlink: 'syz.1.2004': attribute type 4 has an invalid length. [ 345.968854][T14212] batadv_slave_1: entered promiscuous mode [ 346.016368][T14216] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2014'. [ 346.029273][T14209] batadv_slave_1: left promiscuous mode [ 346.041808][T14216] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2014'. [ 346.056388][T14216] netlink: 'syz.5.2014': attribute type 15 has an invalid length. [ 346.170682][T14225] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2015'. [ 346.225513][T14227] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2015'. [ 346.289587][T14216] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2014'. [ 346.335400][ T6788] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 346.372644][ T6778] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 346.401168][ T6778] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 346.423321][T14216] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2014'. [ 346.485312][ T6778] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 346.541353][T14216] netlink: 'syz.5.2014': attribute type 15 has an invalid length. [ 346.611542][ T6770] netdevsim netdevsim5 netdevsim3: set [0, 1] type 1 family 0 port 60387 - 0 [ 346.640208][T14231] tipc: Enabling of bearer rejected, already enabled [ 346.716754][ T6770] netdevsim netdevsim5 netdevsim2: set [0, 1] type 1 family 0 port 60387 - 0 [ 346.775251][ T6770] netdevsim netdevsim5 netdevsim1: set [0, 1] type 1 family 0 port 60387 - 0 [ 346.818000][ T6770] netdevsim netdevsim5 netdevsim0: set [0, 1] type 1 family 0 port 60387 - 0 [ 347.050052][T14239] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 347.179463][T14251] syzkaller0: entered promiscuous mode [ 347.198890][T14251] syzkaller0: entered allmulticast mode [ 347.257046][T14250] tipc: Enabling of bearer rejected, already enabled [ 347.285471][T14250] syzkaller0: mtu less than device minimum [ 348.279314][T14282] netlink: 'syz.5.2034': attribute type 39 has an invalid length. [ 348.421079][T14288] x_tables: duplicate underflow at hook 2 [ 348.634168][ T31] INFO: task syz.4.915:9804 blocked for more than 143 seconds. [ 348.659562][ T31] Not tainted syzkaller #0 [ 348.687388][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 348.736406][ T31] task:syz.4.915 state:D stack:27384 pid:9804 tgid:9803 ppid:5617 task_flags:0x400140 flags:0x00080002 [ 348.777920][ T31] Call Trace: [ 348.788662][T14295] __nla_validate_parse: 2 callbacks suppressed [ 348.788682][T14295] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2038'. [ 348.813038][ T31] [ 348.826544][ T31] __schedule+0x17d4/0x5630 [ 348.841209][ T31] ? __pfx___schedule+0x10/0x10 [ 348.860956][ T31] ? schedule+0x90/0x2b0 [ 348.878059][ T31] schedule+0x164/0x2b0 [ 348.903366][ T31] schedule_preempt_disabled+0x13/0x30 [ 348.935189][ T31] __mutex_lock+0x7c1/0x1550 [ 348.955977][ T31] ? __mutex_lock+0x5d4/0x1550 [ 348.970972][ T31] ? nfsd_nl_listener_set_doit+0x135/0x1750 [ 348.977880][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 348.983608][ T31] ? __asan_memset+0x22/0x50 [ 348.988496][ T31] ? __nla_validate_parse+0x2429/0x2d50 [ 348.995143][ T31] nfsd_nl_listener_set_doit+0x135/0x1750 [ 349.001209][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 349.015701][ T31] ? rcu_is_watching+0x16/0xb0 [ 349.027948][ T31] ? trace_kmalloc+0x2a/0xf0 [ 349.038041][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 349.046198][ T31] ? __nla_parse+0x40/0x60 [ 349.050811][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 349.060623][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 349.067951][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 349.075785][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 349.084500][ T31] ? bpf_lsm_capable+0x9/0x20 [ 349.089370][ T31] ? security_capable+0x7e/0x2c0 [ 349.096206][ T31] genl_rcv_msg+0x614/0x7a0 [ 