last executing test programs: 3.034445691s ago: executing program 3 (id=1696): r0 = socket(0x10, 0x3, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000240)={'\x00', &(0x7f0000000280)=@ethtool_regs={0x4, 0x200, 0xd6, "1e012ac3c95a42f29df7ca90a2ec8636d73bcdf43c038c6d52c83bb9eac935b02de7e47e82acc943e75a060ae6d84f489c6f06a8d89b3bc5764c508b09ab871375e7f51cce39736201f0c373c4f652bb3368e9352f7c9fd88fd0366f4122ee13cc03c6c7f671ec071f1007fbbe8926e13ce8ff25b8ac960c08e4bb9cc5f32c29f88b8d1b9cbeac5de1efd1f74ea4c9feb8aa0bc7ba6d3d0c6def7946df6847670156e310074a87f6986fba3c6a90c7da016a22d2517e7b572520561d3315cd1104bf930e2f58635f1b7cc92ead0a1d9f9186c3ccbab1"}}) sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c040e610012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 2.7762528s ago: executing program 3 (id=1700): socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) shutdown(r0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030803000000000000000000593a8f5e7b456511729c2413010000060c000480080001403df06b18bbc37b54359c2f3bc66dae8795ef7af69dce682172351b15640dc2733636c60c91229ab8f87539814154e770b70c448471e0738099feb835b6f61fe5e8eebc87b978d5fdef1576e281ca31c9e6c70f242ecfdf1d034cbe3ac4e1ac71497338924cebf054acffd98aae8572d9c22bca9c8fb2e570ed0c1ffd4f94765cf286921c75c8a500ab3a4fd8f45dde431e55661850c494b28047498865dfbd529eb9ea0c443fa4722834"], 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x4008080) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x802, 0xfffffffe, 0x3, 0x10001}, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) 1.813156005s ago: executing program 3 (id=1715): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r2, &(0x7f00000044c0), 0x4000000000001c0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@remove_addr={0x1e, 0x3d, 0x0, 0x0, "23f12f4860a44b0bc15ba15ff24af6985862903ebeb97f2918c713975bf95aefc56dc0c47215146671a0c2baf90fa3de0356cd9d9628d4a62674"}]}}}}}}}, 0x0) recvfrom(r3, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000007e00)=0x2, &(0x7f0000007e40)=0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x800, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) close(0x3) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={r3}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r6, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r8, @ANYBLOB="2c003080"], 0x48}}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r9, 0x4}, &(0x7f0000000200)=0x8) accept(r2, &(0x7f0000000240)=@nl=@proc, &(0x7f0000000300)=0x80) bind$802154_dgram(r5, &(0x7f0000000100)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) 1.534262129s ago: executing program 4 (id=1718): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000180000b70800000000007cc38af8ff00000000bfa200000000000007020000f8ffffffb7030000080000e1b7040000000000a1850000000b00000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.466824952s ago: executing program 1 (id=1720): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x178, r0, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x78}}}}, [@NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ibss_ssid}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x80, 0x2, 0x1, 0x0, {0x3, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x800, 0xf93e, 0x4}}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_IE={0x70, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1}}, @mesh_id={0x72, 0x6}, @random_vendor={0xdd, 0x5f, "63a8773c47aae0c0b1a94df98f380d20884aa470530a1559e197238ce8ec4492cc1455e6082e62723fc5c01412e9cee35eeb0d9e0314b8484ed6d92464aecbc2f9c325c3cd8ce73359e181290ee5efaa99d6fc9ab1bb01ba75d83042516648"}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_KEYS={0x98, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "28a6e19248"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_SEQ={0xb, 0x4, "29efa296d7c7f2"}, @NL80211_KEY_TYPE={0x8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "f2565dec83"}, @NL80211_KEY_SEQ={0xd, 0x4, "5d0596cccb1ba13372"}, @NL80211_KEY_SEQ={0x14, 0x4, "068487ac67853a4f81aeae2f386ab410"}]}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000280)='&(^\x00', 0x4001, &(0x7f00000002c0)={@align=0xf7, {0xfff7, 0x8, 0x80000000, 0x3}}, 0x6ef, &(0x7f0000000300), &(0x7f0000000340)=0x4}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, r0, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffeffff, 0x1e}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1e74}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r1, &(0x7f0000000540)="cea127fd94820935d311d93e260696d32e2203f83dd8152c35a52cecba3f7d673e4cc641e11fe93225e1c7325ed03216b933c0926effe1e4b1e92f9561479fe180f5c958d03c7b40293e430fe891b1b1d099d62afadc56dbcc63", &(0x7f00000005c0)=@tcp=r1, 0x2}, 0x20) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x74, 0xc, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0xc0}, 0x10) (async, rerun: 64) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4200400}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, r0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x538}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xa73}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xf45}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x81) (rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000900)=@nat={'nat\x00', 0x1b, 0x5, 0x628, 0x120, 0x268, 0xffffffff, 0x468, 0x468, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, &(0x7f0000000880), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, [0xff000000, 0x0, 0xff000000, 0xff], [0xffffffff, 0xffffffff, 0x0, 0xff0000ff], 'rose0\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x4, 0x0, 0x5, 0x58}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d2], 0x8000, 0xd6, 0x1}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x35, @ipv4=@multicast2, @ipv4=@local, @port=0x4e21, @gre_key=0x2}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@mh={{0x28}, {'He'}}, @common=@ah={{0x30}, {[0x4d6, 0x4d3], 0xf251, 0x9, 0x3}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x18, @ipv4=@remote, @ipv4=@multicast2, @icmp_id=0x68, @port=0x4e24}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, [0xff, 0xff000000, 0x1ffffff01, 0xffffff00], [0xff, 0xff, 0x0, 0x9e4729d9bad6f76c], 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x0, 0x45, 0x7, 0x61}, 0x0, 0xd8, 0x200, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d2], 0x5, 0x40, 0x2}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xfffffc00, 'system_u:object_r:devpts_t:s0\x00'}}}, {{@ipv6={@private0, @dev={0xfe, 0x80, '\x00', 0x3d}, [0xffffff00, 0xff000000, 0xffffff00], [0xff, 0xffffffff, 0xff000000, 0xff], 'veth0_macvtap\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x6, 0x9, 0x3, 0x14}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x41}, @ipv4=@private=0xa010102, @gre_key=0x8, @port=0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000fc0)=0x401, 0x4) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000001040), r1) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x28, r4, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @local}]}, 0x28}}, 0x20004001) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001180), r1) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x68, r5, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x3904, @link='broadcast-link\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x48, r0, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xfff}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2004}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x800) (async) ioctl$XFS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000001400)) splice(r3, &(0x7f0000001440)=0x7, r1, &(0x7f0000001480)=0x4, 0x4, 0x4) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x45e913c026859f1e}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x2c, r0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x80c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x686}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) (async) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_tracing={0x1a, 0x9, &(0x7f00000016c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x3}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @jmp={0x5, 0x0, 0x7, 0x4, 0x0, 0x2, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}]}, &(0x7f0000001740)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001780)={0x2, 0x8, 0x7fff, 0x10001}, 0x10, 0x30146, r1, 0x1, &(0x7f00000017c0)=[r1, r1, r1, r1, r1, r1, r1], &(0x7f0000001800)=[{0x1, 0x4, 0xf, 0xc}], 0x10, 0xd}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000001900)=r6, 0x4) (async, rerun: 32) getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000001940), &(0x7f0000001980)=0x4) (rerun: 32) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f00000019c0)={0xce, 0x7}) (async) r7 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r7, &(0x7f0000003ac0)={&(0x7f0000001a00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000002a80)=[{&(0x7f0000001a80)=""/4096, 0x1000}], 0x1, &(0x7f0000002ac0)=""/4096, 0x1000}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000003b00), r1) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r8, &(0x7f0000005380)={&(0x7f0000003b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000005340)={&(0x7f0000003b80)={0x1788, r0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x9}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x1440, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0xa8, 0xe, 0x0, 0x1, [{0xa4, 0x0, "0f12be89ad6ef76b016dd32873b1c7bb08193d42f8885ff644fefc771f0ab32c2b934fbbfc68ef30ae22859ec9cc321b5944821b56888087a7ffbd1076fce5ecf466d2bed83f2e26f818996e4fe0fef82eda8df034ae342b8e072cba0708490c0c9cf467f6c0a3e73aa3081f8cf4e27656b1e23b76bb30611cb0886036ded1b802561567dcd246b1c74d49b54570130fd8ae708ab7a5a59649a9b0292118b1dc"}]}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "05a666338c65"}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xf}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "d1df55b09d3d"}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1368, 0xe, 0x0, 0x1, [{0x6c, 0x0, "edcfab9b954e90ece8af57227902aee0881286c054357824572d1da71832131506f0c28058ea3c41c65549576e91ac8d83badca9ffaa309fb9a719535ca6c4567d9ea62a9cc5b766f63ee9f81545e25bf5710c88baa3740021269a3c273795c51506e77fb9f29450"}, {0x1004, 0x0, "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"}, {0xb9, 0x0, "33063025e7de5cac2df22210f32bdfe19e5fde398372afce3412136d20671f271e477f6e130c66ceeda3adb66f8b57a39d1a6bac1573f5d7c58708fee78437431c5d08f4d89282bfa256ac94ea1f2a694781041f79d39a1803e0bc886933857b2dcb4456e3143ecfe11033506d4372550bfc9fdfad883d9f85ae4d0dc89d1f59cf25e18a60fe99abe39ecb04fc725eaa2898a21091ea2713d2b119c24ef37457b02430fbe758546a522109e2b8a86ddbda7ada20ff"}, {0x6b, 0x0, "c396c5a130aaebf02a2307ed878e01c8baa80c1230c1a24c2e48460d8f82e52fb544d32cd8c696798999cd77ceeed8d971497f45d46783b24603e80f2412be1f2fc51d4f399f69f9ac4543f95d701da86e124fb5c6a9793f0b96c309fc0c7a80356e98e0d3e1e3"}, {0xb2, 0x0, "574824f99a91b6439a2059a0e5c8c197923a4232b5ba0ee4e72739c14e6b7c57e29074fc831042df5d22e5487cec6d7a30ca177ca583b30aef9e9f482d18918fd7cec9e0fa602fa32a6a257065c3dfde5e559fce0501969094406cc78fca12db0295928a83a35f674e60f79850784cac754d5e8d182afe28c850cbe4e65a2ac11b961816f79b8b42205c8ec3e72f0a00b390d7a6b105e334cc0357a1ba145cb49952fcf8f37b3b1d4fd774b6f23e"}, {0xf2, 0x0, "e7aa8abdefc7fb08048d35f1c9827368c7256083e4b9e6fc9c9d3f016114c8fabc5af6e1f31859aa4ff19fa40d0c52c5cadadca99a8a6a933ac855b68ee8c976c9ad7e63538910446efa6bce08e2128b3e8066806e8e3b9266f0b721bde92048bf7193b60fc5ee7faee5aca5128a69431af7e843c632f2929b5ffdfb34ea7769e44a26e141959028166d64cbca275dbd3a8d99af93ec8efe7d81b18a405e0ce0dc4d1bc74ecb48b1a4df78cf45ac4cf84c84758ded33325ad774a53d08b2c71d9b896a2797aa6bbdff8c280bce6c18a30a210249299110d2d0035f2ec4d91e77d49f61cf10be4d28d219ca4449cf"}, {0x23, 0x0, "48558ad800f681679c9a531e004a06bc185b771ffc5640523cf60ac5cbbaec"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}]}, @NL80211_ATTR_NAN_FUNC={0x58, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x40, 0xb, "690a2c98849856cb67e9039e139e4ecef2d48470f0fc4d2ea2ba88609f7eda44755abe5ecf433d1dea913172ba9194152b5c73b740785d8bc8424082"}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x9c86c624}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "49a0c5b1cdbc"}]}, @NL80211_ATTR_NAN_FUNC={0x2c0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x1e8, 0xd, 0x0, 0x1, [{0xef, 0x0, "3ee1a3f758a5081fd7f699dba8eb0ed034ac316dc8d7a1def2a825798275cfd2d3bc975fe18983057b6e035e616f24e9976da00f6280ef7fad07925974156cf4a943f0fd209826c4a1accc4985b98fb33aecfaa33b998395498ed50d39c73058ffe894ef0593a2ff7135ce05f97ae3be8d95f8a9a29e6f63a70d8dafdd95f69f90c194439f30e6a983ed662367bb6eb74ccf8dffb2436853e3e4ebcfc56c65d47b053ee03baff66b1c1d14b57455ca2df25ca2854be7a30e9b0881486b5126948e98cca5969f2b9bae049bbccdb1b92c4cfcbb2f246a0cd23cbb30a958901d2feaa9a80afad0f38f67a005"}, {0xc6, 0x0, "525b011f43b7a67e54b0e9e4f1e42199916556dbc91cea13624e89afc2e7f9d6b4949732e0221cd1cd565aed64b9307dca9f7a394fda62df5f58289308be0735c38bde544801d142770f24132350eed3ce4413b39accc30976954a598c66a70853a73f24e898010b0ec78e0ddf15e2a6219eb8c5ca9957be22e23d69f9c7c6aed9b072d54e12747f4d8cfd1cd0422c889d06653e56ef96bce71d9b7be20ff0ce1336ff9cf5674d8232ed15fecdd2786e4475db5b6bcbe77375e62e1461d53e35d8da"}, {0x2a, 0x0, "cb0b7eec2574c17d9c46bda0eb54e088af05ba50d7d343521c16f63567f9b49f75a16b1cf634"}]}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "c6bfe4b74c43"}, @NL80211_NAN_FUNC_SERVICE_INFO={0xc5, 0xb, "e84ff57518daf4fe75b44a5e5ad7f357ebaba1a91d684f37b3e4b8a6098261a30a6bd7737302cc63f43842b73584d7d44fcab44d4487e7ee029015a3340b17d8c4181ca262b3eb81c82e73223581b9cd000afb8c4b68e8b08b6df0b4849c00ddd8e35435e98bcdc7bf2852e6e9f69e98caf0b7d902a8a336f9ede61652530b809c6b784966475cbfdec89a9a6b7010545ed117efed51eb5f8bf52bc3f63e15c7be466e43c37a770f904f039911043320351c2bee2ffe379ab75d86b25a3f1817f5"}]}]}, 0x1788}, 0x1, 0x0, 0x0, 0x80}, 0x8) (async) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000053c0)=r6, 0x4) 1.442194717s ago: executing program 4 (id=1721): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000100000000000000080000b7080000000000007b8af8ff00000000b708000035f500007b8af0ff00048000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.38649326s ago: executing program 3 (id=1723): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x209d, 0x0, 0x4, 0x1f}, 0x10) write(r1, &(0x7f00000000c0)="1800000016005f0214fffffffffffff8073f000001000000", 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r3 = epoll_create1(0x0) epoll_pwait(r3, &(0x7f0000000000)=[{}], 0x1, 0x6e, &(0x7f00000001c0)={[0x7f]}, 0x8) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5, 0x20000}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0) 1.282466922s ago: executing program 4 (id=1724): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=@newqdisc={0x3b4, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x384, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x0, 0x3, 0x19, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x7ff, 0x9, 0x0, 0x0, 0x15, 0x4, 0x4}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3b4}}, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @initdev, @empty}, &(0x7f0000000180)=0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000000000000000400000078"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) 1.206618984s ago: executing program 1 (id=1725): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffff38}]}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x290, 0xc8, 0x8, 0x0, 0x5803, 0x358, 0x2e8, 0x2e8, 0x358, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xff], [0xff000000, 0xff000000, 0xff, 0x1fe0000ff], 'bridge0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x89, 0x3, 0x0, 0x12}, 0x0, 0x228, 0x290, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@inet=@hashlimit3={{0x158}, {'veth1_macvtap\x00', {0xeb98, 0x101, 0x7a, 0xfffd, 0x4, 0x9, 0x0, 0x7f, 0x8, 0x78}, {0xaa}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x7, 0x2, 0x563, 'netbios-ns\x00', 'syz1\x00', {0x6}}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0xf0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, [0xffffffff, 0x0, 0xff, 0xffffff00], [0xff000000, 0x0, 0x0, 0xff000000], 'pim6reg\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x11, 0x2, 0x3, 0x40}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40810}, 0x400c044) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x42082, 0x0) pipe(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000004ec768be00000000", @ANYRES32, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000400db00"/29], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x81) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0x7, 0x1d38, 0x1fb, 0x6b}, 0x8) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r6 = epoll_create1(0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r7, 0x400448e6, &(0x7f0000000100)="522ee926dd6b7b66001e") ioctl$sock_bt_hci(r7, 0x400448e7, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)={0x2017be01}) 1.093457855s ago: executing program 4 (id=1726): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x2}]}, 0x10) recvmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}, 0xfffffffe}], 0x1, 0x0, 0x0) 1.083892736s ago: executing program 1 (id=1727): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) 1.01863241s ago: executing program 0 (id=1728): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x24000840) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x24000840) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf25070000000a0004007770616e3000000008000100010000000800050000000000080003"], 0x40}}, 