349.100898][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 349.106722][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 349.114438][ T31] netlink_rcv_skb+0x226/0x4a0 [ 349.120282][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 349.126299][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 349.132302][ T31] ? down_read+0x2be/0x330 [ 349.136913][ T31] genl_rcv+0x28/0x40 [ 349.141056][ T31] netlink_unicast+0x7bd/0x940 [ 349.151469][ T31] netlink_sendmsg+0x813/0xb40 [ 349.160463][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.173058][ T31] ? aa_sock_msg_perm+0xf6/0x1c0 [ 349.186912][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.200732][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 349.214642][ T31] ____sys_sendmsg+0x54e/0x850 [ 349.227231][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 349.240947][ T31] ? import_iovec+0x73/0xa0 [ 349.250116][ T31] ___sys_sendmsg+0x2a5/0x360 [ 349.262917][ T31] ? __lock_acquire+0x683/0x2cf0 [ 349.273391][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 349.282602][ T31] ? futex_wait+0x2a2/0x390 [ 349.298376][ T31] ? __fget_files+0x2a/0x420 [ 349.311600][ T31] ? __fget_files+0x3a2/0x420 [ 349.328351][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 349.348814][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 349.372741][ T31] do_syscall_64+0x166/0x520 [ 349.389347][ T31] ? trace_irq_disable+0x3b/0x140 [ 349.406569][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.429267][ T31] ? clear_bhb_loop+0x70/0xc0 [ 349.447480][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.469820][ T31] RIP: 0033:0x7f587719e0d9 [ 349.487040][ T31] RSP: 002b:00007f587801a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.509661][ T31] RAX: ffffffffffffffda RBX: 00007f5877425fa0 RCX: 00007f587719e0d9 [ 349.537495][ T31] RDX: 0000000020040080 RSI: 0000200000000100 RDI: 0000000000000006 [ 349.562883][ T31] RBP: 00007f5877235024 R08: 0000000000000000 R09: 0000000000000000 [ 349.587992][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.611194][ T31] R13: 00007f5877426038 R14: 00007f5877425fa0 R15: 00007ffefcc54ad8 [ 349.625761][ T31] [ 349.636133][ T31] [ 349.636133][ T31] Showing all locks held in the system: [ 349.654821][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 349.668858][ T31] #0: ffffffff8eb5a1e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 349.680730][ T31] locks held by getty/5369: 2, on CPU#0: [ 349.687802][ T31] #0: ffff8880322510a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 349.699358][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 349.734966][ T31] locks held by kworker/u8:37/6786: 3, on CPU#1: [ 349.747683][ T31] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 349.774583][ T31] #1: ffffc9001c197c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 349.800096][ T31] #2: ffffffff90036380 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 349.821723][ T31] locks held by kworker/u8:38/6788: 3, last CPU#0: [ 349.846273][ T31] #0: ffff888032496140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 349.878086][ T31] #1: ffffc9001c1b7c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 349.916390][ T31] #2: ffff8880353471c8 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_ogm_schedule+0xd4/0xfc0 [ 349.935573][ T31] locks held by syz.2.802/9243: 2, on CPU#1: [ 349.942189][ T31] #0: ffffffff900a70a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 349.950566][ T31] #1: ffffffff8ee97420 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 349.966010][ T31] locks held by syz.4.915/9804: 2, on CPU#0: [ 349.972673][ T31] #0: ffffffff900a70a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 349.981062][ T31] #1: ffffffff8ee97420 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 349.992789][ T31] locks held by syz.6.2036/14289: 3, on CPU#1: [ 349.999016][ T31] #0: ffffffff900a70a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 350.009428][ T31] #1: ffff8880340996e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 350.028009][ T31] #2: ffffffff90036380 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_dump_wiphy+0x49/0x6b0 [ 350.039155][ T31] locks held by syz.6.2036/14306: 1, on CPU#1: [ 350.045794][ T31] #0: ffffffff90036380 (rtnl_mutex){+.