0x8084) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000020000115053f88bafcdbdf2504"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fedbdf2510000000080001008e91505c1e28d4abc21f9026859498284dd8fd58c8a58e8c3a908ea9e90e99b984f4490d723d4f070e15eac9687c1a844ae76b99e38d6baf98bc494792e284cbcba315bc4978808f2e852c6e11e112fc0a1f640d344f1f3cc64ab6dfd9e00047d12a63920ab260eb02141bc890f5b569282c4831223c6a41305bf2a157e78b6eb3478776ce2d06f034dd9b74684740d7ceb86a3c46e42412e97b331d2788f801850350f135ce196ea1b4e236e5ce8afc7a166a22af31cb26ec7f35393f2c83ea83adaebbd4b3bfea324fabcbc8efd3c063dd7d9a80235cddd7faa7c00b6e9acdce6d75380a4d0ec2982d496f140c1ca9ec7368941e105a0bbb93b45ff5c4036dd3e69bf81cfb6c08dd27f19846ce93ac8e36659a3f8ce8c5197080fe4a2a54922caf9334", @ANYRES32=r7, @ANYBLOB="060011009f06000006001100f401000008000100", @ANYRES32=r8, @ANYBLOB="050010000c00000008000100", @ANYRES32=r9, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) (async) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="060011009f06000006001100f401000008000100", @ANYRES32=r8, @ANYBLOB="050010000c00000008000100", @ANYRES32=r9, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) socket(0xa, 0x3, 0xff) (async) r10 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r10, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @mcast2}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000240)="6797f04cdb6f2b8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d2b", 0x29}, {&(0x7f0000000080)='\v', 0x1}], 0x2}, 0x30008b08) 991.277177ms ago: executing program 1 (id=1729): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000004a00030000200000000000000a008000", @ANYRES32=0x0, @ANYBLOB="030000001400010000000000005f"], 0x30}, 0x1, 0x0, 0x0, 0x44090}, 0x900) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010128bd7000000000002b00000008000300", @ANYRES32=r3, @ANYBLOB="040046000500340000000000080026"], 0x34}, 0x1, 0x0, 0x0, 0xf040}, 0x20004800) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000010400000000ffdbdf2500000000", @ANYRES32=r8, @ANYBLOB="3a2205000a010000300012800b00010067656e65766500002000028008000200ac1414bb"], 0x50}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x26f}], 0x1}, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r10 = socket(0x10, 0x3, 0x0) (rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r10], 0x20}}, 0x0) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffdf8, 0x0, &(0x7f0000000fc0)="dd5e48aa95ac0000"}, 0x50) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r12) sendmsg$TIPC_NL_NET_SET(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, r13, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x20}}, 0x0) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x54, r13, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback=0x7f000002}}}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x64, r13, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, '1234567890123456'}, @TIPC_NLA_NODE_KEY={0x38, 0x4, {'gcm(aes)\x00', 0x10, "00112233445566778899aabbccddeeff"}}]}]}, 0x64}}, 0x0) (async) sendmsg$TIPC_NL_BEARER_DISABLE(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x28, r13, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) socket(0x3, 0x3, 0x100) 974.502084ms ago: executing program 2 (id=1730): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x10, r0}, 0x18) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000900)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000008c0)={{r1}, {@val={r2}, @max}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 822.167579ms ago: executing program 2 (id=1731): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0800030047000000"], 0x128}, 0x1, 0x0, 0x0, 0x1000c957}, 0x600c800) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x28, 0x17, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x42084) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010001b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b6000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x0, 0xe, 0x56, &(0x7f0000000280)="9dbaac999f699ddfb8d31cbfee57", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xa2}, @generic={0x66}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 786.730043ms ago: executing program 2 (id=1732): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000080), &(0x7f0000000100)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r1, &(0x7f00000001c0), 0x0}, 0x20) 760.773845ms ago: executing program 0 (id=1733): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x110, 0x0, 0x110, 0x110, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x2, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x2, 0x1}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0xd, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x11}, @dev={0xac, 0x14, 0x14, 0x28}, 0xffffff00, 0xffffffff, 0x6, 0x2d, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x4b, 0x5, 0x10, 0xe, 0x3ff, 0x3, 'bond_slave_1\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x2f6}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 674.683182ms ago: executing program 2 (id=1734): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xa, [@type_tag={0x8, 0x0, 0x0, 0x12, 0x3}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x2, 0xffffffffffffffff}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x81}}]}, {0x0, [0x30, 0x2e, 0x30, 0x3e, 0x61, 0x5f, 0x30, 0x2e]}}, 0x0, 0x56, 0x0, 0x1, 0x3}, 0x28) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r3, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000340), 0x8) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, 0x3, 0x3, 0x507, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x3}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x66f1}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x1}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffff5}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001000000000004000000fc0000000000000000000000000000000000000000000000000000000000000000000000000000000200100087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x24004811}, 0x2c000010) 672.584202ms ago: executing program 1 (id=1735): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x20, 0x4, {{@in6=@private0, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x4, 0x0, 0x6c, 0x0, 0xfffffffffffffffb}, {0x0, 0xfffffffffffffffd, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}, 0x1, 0x0, 0x0, 0x24004811}, 0x2c000010) 609.206845ms ago: executing program 2 (id=1736): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001ac0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0xffd0}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0xb0ffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 579.553246ms ago: executing program 0 (id=1737): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0xe, 0x2, 0x9}}]}, 0x38}}, 0x4000010) getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f0000000200)=0x33) r11 = socket(0x28, 0x1, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCGSKNS(r12, 0x894c, 0x0) unshare(0xa020480) r13 = socket(0x10, 0x3, 0x0) write(r13, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000500020100020800038005000000", 0x24) r14 = accept$inet6(r11, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x1c) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r14, 0x8983, &(0x7f0000000240)) 530.592345ms ago: executing program 1 (id=1738): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) r3 = accept4$tipc(r0, 0x0, &(0x7f00000000c0), 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x18) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000001c0)=r4, 0x4) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0xccd6}, @IFLA_BRPORT_PRIORITY={0x6, 0x2, 0xfffe}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0xffffffffffffff81}, 0x1, 0x0, 0x0, 0x24044800}, 0x4040) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbdbcb95ede7000fbdbdf25020000050a000900ffffffffffff0000", @ANYRES32=r9, @ANYBLOB="08000b0001000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) r10 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_linger(r10, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) sendmmsg$sock(r10, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@txtime={{0x18, 0x1, 0x3d, 0x401}}, @txtime={{0x18}}], 0x30}}], 0x1, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000240)={'gre0\x00', r9, 0x8, 0x700, 0x1, 0x2, {{0xc, 0x4, 0x1, 0x3c, 0x30, 0x68, 0x0, 0x8, 0x2f, 0x0, @local, @remote, {[@timestamp_addr={0x44, 0x1c, 0x11, 0x1, 0xf, [{@loopback, 0x5}, {@multicast2, 0x9}, {@multicast2, 0x200}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000005c0)={'gretap0\x00', &(0x7f0000000340)={'syztnl1\x00', r9, 0x700, 0x700, 0x2, 0x1, {{0x1b, 0x4, 0x0, 0x30, 0x6c, 0x68, 0x0, 0x3, 0x2f, 0x0, @loopback, @empty, {[@timestamp_addr={0x44, 0xc, 0xe7, 0x1, 0x7, [{@multicast1, 0x401}]}, @end, @ssrr={0x89, 0x7, 0x91, [@loopback]}, @lsrr={0x83, 0x17, 0xc4, [@dev={0xac, 0x14, 0x14, 0x3d}, @rand_addr=0x64010102, @broadcast, @multicast2, @empty]}, @noop, @end, @rr={0x7, 0x7, 0x36, [@broadcast]}, @timestamp={0x44, 0x8, 0x52, 0x0, 0x1, [0x1]}, @rr={0x7, 0x17, 0x46, [@dev={0xac, 0x14, 0x14, 0x43}, @multicast2, @broadcast, @private=0xa010100, @broadcast]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='%\x00\x00\x00\x00 '], 0x20) close(r1) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) r12 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) setsockopt$inet6_mreq(r12, 0x29, 0x1c, &(0x7f0000000300)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, r13}, 0x14) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r11, 0x0, 0x0, 0x800) ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x8933, &(0x7f0000000200)={'wg0\x00'}) 487.250066ms ago: executing program 2 (id=1739): socket$nl_generic(0x10, 0x3, 0x10) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)={0x14, 0x841, 0x1, 0x7ffff, 0x4, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c841}, 0x4008094) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x3c, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r5, 0x107, 0x9, &(0x7f0000000200)=0xec, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x0, 0x4e6a, 0x50, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x7, 0x7, 0xbd22, 0x5}}) connect$can_bcm(r5, &(0x7f00000006c0)={0x1d, r6}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="200026bd7000fedbdb25050000000000090000000000aa0000000000000000000000f921c3ba7fbb003fd59daa4730f960e46ebe405863ff707de7bd723d2f9496ae9c48e78de2cd05ac28906c6c98e61f25be0d8f7b08000000000000004cbaee52919f94eeec0630a06e19a0d662920ef694644a9645562f1b94988d850fb003976dc9e958fb2f7e4a98ef3a7bc5d6af317e0bec366d16464010bfc06607000400000000004fe9bdf879d0c31a24559c4c91a036422d7cb61469ab85ddd3cdcd51ec7c9b4fb72d9c58c4bdaf167d2502212253ee151222286fe48d65a4be"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) r7 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$netlink(r7, 0xffffffffffffffff, 0x44) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000001080)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f57a14", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1, [@srh={0x6}, @routing]}}}}}}}, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r9, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r9, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r9, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)="a85751ad519b201965da2ebcc4898c7f46cb0819b38bbf504fd2617bf9689f2cdbe63959901f5afb841befbb8787b77bc6855e836e2c277f600c31ff7ea5acf0a9525fa1c161d06b23b802aaf4716846d96af1654995ec32db50c7e056aa45212cd6", 0x62}], 0x2}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r9, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0xa82a02e4010a08bd}, "1a01c783a8bc563d", "e9a0bd986e338531d1157bc12d1fc364fdbaaa4d2954c1166835dbbe78286228", "bd69dbc7", "1d7265a045a85572"}, 0x38) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0xd, 0xdc, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, @private1, 0x1, 0x7800, 0x7, 0x7}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8, 0x30, 0xffffffffffffffff, 0x0, '\x00', r10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r9, @ANYRESOCT=r6], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b700000081110000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000072030000000000001d400500000000004704000001ed000072030200030000001d440000000000006b0a00fe000000007303118100000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f1ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c107571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d1abf3cb17b40ac9b10968f38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d61f3b39c64307f9c82b2807c9ff4a269841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67a41b9e320146ee9f566a28"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 468.144172ms ago: executing program 0 (id=1740): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1e, 0x400, 0x4, 0x4, 0x88, r0, 0x55, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x50) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7da, 0x25}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040814}, 0x20040045) poll(&(0x7f0000000300)=[{r1, 0x3c2}, {r0, 0x8240}, {r0, 0x400}, {r2, 0xb0c0}, {r2, 0x1}, {r1, 0x30c8}], 0x6, 0x7) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r4, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x1c}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x8080) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r3) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r6, 0x4, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c000}, 0x11) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r7, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xd0, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x799d, @private2, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf9a0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x1) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000780), r7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000007c0)={'veth0_to_batadv\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r7, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x84, r8, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r9}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x8001) write$ppp(0xffffffffffffffff, &(0x7f0000000940)="097c1457d0c09b2cc83652b8a7b437c89a612d5a8b369f9b8d059f18b26d850bb167632174e73eb6441aacdf261104462ce692cd85af43d60a4e0d5d9fbf0dc49b229d1c7f56fbc0de1acb673760adb2db8b741e175cae0a4dd2b72d531b4bee2ea2c071b4499f2b0c2f3899c031362415978921cfd1513a3f80929c041ce6c0a33205091cb3540bc51c8075c62e760cf02d62ce357e3fe3ee355d4020839e1ceee45940ccc3cdb933ff929662eb343f943ef8e69a33a621eed75cf5ce136360901602aee28377959715fd137de3f7668d1ceaa0ef3cbccb3fb7f491ea794d1e5a1f3ff8afa3ad6f929d543c8e308b682f77190221f54e", 0xf7) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r10, 0x5411, &(0x7f0000000a40)) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000001a40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001a00)={&(0x7f0000000ac0)={0xf30, r4, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x78c, 0x11d, 0x0, 0x1, [{0x16c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x160, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xffea, 0x401, 0x9, 0x8000, 0x7fff, 0x3, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xb, 0x7, 0x5, 0x6, 0x83a4, 0xfffe, 0x3]}}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x30, 0xc, 0x12, 0xb]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x6, 0x2}, {0x5, 0xa}, {0x1, 0x9}, {0x2, 0x6}, {0x2, 0x3}, {0x1, 0x4}, {0x6, 0x2}, {0x0, 0xa}, {}, {0x0, 0x5}, {0x1, 0x5}, {0x0, 0x2}, {0x2, 0x8}, {0x1, 0x2}, {0x3, 0x9}, {0x0, 0xa}, {0x0, 0x6}, {0x2}, {0x3, 0x1}, {0x4, 0x2}, {0x5, 0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x30, 0x4, 0x1b, 0x1, 0x2, 0x9, 0x6, 0xb, 0x1b, 0x6, 0x9, 0x12, 0x4]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x60, 0x18, 0x64, 0x48, 0x36, 0xb, 0x5a, 0x60]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x30, 0x5, 0x16, 0x9, 0x4, 0xb, 0x24, 0xc, 0x79]}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x354, 0x4, 0x6, 0x5, 0x400, 0x5, 0x8, 0x3]}}]}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xfff8, 0x1, 0x12c, 0x0, 0x3, 0x0, 0x3]}}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x4, 0x4}, {0x0, 0x7}, {0x4, 0x1}, {0x5, 0x6}, {0x4, 0x3}, {0x5, 0x2}, {0x3, 0xa}, {0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0xc, 0x48, 0x9, 0x2, 0x24, 0x1b, 0x60, 0x60, 0x6c, 0x9, 0x12, 0x73, 0x5, 0x1b, 0x1b, 0x36, 0x6, 0x36, 0x6, 0x1, 0xc, 0x48, 0x16, 0x0, 0x1b, 0x4, 0xb, 0x2, 0x9, 0x2, 0x1b, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x0, 0x5}, {0x6, 0x5}, {0x6, 0xa}, {0x3, 0x1}, {0x4, 0x9}, {0x1, 0x1}, {0x5, 0x6}, {0x4, 0xa}, {0x1, 0x7}, {0x5, 0x4}, {0x6, 0x2}, {0x1, 0x4}, {0x3, 0x8}, {0x3, 0x2}, {0x5, 0x2}, {0x5, 0x1}, {}, {0x6, 0x3}, {0x6, 0xa}, {0x0, 0x3}, {0x4, 0x6}, {0x5}, {0x2, 0x3}, {0x7, 0x3}, {0x1, 0x3}, {0x7}, {0x7, 0x2}, {0x1, 0xa}, {0x0, 0x3}, {0x1, 0x9}, {0x2, 0x5}, {0x4, 0x5}, {0x4, 0x5}, {0x0, 0x6}, {0x1, 0x7}, {0x1, 0xa}, {0x0, 0x9}, {0x3, 0x2}, {0x1, 0x4}, {0x5, 0x2}, {0x7, 0xa}, {0x1, 0x6}, {0x4, 0xa}, {0x1, 0x9}, {0x7, 0xa}, {0x0, 0x5}, {0x6, 0x6}, {0x5, 0x8}, {0x2, 0x4}, {0x7}, {0x1, 0x7}, {0x0, 0x5}, {0x1, 0x7}, {0x4, 0x7}, {0x5, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x36}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6d}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x258, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xbc9}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x218, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x0, 0x9}, {0x1, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xdff0, 0x5, 0x4, 0x1, 0x9, 0xf, 0x30]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x5, 0x2, 0x12, 0x24, 0x1, 0x3, 0x6, 0x3, 0x4, 0x6c, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xa4, 0x80, 0x7, 0x7, 0x9, 0x400, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x681, 0x5, 0x9400, 0xfffc, 0xb, 0x8, 0xb]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x10, 0xc, 0x6c, 0x6c, 0x6c, 0x4, 0x4, 0x6c, 0x1b, 0x1b, 0x16, 0x1, 0x24, 0x1b, 0x30, 0x9, 0x18, 0x36, 0xb, 0x53, 0x5, 0x12, 0x12, 0x18, 0xc, 0x0, 0x0, 0x5, 0xc, 0x2f]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x962e, 0x9b7, 0xe8, 0x1, 0x8001, 0x8f35, 0xc]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6, 0x4, 0x6, 0x24, 0x6, 0x6, 0x3, 0x1, 0x48, 0x1, 0x30, 0x16, 0x12, 0x1b, 0x5, 0x30, 0x1b, 0x48, 0x9, 0x30, 0x25, 0x9, 0x1, 0x35, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x13b, 0x0, 0x5, 0x7a8e, 0xfff9, 0x6, 0x4]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x7, 0x3}, {0x5, 0x1}, {0x6, 0xa}, {0x5, 0x5}, {0x7, 0x3}, {0x4, 0x3}, {0x3, 0x2}, {0x5, 0x4}, {0x1, 0x2}, {0x1, 0x2}, {0x1, 0x4}, {0x0, 0x7}, {0x1, 0x1f}, {0x1, 0xa}, {0x7, 0x6}, {0x3, 0x8}, {0x5, 0x7}, {0x4, 0x9}, {0x4, 0x4}, {0x4, 0x7}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x7}, {0x1, 0x5}, {0x7, 0xa}, {0x7, 0x8}, {0x0, 0x4}, {0x2, 0x1}, {0x7, 0x7}, {0x1, 0x9}, {0x1, 0x9}, {0x5, 0x4}, {0x6, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x2}, {0x5, 0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x7}, {0x4, 0xa}, {}, {0x5, 0x7}, {0x2, 0x2}, {0x5, 0x4}, {0x1, 0x4}, {0x2, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x5, 0x5}, {0x6, 0x6}, {0x3, 0x3}, {0x7, 0x7}, {0x6, 0x6}, {0x0, 0x8}, {0x1, 0x7}, {0x6, 0x3}, {0x1}, {0x0, 0x6}, {0x1, 0x2}, {0x0, 0x8}, {0x0, 0x4}, {0x2, 0x5}, {0x4, 0x3}, {0x6, 0x8}, {0x1, 0x4}, {0x2, 0x3}, {0x3, 0xa}, {0x2, 0x6}, {0x7, 0x6}]}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x1000, 0x1a32, 0x6, 0x0, 0x9, 0x3ff, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x9, 0x6, 0x0, 0x80, 0xc, 0xb]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xec67, 0x7, 0x800, 0xf, 0x5, 0x8, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x1, 0x4}, {0x2, 0xa}, {0x1, 0xa}, {0x5, 0x2}, {0x1, 0x4}, {0x6, 0x4}, {0x0, 0x3}, {0x5, 0x8}, {0x6, 0x7}, {0x1, 0x9}, {}, {0x1, 0x4}, {0x6, 0x6}, {0x3, 0x1}, {0x0, 0xa}, {0x4, 0x6}, {0x3, 0x4}, {0x7, 0x9}, {0x7, 0x5}, {0x4}, {0x5, 0x3}, {0x1, 0x2}, {0x3, 0x6}, {0x3, 0x2}, {0x4, 0x4}, {0x1}, {0x1, 0x3}, {0x1, 0x9}, {0x3, 0x6}, {0x6}, {0x2, 0x3}, {0x1}, {0x5, 0x7}, {0x7, 0x5}, {0x0, 0x2}, {0x4, 0xa}, {0x5, 0x4}, {0x0, 0x6}, {0x6, 0x1}, {0x0, 0x5}, {0x1, 0x7}, {0x4, 0x3}, {0x6, 0x5}, {0x3, 0x3}, {0x0, 0x8}, {0x4, 0x1}, {0x7, 0x8}, {0x1, 0x1}, {0x0, 0x9}, {0x1}, {0x0, 0x9}, {0x5, 0x8}, {0x5, 0x2}, {0x0, 0x9}, {0x7, 0x4}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x4}, {0x5}, {0x4, 0xa}, {0x5, 0x6}, {0x2, 0x5}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x21}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4c}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffffffffffff}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0xfc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0xd8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x2, 0x6c, 0x12, 0x9, 0xc, 0x36, 0x18, 0x6c, 0x18, 0x1, 0x3, 0x5, 0x21, 0x1b, 0xc, 0x1, 0x36, 0x1, 0x6c, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xa5a, 0xfffe, 0x8, 0x8, 0x8000, 0x5, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x4, 0x88f, 0x1, 0x5, 0x3, 0x8000]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x4}, {0x1, 0x2}, {0x0, 0x2}, {0x1, 0x1}, {0x4, 0x7}, {0x2, 0x7}, {0x7, 0x2}, {0x7, 0x7}, {0x2, 0x6}, {0x6, 0x6}, {0x1, 0x3}, {0x2, 0x9}, {0x2, 0xa}, {0x5, 0x2}, {0x5, 0x2}, {0x3, 0x3}, {0x7, 0x6}, {0x4, 0x7}, {0x3, 0x6}, {0x3, 0x3}, {0x6, 0x1}, {0x6, 0x3}, {0x1, 0x9}, {0x6}, {0x5, 0x8}, {0x4, 0x5}, {0x7, 0x9}, {0x7, 0x6}, {0x4, 0x2}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x2, 0x4}, {0x2, 0x1}, {0x4, 0x5}, {0x7, 0x6}, {0x2, 0x6}, {0x2, 0x7}]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x7}, {0x1, 0x6}, {0x6, 0x2}, {0x0, 0x4}, {0x4, 0x8}, {0x3, 0x2}, {0x5, 0x4}, {0x0, 0x8}, {0x5, 0x5}, {0x6, 0xa}, {0x1, 0x4}, {0x0, 0x2}, {0x3, 0x8}, {0x0, 0x5}, {0x4, 0x2}, {0x1, 0x3}, {0x2, 0xa}, {0x6, 0x9}, {0x2, 0xa}, {0x5, 0x9}, {0x3, 0x3}, {0x0, 0x3}, {0x3, 0x1}, {0x1, 0x6}, {0x2, 0x7}, {0x3, 0x5}, {0x1, 0x7}, {0x1, 0x8}, {0x5, 0x5}, {0x2}, {0x0, 0x1}, {0x5, 0x3}, {0x7, 0xa}, {}, {0x4, 0x9}, {0x7, 0x8}, {0x6, 0x4}, {0x7}, {0x4, 0x7}, {0x3}, {0x3, 0x8}, {0x4, 0x4}, {0x3, 0x5}, {0x4}, {0x3, 0x6}, {0x0, 0x7}, {0x3, 0x5}, {0x0, 0x8}, {0x5}, {0x5, 0x8}, {0x0, 0x7}, {0x7, 0x1}, {0x6, 0x9}, {0x1, 0x5}, {0x7, 0x6}, {0x0, 0x2}, {0x5, 0xa}, {0x7, 0x2}, {0x0, 0x5}, {0x0, 0x8}, {}, {0x5, 0x9}, {0x7, 0x2}, {0x7, 0x3}, {0x1, 0x3}, {0x1, 0x7}, {0x3, 0x2}, {0x7, 0x8}, {0x2, 0x6}, {0x6, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x9, 0x4, 0x7ff, 0x5e48, 0x8, 0x5, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, {0x9c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x36, 0x24, 0x7b, 0x6, 0x12, 0x6, 0x2, 0x1, 0x2, 0x12, 0x18, 0x4, 0x5, 0x36, 0x6c]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x4, 0x4, 0x2, 0x1, 0x60, 0x18, 0x3]}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x1, 0x9}, {0x6, 0x2}, {0x2, 0x8}, {0x0, 0x2}, {0x7, 0x9}, {0x0, 0x9}, {0x7, 0x6}, {0x7, 0x7}, {0x2, 0x4}, {0x0, 0xa}, {0x1, 0x3}, {0x5, 0x5}, {0x1, 0x8}, {0x5, 0xa}, {0x4, 0x5}, {0x0, 0x9}, {0x4}, {0x2, 0x4}, {0x6, 0x6}, {0x4, 0xa}, {0x5, 0x2}, {0x6, 0x7}, {0x2}, {0x1}, {0x7, 0x8}, {0x7}, {0x6, 0xa}, {0x0, 0x4}, {0x0, 0x3}, {0x0, 0x9}, {0x6, 0xa}, {0x6, 0x8}, {0x4, 0x2}, {0x7, 0x3}, {0x1, 0x5}, {0x3, 0x3}, {0x6, 0x2}, {0x4}, {0x2, 0x5}, {0x2, 0x5}, {0x5, 0xa}, {0x6, 0x7}, {0x7, 0x9}, {0x1}, {0x7, 0x7}, {0x2, 0x9}, {0x3, 0x3}, {0x1, 0x8}, {0x3, 0x8}, {0x3, 0x9}, {0x0, 0x1}, {0x1, 0x6}, {0x5}, {0x7}, {0x5, 0x6}, {0x3, 0x3}, {0x3, 0x3}, {0x6, 0x7}, {0x7, 0x2}, {0x4, 0x8}, {0x3, 0x1}, {0x6, 0x2}, {0x3, 0x3}, {0x7, 0x8}, {0x3}, {0x5, 0x1}, {0x0, 0x8}, {0x7, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8001, 0x7ddc, 0xb, 0xffff, 0x7, 0x7c7, 0xfc]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x4}, {0x1b0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x3}]}, @NL80211_BAND_60GHZ={0xe4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x6, 0x4}, {0x2, 0x9}, {0x7, 0x5}, {0x4, 0x9}, {0x7, 0x1}, {0x6, 0x2}, {0x4, 0x7}, {0x1, 0x8}, {0x5, 0x4}, {0x4, 0x5}, {0x3, 0x4}, {0x2, 0x3}, {0x7, 0x6}, {0x7, 0x5}, {0x6, 0x5}]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x1, 0x6}, {0x0, 0x2}, {0x6, 0x2}, {0x1, 0xa}, {0x7, 0x4}, {0x3, 0x9}, {0x1, 0x7}, {0x6, 0x5}, {0x7, 0x4}, {0x1, 0x2}, {0x7, 0x9}, {0x3, 0x4}, {0x7, 0x7}, {0x2, 0x4}, {0x5, 0x1}, {0x7}, {0x3, 0x2}, {0x1}, {0x1}, {0x4, 0x8}, {0x0, 0x4}, {0x6, 0xa}, {0x2, 0x5}, {0x7}, {0x0, 0x2}, {0x0, 0x4}, {0x7, 0x8}, {0x2, 0x5}, {0x3, 0x2}, {}, {0x4, 0x6}, {0x0, 0x7}, {0x7, 0x4}, {0x2, 0xa}, {0x2, 0x5}, {0x5, 0x7}, {0x0, 0x1}, {0x7, 0x1}, {0x4, 0x6}, {0x6, 0x4}, {0x3, 0xa}, {0x5, 0x3}, {0x4, 0x4}, {0x3, 0x3}, {0x4, 0x4}, {0x2, 0x4}, {0x3, 0x1}, {0x4}, {0x0, 0x5}, {0x1, 0x1}, {0x3, 0x9}, {0x1, 0x6}, {0x6, 0x6}, {0x7, 0x5}, {0x1, 0x3}, {0x2, 0x4}, {0x4, 0x1}]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x1, 0x3}, {0x1, 0x4}, {0x2, 0x4}, {0x5, 0xa}, {0x0, 0x2}, {0x6, 0xa}, {0x1}, {0x5, 0x6}, {0x4, 0x3}, {0x7, 0x1}, {0x6, 0x7}, {0x5}, {0x5, 0x6}, {0x7, 0x2}, {0x5, 0xa}, {0x5, 0x5}, {0x2}, {0x5}, {0x1, 0x8}, {0x7}, {0x7, 0x4}, {0x2, 0x1}, {0x0, 0x2}, {0x5, 0x3}, {0x7, 0x1}, {0x0, 0x2}, {0x2, 0xa}, {0x0, 0x8}, {0x7, 0x2}, {0x0, 0x7}, {0x0, 0x3}, {0x0, 0x2}, {0x5, 0x9}, {0x6, 0x3}, {0x7, 0x8}, {0x0, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {}, {0x1, 0x8}, {0x2, 0x9}, {0x5, 0x9}, {0x0, 0x9}, {0x1, 0x8}, {0x6, 0x3}, {0x1, 0x7}, {0x7, 0x2}, {0x5, 0x6}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfffd, 0x727a, 0xd, 0x0, 0x0, 0x7, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x1ff, 0x2, 0x0, 0x4f69, 0x4, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x9, 0x16, 0x16, 0x5, 0x1]}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x37, 0x2, [{0x1, 0x7}, {0x1, 0x7}, {0x2, 0x4}, {0x1, 0x6}, {0x4, 0xa}, {0x3, 0x5}, {0x1, 0x9}, {0x1, 0x1}, {0x3, 0x8}, {0x0, 0x6}, {0x5, 0x5}, {0x6, 0x2}, {0x7, 0x8}, {0x1, 0x7}, {0x7, 0x2}, {0x0, 0x9}, {0x6, 0x5}, {0x2, 0x1}, {0x3, 0x3}, {0x0, 0x7}, {0x5, 0x1}, {0x3, 0x5}, {0x0, 0x2}, {0x0, 0x5}, {0x0, 0x5}, {0x3}, {0x2, 0x1}, {0x0, 0xe}, {0x0, 0x4}, {0x2, 0xa}, {0x4, 0x3}, {0x0, 0x7}, {0x3, 0x4}, {0x2, 0x4}, {0x4, 0x5}, {0x0, 0x3}, {0x3, 0x7}, {0x7, 0x5}, {0x4, 0x6}, {0x3, 0x6}, {0x0, 0x5}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x9}, {0x1, 0x2}, {0x4, 0xa}, {0x7}, {0x7, 0x1}, {0x0, 0x9}, {0x0, 0xa}, {0x2, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x99, 0x8, 0x4, 0x8000, 0xab, 0xf847, 0x8000]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x7}, {0x5, 0x2}, {0x1, 0x4}, {0x0, 0x9}, {0x6, 0x5}, {0x0, 0x6}, {0x2, 0x5}, {0x4, 0x8}, {0x2, 0x1}, {0x7, 0x4}, {0x5, 0x4}, {0x4, 0xa}, {0x3, 0x4}, {0x4}, {0x7, 0x3}, {0x7, 0x3}, {0x1, 0x3}, {0x1, 0x1}, {0x4, 0x2}, {0x3, 0x9}, {0x2, 0x9}, {0x1, 0x7}, {0x4, 0x6}, {0x0, 0x5}, {0x7, 0x4}, {0x0, 0x3}, {0x3, 0x8}, {0x4, 0x1}, {0x2, 0x7}, {0x2, 0x9}, {0x2}, {0x3, 0x9}, {0x4, 0x9}, {0x5, 0x5}, {0x4, 0x3}, {0x4, 0x5}, {0x0, 0x1}, {0x1, 0x6}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0xf0, 0x11d, 0x0, 0x1, [{0xec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x400}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xc4, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x6c, 0x4, 0x1b, 0xb, 0xc, 0x4, 0x12, 0xb, 0x4, 0x1, 0x3, 0x1, 0x2, 0x3, 0x1b, 0xb, 0xc, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xa, 0x36, 0xb209766a00bc6752, 0x9, 0x6, 0x30, 0x48, 0xb, 0x12, 0x18, 0x24, 0x1b, 0x48, 0x16, 0x36, 0x5, 0x9, 0x24, 0x6, 0x30, 0x12, 0xd015973ef35fe05, 0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x30, 0x36, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x6, 0x7}, {0x6, 0xa}, {0x5, 0x3}, {0x6, 0xa}, {0x6, 0x4}, {0x0, 0x7}, {0x0, 0x9}, {0x7, 0x5}, {0x7, 0x5}, {0x0, 0x2}, {0x7, 0x5}, {0x4, 0x9}, {0x2, 0x2}, {0x2, 0x2}, {0x2, 0x4}]}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x2, 0x7}, {0x4, 0x5}, {0x1, 0x5}, {0x7, 0x6}, {0x1, 0x6}, {0x3, 0x4}, {0x2, 0xa}, {0x2, 0x5}, {0x3}, {0x7, 0x9}, {0x6, 0x6}, {0x6, 0x5}, {0x0, 0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x0, 0x9}, {0x6, 0x5}, {0x5, 0x8}, {0x0, 0xa}, {0x5, 0xa}, {0x7, 0x1}, {0x1, 0x7}, {0x3, 0x4}, {0x4, 0x2}, {0x3, 0x3}, {0x3, 0x3}, {0x0, 0x4}, {0x7, 0x4}, {0x3}, {0x3, 0x4}, {0x5, 0x7}, {0x7, 0xa}, {0x0, 0x5}, {0x4, 0x8}, {0x2, 0x6}, {0x1, 0x3}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x6}, {0x0, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x5737, 0x251e, 0x2, 0x0, 0x4, 0xfffa, 0xf001]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4e}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x14}]}]}, @NL80211_ATTR_TID_CONFIG={0x40, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9b}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x47}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x16}]}]}, @NL80211_ATTR_TID_CONFIG={0x608, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2e}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd8}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x86}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5d}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x65}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x85}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x160, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x13c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1, 0xf5, 0x4, 0x3, 0x1, 0xf, 0x7f]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x9, 0x48]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x2, 0x4, 0xb, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xc, 0x657b, 0xcc08, 0x2, 0x6, 0x5, 0x3]}}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x15, 0x9, 0x5, 0xc8, 0x0, 0x3, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x401, 0xd, 0x5, 0x400, 0x2, 0x663, 0x3ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffd, 0x9, 0xfff, 0x1, 0x4, 0x0, 0x7, 0x8398]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0x5, 0x200, 0xfff9, 0x1, 0x8001, 0x2]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x7, 0x6}, {0x3, 0x2}, {0x3, 0xa}, {0x1, 0xa}, {0x5, 0x9}, {0x5, 0x3}, {0x3, 0x3}, {0x0, 0x7}, {0x5, 0x8}, {0x7, 0x1}, {0x1, 0x9}, {0x7, 0x7}, {0x4, 0xa}, {0x0, 0xa}, {0x2}, {0x1, 0x1}, {0x5}, {0x5, 0x7}, {0x3, 0x7}, {0x3, 0x9}, {0x4, 0x5}, {0x6, 0x2}, {0x5, 0x2}, {0x6}, {0x5, 0x6}, {0x1, 0x1}, {}, {0x0, 0x5}, {0x1, 0xa}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x3, 0x9}, {0x1, 0x9}, {0x3, 0x7}, {0x3, 0x4}, {0x0, 0x3}, {0x3, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff4, 0x6, 0xfff, 0x1, 0x8, 0x576, 0x26, 0xf]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x1, 0x1}, {0x4, 0x8}, {0x2, 0x7}, {0x2, 0x6}, {0x4, 0x8}, {0x5, 0x4}, {0x0, 0x3}, {0x7, 0x7}, {0x5}, {0x7, 0x4}, {0x0, 0x9}, {0x3, 0xa}, {0x3, 0x1}, {0x7, 0x8}, {0x4, 0x8}, {0x6, 0x6}, {0x0, 0x9}, {0x5}, {0x7, 0x5}, {0x4, 0x9}, {0x6, 0x3}, {0x7, 0x2}, {0x1}, {0x7, 0x4}, {0x1, 0x3}, {}, {0x6}, {0x1, 0x9}, {0x5, 0x5}, {0x3, 0x7}, {0x6, 0x1c}, {0x6, 0x4}, {0x0, 0x8}, {0x2, 0x7}, {0x4, 0x8}, {0x5, 0x8}, {0x0, 0x4}, {0x6}, {0x4, 0x8}, {0x1, 0x6}, {0x3, 0x2}, {0x0, 0x3}, {0x2, 0x5}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x15}]}, {0x1f0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc9}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfe}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xef}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1b8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x8, 0x8, 0x3, 0x65d1, 0x7ff, 0x800, 0x8f93]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x5, 0x1}, {0x0, 0x3}, {0x6, 0x8}, {0x0, 0x2}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x2}, {0x4, 0x9}, {0x7}, {0x1, 0x9}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x6, 0x9}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0xd}, {0x1}, {0x3, 0x8}, {0x1, 0x4}, {0x3, 0x7}, {0x5, 0xa}, {0x1, 0x1}, {0x6, 0x2}, {0x1, 0x3}, {0x6, 0xa}, {0x5, 0x9}, {0x0, 0x6}, {0x5, 0x9}, {0x5, 0x1}, {0x6, 0x5}, {0x1, 0x2}, {0x1, 0x5}, {0x2, 0x3}, {0x7, 0xa}, {0x5, 0x6}, {0x1, 0x4}, {0x2, 0x2}, {0x2, 0x3}, {0x0, 0x2}, {0x0, 0x1}, {0x6, 0x6}, {0x2, 0x8}, {0x3, 0x7}, {0x5}, {0x5, 0x4}, {0x0, 0x7}, {0x6, 0x1}, {0x7, 0x4}, {0x1, 0x1}, {0x3, 0x7}, {0x4, 0x6}, {0x0, 0x1}, {0x5, 0x8}, {0x3, 0x2}, {0x1, 0x3}, {0x4, 0x9}, {0x0, 0x9}, {0x3, 0xa}, {0x2, 0x1}, {0x1, 0x1}, {0x7, 0xa}, {0x1, 0x1}, {0x7, 0x5}, {0x6, 0x9}, {0x1, 0x9}, {0x2, 0x6}, {0x5, 0x1}, {0x3, 0xa}, {0x3, 0x9}, {0x4, 0x1}, {0x6}, {0x6, 0x9}, {0x6, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0xd, 0x51e5, 0xff12, 0x3, 0x4, 0x6, 0x8]}}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x2, 0x7}, {0x0, 0x4}, {0x0, 0x5}, {0x7, 0x2}, {0x3, 0x9}, {0x2, 0x4}, {0x0, 0xa}, {0x7, 0x8}, {0x2, 0x9}, {0x7, 0x9}, {0x1, 0x4}, {0x5, 0x7}, {0x2, 0x5}, {0x7, 0x5}, {0x6, 0x4}, {0x1, 0x3}, {0x0, 0x5}, {0x0, 0x3}, {0x0, 0x3}, {0x1, 0xa}, {0x5, 0x8}, {0x3, 0x7}, {0x2, 0x7}, {0x7, 0x1}, {0x4, 0x9}, {0x1, 0x4}, {0x0, 0x3}, {0x0, 0x8}, {0x7, 0x5}, {0x0, 0x3}, {0x4, 0x2}, {0x2, 0x7}, {0x0, 0x5}, {0x4, 0x6}, {0x1, 0x4}, {0x0, 0x3}, {0x7, 0xa}, {0x2, 0x7}, {0x0, 0xa}, {0x1, 0x9}, {0x1, 0x2}, {0x4, 0x3}, {0x7, 0x8}, {0x4, 0x1}, {0x2, 0x9}, {0x0, 0x9}, {0x2, 0x2}, {0x2, 0x6}, {0x2, 0x3}, {0x5, 0x6}, {0x0, 0x2}, {0x0, 0x4}, {0x4, 0x9}, {0x1, 0x7}, {0x4, 0xa}, {0x2, 0x7}, {0x3, 0x3}, {0x2, 0x1}, {0x2, 0x5}, {0x0, 0x3}, {0x4, 0x6}, {0x5, 0x9}, {0x6, 0xa}, {0x4}, {0x7, 0x7}, {0x6, 0x8}, {0x5, 0xa}, {0x5, 0x9}, {0x2, 0x9}, {0x1, 0x1}, {0x7, 0x8}, {0x0, 0x5}, {0x6, 0x9}, {0x3, 0x4}]}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xff81, 0x5, 0x80, 0x1, 0xa78, 0x2, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x9, 0x4, 0xb, 0x9, 0x1a, 0x2, 0xe]}}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xd53, 0x5, 0x1, 0x5, 0x9, 0x7, 0x3, 0x54e]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x4, 0x3, 0x1000, 0x10, 0x400, 0x7eab, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7fff, 0x3ff, 0x0, 0x1, 0xdced, 0x241a, 0xffff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2b}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000001}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9c}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x82}]}, {0x20c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1f0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x4, 0x9, 0xdaa1, 0x8, 0xfffc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x101, 0xd0, 0x1000, 0x0, 0xffff, 0xe, 0xf]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xffff, 0x9, 0x1, 0x2, 0x4, 0xa491, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xa0ff, 0xfff, 0x7, 0x9cb6, 0x7, 0x0, 0x3]}}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x3, 0x36, 0x1, 0x2, 0x9, 0x30, 0x48, 0x9, 0x24, 0xc, 0x0, 0x30, 0x3, 0x1, 0x48, 0x6c, 0x2a, 0x5, 0x2, 0x2, 0x5, 0x6, 0x6c, 0x1b, 0x24, 0x5, 0xc, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x813, 0x1ff, 0xa563, 0xa, 0x7602, 0x4b5, 0xfff9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x253, 0x7, 0x6, 0x1, 0x8, 0x1000, 0x7, 0x2]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x5, 0x8}, {0x2, 0x2}, {0x6, 0x2}, {0x4, 0x6}, {0x0, 0x4}, {0x5, 0x3}, {0x5, 0xa}, {0x6, 0xa}, {0x3, 0x5}, {0x6, 0x2}, {0x4, 0x2}, {0x1, 0x7}, {0x2, 0x5}, {0x2, 0x3}, {0x7, 0x2}, {0x6, 0x3}, {0x6, 0x4}, {0x1, 0x6}, {0x2, 0x2}, {0x0, 0x8}, {0x3, 0x8}, {0x0, 0x7}, {0x3, 0x2}, {0x5, 0x3}, {0x0, 0x2}, {0x0, 0x3}, {0x0, 0x1}, {0x5}, {0x3, 0x5}, {0x5, 0xa}, {0x2, 0x8}, {0x2, 0x9}, {0x0, 0x3}, {0x0, 0x6}, {0x1, 0x8}, {0x7, 0x3}, {0x7, 0x7}]}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x66, 0x5, 0xff, 0xff00, 0x9, 0x1, 0x2, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0xc, 0x9, 0x2, 0x401, 0x4, 0xe, 0xa9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xff, 0x5, 0xc, 0x7, 0x0, 0xe4, 0x3]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x6, 0x4}, {0x1, 0x6}, {0x3, 0x9}, {0x2, 0x7}, {0x3}, {0x3, 0x7}, {0x0, 0x2}, {0x0, 0x1}, {0x6, 0x2}, {0x0, 0xa}, {0x6, 0x8}, {0x6, 0x3}, {0x3, 0x2}, {0x4}, {0x7, 0x9}, {0x1, 0x3}, {}, {0x1}, {0x1, 0x7}, {0x2, 0x9}, {0x4, 0x6}, {0x6, 0x9}, {0x0, 0x1b}, {0x3, 0x3}, {0x0, 0x7}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0x2}, {0x0, 0x7}, {0x5, 0x7}, {0x4, 0x6}, {0x0, 0x1}, {0x1}, {0x3, 0x5}, {0x4, 0xa}, {0x1, 0x7}, {0x3, 0x9}, {0x6, 0x3}, {0x3}, {0x2, 0x5}, {0x3, 0x5}, {}, {0x0, 0x8}, {0x0, 0x8}, {}, {0x7, 0x2}, {0x0, 0x5}, {0x3, 0x9}, {0x3, 0x7}, {0x4, 0x4}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x1, 0x5, 0x3, 0x6c, 0x12, 0x6c, 0x30, 0x50, 0x24, 0xb, 0x6c, 0xc, 0x60, 0x30, 0x60, 0x2, 0xb, 0x6, 