+.}-{4:4}, at: tcx_prog_attach+0xf5/0x730 [ 350.055956][ T31] locks held by syz.6.2036/14308: 4, on CPU#1: [ 350.062629][ T31] #0: ffffffff900a70a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 350.071050][ T31] #1: ffff888029a026e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 350.083193][ T31] #2: ffffffff900a6ee0 (genl_mutex){+.+.}-{4:4}, at: genl_dumpit+0xdb/0x1b0 [ 350.098883][ T31] #3: ffffffff90036380 (rtnl_mutex){+.+.}-{4:4}, at: nl802154_prepare_wpan_dev_dump+0x4b/0x450 [ 350.110540][ T31] locks held by syz.6.2036/14310: 1, on CPU#1: [ 350.118462][ T31] #0: ffffffff90036380 (rtnl_mutex){+.+.}-{4:4}, at: tcx_link_attach+0xf6/0x860 [ 350.128753][ T31] locks held by syz.6.2036/14311: 2, on CPU#1: [ 350.136859][ T31] #0: ffffffff900a70a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 350.146059][ T31] #1: ffffffff900a6ee0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 350.155593][ T31] locks held by syz.5.2038/14295: 3, on CPU#1: [ 350.163206][ T31] #0: ffffffff8f7a00c8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 350.173636][ T31] #1: ffffffff90036380 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 350.183260][ T31] #2: ffffffff8eb604e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 350.194872][ T31] locks held by syz.1.2039/14304: 1, on CPU#1: [ 350.201138][ T31] #0: ffffffff90036380 (rtnl_mutex){+.+.}-{4:4}, at: ip_rt_ioctl+0x114/0x1240 [ 350.211447][ T31] locks held by syz.1.2039/14305: 2, on CPU#1: [ 350.218779][ T31] #0: ffffffff900a70a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 350.228216][ T31] #1: ffffffff90036380 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5e/0x890 [ 350.240117][ T31] [ 350.268296][ T31] ============================================= [ 350.268296][ T31] [ 350.303926][ T31] NMI backtrace for cpu 1 [ 350.303950][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 350.303975][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 350.303989][ T31] Call Trace: [ 350.303997][ T31] [ 350.304007][ T31] dump_stack_lvl+0xe8/0x150 [ 350.304044][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 350.304080][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 350.304116][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 350.304153][ T31] sys_info+0x135/0x170 [ 350.304183][ T31] watchdog+0xfd7/0x1030 [ 350.304233][ T31] ? watchdog+0x1c7/0x1030 [ 350.304268][ T31] kthread+0x38b/0x480 [ 350.304298][ T31] ? __pfx_watchdog+0x10/0x10 [ 350.304324][ T31] ? __pfx_kthread+0x10/0x10 [ 350.304355][ T31] ret_from_fork+0x514/0xb70 [ 350.304388][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 350.304424][ T31] ? __switch_to+0xc89/0x1420 [ 350.304453][ T31] ? __pfx_kthread+0x10/0x10 [ 350.304483][ T31] ret_from_fork_asm+0x1a/0x30 [ 350.304531][ T31] [ 350.304538][ T31] Sending NMI from CPU 1 to CPUs 0: [ 350.420969][ C0] NMI backtrace for cpu 0 [ 350.420988][ C0] CPU: 0 UID: 0 PID: 14306 Comm: syz.6.2036 Not tainted syzkaller #0 PREEMPT(full) [ 350.421010][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 350.421022][ C0] RIP: 0010:kasan_check_range+0x1d1/0x2c0 [ 350.421056][ C0] Code: 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 0e 41 80 3b 00 75 7c 49 ff c3 49 ff cc 75 f2 5b 41 5c 41 5d 41 5e 41 5f 5d cc cc cc cc cc 45 84 ff 0f 85 a1 00 00 00 41 f7 c7 00 ff 00 00 [ 350.421073][ C0] RSP: 0018:ffffc90006347398 EFLAGS: 00000256 [ 350.421091][ C0] RAX: ffffffff821b7901 RBX: ffffea0000e2d9c0 RCX: ffffffff821b79c5 [ 350.421105][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea0000e2d9c0 [ 350.421118][ C0] RBP: ffffc90006347690 R08: ffffea0000e2d9c7 R09: 1ffffd40001c5b38 [ 350.421132][ C0] R10: dffffc0000000000 R11: fffff940001c5b39 R12: dffffc0000000000 [ 350.421147][ C0] R13: 8000000038b67027 R14: ffff88808edccac8 R15: 00007f5eac759000 [ 350.421161][ C0] FS: 0000000000000000(0000) GS:ffff888124f24000(0000) knlGS:0000000000000000 [ 350.421177][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 350.421190][ C0] CR2: 00007f5eac3efff8 CR3: 000000007a316000 CR4: 00000000003526f0 [ 350.421207][ C0] Call Trace: [ 350.421214][ C0] [ 350.421220][ C0] __zap_vma_range+0x15c5/0x4f20 [ 350.421296][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 350.421352][ C0] ? mas_find+0xab1/0xcf0 [ 350.421377][ C0] ? unmap_vmas+0x1b9/0x550 [ 350.421404][ C0] unmap_vmas+0x390/0x550 [ 350.421434][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 350.421475][ C0] exit_mmap+0x293/0x9f0 [ 350.421497][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 350.421532][ C0] ? __pfx_exit_aio+0x10/0x10 [ 350.421568][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 350.421590][ C0] __mmput+0x118/0x420 [ 350.421612][ C0] exit_mm+0x221/0x2d0 [ 350.421641][ C0] do_exit+0x6cd/0x2360 [ 350.421673][ C0] ? __pfx_do_exit+0x10/0x10 [ 350.421702][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 350.421730][ C0] do_group_exit+0x22d/0x2f0 [ 350.421757][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 350.421778][ C0] get_signal+0x121b/0x12c0 [ 350.421817][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 350.421844][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 350.421881][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 350.421908][ C0] ? rcu_is_watching+0x16/0xb0 [ 350.421928][ C0] do_syscall_64+0x328/0x520 [ 350.421973][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.421992][ C0] ? clear_bhb_loop+0x70/0xc0 [ 350.422014][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.422032][ C0] RIP: 0033:0x7f5eaed9e0d9 [ 350.422048][ C0] Code: Unable to access opcode bytes at 0x7f5eaed9e0af. [ 350.422057][ C0] RSP: 002b:00007f5eafbe7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 350.422076][ C0] RAX: fffffffffffffffe RBX: 00007f5eaf026090 RCX: 00007f5eaed9e0d9 [ 350.422090][ C0] RDX: 0000000000000020 RSI: 0000200000000240 RDI: 0000000000000008 [ 350.422102][ C0] RBP: 00007f5eaee35024 R08: 0000000000000000 R09: 0000000000000000 [ 350.422113][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.422125][ C0] R13: 00007f5eaf026128 R14: 00007f5eaf026090 R15: 00007ffe07178f48 [ 350.422149][ C0] [ 350.771902][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 350.778838][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 350.787983][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 350.798068][ T31] Call Trace: [ 350.801380][ T31] [ 350.804334][ T31] vpanic+0x56d/0xa60 [ 350.808358][ T31] ? __pfx___schedule+0x10/0x10 [ 350.813265][ T31] ? __pfx_vpanic+0x10/0x10 [ 350.817820][ T31] panic+0xc5/0xd0 [ 350.821594][ T31] ? __pfx_panic+0x10/0x10 [ 350.826075][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 350.831564][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 350.837062][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 350.843268][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 350.849470][ T31] watchdog+0x1030/0x1030 [ 350.853847][ T31] ? watchdog+0x1c7/0x1030 [ 350.858306][ T31] kthread+0x38b/0x480 [ 350.862444][ T31] ? __pfx_watchdog+0x10/0x10 [ 350.867164][ T31] ? __pfx_kthread+0x10/0x10 [ 350.871794][ T31] ret_from_fork+0x514/0xb70 [ 350.876427][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 350.881573][ T31] ? __switch_to+0xc89/0x1420 [ 350.886297][ T31] ? __pfx_kthread+0x10/0x10 [ 350.890934][ T31] ret_from_fork_asm+0x1a/0x30 [ 350.895756][ T31] [ 350.898986][ T31] Kernel Offset: disabled [ 350.903324][ T31] Rebooting in 86400 seconds..