0x1, 0xc, 0x30, 0x30, 0x3, 0x48, 0x1, 0x36, 0x12, 0x6c, 0x24, 0x5, 0x1]}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3, 0x2, 0x3, 0x3, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x60, 0x16, 0x24, 0x1b, 0x4, 0x9, 0x4, 0x16, 0xb, 0x1, 0x6, 0x9, 0x60, 0x48, 0x48, 0x6c, 0x1, 0x2, 0x30, 0x13, 0x3, 0x60, 0x24, 0x43, 0x9, 0x14, 0x3, 0x2, 0x18]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8b}]}]}, @NL80211_ATTR_TID_CONFIG={0x50, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x32}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xbc}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9a}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3b}]}]}]}, 0xf30}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) ioctl$OCFS2_IOC_GROUP_ADD64(0xffffffffffffffff, 0x40186f03, &(0x7f0000001a80)={0x4, 0x3, 0x9, 0x8}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f00000034c0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003480)={&(0x7f0000001b00)={0x194c, r4, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x51c, 0x11d, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xfc}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x14, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{}, {0x0, 0x7}, {0x5, 0x4}, {0x2, 0x5}, {0x5, 0x5}, {0x7, 0x8}, {0x1, 0x8}, {0x6, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x77}]}, {0x1b4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80000000}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x168, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0x1, 0xff, 0xff4, 0xf07, 0x0, 0x8001]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7b2, 0xc, 0x0, 0x8, 0x7, 0x0, 0x0, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x2, 0x7}, {0x5, 0x6}, {0x2, 0x6}, {0x4, 0x7}, {0x2, 0x1}, {0x0, 0x4}, {0x6, 0x2}, {0x1, 0xa}, {0x5, 0x1}, {0x4, 0x2}, {0x0, 0x3}, {0x1, 0x7}, {0x7, 0xa}, {0x1, 0x5}, {0x2, 0x3}, {0x1, 0xa}, {0x2, 0x3}, {0x4, 0x3}]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x7, 0x3}, {0x1, 0x6}, {0x2, 0x1}, {0x4, 0xa}, {0x2}, {0x4, 0xa}, {0x6, 0xa}, {0x2}, {0x5, 0x5}, {0x1}, {0x4}, {0x5, 0x4}, {0x2, 0x1}, {0x6, 0x4}, {0x0, 0x8}, {0x2, 0x2}, {0x0, 0x2}, {0x1, 0x2}, {0x1, 0x7}, {0x6, 0x5}, {0x6, 0x4}, {0x3, 0x8}, {0x0, 0x1}, {0x7, 0x1}, {0x6, 0x3}, {0x5, 0x5}, {0x1, 0x1}, {0x2, 0x3}, {0x3, 0x8}, {0x0, 0x5}, {0x1, 0x9}, {0x2, 0x8}, {0x1, 0x6}, {0x2, 0x2}, {0x3, 0x6}, {0x0, 0x1}, {0x5, 0x6}, {0x0, 0x8}, {0x7, 0x8}, {0x1, 0x2}, {0x4, 0x1}, {0x4, 0x5}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x100, 0xff, 0x6, 0x7, 0x6, 0x2, 0x6]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9b, 0x6, 0x0, 0x100, 0x3, 0x1, 0x6, 0x40]}}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x52, 0x8, 0xb9cc, 0x6, 0x80, 0x2952, 0x100]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x6, 0x180, 0xbe32, 0x4, 0x5, 0x7, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x9, 0x16, 0x30, 0x30, 0x16, 0x24, 0x30]}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0x1ff, 0x9, 0x6, 0x7, 0x4, 0xffff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x3, 0x800, 0x400, 0x8, 0x2, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7f, 0x6, 0x292, 0x1, 0x4e2b, 0x4, 0x9]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x9, 0x0, 0x16, 0x6c, 0x5, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4d}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe4fc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x49}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x23}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x70}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x23}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x59}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}]}, {0x260, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x210, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x43, 0x2, [{0x1, 0x3}, {0x4, 0x9}, {0x6, 0x4}, {0x3}, {0x5, 0x8}, {0x7, 0xa}, {0x1, 0xa}, {0x3, 0x1}, {0x4, 0xa}, {0x3, 0x4}, {0x1, 0x8}, {0x5, 0x2}, {0x0, 0x4}, {0x1}, {0x7}, {0x1, 0x9}, {0x3, 0x8}, {0x5, 0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x5}, {0x0, 0x4}, {0x3}, {0x2, 0x5}, {0x2}, {0x4, 0x2}, {0x3, 0x5}, {0x6, 0x6}, {0x4, 0x1}, {0x5, 0x8}, {0x3, 0x7}, {0x7, 0x6}, {0x7, 0x8}, {0x6, 0x7}, {0x0, 0x1}, {0x0, 0x6}, {0x3}, {0x2, 0x7}, {0x6, 0x3}, {0x2, 0x4}, {0x6, 0x7}, {0x2, 0x4}, {0x5}, {0x5, 0x5}, {0x4, 0xa}, {0x1, 0x9}, {0x5, 0x1}, {0x2}, {0x5, 0x7}, {0x0, 0x9}, {0x2, 0x5}, {0x1}, {0x7}, {0x1, 0xe}, {0x5, 0x5}, {0x4, 0x7}, {0x3, 0x4}, {0x4, 0x2}, {0x0, 0x2}, {0x7, 0x7}, {0x5, 0x1}, {0x7, 0x1}, {0x0, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xbe42, 0x5, 0x80, 0x8, 0xd, 0x6, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x1000, 0x81, 0xd57d, 0x7467, 0x9, 0x7, 0x7ff]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x60, 0x18, 0x6c, 0x1, 0x30, 0x2, 0x1, 0x4, 0x4, 0x5a, 0x4, 0xc, 0x30, 0x5, 0x60, 0x1b, 0x9, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x80, 0x4, 0xc23c, 0x2, 0x0, 0x7, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x7ff, 0x800, 0x0, 0x2, 0x1, 0xc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x53, 0x0, 0x5, 0x0, 0x8]}}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1b, 0x6c, 0x6c, 0xc, 0x60, 0x2, 0x2, 0x24, 0x12, 0x18, 0x16, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x9, 0x1, 0x4, 0x1, 0xfffb, 0x3]}}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x96f, 0x0, 0x9, 0x5f, 0x2, 0x1ff, 0x6, 0x48d]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0x800, 0x9e, 0x8, 0x83, 0xc, 0x4]}}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x6, 0x7}, {0x0, 0x8}, {0x7, 0x3}, {0x2, 0x7}, {0x5, 0x4}, {0x1, 0x9}, {0x5, 0x6}, {0x0, 0x1}, {0x1, 0x1}, {0x7, 0x2}, {0x4, 0x5}, {0x4}, {0x1, 0x8}, {0x4, 0x7}, {0x3, 0x7}, {0x6, 0x2}, {0x1, 0x4}, {0x4, 0x3}, {0x1, 0x6}, {0x5}, {0x3, 0x7}, {0x4}, {0x5, 0x8}, {0x4, 0x9}, {0x6, 0x9}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x0, 0x9}, {0x2, 0x1}, {0x7}, {0x6, 0x7}, {0x2, 0x7}, {0x0, 0x4}, {0x5, 0x9}, {0x6, 0xa}, {0x5, 0x3}, {0x2, 0xa}, {0x3, 0x6}, {0x5, 0xa}, {0x0, 0x6}, {0x1, 0x6}, {0x4, 0x7}, {}, {0x7, 0xa}, {0x2, 0x9}, {0x1, 0x1}, {0x1, 0x6}, {0x1, 0x9}, {0x0, 0x2}, {0x6, 0x8}, {0x0, 0x3}, {0x5, 0x2}, {0x0, 0x2}, {0x5, 0xa}, {0x4, 0x7}, {0x5, 0x8}, {0x0, 0x1}, {0x7, 0x5}, {0x0, 0x8}, {0x7, 0x3}, {0x7, 0x8}, {0x5, 0x1}, {0x0, 0x4}, {0x0, 0x6}, {0x5}, {0x1, 0x4}, {}, {0x3, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7fff, 0x6, 0x8001, 0x0, 0x4, 0x5, 0x7f]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1d}]}]}, @NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xd0f}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8a}]}]}, @NL80211_ATTR_TID_CONFIG={0x188, 0x11d, 0x0, 0x1, [{0x184, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc8}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x148, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0xc, 0x6, 0x4, 0x81, 0x5, 0xf, 0xb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1, 0x1ce, 0x0, 0x5, 0x3ff, 0x7, 0x800]}}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1000, 0x3, 0x9, 0x5, 0xc65, 0x6, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffc, 0xe0, 0x1, 0x6, 0x4, 0x8, 0x2, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x3ff, 0x1000, 0x9, 0x800, 0x8, 0x1, 0x90]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x12, 0x30, 0xc, 0x5, 0x9, 0x18, 0x6c, 0x24]}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x36, 0x24, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x5, 0x3, 0x9, 0x5, 0x4, 0x3, 0xb]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x5, 0x1, 0x60, 0x12, 0x18, 0x60, 0x3, 0x30, 0x4, 0xb, 0x6c, 0x6, 0x24, 0xc, 0x9, 0x1, 0x24, 0x4, 0x1, 0x18, 0x9, 0x36, 0x12]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x5, 0x5}, {0x1, 0x6}, {0x1, 0x6}, {0x4, 0x8}, {0x5, 0x9}, {0x1, 0x3}, {0x2, 0x5}, {0x3}, {0x5, 0x5}, {0x4, 0x7}, {0x1, 0x8}, {0x5, 0xa}, {0x2, 0xa}, {0x6}, {0x6, 0x8}, {0x7, 0x7}, {0x1, 0x1}, {0x0, 0x4}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x4}, {0x3}, {0x0, 0x4}, {0x1, 0x8}, {0x2, 0x1}, {0x3}, {0x1}, {0x7, 0x2}, {0x1, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x967755d53c4bd939}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x4, 0x5}, {0x4, 0x7}, {0x5, 0x4}, {0x7, 0x8}, {0x3}, {0x2, 0x8}, {0x4, 0x9}, {0x1, 0x9}, {0x6, 0x2}, {0x3, 0x9}, {0x4, 0x4}, {0x3, 0x9}, {0x1, 0x1}, {0x5, 0x6}, {0x4, 0x5}, {0x2, 0x7}, {0x3, 0x1}, {0x7, 0x1}, {0x3}, {0x7, 0x7}, {0x6, 0x1}, {0x6, 0x2}, {0x4, 0x5}, {0x0, 0x8}, {0x0, 0x2}, {0x1, 0x7}, {0x3, 0x5}, {0x3, 0x4}, {0x1, 0x9}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x250, 0x11d, 0x0, 0x1, [{0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x104, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x3, 0x1b, 0xb, 0x60, 0x5, 0x4, 0x1, 0x16, 0x6, 0x3, 0x4, 0x2, 0x6c, 0x60, 0x57, 0x5, 0x4, 0x48, 0x5, 0x0, 0x6]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x3]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0x0, 0xff, 0x101, 0x800, 0x6, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x6}, {0x0, 0x2}, {0x1, 0x6}, {0x7, 0x9}, {0x6, 0x1}, {0x6}, {0x4, 0x8}, {0x1, 0x3}, {0x7, 0x3}, {0x6, 0x5}, {0x2}, {0x3, 0x4}, {0x0, 0x6}, {0x2, 0x3}, {0x4, 0x8}, {0x0, 0x3}, {0x0, 0x5}, {0x6, 0x1}, {0x7, 0x7}, {0x6}, {0x5, 0x7}, {0x0, 0x8}, {0x3, 0x8}, {0x1, 0x7}, {0x2, 0x4}, {0x3, 0x2}, {0x7, 0x9}, {0x5}, {0x1, 0x6}, {0x0, 0x3}, {0x4}, {0x1}, {0x4, 0x8}, {0x1, 0x9}, {0x7, 0x8}, {0x5, 0x9}, {0x0, 0x9}, {0x2, 0x6}, {0x0, 0x2}, {0x7, 0x4}, {0x6, 0x4}, {0x5, 0x6}, {0x6, 0x4}, {0x7, 0x9}, {0x3, 0x1}, {0x0, 0xa}, {0x1, 0x8}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0x1}, {0x7, 0xa}, {0x0, 0x1}, {0x7, 0x9}, {0x2, 0x5}, {0x4}, {0x3, 0x8}, {0x2, 0x2}, {0x0, 0x7}, {0x0, 0x2}, {}, {0x7, 0xa}, {0x2}, {0x4, 0x8}, {0x4, 0x8}, {0x3, 0x7}, {0x1, 0x1}, {0x2, 0x5}, {0x6, 0x9}, {0x1}, {0x1, 0x7}, {0x0, 0x4}, {0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0xfa6e, 0x6, 0x4, 0xa02, 0x9, 0x8000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x2, 0xa, 0x7, 0x6, 0x5c, 0xf70c]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xb5e, 0xd, 0x0, 0x3, 0x8000, 0x0, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x5, 0x9, 0x1, 0xf, 0xffff, 0x2, 0xe]}}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}, {0x6c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2d}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x28, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x0, 0x16, 0x24, 0x6c, 0x1b, 0x12, 0x6d, 0x16, 0x3, 0x4, 0x2, 0x18, 0x48, 0x18, 0xb, 0x18, 0x5, 0x4, 0x60, 0x6]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3b}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x134}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcc}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}]}]}, @NL80211_ATTR_TID_CONFIG={0xbdc, 0x11d, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x38, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x36, 0x24, 0xc, 0x3, 0x30, 0xc, 0x3, 0x1, 0x9, 0x30, 0x1, 0x2, 0x0, 0x1b, 0x2, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x5, 0xb8c, 0x100, 0x5, 0x2, 0x8000, 0xfffb]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000001}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x32}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6a}]}, {0x44c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1f8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x4, 0x5, 0x6, 0x7, 0xa6a, 0xda23, 0x3ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x5, 0x30, 0x6c, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0xd4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x34, 0x2, [{0x2, 0x6}, {0x0, 0x8}, {0x1, 0x7}, {0x2, 0x9}, {0x7}, {}, {0x1, 0x3}, {0x3, 0x5}, {0x1, 0x9}, {0x5, 0x9}, {0x3, 0x6}, {0x6, 0x5}, {0x4, 0x7}, {0x1, 0x4}, {0x1, 0x9}, {0x3, 0xa}, {0x1, 0x7}, {0x7}, {0x2, 0x1}, {0x6, 0x9}, {0x1, 0xa}, {0x6, 0x7}, {0x3, 0x8}, {0x1, 0xa}, {0x1}, {0x1, 0x2}, {0x2, 0x3}, {0x0, 0x3}, {0x5}, {0x7, 0x9}, {0x3, 0x6}, {0x6, 0x1}, {0x1, 0x2}, {0x2}, {0x2, 0x2}, {0x3, 0x3}, {0x0, 0x8}, {0x1, 0x2}, {0x5, 0x5}, {0x1, 0x7}, {0x3, 0x1}, {0x2, 0x5}, {0x6, 0x4}, {0x7, 0xa}, {0x7, 0x9}, {0x7, 0x3}, {0x6, 0xa}, {0x0, 0x5}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x4}, {0x1, 0x4}, {0x5, 0x4}, {0x7, 0x4}, {0x4, 0x3}, {0x5, 0x1}, {0x7, 0x7}, {0x0, 0x3}, {0x5, 0x3}, {0x5, 0x5}, {0x2, 0x7}, {0x6, 0x3}, {0x2}, {0x6, 0x6}, {0x1, 0x2}, {0x6, 0x6}, {0x0, 0x1}, {0x2, 0x1}, {0x7, 0x1}, {0x1, 0x5}, {0x3, 0x9}, {0x1, 0x1}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x60, 0x6c, 0xc, 0xc, 0x16, 0x4, 0x30, 0x24, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x68be, 0x9, 0x4, 0x3, 0x4, 0x8, 0x8000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4a9a, 0x5a5, 0x1, 0x8, 0xbe0, 0x0, 0x8, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x3, 0x3}, {0x5, 0x1}, {0x5, 0x8}, {0x2, 0x7}, {0x7, 0x3}, {0x3, 0x5}, {0x6, 0x6}, {0x6, 0x1}, {0x4, 0x9}, {0x0, 0x7}, {0x2}, {}, {0x7, 0x9}, {0x2, 0x9}, {0x1, 0x4}, {0x7, 0x4}, {0x0, 0x5}, {0x7, 0x1}, {0x1, 0x3}, {0x3, 0x8}, {0x3, 0x7}, {0x6, 0x2}, {0x5, 0xa}, {0x5, 0x4}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x6}, {0x1, 0x1}, {0x1, 0x5}, {0x7}, {0x1, 0x3}, {0x1, 0x1}, {0x7}, {0x4, 0x5}, {0x0, 0x2}, {0x2, 0x9}, {0x3, 0x2}, {0x6, 0x1}, {0x1, 0x4}, {0x7}, {0x6, 0xa}, {0x7, 0x6}, {0x7, 0x6}, {0x3, 0x1}, {0x5, 0x4}, {0x1, 0xa}, {0x7, 0x8}, {0x7, 0x7}, {0x1, 0x7}, {0x0, 0xa}, {0x7, 0x5}, {0x5, 0x6}, {0x3, 0xa}, {0x1, 0xa}, {0x4, 0x5}, {0x0, 0x9}, {0x4, 0x2}, {0x7}]}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1ff, 0x90b2, 0x7, 0x40, 0x7f, 0x6, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x5, 0x8, 0x401, 0x7, 0x3ff, 0x8, 0x7]}}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x4, 0x4}, {0x3, 0x6}, {0x3, 0x6}, {0x0, 0x1}, {0x0, 0x2}, {0x5}, {0x7, 0xa}, {0x2, 0x2}, {0x2, 0x5}, {0x4, 0x2}, {0x1}, {0x0, 0x6}, {0x3, 0x5}, {0x3}, {0x2, 0x9}, {0x6, 0x1}, {0x2, 0xa}, {0x0, 0x9}, {0x2, 0x4}, {0x1, 0x1}, {0x1, 0x4}]}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x2, 0x64, 0xb, 0xc, 0x18, 0x60, 0x4, 0x36, 0x30, 0x24, 0x12, 0x1b, 0x24, 0x2, 0x2, 0x18, 0xc, 0x6c, 0x16, 0x48, 0x16, 0x1b, 0x26, 0x12, 0x60, 0x48, 0xb, 0x60, 0x32, 0x12, 0x1b, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa7, 0x101, 0x2, 0x4, 0x8, 0x8, 0xca, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x1ff, 0x2, 0x1ff, 0x7, 0xffff, 0xff, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x80, 0xace, 0x3, 0x200, 0x401, 0x200, 0xe]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x118, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x1ff, 0xa8c, 0x101, 0xfffb, 0x4, 0x800, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x5, 0x1, 0x8001, 0x8, 0x2, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x6, 0x100, 0x6, 0x5, 0xa11d, 0xe25]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0x101, 0xe25d, 0xe6f, 0x6, 0x9, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0x4, 0x2, 0x7, 0x81, 0x3, 0x492d]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x4, 0x7, 0x7, 0xffff, 0x5, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x2, 0x3, 0x101, 0x9, 0x567a, 0xbe, 0x81]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x2, 0x7, 0x0, 0x2, 0xb2f, 0x1, 0x101]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x100, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x2, 0x8001, 0x2, 0x9, 0x6, 0xfff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x5, 0x8}, {0x1, 0xa}, {0x4, 0x2}, {0x4, 0xa}, {0x2, 0x8}, {0x7, 0x1}, {0x3, 0x8}, {0x6, 0x9}, {0x1, 0x1}, {0x7, 0x5}, {0x1, 0x2}, {}, {0x2, 0x5}, {0x2, 0x9}, {0x3, 0x1}, {0x1, 0x3}, {0x7}, {0x6, 0x6}, {0x4, 0x6}, {0x1, 0x3}, {0x7, 0x9}, {0x7, 0x5}, {0x4}, {0x1}, {0x0, 0xa}, {0x1, 0xa}, {0x0, 0x5}, {0x7, 0x2}, {0x7}, {0x7, 0x9}, {0x6, 0x8}, {0x4, 0xa}, {0x1, 0x8}, {0x5, 0x1}, {0x2, 0x5}, {0x7, 0x5}, {0x6, 0x9}, {0x0, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x101, 0xd, 0xff81, 0x1, 0x7ff, 0x200, 0x8d30]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x16, 0x60, 0x12, 0xc, 0x12, 0x1b, 0x30, 0x60, 0xa, 0x36, 0x6, 0x6c, 0xc, 0x48, 0x2, 0x16, 0x6, 0x30, 0x16, 0x424fdaa716a98326, 0x6c, 0xb, 0x48, 0x1b, 0x30, 0x1, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0x80, 0x9, 0x3, 0x1, 0x87, 0x4]}}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe329, 0xf1e, 0x4, 0xfff7, 0x6, 0x3f8b, 0x400, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x60, 0x9, 0x7, 0x0, 0x400, 0x9, 0xfff9]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x12, 0x3, 0x2]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x248e0121}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x61}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3e}]}, {0x2c8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x76}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x294, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x7, 0xa}, {0x5}, {0x3, 0x6}, {0x3, 0x4}, {0x0, 0x7}, {0x3, 0x8}, {0x6, 0x9}, {0x6, 0x3}, {0x2, 0x1}, {0x7, 0xa}, {0x0, 0x1}, {0x5, 0xa}, {0x1, 0x9}, {0x3, 0x7}, {0x4, 0x1}, {0x3, 0x7}, {0x3, 0x6}, {0x2, 0x4}, {0x7, 0x9}, {0x1, 0x5}, {0x2, 0x7}, {0x5, 0x5}, {0x5}, {0x6, 0x4}, {0x7, 0x4}, {0x1, 0x8}, {0x7, 0x3}, {0x3, 0x6}, {0x4, 0x2}, {0x5, 0x3}, {0x0, 0xa}, {0x3, 0x6}, {0x6, 0x1}, {0x7, 0xa}, {0x7, 0x5}, {0x3, 0x2}, {0x3, 0x9}, {0x1, 0x9}, {0x3, 0xa}, {0x1, 0x4}, {0x4, 0x2}, {0x7, 0x9}, {0x0, 0x4}, {0x0, 0x6}, {0x3}, {0x4, 0x2}, {0x1, 0xa}, {0x1, 0x5}, {0x0, 0x3}, {0x5, 0x2}, {0x4, 0xa}]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x3, 0x1}, {0x5, 0x9}, {0x2, 0x6}, {0x3, 0x5}, {0x1}, {0x7, 0x3}, {0x2, 0x5}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0xb, 0x16, 0x48]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x30, 0x1b, 0x9, 0x5, 0xc, 0xb, 0x6c, 0x5, 0x2, 0x5, 0x69, 0x36, 0x1, 0x1b, 0x30, 0x9, 0x6]}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x12, 0x16, 0x9, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xb2, 0xd761, 0x2, 0x1, 0xfd7b, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xf48c, 0xb, 0xfffb, 0x8, 0x1, 0x3, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xd7, 0xa, 0x5, 0x7fff, 0x1, 0xce80, 0x7, 0x7]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{}, {0x0, 0x2}, {0x2, 0x2}, {0x6, 0x9}, {0x6, 0x9}, {0x7, 0x9}, {0x2, 0x7}, {0x5, 0x2}, {0x1, 0xa}, {}, {0x5, 0x6}, {0x1, 0x1}, {0x5, 0x3}, {0x1, 0x8}, {0x7, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x9, 0xd, 0x1ff, 0x65, 0x7, 0x1, 0x7222]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7f, 0x23e5, 0x9, 0x400, 0xc8f, 0x1ff, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc87, 0x2, 0xb, 0xf57b, 0xffff, 0x709d, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x1}, {0x1}, {0x2, 0x4}, {0x3, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x4, 0x9}, {0x5, 0x3}, {0x1, 0x9}, {0x3, 0x1}, {0x5}, {0x0, 0x4}, {0x6, 0x2}, {0x4, 0x2}, {0x6, 0x3}, {0x2, 0x7}, {0x5, 0x9}, {0x5, 0x6}, {0x1, 0x9}, {0x7, 0x7}, {0x6, 0x7}, {0x1, 0x6}, {0x6, 0x7}, {0x7, 0x5}, {0x4}]}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x0, 0x0, 0x0, 0x3, 0x81, 0xa, 0x9000]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x6c, 0x6, 0x16, 0x36, 0x2, 0x6, 0x2, 0x60, 0x30, 0x5, 0x1b, 0x16, 0x1b, 0x3, 0x16, 0x4]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x12, 0x1, 0x30, 0x6, 0x4, 0x16, 0x16, 0x60, 0x18]}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3, 0x5, 0x81, 0x3, 0x1ff, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x80, 0x93, 0x0, 0x7fff, 0x2, 0x81, 0x5]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6, 0x48, 0x0, 0xc, 0x9, 0x2, 0x73]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x5, 0x775, 0x94ec, 0xc839, 0x3, 0x8000, 0x3183]}}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5c8, 0x6, 0xfffe, 0x3ff, 0x401, 0x0, 0x8, 0x26e]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x2, 0x18, 0x38, 0x4, 0x0, 0x36, 0x36, 0x1, 0x5, 0xb, 0x48, 0x4, 0x24, 0x6c, 0x5, 0x2, 0x36, 0x30, 0x48, 0x4, 0xb]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xc, 0x6, 0x4, 0x2, 0x0, 0x8, 0x5]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x6, 0x5}, {0x6, 0x4}, {0x1, 0x3}, {0x3, 0x3}, {0x3, 0x4}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x7}, {}, {0x6, 0x1}, {0x4, 0x6}, {0x5, 0xa}, {0x3, 0x4}, {0x0, 0x4}, {0x6}, {0x3, 0x3}, {0x2, 0xa}, {0x1, 0x5}, {0x3, 0x5}, {0x5, 0x2}, {0x4, 0x8}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x9}, {0x1, 0x5}, {0x6, 0xa}, {0x6, 0x2}, {0x1, 0x6}, {0x4, 0x1}, {0x1, 0x2}, {0x0, 0x7}, {0x4, 0x9}, {0x7, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xea}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xea}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x49}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7f}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x77}]}, {0x370, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x36c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0xffff, 0xfff, 0x6964, 0x1000, 0x1, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x0, 0x9, 0x12, 0x60, 0x18, 0x6, 0xb]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x68, 0x0, 0x4, 0x4, 0x2, 0x62, 0x3]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x4, 0x1}, {0x0, 0x6}, {0x5, 0x5}, {0x2, 0x6}, {0x4, 0xa}, {0x7}, {0x3, 0x2}, {0x1, 0x6}, {0x3, 0x2}, {0x5, 0x8}, {0x2, 0xa}, {0x2, 0x2}, {0x7, 0x1}, {0x3, 0x2}, {0x6, 0x3}, {0x5, 0xa}, {0x3, 0x6}, {0x1, 0x5}, {0x0, 0x2}, {0x7, 0x7}, {0x5, 0x8}, {0x1, 0x6}, {0x4, 0x1}, {0x2, 0x9}, {0x3, 0x1}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x1}, {0x0, 0x4}, {0x3, 0x3}, {0x2, 0x6}, {0x2, 0x8}, {0x2, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x18, 0x12, 0x36, 0x1b, 0x30, 0x2, 0xd, 0x6, 0x6c, 0x5a, 0x1b, 0x30, 0x5]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x3]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x30, 0x6, 0x30]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x0, 0x2}, {0x3, 0x2}, {}, {0x0, 0x2}, {0x1, 0xa}, {0x1, 0x8}, {0x6, 0x6}, {0x0, 0x5}, {0x1, 0x8}, {0x6, 0x1}, {0x0, 0x7}, {0x7, 0xa}, {0x4, 0x6}, {0x0, 0x7}, {0x4, 0x8}, {0x6, 0x7}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x7}, {0x1, 0x2}, {0x1, 0x1}, {0x6, 0x2}, {0x3, 0xa}, {0x1, 0x5}, {0x5, 0x8}, {0x0, 0x6}, {0x0, 0x9}, {0x4, 0x1}, {0x0, 0x9}, {0x6, 0x3}, {0x2, 0x9}, {0x2, 0x9}, {0x7, 0x6}]}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3ff, 0x9, 0xfffa, 0x0, 0xfff8, 0xfffc, 0xfffb]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x5, 0x7, 0x9, 0x3, 0x9, 0xf, 0xfffa]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x4, 0x6}, {0x3, 0x6}, {0x5, 0x3}, {0x0, 0x6}, {0x4}, {0x6, 0x9}, {0x1, 0x3}, {0x5, 0x4}, {0x4, 0x1}, {0x2, 0x9}, {0x1, 0x8}, {0x3, 0x7}, {0x4, 0x5}, {0x6, 0x9}, {0x1, 0x5}, {0x0, 0x7}, {0x7, 0xa}, {0x7, 0xa}, {0x1, 0xa}, {0x0, 0x7}, {0x5, 0x7}, {0x5, 0x2}, {0x7, 0x7}, {0x1, 0x7}, {0x2, 0x6}, {0x2, 0xa}, {0x6}, {0x4, 0x2}, {0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x7, 0x2}, {0x3, 0x3}, {0x7, 0x5}, {0x1}, {0x2, 0x1}, {0x3, 0x7}, {0x7, 0x8}, {0x3, 0x4}, {0x3, 0x5}, {0x5, 0x8}, {0x7, 0x5}, {0x1, 0x6}, {0x1, 0x5}, {0x5, 0xa}, {0x0, 0x4}, {0x0, 0x9}, {0x5, 0x8}, {0x1, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x3, 0x6}, {0x5}, {0x4, 0x2}, {0x3, 0xa}, {0x1, 0x4}, {0x0, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x0, 0xa}, {0x4, 0xa}, {0x3, 0x5}, {0x1, 0x9}]}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x5, 0x2}, {0x3, 0x1}, {0x4, 0xa}, {0x5, 0xa}, {0x2, 0x4}, {0x3, 0xa}, {0x2, 0x6}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x7}, {0x7, 0x4}, {0x0, 0xa}, {0x0, 0x9}, {0x3}, {0x3, 0x2}, {0x1}, {0x2, 0x5}, {0x3, 0x4}, {0x7, 0x3}, {0x1, 0x5}, {0x3, 0x5}, {0x4, 0x9}, {0x4, 0x2}, {0x3, 0x7}, {0x4, 0x3}, {0x0, 0xa}, {0x5, 0x8}, {0x1, 0x8}, {0x2, 0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x5, 0x4}, {0x0, 0x6}, {0x1}, {0x4}, {0x3, 0x2}, {0x0, 0x4}, {0x7, 0x9}, {0x4, 0x5}, {0x4, 0x5}, {0x5}, {0x2, 0x3}, {0x6, 0x6}, {0x6, 0x9}, {0x1, 0x5}, {0x1, 0x5}, {0x7, 0x2}, {0x5, 0x3}, {0x1, 0x7}, {0x4}, {0x5, 0x3}, {0x5, 0x7}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x4, 0x2, 0x16, 0x1b, 0x24, 0xb, 0x1, 0x1, 0x6, 0x9]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffa, 0x3, 0x9, 0xfff7, 0xe, 0x38, 0xd, 0x5a9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x8, 0x5, 0x3, 0x3, 0x1, 0x1]}}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x6}, {0x6, 0x2}, {0x2}, {0x0, 0x5}, {0x3, 0x4}, {0x7, 0x2}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0xa}, {0x7, 0x1}, {0x4, 0x9}, {0x2}, {0x5, 0x4}, {0x7, 0x9}, {0x1, 0x9}, {0x4, 0xa}, {0x3, 0x3}, {0x7, 0x5}, {0x5, 0x7}, {0x5, 0x9}, {0x4, 0x5}, {0x3, 0xa}, {0x7, 0x2}, {0x4, 0x7}, {0x5, 0x2}, {0x1, 0x4}, {0x6, 0x5}, {0x6, 0xa}, {0x0, 0x9}, {0x0, 0x7}, {0x3, 0x9}, {}, {0x4, 0x2}, {0x6, 0x5}, {0x0, 0x1}, {0x2, 0x6}, {0x7, 0x2}, {0x2, 0x9}, {0x0, 0x2}, {0x4, 0x8}, {0x0, 0x3}, {0x0, 0x1}, {0x6, 0x1}, {0x1, 0x7}, {0x2, 0x8}, {0x4, 0x3}, {0x0, 0x6}, {0x5, 0x2}, {0x5, 0xa}, {0x7, 0x5}, {0x7, 0x8}, {0x0, 0x7}, {0x1, 0x7}, {0x5, 0x7}, {0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x118, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x10, 0x2, 0x908, 0x8, 0x1ff, 0x8000, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x2, 0x7, 0x6, 0x8, 0xfffb, 0x1915]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x1, 0x1}, {0x2}, {0x3, 0x7}, {0x6, 0x5}, {0x5, 0x9}, {}, {0x4, 0x4}, {0x2, 0x4}, {0x1, 0xa}, {0x3, 0x2}, {0x6, 0x2}, {0x0, 0x2}, {0x5}, {0x5, 0x4}, {0x5, 0x1}, {0x2, 0x7}, {0x6, 0x8}, {0x3, 0x8}, {0x5, 0x3}, {0x3, 0x4}, {0x5, 0x5}, {0x6, 0x6}, {0x6, 0x6}, {0x0, 0x5}, {0x2, 0x4}, {0x7, 0x2}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x5}, {0x3}, {0x7, 0xa}, {0x1, 0xa}, {0x0, 0x7}, {0x5, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x6, 0x7, 0x2, 0x9, 0x70, 0x101]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x7, 0x3}, {0x7}, {0x7, 0x9}, {0x6, 0x1}, {0x2}, {0x1, 0x7}, {0x2, 0x6}, {0x2, 0x8}, {0x6, 0xa}, {0x6, 0xa}, {0x6}, {0x4, 0x9}, {0x3}, {0x4, 0xa}, {0x7}, {0x1}, {0x7, 0x1}, {0x5, 0x7}, {0x5}, {0x1, 0x3}, {0x7, 0x8}, {0x7, 0x9}, {0x4, 0x1}, {0x5, 0xa}, {0x2, 0x3}, {0x3, 0x4}, {0x4, 0x8}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x3}, {0x2}, {0x7, 0x9}, {0x4, 0x4}, {0x6, 0xa}, {0x7, 0x4}, {0x0, 0xa}, {0x5, 0x6}, {0x6, 0x5}, {0x1, 0x2}, {0x3, 0x4}, {0x3, 0x8}, {0x2, 0x3}, {0x7, 0xa}, {0x0, 0x3}, {0x4, 0x9}, {0x2, 0x8}, {}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x16, 0x0, 0x5, 0x6, 0x9, 0xc, 0x36, 0x18, 0x60, 0x3, 0xb, 0x36, 0x69, 0x60, 0xb, 0x36]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x3, 0x4}, {0x5}, {0x4, 0x9}, {0x1, 0x8}, {0x7}, {0x5, 0x2}, {}, {0x3, 0x6}, {0x1}, {0x2, 0xa}, {0x3, 0x4}, {0x1, 0x6}, {0x2, 0x2}, {0x0, 0x5}, {0x2, 0x3}, {0x4, 0x4}, {0x1, 0x8}, {0x5, 0x4}, {0x0, 0x5}, {0x5, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x4, 0x6}, {0x1, 0x6}, {0x7, 0x3}, {0x2, 0x1}, {0x7, 0x8}, {0x0, 0x1}, {0x1, 0x9}, {0x5, 0x4}, {0x2, 0x9}, {0x7, 0x5}, {0x3, 0x2}, {0x3, 0xa}, {0x0, 0x2}, {0x7, 0x4}, {0x3, 0x3}, {0x5}, {0x1, 0x3}, {0x7, 0x3}, {0x0, 0x4}, {0x6}, {0x1, 0x2}, {0x5, 0x7}, {0x2, 0x9}, {0x3, 0x5}, {0x4, 0x5}, {0x5, 0x4}, {0x5, 0x4}, {0x4, 0x4}, {0x0, 0x4}, {0x1, 0x3}, {0x6, 0x6}, {0x6, 0x8}, {0x7}, {0x1, 0x7}, {0x2, 0x9}, {0x0, 0x5}, {0x1, 0x2}, {0x5, 0x7}, {0x2, 0x3}, {0x2, 0x6}, {0x1, 0x7}, {0x1, 0x7}, {0x6}, {0x3, 0x5}, {0x0, 0x1}, {0x0, 0x8}, {0x6, 0x8}, {0x4, 0x2}, {0x3, 0x1}, {0x1, 0x5}, {0x2, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xaa}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2c}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4b}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x26}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0x2c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x54}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x2b0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x2a4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x0, 0x6}, {0x0, 0x9}, {0x1, 0x3}, {0x5, 0x2}, {0x5, 0x9}, {0x3, 0x1}, {0x0, 0x3}, {0x0, 0x6}, {0x2, 0x3}, {0x6, 0x4}, {0x1, 0x3}, {0x0, 0x2}, {0x5, 0xa}, {0x3, 0x5}, {0x7, 0x1}, {0x7}, {0x0, 0x4}, {0x4, 0xa}, {0x5, 0x4}, {0x2, 0x5}, {0x3, 0x4}, {0x5, 0x7}, {0x5, 0x4}, {0x7, 0xa}, {0x0, 0x7}, {0x4, 0xa}, {0x7, 0x6}, {0x6, 0x9}, {0x0, 0x4}, {0x2, 0x8}, {0x3, 0xa}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0x2}, {0x1, 0x7}, {0x0, 0x9}, {0x2, 0x2}, {0x1, 0x6}, {0x5, 0x3}, {0x5, 0x9}, {0x0, 0x8}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0x7}, {0x0, 0xa}, {0x7, 0x5}, {0x6, 0x3}, {0x0, 0x2}, {0x1, 0xa}, {0x6, 0x3}, {0x2, 0x4}, {0x5, 0x2}, {0x0, 0x3}, {0x4, 0x3}, {0x1, 0x6}, {0x6, 0x9}, {0x3, 0x7}, {0x4, 0x7}, {0x6, 0x3}, {0x6, 0x3}, {0x7, 0x5}, {0x7}, {0x7, 0x6}, {0x0, 0x4}, {0x1, 0x5}, {0x6, 0x8}, {0x6, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x62, 0x2, 0x1, 0xdea, 0x2, 0x2, 0xef97]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x36, 0x12, 0x48, 0x36, 0x4d, 0x16, 0x1b, 0x1b, 0x3, 0x0, 0x60, 0x1b, 0x6, 0x0, 0x18, 0x1, 0x63, 0xc, 0x60, 0x4]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x2, 0x4}, {0x4, 0x6}, {0x1, 0x3}, {0x5, 0xa}, {0x7, 0x8}, {0x3, 0x5}, {0x0, 0xa}, {0x4, 0x5}, {0x0, 0xa}, {0x5, 0x8}, {0x6, 0x3}, {0x0, 0x8}, {}, {0x6, 0x9}, {0x0, 0x2}, {0x7, 0x1}, {0x5}, {0x7, 0x6}, {0x7, 0xa}, {0x5, 0x5}, {0x4, 0x4}, {0x4, 0x2}, {0x2, 0x9}, {0x4, 0x5}, {0x1, 0x2}, {0x2, 0x7}, {0x4, 0x1}, {0x5, 0x3}, {0x5, 0x8}, {0x0, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x8, 0x4, 0x5, 0x1, 0x0, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x2, 0x12, 0x16, 0x48, 0x36, 0xb, 0x0, 0xb, 0x6, 0x48, 0x24, 0x16, 0x1, 0x3, 0x4, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xfffa, 0xfff5, 0x6, 0x0, 0x8, 0x9, 0x800]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x34d8, 0x0, 0x9, 0x7, 0xfb72, 0x6, 0x35e]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x0, 0x8}, {0x3, 0x8}, {0x2}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x7}, {0x1, 0x7}, {0x3, 0x5}, {0x7, 0x1}, {0x3, 0x7}, {0x5}, {0x1, 0x6}, {0x2, 0x3}, {0x6, 0x4}, {0x6, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x4}, {0x7, 0x1}, {0x5, 0x9}, {0x1, 0x5}, {0x5, 0xa}, {0x5, 0x7}, {0x0, 0x8}, {}, {0x1, 0x5}, {0x7, 0x3}, {0x0, 0xa}, {0x0, 0x6}, {0x4, 0x6}, {0x5, 0x6}, {0x7}, {0x3, 0x8}, {0x7, 0x6}, {0x7, 0x9}, {}, {0x4, 0x4}, {0x2, 0x4}, {0x6, 0x3}, {0x4, 0x1}, {0x1, 0x9}, {0x7, 0x3}, {0x5, 0x5}, {0x7, 0x5}, {0x7, 0x8}, {0x2, 0x7}, {0x6, 0x9}, {0x4, 0x9}, {0x1, 0x5}, {0x6, 0x5}, {0x2, 0x5}, {0x7, 0x2}, {0x7}, {0x6, 0x9}, {0x1, 0x5}, {0x3, 0x4}, {0x2, 0x4}, {0x5, 0x8}, {0x5, 0x4}, {0x3, 0x6}, {0x2, 0x4}, {0x7, 0x7}, {0x0, 0x1}]}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x2, 0x9}, {0x1, 0x6}, {0x7, 0x8}, {0x4, 0x9}, {0x7, 0xa}, {0x1, 0x2}, {0x2, 0xa}, {0x1, 0x9}, {0x1, 0x7}, {0x3, 0x8}, {0x7, 0xa}, {0x4, 0xa}, {0x6, 0x1}, {0x2, 0x4}, {0x2, 0x7}, {0x3, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x3, 0x8}, {0x5, 0x4}, {0x5, 0x3}, {0x7, 0x4}, {0x3, 0x9}, {0x6, 0x1}, {0x1, 0x6}, {0x1, 0xa}, {0x4, 0x3}, {0x5, 0x5}, {0x5, 0x8}, {0x2, 0x2}, {0x5, 0xa}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x12, 0xc, 0x60, 0x6c, 0x3, 0x63, 0x1, 0x18, 0x2, 0x1b, 0x4, 0x6c, 0xc, 0x0, 0x1b, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x200, 0x99, 0x0, 0x4, 0x4, 0xff]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x2, 0x67d, 0x0, 0xfffa, 0x92d, 0x0, 0x8001]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd9, 0x1, 0x6, 0x0, 0x3, 0x7, 0x4, 0x1]}}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x50, 0x2, [{0x5, 0x4}, {0x6, 0x6}, {0x6, 0x1}, {0x4, 0x8}, {0x1, 0x3}, {0x1}, {0x4, 0x7}, {0x1, 0x7}, {0x1, 0x8}, {0x4, 0xa}, {0x2}, {0x2, 0xa}, {0x2, 0x8}, {0x3, 0x3}, {0x6, 0x2}, {0x6, 0x7}, {0x0, 0x6}, {0x2}, {0x5, 0x7}, {0x6, 0x9}, {0x1}, {0x5}, {0x6, 0x1}, {0x5, 0x8}, {0x6, 0x5}, {0x0, 0x4}, {0x0, 0x4}, {0x4, 0x9}, {0x2, 0x9}, {0x3}, {0x0, 0x1}, {0x6, 0x2}, {0x1, 0xa}, {0x7, 0x1}, {0x0, 0x6}, {0x2, 0xa}, {0x4}, {0x0, 0x7}, {0x1, 0x4}, {0x1, 0x3}, {0x7, 0x7}, {0x1, 0x3}, {0x3, 0xa}, {0x5, 0x1}, {0x5, 0x9}, {0x2, 0x9}, {0x5, 0x1}, {0x6, 0x2}, {0x6, 0x1}, {0x6, 0x7}, {0x7, 0x8}, {0x0, 0x8}, {0x5, 0x1}, {0x6}, {0x6, 0x3}, {0x7, 0x9}, {0x7, 0x2}, {0x6, 0x2}, {0x7, 0x1}, {0x7, 0x1}, {0x3, 0xa}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x5}, {0x1, 0x5}, {0x1, 0x3}, {0x0, 0x8}, {0x2, 0x7}, {0x7, 0xa}, {0x4, 0x4}, {0x4, 0x6}, {0x7, 0x5}, {0x5, 0x8}, {0x7}, {0x1, 0x9}, {0x1, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7ff, 0x0, 0x101, 0x1, 0x7fff, 0x6, 0xa]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x30, 0x30, 0x3, 0xb]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8000, 0x2, 0x56, 0x2, 0x4, 0x3, 0x5]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x84, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xfa}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2d}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5e}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x20}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfa}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0xc8, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xd}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x91}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7c}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3d}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x47}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5b}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x28, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x24, 0x60, 0xc, 0x72, 0xb3f75b02ea3e28d2]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}]}, 0x194c}, 0x1, 0x0, 0x0, 0x4008085}, 0x2001000) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000003500)={r3, 0x5a4, 0x7fffffff, 0x9}) ioctl$SIOCX25SENDCALLACCPT(r11, 0x89e9) r12 = socket$l2tp6(0xa, 0x2, 0x73) accept(r12, &(0x7f0000003540)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f00000035c0)=0x80) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000003600)=0x4) socket$l2tp(0x2, 0x2, 0x73) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r11, &(0x7f0000003740)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003700)={&(0x7f00000036c0)={0x38, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 389.232242ms ago: executing program 3 (id=1741): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a400fe0000000079302000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00ff040400007a03000000f80000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) 294.517438ms ago: executing program 3 (id=1742): r0 = socket$inet6(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r0, 0x29, 0x7, 0x0, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010002ba99979f4474eec0000000e0000c045775f6fdbc5ee6f3f14a6a40a7fc5803974b5263829356b93225c9665d067ec4c0df36f4f8c139966810fa9404439efa536c3a3c84800"/87, @ANYRES32, @ANYBLOB="1100030000000000180012800b00010069703667726500000800028004"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB="08002700020001000800a0"], 0x34}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000003640)=r3, 0x4) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000000001050527776987738dda430a000005300002802c00018014000300ff400400ff02"], 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000340)={0x10, 0x1000}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000a0000000200000001a4ff0000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x890c, &(0x7f0000000000)) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000380)={0x0, 0x2}, 0x4) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r9, 0x1, 0x3d, &(0x7f0000000080)={0x4000001, 0x2}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@alu={0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000180)=ANY=[@ANYRESOCT=r7], &(0x7f0000000100)='syzkaller\x00', 0x20008, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) 276.154012ms ago: executing program 0 (id=1743): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff01010000260000000019e1b6950000000000000018100000", @ANYRES32, @ANYBLOB="100000000000002505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x1, 0xec, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff75, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4720}, 0x37) 203.725478ms ago: executing program 0 (id=1744): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="25790952e11c000000", 0x9}], 0x1}, 0x4004) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/74, 0x4a}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="000226bd7000fbdbdf"], 0x84}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000004) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r2}, 0x38) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x8, 0xfffffffb, 0x10, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @empty, 0x7838, 0x8, 0x100, 0x9}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000041000701feffffff00000000017c0000040042800c0001800800168004006d8004000280"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5, 0xffffffffffffffff, 0x2000000}, 0xc) 114.76695ms ago: executing program 4 (id=1745): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_ethernet(0x3b6, &(0x7f0000000000)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x1700, 0x0, 0x0, [{0x0, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x1, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c20011fc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x22, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743474671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fc07876d4ec1876d4e6fa3ce2dfdb43a6f021659ff5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x0, 0x5, "090000000900000036da018dff16e70b8b1400000000e18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fcffffff000000002f000000100003800400040008000200fd7f000018000180140002006d61637674617030"], 0x3c}}, 0x0) 0s ago: executing program 4 (id=1746): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x6, 0x4, {{0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) accept4(r0, &(0x7f0000000180)=@l2, &(0x7f0000000200)=0x80, 0x400) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000001b80)=[@dstopts_2292={{0x18, 0x29, 0x3b}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}, @dstopts={{0x18, 0x29, 0x37, {0x6c}}}], 0x58}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb0ff}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000, 0x21}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x6, 0x4, {{0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) (async) accept4(r0, &(0x7f0000000180)=@l2, &(0x7f0000000200)=0x80, 0x400) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$inet6(r4, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000001b80)=[@dstopts_2292={{0x18, 0x29, 0x3b}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}, @dstopts={{0x18, 0x29, 0x37, {0x6c}}}], 0x58}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb0ff}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000, 0x21}, 0x94) (async) kernel console output (not intermixed with test programs): bond1 [ 101.347797][ T6613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.259'. [ 101.371193][ T6615] bridge: RTM_NEWNEIGH with invalid ether address [ 101.398070][ T6613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.259'. [ 101.544272][ T6627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.262'. [ 101.567417][ T6627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.262'. [ 101.588234][ T6621] syzkaller0: entered promiscuous mode [ 101.631093][ T6621] syzkaller0: entered allmulticast mode [ 102.459432][ T6675] netlink: 'syz.4.275': attribute type 1 has an invalid length. [ 103.496601][ T6675] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 103.679141][ T6696] netlink: 'syz.1.280': attribute type 1 has an invalid length. [ 103.723836][ T6696] bond1: entered promiscuous mode [ 103.731738][ T6696] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.916256][ T6701] bond1: (slave bridge1): making interface the new active one [ 103.925973][ T6701] bridge1: entered promiscuous mode [ 103.935468][ T6701] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 104.091987][ T6705] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 104.811362][ T6728] syzkaller0: entered promiscuous mode [ 104.817991][ T6728] syzkaller0: entered allmulticast mode [ 104.825328][ T6746] netlink: 'syz.3.298': attribute type 4 has an invalid length. [ 105.336157][ T6773] __nla_validate_parse: 4 callbacks suppressed [ 105.336173][ T6773] netlink: 28 bytes leftover after parsing attributes in process `syz.0.308'. [ 106.338878][ T6754] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 106.536861][ T6784] tipc: Enabling of bearer rejected, failed to enable media [ 106.608456][ T6784] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.311'. [ 107.494033][ T6794] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.501773][ T6794] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.615769][ T6794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.636161][ T6794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.793886][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.840776][ T5268] veth0_macvtap: left promiscuous mode [ 107.881335][ T35] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.960233][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.003297][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.035145][ T6842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'. [ 108.078579][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.321'. [ 108.863523][ T6882] netlink: 16 bytes leftover after parsing attributes in process `syz.0.335'. [ 109.145772][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 109.193984][ T6902] vlan2: entered promiscuous mode [ 109.212590][ T6902] bridge0: entered promiscuous mode [ 109.256661][ T29] audit: type=1800 audit(1786090244.617:2): pid=6904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.340" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 109.261637][ T6904] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 109.297898][ T6904] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 109.309325][ T6904] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 109.432478][ T6913] netlink: zone id is out of range [ 109.444535][ T6913] netlink: zone id is out of range [ 109.464318][ T6913] netlink: zone id is out of range [ 109.479730][ T6913] netlink: zone id is out of range [ 109.503971][ T6913] netlink: zone id is out of range [ 109.523842][ T6913] netlink: zone id is out of range [ 109.550547][ T6913] netlink: zone id is out of range [ 109.574547][ T6913] netlink: zone id is out of range [ 109.584048][ T6913] netlink: zone id is out of range [ 109.589541][ T6913] netlink: zone id is out of range [ 109.605177][ T6927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.345'. [ 109.624650][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.345'. [ 109.658337][ T6930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.348'. [ 110.162851][ T6949] veth1_macvtap: left promiscuous mode [ 110.466920][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.357'. [ 110.603155][ T6958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.631393][ T6958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.675017][ T6967] netlink: 'syz.1.359': attribute type 11 has an invalid length. [ 111.025893][ T6982] ip6tnl1: entered allmulticast mode [ 111.036545][ T81] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 111.065667][ T5702] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 111.074559][ T81] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 111.369845][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'. [ 111.408746][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.368'. [ 111.486280][ T7004] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 111.528742][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.373'. [ 111.617398][ T5702] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 111.679383][ T5702] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 112.209612][ T7050] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 112.240980][ T7050] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 112.509538][ T7070] netlink: 'syz.4.386': attribute type 1 has an invalid length. [ 112.559558][ T7070] netlink: 'syz.4.386': attribute type 2 has an invalid length. [ 112.561024][ T7075] netlink: 'syz.4.386': attribute type 1 has an invalid length. [ 112.578219][ T7075] netlink: 'syz.4.386': attribute type 2 has an invalid length. [ 112.622808][ T7078] xt_hl: Unknown TTL match mode: 237 [ 112.649450][ T7078] netlink: 'syz.1.387': attribute type 3 has an invalid length. [ 112.680201][ T7078] nbd: couldn't find a device at index 904 [ 113.185166][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.400'. [ 113.199764][ T7107] netlink: 88 bytes leftover after parsing attributes in process `syz.2.400'. [ 113.381043][ T7117] bond1: entered allmulticast mode [ 113.423444][ T7117] syzkaller0: entered promiscuous mode [ 113.440183][ T7117] syzkaller0: entered allmulticast mode [ 113.456484][ T7117] tipc: Started in network mode [ 113.479642][ T7117] tipc: Node identity c6c421ccbe5c, cluster identity 4711 [ 113.526114][ T7117] tipc: Enabled bearer , priority 0 [ 113.607701][ T7117] tipc: Resetting bearer [ 113.645490][ T7115] tipc: Resetting bearer [ 113.722101][ T7115] tipc: Disabling bearer [ 114.205519][ T7201] netlink: 256 bytes leftover after parsing attributes in process `syz.2.419'. [ 114.522748][ T7223] FAULT_INJECTION: forcing a failure. [ 114.522748][ T7223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.541549][ T7224] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 114.575828][ T7223] CPU: 1 UID: 0 PID: 7223 Comm: syz.3.425 Not tainted syzkaller #0 PREEMPT(full) [ 114.575852][ T7223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.575861][ T7223] Call Trace: [ 114.575868][ T7223] [ 114.575875][ T7223] dump_stack_lvl+0xe8/0x150 [ 114.575910][ T7223] should_fail_ex+0x40c/0x560 [ 114.575934][ T7223] _copy_from_user+0x2d/0xb0 [ 114.575957][ T7223] raw_setsockopt+0x6e9/0x1440 [ 114.575975][ T7223] ? __fget_files+0x2a/0x420 [ 114.576000][ T7223] ? __pfx_aa_sk_perm+0x10/0x10 [ 114.576021][ T7223] ? __pfx_raw_setsockopt+0x10/0x10 [ 114.576037][ T7223] ? __fget_files+0x2a/0x420 [ 114.576054][ T7223] ? aa_sock_opt_perm+0xff/0x1a0 [ 114.576081][ T7223] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 114.576095][ T7223] ? __pfx_raw_setsockopt+0x10/0x10 [ 114.576114][ T7223] do_sock_setsockopt+0x17c/0x1b0 [ 114.576136][ T7223] __x64_sys_setsockopt+0x13d/0x1b0 [ 114.576157][ T7223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.576175][ T7223] do_syscall_64+0x174/0x580 [ 114.576197][ T7223] ? trace_irq_disable+0x3b/0x140 [ 114.576217][ T7223] ? clear_bhb_loop+0x70/0xc0 [ 114.576238][ T7223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.576254][ T7223] RIP: 0033:0x7f1b97d9e0d9 [ 114.576275][ T7223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.576289][ T7223] RSP: 002b:00007f1b98d1b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 114.576310][ T7223] RAX: ffffffffffffffda RBX: 00007f1b98025fa0 RCX: 00007f1b97d9e0d9 [ 114.576322][ T7223] RDX: 0000000000000008 RSI: 0000000000000065 RDI: 0000000000000003 [ 114.576332][ T7223] RBP: 00007f1b98d1b090 R08: 0000000000000004 R09: 0000000000000000 [ 114.576342][ T7223] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 114.576353][ T7223] R13: 00007f1b98026038 R14: 00007f1b98025fa0 R15: 00007ffd5070a4b8 [ 114.576383][ T7223] [ 114.825694][ T7233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.427'. [ 114.918080][ T7233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.427'. [ 115.035017][ T7238] netlink: 220 bytes leftover after parsing attributes in process `syz.2.430'. [ 115.084011][ T7238] tc_dump_action: action bad kind [ 115.127344][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 115.343886][ T7262] netlink: 'syz.4.435': attribute type 7 has an invalid length. [ 115.389759][ T7262] netlink: 'syz.4.435': attribute type 7 has an invalid length. [ 115.536027][ T7273] FAULT_INJECTION: forcing a failure. [ 115.536027][ T7273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.564426][ T7273] CPU: 1 UID: 0 PID: 7273 Comm: syz.3.439 Not tainted syzkaller #0 PREEMPT(full) [ 115.564449][ T7273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.564458][ T7273] Call Trace: [ 115.564465][ T7273] [ 115.564472][ T7273] dump_stack_lvl+0xe8/0x150 [ 115.564500][ T7273] should_fail_ex+0x40c/0x560 [ 115.564521][ T7273] _copy_to_user+0x31/0xb0 [ 115.564545][ T7273] simple_read_from_buffer+0xe1/0x170 [ 115.564569][ T7273] proc_fail_nth_read+0x1bb/0x230 [ 115.564593][ T7273] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 115.564617][ T7273] ? rw_verify_area+0x24a/0x4c0 [ 115.564642][ T7273] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 115.564663][ T7273] vfs_read+0x213/0xa80 [ 115.564691][ T7273] ? __pfx___mutex_lock+0x10/0x10 [ 115.564712][ T7273] ? __pfx_vfs_read+0x10/0x10 [ 115.564735][ T7273] ? __fget_files+0x2a/0x420 [ 115.564756][ T7273] ? __fget_files+0x3a2/0x420 [ 115.564775][ T7273] ? __fget_files+0x2a/0x420 [ 115.564802][ T7273] ksys_read+0x150/0x270 [ 115.564827][ T7273] ? __pfx_ksys_read+0x10/0x10 [ 115.564856][ T7273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.564873][ T7273] do_syscall_64+0x174/0x580 [ 115.564890][ T7273] ? trace_irq_disable+0x3b/0x140 [ 115.564910][ T7273] ? clear_bhb_loop+0x70/0xc0 [ 115.564930][ T7273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.564947][ T7273] RIP: 0033:0x7f1b97d5e90e [ 115.564970][ T7273] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 115.564984][ T7273] RSP: 002b:00007f1b98d1afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 115.565002][ T7273] RAX: ffffffffffffffda RBX: 00007f1b98d1b6c0 RCX: 00007f1b97d5e90e [ 115.565014][ T7273] RDX: 000000000000000f RSI: 00007f1b98d1b0a0 RDI: 0000000000000004 [ 115.565025][ T7273] RBP: 00007f1b98d1b090 R08: 0000000000000000 R09: 0000000000000000 [ 115.565034][ T7273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.565044][ T7273] R13: 00007f1b98026038 R14: 00007f1b98025fa0 R15: 00007ffd5070a4b8 [ 115.565073][ T7273] [ 116.009463][ T7290] ieee802154 phy0 wpan0: encryption failed: -22 [ 116.238867][ T7307] netlink: 'syz.1.453': attribute type 3 has an invalid length. [ 116.247330][ T7307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.453'. [ 116.253969][ T7304] netlink: 112 bytes leftover after parsing attributes in process `syz.3.452'. [ 116.261620][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.451'. [ 116.291811][ T7304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.452'. [ 116.483744][ T7315] netlink: 'syz.2.456': attribute type 32 has an invalid length. [ 116.506116][ T7315] netlink: 16 bytes leftover after parsing attributes in process `syz.2.456'. [ 116.530886][ T7302] netlink: 164 bytes leftover after parsing attributes in process `syz.4.447'. [ 116.550467][ T7302] netlink: 16 bytes leftover after parsing attributes in process `syz.4.447'. [ 116.686605][ T7328] netlink: 'syz.3.460': attribute type 2 has an invalid length. [ 116.709723][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.460'. [ 116.737284][ T7330] netlink: 92 bytes leftover after parsing attributes in process `syz.2.459'. [ 116.765742][ T7332] netlink: 'syz.3.460': attribute type 2 has an invalid length. [ 116.791059][ T7328] ¿: entered promiscuous mode [ 116.801289][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.460'. [ 116.826874][ T7335] netlink: 'syz.4.462': attribute type 58 has an invalid length. [ 117.150731][ T7350] IPVS: set_ctl: invalid protocol: 11822 0.0.0.0:0 [ 117.187968][ T7348] net_ratelimit: 1704 callbacks suppressed [ 117.187985][ T7348] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 117.299396][ T12] IPVS: starting estimator thread 0... [ 117.407564][ T7358] IPVS: using max 36 ests per chain, 86400 per kthread [ 117.479786][ T7362] IPv6: NLM_F_CREATE should be specified when creating new route [ 117.830975][ T7375] ieee802154 phy0 wpan0: encryption failed: -22 [ 117.920901][ T7382] netlink: 'syz.3.477': attribute type 16 has an invalid length. [ 118.301104][ T5615] block nbd0: Receive control failed (result -32) [ 118.311955][ T50] block nbd0: Receive control failed (result -32) [ 119.331941][ T7454] syzkaller0: entered promiscuous mode [ 119.354535][ T7454] syzkaller0: entered allmulticast mode [ 120.611514][ T7530] xt_hashlimit: size too large, truncated to 1048576 [ 120.654616][ T7530] xt_hashlimit: max too large, truncated to 1048576 [ 121.166376][ T7574] netlink: 'syz.4.537': attribute type 1 has an invalid length. [ 121.290564][ T50] Bluetooth: hci4: link tx timeout [ 121.297545][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 121.308666][ T50] Bluetooth: hci4: link tx timeout [ 121.313851][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 121.323579][ T50] Bluetooth: hci4: link tx timeout [ 121.328815][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 121.336561][ T50] Bluetooth: hci4: link tx timeout [ 121.342431][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 121.350278][ T50] Bluetooth: hci4: link tx timeout [ 121.355416][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 121.363130][ T50] Bluetooth: hci4: link tx timeout [ 121.368378][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 121.379922][ T50] Bluetooth: hci4: link tx timeout [ 121.385600][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 121.393707][ T50] Bluetooth: hci4: link tx timeout [ 121.399152][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 121.406834][ T50] Bluetooth: hci4: link tx timeout [ 121.413159][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 121.690531][ T7604] netlink: 'syz.3.543': attribute type 2 has an invalid length. [ 121.750352][ T7604] : entered promiscuous mode [ 121.965947][ T7618] __nla_validate_parse: 16 callbacks suppressed [ 121.965966][ T7618] netlink: 200 bytes leftover after parsing attributes in process `syz.3.548'. [ 122.026574][ T7618] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 122.056952][ T7618] openvswitch: netlink: Message has 208 unknown bytes. [ 122.240585][ T7634] netlink: 32 bytes leftover after parsing attributes in process `syz.2.553'. [ 122.368505][ T7642] netlink: 168 bytes leftover after parsing attributes in process `syz.0.554'. [ 122.398795][ T7642] netlink: 'syz.0.554': attribute type 1 has an invalid length. [ 122.449078][ T7642] vlan2: entered promiscuous mode [ 122.490426][ T7643] netlink: 168 bytes leftover after parsing attributes in process `syz.0.554'. [ 122.510653][ T7643] netlink: 'syz.0.554': attribute type 1 has an invalid length. [ 122.906601][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.559'. [ 122.932103][ T7659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.559'. [ 122.943066][ T7658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.559'. [ 122.958451][ T7659] netlink: 'syz.3.559': attribute type 10 has an invalid length. [ 122.971931][ T7664] netlink: 'syz.3.559': attribute type 10 has an invalid length. [ 123.042785][ T7659] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 123.127416][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 123.345800][ T7683] xt_connbytes: Forcing CT accounting to be enabled [ 123.371119][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 123.412402][ T7683] tipc: Started in network mode [ 123.435848][ T7683] tipc: Node identity 4246, cluster identity 4711 [ 123.457956][ T7683] tipc: Node number set to 16966 [ 123.526058][ T7683] syzkaller0: entered promiscuous mode [ 123.559374][ T7683] syzkaller0: entered allmulticast mode [ 123.914424][ T7715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.574'. [ 124.206489][ T7736] netlink: 24 bytes leftover after parsing attributes in process `syz.4.577'. [ 124.722852][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.586'. [ 124.850549][ T7769] netlink: 'syz.4.589': attribute type 1 has an invalid length. [ 124.862397][ T7761] bond1: option ad_actor_sys_prio: invalid value (0) [ 124.875984][ T7761] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 124.893099][ T7761] bond1 (unregistering): Released all slaves [ 124.971006][ T7781] netlink: 'syz.3.592': attribute type 1 has an invalid length. [ 124.984978][ T7782] netlink: 'syz.3.592': attribute type 1 has an invalid length. [ 125.054458][ T7789] netlink: 'syz.4.589': attribute type 10 has an invalid length. [ 125.069348][ T7790] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 125.078655][ T7790] IPv6: NLM_F_CREATE should be set when creating new route [ 125.171570][ T7769] bond2: option mode: invalid value (7) [ 125.179568][ T7769] bond2 (unregistering): Released all slaves [ 125.252546][ T7781] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.284506][ T7785] bond2: option xmit_hash_policy: invalid value (8) [ 125.300534][ T7785] bond2 (unregistering): Released all slaves [ 125.356313][ T7788] bond2: (slave gretap2): making interface the new active one [ 125.367109][ T7788] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 125.401278][ T7789] dummy0: entered promiscuous mode [ 125.966312][ T7818] tipc: Enabling of bearer rejected, failed to enable media [ 126.699610][ T7849] FAULT_INJECTION: forcing a failure. [ 126.699610][ T7849] name failslab, interval 1, probability 0, space 0, times 0 [ 126.722211][ T7849] CPU: 0 UID: 0 PID: 7849 Comm: syz.0.609 Not tainted syzkaller #0 PREEMPT(full) [ 126.722236][ T7849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.722246][ T7849] Call Trace: [ 126.722253][ T7849] [ 126.722260][ T7849] dump_stack_lvl+0xe8/0x150 [ 126.722289][ T7849] should_fail_ex+0x40c/0x560 [ 126.722312][ T7849] should_failslab+0xa8/0x100 [ 126.722337][ T7849] __kmalloc_noprof+0xfe/0x720 [ 126.722359][ T7849] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 126.722383][ T7849] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 126.722414][ T7849] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 126.722444][ T7849] genl_family_rcv_msg_doit+0xda/0x340 [ 126.722474][ T7849] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 126.722502][ T7849] ? __pfx_genl_get_cmd+0x10/0x10 [ 126.722521][ T7849] ? stack_trace_save+0xa9/0x100 [ 126.722539][ T7849] ? __pfx_fou_nl_get_doit+0x10/0x10 [ 126.722559][ T7849] ? __pfx_fou_nl_get_dumpit+0x10/0x10 [ 126.722581][ T7849] ? __lock_acquire+0x683/0x2cf0 [ 126.722613][ T7849] genl_rcv_msg+0x614/0x7a0 [ 126.722642][ T7849] ? __pfx_genl_rcv_msg+0x10/0x10 [ 126.722663][ T7849] ? __pfx_fou_nl_get_doit+0x10/0x10 [ 126.722700][ T7849] netlink_rcv_skb+0x226/0x4a0 [ 126.722727][ T7849] ? __pfx_genl_rcv_msg+0x10/0x10 [ 126.722751][ T7849] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 126.722786][ T7849] ? down_read+0x2be/0x330 [ 126.722815][ T7849] genl_rcv+0x28/0x40 [ 126.722835][ T7849] netlink_unicast+0x7bb/0x940 [ 126.722864][ T7849] netlink_sendmsg+0x813/0xb40 [ 126.722893][ T7849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.722917][ T7849] ? aa_sock_msg_perm+0xf1/0x1b0 [ 126.722947][ T7849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.722964][ T7849] sock_sendmsg_nosec+0x13a/0x180 [ 126.722990][ T7849] ____sys_sendmsg+0x54e/0x850 [ 126.723015][ T7849] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.723042][ T7849] ? import_iovec+0x73/0xa0 [ 126.723067][ T7849] ___sys_sendmsg+0x2a5/0x360 [ 126.723084][ T7849] ? __lock_acquire+0x683/0x2cf0 [ 126.723108][ T7849] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.723163][ T7849] ? __fget_files+0x2a/0x420 [ 126.723186][ T7849] ? __fget_files+0x3a2/0x420 [ 126.723216][ T7849] __x64_sys_sendmsg+0x1b1/0x290 [ 126.723239][ T7849] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 126.723277][ T7849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.723295][ T7849] do_syscall_64+0x174/0x580 [ 126.723316][ T7849] ? trace_irq_disable+0x3b/0x140 [ 126.723337][ T7849] ? clear_bhb_loop+0x70/0xc0 [ 126.723358][ T7849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.723374][ T7849] RIP: 0033:0x7fce5539e0d9 [ 126.723391][ T7849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.723404][ T7849] RSP: 002b:00007fce5625a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.723422][ T7849] RAX: ffffffffffffffda RBX: 00007fce55625fa0 RCX: 00007fce5539e0d9 [ 126.723434][ T7849] RDX: 0000000000000840 RSI: 00002000000003c0 RDI: 0000000000000003 [ 126.723444][ T7849] RBP: 00007fce5625a090 R08: 0000000000000000 R09: 0000000000000000 [ 126.723453][ T7849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.723461][ T7849] R13: 00007fce55626038 R14: 00007fce55625fa0 R15: 00007ffd4d13ca18 [ 126.723490][ T7849] [ 126.839023][ T7810] syz.3.598 (7810) used greatest stack depth: 17376 bytes left [ 127.844205][ T7886] __nla_validate_parse: 5 callbacks suppressed [ 127.844223][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.618'. [ 127.904755][ T7890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.621'. [ 127.959780][ T7894] netlink: 16 bytes leftover after parsing attributes in process `syz.3.621'. [ 127.973979][ T7894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.621'. [ 128.416635][ T7917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.626'. [ 128.617766][ T7929] FAULT_INJECTION: forcing a failure. [ 128.617766][ T7929] name failslab, interval 1, probability 0, space 0, times 0 [ 128.633800][ T12] IPVS: starting estimator thread 0... [ 128.658912][ T7929] CPU: 0 UID: 0 PID: 7929 Comm: syz.0.636 Not tainted syzkaller #0 PREEMPT(full) [ 128.658936][ T7929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 128.658945][ T7929] Call Trace: [ 128.658952][ T7929] [ 128.658959][ T7929] dump_stack_lvl+0xe8/0x150 [ 128.658988][ T7929] should_fail_ex+0x40c/0x560 [ 128.659010][ T7929] should_failslab+0xa8/0x100 [ 128.659036][ T7929] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 128.659058][ T7929] ? local_lock_release+0x9c/0x160 [ 128.659083][ T7929] ? __alloc_skb+0x1d7/0x7a0 [ 128.659104][ T7929] ? __alloc_skb+0x1d7/0x7a0 [ 128.659133][ T7929] __alloc_skb+0x1d7/0x7a0 [ 128.659160][ T7929] fou_nl_get_doit+0x1ac/0x7b0 [ 128.659181][ T7929] ? trace_kmalloc+0x2a/0xf0 [ 128.659204][ T7929] ? __pfx_fou_nl_get_doit+0x10/0x10 [ 128.659230][ T7929] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 128.659251][ T7929] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 128.659280][ T7929] genl_family_rcv_msg_doit+0x233/0x340 [ 128.659306][ T7929] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 128.659338][ T7929] ? __lock_acquire+0x683/0x2cf0 [ 128.659369][ T7929] genl_rcv_msg+0x614/0x7a0 [ 128.659398][ T7929] ? __pfx_genl_rcv_msg+0x10/0x10 [ 128.659419][ T7929] ? __pfx_fou_nl_get_doit+0x10/0x10 [ 128.659451][ T7929] netlink_rcv_skb+0x226/0x4a0 [ 128.659471][ T7929] ? __pfx_genl_rcv_msg+0x10/0x10 [ 128.659496][ T7929] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 128.659530][ T7929] ? down_read+0x2be/0x330 [ 128.659564][ T7929] genl_rcv+0x28/0x40 [ 128.659583][ T7929] netlink_unicast+0x7bb/0x940 [ 128.659608][ T7929] netlink_sendmsg+0x813/0xb40 [ 128.659634][ T7929] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.659656][ T7929] ? aa_sock_msg_perm+0xf1/0x1b0 [ 128.659685][ T7929] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.659702][ T7929] sock_sendmsg_nosec+0x13a/0x180 [ 128.659726][ T7929] ____sys_sendmsg+0x54e/0x850 [ 128.659749][ T7929] ? __pfx_____sys_sendmsg+0x10/0x10 [ 128.659776][ T7929] ? import_iovec+0x73/0xa0 [ 128.659801][ T7929] ___sys_sendmsg+0x2a5/0x360 [ 128.659818][ T7929] ? __lock_acquire+0x683/0x2cf0 [ 128.659840][ T7929] ? __pfx____sys_sendmsg+0x10/0x10 [ 128.659894][ T7929] ? __fget_files+0x2a/0x420 [ 128.659914][ T7929] ? __fget_files+0x3a2/0x420 [ 128.659951][ T7929] __x64_sys_sendmsg+0x1b1/0x290 [ 128.659971][ T7929] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 128.660007][ T7929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.660026][ T7929] do_syscall_64+0x174/0x580 [ 128.660046][ T7929] ? trace_irq_disable+0x3b/0x140 [ 128.660065][ T7929] ? clear_bhb_loop+0x70/0xc0 [ 128.660087][ T7929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.660103][ T7929] RIP: 0033:0x7fce5539e0d9 [ 128.660119][ T7929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.660131][ T7929] RSP: 002b:00007fce5625a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.660150][ T7929] RAX: ffffffffffffffda RBX: 00007fce55625fa0 RCX: 00007fce5539e0d9 [ 128.660162][ T7929] RDX: 0000000000000840 RSI: 00002000000003c0 RDI: 0000000000000003 [ 128.660172][ T7929] RBP: 00007fce5625a090 R08: 0000000000000000 R09: 0000000000000000 [ 128.660183][ T7929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.660192][ T7929] R13: 00007fce55626038 R14: 00007fce55625fa0 R15: 00007ffd4d13ca18 [ 128.660220][ T7929] [ 129.058035][ T7930] IPVS: using max 30 ests per chain, 72000 per kthread [ 129.197257][ T7936] tipc: Enabling of bearer rejected, failed to enable media [ 129.343047][ T7948] virt_wifi0: entered promiscuous mode [ 129.382209][ T7948] batman_adv: batadv0: Adding interface: virt_wifi0 [ 129.415348][ T7948] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.441940][ T7948] batman_adv: batadv0: Interface activated: virt_wifi0 [ 129.449255][ T7949] block nbd1: server does not support multiple connections per device. [ 129.472942][ T7949] block nbd1: shutting down sockets [ 129.764234][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.648'. [ 129.871717][ T7977] netlink: 'syz.3.650': attribute type 1 has an invalid length. [ 129.904575][ T7977] netlink: 224 bytes leftover after parsing attributes in process `syz.3.650'. [ 129.926846][ T7973] hsr_slave_1 (unregistering): left promiscuous mode [ 129.979295][ T7949] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 130.167726][ T7949] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 130.175882][ T7974] dummy0: left promiscuous mode [ 130.193648][ T7949] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 130.269592][ T7949] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 130.274049][ T7974] virt_wifi0: left promiscuous mode [ 130.281047][ T7949] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 130.294434][ T7974] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 130.339014][ T7949] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 130.346653][ T7949] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 130.416733][ T7949] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 130.442934][ T7949] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 130.579725][ T7995] ip6tnl1: entered promiscuous mode [ 130.958485][ T8004] sctp: [Deprecated]: syz.4.655 (pid 8004) Use of struct sctp_assoc_value in delayed_ack socket option. [ 130.958485][ T8004] Use struct sctp_sack_info instead [ 131.105464][ T8005] bridge_slave_0: left allmulticast mode [ 131.117633][ T8005] bridge_slave_0: left promiscuous mode [ 131.137089][ T8005] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.195826][ T8005] bridge_slave_1: left allmulticast mode [ 131.210871][ T8005] bridge_slave_1: left promiscuous mode [ 131.221808][ T8005] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.259761][ T8005] bond0: (slave bond_slave_0): Releasing backup interface [ 131.283375][ T8005] bond0: (slave bond_slave_1): Releasing backup interface [ 131.326688][ T8005] team0: Port device team_slave_0 removed [ 131.359355][ T8005] team0: Port device team_slave_1 removed [ 131.380897][ T8005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.390005][ T8005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.535870][ T8005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.554010][ T8005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.574668][ T8005] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 131.616182][ T8015] virt_wifi0: entered promiscuous mode [ 132.716475][ T8101] virt_wifi0: entered promiscuous mode [ 132.733066][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.742032][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.470826][ T8146] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.605570][ T8146] netlink: 16 bytes leftover after parsing attributes in process `syz.3.687'. [ 133.638782][ T8146] netlink: 16 bytes leftover after parsing attributes in process `syz.3.687'. [ 134.314769][ T8194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.702'. [ 134.536776][ T8206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.704'. [ 134.697019][ T8213] sctp: [Deprecated]: syz.1.705 (pid 8213) Use of int in maxseg socket option. [ 134.697019][ T8213] Use struct sctp_assoc_value instead [ 134.710267][ T8207] bond1: option ad_select: invalid value (34) [ 134.765210][ T8207] bond1 (unregistering): Released all slaves [ 135.230998][ T8231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.709'. [ 135.334217][ T8231] netlink: 112 bytes leftover after parsing attributes in process `syz.0.709'. [ 135.370762][ T8237] netlink: 16 bytes leftover after parsing attributes in process `syz.4.711'. [ 135.428251][ T8237] netlink: 32 bytes leftover after parsing attributes in process `syz.4.711'. [ 135.621279][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.714'. [ 135.678626][ T8247] syzkaller0: entered promiscuous mode [ 135.711002][ T8247] syzkaller0: entered allmulticast mode [ 135.748947][ T8247] TC_ACT_REPEAT abuse ? [ 135.935481][ T8268] netlink: 28 bytes leftover after parsing attributes in process `syz.0.720'. [ 137.683843][ T8340] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 138.268710][ T8380] syzkaller0: entered promiscuous mode [ 138.328034][ T8380] syzkaller0: entered allmulticast mode [ 138.336107][ T5604] udevd[5604]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 138.403296][ T5604] udevd[5604]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 138.487761][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 139.023831][ T8421] __nla_validate_parse: 3 callbacks suppressed [ 139.023849][ T8421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.745'. [ 139.051143][ T8422] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 139.060937][ T8422] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 139.069883][ T8422] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 139.391892][ T8442] tipc: Started in network mode [ 139.401408][ T8442] tipc: Node identity 1, cluster identity 4711 [ 139.412070][ T8442] tipc: Node number set to 1 [ 139.423825][ T8442] tipc: Enabling of bearer rejected, failed to enable media [ 139.552483][ T8446] bridge1: entered promiscuous mode [ 139.558905][ T5601] cgroup: fork rejected by pids controller in /syz4 [ 139.583566][ T8446] bridge1: entered allmulticast mode [ 139.744805][ T8458] FAULT_INJECTION: forcing a failure. [ 139.744805][ T8458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.786040][ T8458] CPU: 1 UID: 0 PID: 8458 Comm: syz.1.759 Not tainted syzkaller #0 PREEMPT(full) [ 139.786064][ T8458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.786073][ T8458] Call Trace: [ 139.786079][ T8458] [ 139.786086][ T8458] dump_stack_lvl+0xe8/0x150 [ 139.786112][ T8458] should_fail_ex+0x40c/0x560 [ 139.786133][ T8458] _copy_from_user+0x2d/0xb0 [ 139.786154][ T8458] ___sys_sendmsg+0x1c6/0x360 [ 139.786172][ T8458] ? __lock_acquire+0x683/0x2cf0 [ 139.786197][ T8458] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.786248][ T8458] ? __fget_files+0x2a/0x420 [ 139.786268][ T8458] ? __fget_files+0x3a2/0x420 [ 139.786297][ T8458] __x64_sys_sendmsg+0x1b1/0x290 [ 139.786318][ T8458] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 139.786353][ T8458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.786372][ T8458] do_syscall_64+0x174/0x580 [ 139.786391][ T8458] ? trace_irq_disable+0x3b/0x140 [ 139.786410][ T8458] ? clear_bhb_loop+0x70/0xc0 [ 139.786430][ T8458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.786447][ T8458] RIP: 0033:0x7f1a6e79e0d9 [ 139.786463][ T8458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.786476][ T8458] RSP: 002b:00007f1a6f6da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.786494][ T8458] RAX: ffffffffffffffda RBX: 00007f1a6ea25fa0 RCX: 00007f1a6e79e0d9 [ 139.786514][ T8458] RDX: 0000000002000040 RSI: 0000200000001940 RDI: 0000000000000004 [ 139.786525][ T8458] RBP: 00007f1a6f6da090 R08: 0000000000000000 R09: 0000000000000000 [ 139.786535][ T8458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.786545][ T8458] R13: 00007f1a6ea26038 R14: 00007f1a6ea25fa0 R15: 00007ffce850a9e8 [ 139.786573][ T8458] [ 140.009053][ T8469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.761'. [ 140.045445][ T8460] netlink: 100 bytes leftover after parsing attributes in process `syz.0.760'. [ 140.172479][ T8470] 8021q: adding VLAN 0 to HW filter on device bond3 [ 140.204840][ T8470] bond2: (slave bond3): Enslaving as an active interface with an up link [ 140.222509][ T8482] netlink: 40 bytes leftover after parsing attributes in process `syz.0.765'. [ 140.256662][ T8482] netlink: 'syz.0.765': attribute type 2 has an invalid length. [ 140.719895][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 140.731824][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 140.744152][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 140.764112][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 140.774344][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 140.802303][ T5615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 140.817621][ T5615] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 140.825353][ T5615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 140.836899][ T5615] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 140.844739][ T5615] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 140.951625][ T8509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.774'. [ 141.095472][ T8516] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 141.182511][ T8520] nbd: must specify a device to reconfigure [ 141.327959][ T8528] netlink: 16 bytes leftover after parsing attributes in process `syz.0.778'. [ 141.484970][ T8537] netlink: 'syz.1.780': attribute type 1 has an invalid length. [ 141.555405][ T8537] 8021q: adding VLAN 0 to HW filter on device bond2 [ 141.570644][ T8542] vlan3: entered promiscuous mode [ 141.575875][ T8542] bond2: entered promiscuous mode [ 141.581355][ T8542] vlan3: entered allmulticast mode [ 141.586645][ T8542] bond2: entered allmulticast mode [ 141.622322][ T8537] netlink: 52 bytes leftover after parsing attributes in process `syz.1.780'. [ 141.783606][ T8537] bond2: (slave bridge4): making interface the new active one [ 141.798008][ T8537] bridge4: entered promiscuous mode [ 141.807545][ T8537] bridge4: entered allmulticast mode [ 141.815937][ T8537] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 142.015335][ T8561] netlink: 'syz.1.786': attribute type 21 has an invalid length. [ 142.055136][ T8561] netlink: 132 bytes leftover after parsing attributes in process `syz.1.786'. [ 142.353061][ T8579] raw_sendmsg: syz.1.791 forgot to set AF_INET. Fix it! [ 142.361160][ T8579] netlink: 84 bytes leftover after parsing attributes in process `syz.1.791'. [ 142.699124][ T8502] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.707651][ T8502] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.714962][ T8502] bridge_slave_0: entered allmulticast mode [ 142.727590][ T8502] bridge_slave_0: entered promiscuous mode [ 142.737963][ T8502] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.748052][ T8502] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.758986][ T8502] bridge_slave_1: entered allmulticast mode [ 142.768820][ T8502] bridge_slave_1: entered promiscuous mode [ 142.770887][ T8592] netlink: 28 bytes leftover after parsing attributes in process `syz.1.794'. [ 142.821614][ T8502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.834538][ T8502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.887904][ T5615] Bluetooth: hci0: command tx timeout [ 142.914538][ T8502] team0: Port device team_slave_0 added [ 142.928375][ T8502] team0: Port device team_slave_1 added [ 142.992746][ T8598] gre1: entered allmulticast mode [ 142.999140][ T8502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.006366][ T8502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.037415][ T8502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.062667][ T8502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.069829][ T8502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.111372][ T8502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.201692][ T8502] hsr_slave_0: entered promiscuous mode [ 143.210397][ T8502] hsr_slave_1: entered promiscuous mode [ 143.216446][ T8502] debugfs: 'hsr0' already exists in 'hsr' [ 143.222288][ T8502] Cannot create hsr debugfs directory [ 143.656550][ T8502] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.701386][ T8502] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.879649][ T8502] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.918235][ T8502] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.180187][ T8502] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.218538][ T8502] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.265284][ T8644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.809'. [ 144.388135][ T8634] tipc: Enabled bearer , priority 0 [ 144.415106][ T8634] syzkaller0: entered promiscuous mode [ 144.427864][ T8634] syzkaller0: entered allmulticast mode [ 144.441209][ T8634] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 144.750934][ T8653] tipc: Resetting bearer [ 144.766828][ T8633] tipc: Resetting bearer [ 144.806445][ T8633] tipc: Disabling bearer [ 144.968476][ T5615] Bluetooth: hci0: command tx timeout [ 145.328594][ T8502] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 145.329526][ T8670] FAULT_INJECTION: forcing a failure. [ 145.329526][ T8670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.369521][ T8502] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 145.392610][ T8502] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 145.411943][ T8670] CPU: 1 UID: 0 PID: 8670 Comm: syz.1.815 Not tainted syzkaller #0 PREEMPT(full) [ 145.411966][ T8670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 145.411974][ T8670] Call Trace: [ 145.411980][ T8670] [ 145.411986][ T8670] dump_stack_lvl+0xe8/0x150 [ 145.412015][ T8670] should_fail_ex+0x40c/0x560 [ 145.412037][ T8670] _copy_from_user+0x2d/0xb0 [ 145.412059][ T8670] __sys_sendto+0x2a9/0x5a0 [ 145.412078][ T8670] ? __pfx___sys_sendto+0x10/0x10 [ 145.412119][ T8670] ? do_user_addr_fault+0xc4a/0x1340 [ 145.412146][ T8670] __x64_sys_sendto+0xde/0x100 [ 145.412163][ T8670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.412182][ T8670] do_syscall_64+0x174/0x580 [ 145.412202][ T8670] ? trace_irq_disable+0x3b/0x140 [ 145.412220][ T8670] ? clear_bhb_loop+0x70/0xc0 [ 145.412239][ T8670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.412254][ T8670] RIP: 0033:0x7f1a6e75e90e [ 145.412268][ T8670] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 145.412280][ T8670] RSP: 002b:00007f1a6f6d8e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 145.412298][ T8670] RAX: ffffffffffffffda RBX: 00007f1a6f6da6c0 RCX: 00007f1a6e75e90e [ 145.412311][ T8670] RDX: 0000000000000024 RSI: 00007f1a6f6d9000 RDI: 0000000000000004 [ 145.412321][ T8670] RBP: 0000000000000000 R08: 00007f1a6f6d8f04 R09: 000000000000000c [ 145.412330][ T8670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 145.412339][ T8670] R13: 00007f1a6f6d8f58 R14: 00007f1a6f6d9000 R15: 0000000000000000 [ 145.412363][ T8670] [ 145.424254][ T8502] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 145.606613][ T8502] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 145.641568][ T8502] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 145.658490][ T8502] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 145.682649][ T8502] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 145.730492][ T8687] ip6t_rpfilter: unknown options [ 145.766248][ T8695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.821'. [ 145.863124][ T8502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.938807][ T8502] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.964526][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.971760][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.002393][ T8700] netlink: 28 bytes leftover after parsing attributes in process `syz.3.823'. [ 146.013835][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.021035][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.226037][ T8710] IPv6: Can't replace route, no match found [ 146.656076][ T8733] netlink: 'syz.1.832': attribute type 15 has an invalid length. [ 146.688580][ T8733] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 146.907707][ T8743] pimreg: entered allmulticast mode [ 146.921715][ T8743] pimreg: left allmulticast mode [ 147.013455][ T8747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.837'. [ 147.057369][ T5615] Bluetooth: hci0: command tx timeout [ 147.290124][ T8502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.418123][ T8776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.843'. [ 147.497315][ T8773] netlink: 24 bytes leftover after parsing attributes in process `syz.2.842'. [ 147.559650][ T8784] syz.1.845: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 147.608561][ T8784] CPU: 1 UID: 0 PID: 8784 Comm: syz.1.845 Not tainted syzkaller #0 PREEMPT(full) [ 147.608584][ T8784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 147.608592][ T8784] Call Trace: [ 147.608599][ T8784] [ 147.608606][ T8784] dump_stack_lvl+0xe8/0x150 [ 147.608632][ T8784] warn_alloc+0x24c/0x270 [ 147.608659][ T8784] ? __pfx_warn_alloc+0x10/0x10 [ 147.608675][ T8784] ? xskq_create+0x56/0x220 [ 147.608694][ T8784] ? xsk_setsockopt+0x52a/0x960 [ 147.608712][ T8784] ? do_syscall_64+0x174/0x580 [ 147.608731][ T8784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.608762][ T8784] __vmalloc_node_range_noprof+0x12c/0x1730 [ 147.608808][ T8784] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 147.608828][ T8784] ? __kmalloc_cache_noprof+0x32d/0x660 [ 147.608846][ T8784] ? __kmalloc_cache_noprof+0x150/0x660 [ 147.608862][ T8784] ? xskq_create+0x56/0x220 [ 147.608882][ T8784] xskq_create+0x148/0x220 [ 147.608899][ T8784] ? xsk_init_queue+0x8a/0xe0 [ 147.608923][ T8784] xsk_init_queue+0x8a/0xe0 [ 147.608945][ T8784] xsk_setsockopt+0x52a/0x960 [ 147.608962][ T8784] ? __fget_files+0x2a/0x420 [ 147.608983][ T8784] ? __pfx_xsk_setsockopt+0x10/0x10 [ 147.609002][ T8784] ? __pfx_aa_sk_perm+0x10/0x10 [ 147.609028][ T8784] ? aa_sock_opt_perm+0xff/0x1a0 [ 147.609053][ T8784] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 147.609068][ T8784] ? __pfx_xsk_setsockopt+0x10/0x10 [ 147.609088][ T8784] do_sock_setsockopt+0x17c/0x1b0 [ 147.609110][ T8784] __x64_sys_setsockopt+0x13d/0x1b0 [ 147.609129][ T8784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.609147][ T8784] do_syscall_64+0x174/0x580 [ 147.609167][ T8784] ? trace_irq_disable+0x3b/0x140 [ 147.609186][ T8784] ? clear_bhb_loop+0x70/0xc0 [ 147.609206][ T8784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.609230][ T8784] RIP: 0033:0x7f1a6e79e0d9 [ 147.609246][ T8784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.609258][ T8784] RSP: 002b:00007f1a6f6b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 147.609276][ T8784] RAX: ffffffffffffffda RBX: 00007f1a6ea26090 RCX: 00007f1a6e79e0d9 [ 147.609288][ T8784] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 147.609298][ T8784] RBP: 00007f1a6e835024 R08: 0000000000000004 R09: 0000000000000000 [ 147.609309][ T8784] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.609318][ T8784] R13: 00007f1a6ea26128 R14: 00007f1a6ea26090 R15: 00007ffce850a9e8 [ 147.609347][ T8784] [ 147.609454][ T8784] Mem-Info: [ 147.631888][ T8768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.842'. [ 147.633051][ T8784] active_anon:6143 inactive_anon:0 isolated_anon:0 [ 147.633051][ T8784] active_file:0 inactive_file:43399 isolated_file:0 [ 147.633051][ T8784] unevictable:0 dirty:175 writeback:0 [ 147.633051][ T8784] slab_reclaimable:10542 slab_unreclaimable:99750 [ 147.633051][ T8784] mapped:29475 shmem:522 pagetables:1232 [ 147.633051][ T8784] sec_pagetables:0 bounce:0 [ 147.633051][ T8784] kernel_misc_reclaimable:0 [ 147.633051][ T8784] free:1319098 free_pcp:12505 free_cma:0 [ 147.919465][ T8768] hsr_slave_0: left promiscuous mode [ 147.920690][ T8784] Node 0 active_anon:26116kB inactive_anon:0kB active_file:0kB inactive_file:173392kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119412kB dirty:700kB writeback:0kB shmem:3684kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14012kB pagetables:4996kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 147.959782][ T8784] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 147.972197][ T8768] hsr_slave_1: left promiscuous mode [ 147.992161][ T8784] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 148.028070][ T8784] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 148.033888][ T8784] Node 0 DMA32 free:1312416kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28816kB inactive_anon:0kB active_file:0kB inactive_file:173392kB unevictable:0kB writepending:700kB zspages:0kB present:3129332kB managed:2548664kB mlocked:0kB bounce:0kB free_pcp:42880kB local_pcp:28724kB free_cma:0kB [ 148.067351][ T8784] lowmem_reserve[]: 0 0 0 0 0 [ 148.072117][ T8784] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 148.113096][ T8784] lowmem_reserve[]: 0 0 0 0 0 [ 148.138853][ T8784] Node 1 Normal free:3954728kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 148.274823][ T8784] lowmem_reserve[]: 0 0 0 0 0 [ 148.315247][ T8784] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 148.364985][ T8784] Node 0 DMA32: 1472*4kB (UME) 565*8kB (UME) 266*16kB (UM) 108*32kB (UM) 65*64kB (UM) 19*128kB (UM) 6*256kB (UM) 4*512kB (UM) 2*1024kB (M) 6*2048kB (UME) 311*4096kB (UM) = 1316488kB [ 148.434785][ T8784] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 148.489526][ T8784] Node 1 Normal: 0*4kB 7*8kB (UM) 7*16kB (UM) 6*32kB (UM) 5*64kB (UM) 5*128kB (UM) 3*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 0*2048kB 964*4096kB (M) = 3954728kB [ 148.569680][ T8784] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 148.579465][ T8812] netlink: 144 bytes leftover after parsing attributes in process `syz.2.851'. [ 148.603309][ T8784] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 148.604592][ T8502] veth0_vlan: entered promiscuous mode [ 148.636272][ T8784] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 148.670578][ T8502] veth1_vlan: entered promiscuous mode [ 148.680309][ T8784] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 148.714997][ T8784] 46766 total pagecache pages [ 148.721555][ T8784] 0 pages in swap cache [ 148.732787][ T8784] Free swap = 124996kB [ 148.754861][ T8784] Total swap = 124996kB [ 148.779063][ T8784] 2097051 pages RAM [ 148.783458][ T8784] 0 pages HighMem/MovableOnly [ 148.794516][ T8784] 428204 pages reserved [ 148.807412][ T8784] 0 pages cma reserved [ 148.816544][ T8502] veth0_macvtap: entered promiscuous mode [ 148.853420][ T8502] veth1_macvtap: entered promiscuous mode [ 148.945656][ T8502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.015189][ T8502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.067740][ T8823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.855'. [ 149.107949][ T7136] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.128515][ T5615] Bluetooth: hci0: command tx timeout [ 149.169474][ T7143] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.219958][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.277032][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.285044][ T7137] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.326620][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.409494][ T8833] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 149.424277][ T7137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.436639][ T7137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.624327][ T8850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.864'. [ 149.725032][ T8849] netlink: 'syz.4.766': attribute type 1 has an invalid length. [ 149.745715][ T8849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.766'. [ 149.790164][ T8849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.766'. [ 149.832381][ T8849] netlink: 'syz.4.766': attribute type 10 has an invalid length. [ 149.899312][ T8865] netlink: 280 bytes leftover after parsing attributes in process `syz.3.869'. [ 149.973498][ T8867] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 150.104030][ T8875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.873'. [ 150.210598][ T8882] FAULT_INJECTION: forcing a failure. [ 150.210598][ T8882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.226394][ T8884] netlink: 'syz.2.874': attribute type 1 has an invalid length. [ 150.253712][ T8882] CPU: 1 UID: 0 PID: 8882 Comm: syz.1.875 Not tainted syzkaller #0 PREEMPT(full) [ 150.253735][ T8882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 150.253745][ T8882] Call Trace: [ 150.253752][ T8882] [ 150.253758][ T8882] dump_stack_lvl+0xe8/0x150 [ 150.253788][ T8882] should_fail_ex+0x40c/0x560 [ 150.253811][ T8882] _copy_from_iter+0x1d3/0x1660 [ 150.253831][ T8882] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 150.253857][ T8882] ? __pfx_policy_nodemask+0x10/0x10 [ 150.253882][ T8882] ? __pfx__copy_from_iter+0x10/0x10 [ 150.253904][ T8882] ? alloc_pages_mpol+0x24a/0x380 [ 150.253936][ T8882] af_alg_sendmsg+0x14c3/0x2250 [ 150.253976][ T8882] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 150.253991][ T8882] ? __might_fault+0xaf/0x130 [ 150.254017][ T8882] ? __pfx_aa_sk_perm+0x10/0x10 [ 150.254043][ T8882] ? aa_sock_msg_perm+0xf1/0x1b0 [ 150.254068][ T8882] ? skcipher_sendmsg+0x26/0xf0 [ 150.254088][ T8882] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 150.254106][ T8882] sock_sendmsg_nosec+0x13a/0x180 [ 150.254131][ T8882] __sys_sendto+0x408/0x5a0 [ 150.254152][ T8882] ? __pfx___sys_sendto+0x10/0x10 [ 150.254195][ T8882] ? do_user_addr_fault+0xc4a/0x1340 [ 150.254220][ T8882] __x64_sys_sendto+0xde/0x100 [ 150.254237][ T8882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.254256][ T8882] do_syscall_64+0x174/0x580 [ 150.254276][ T8882] ? trace_irq_disable+0x3b/0x140 [ 150.254297][ T8882] ? clear_bhb_loop+0x70/0xc0 [ 150.254318][ T8882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.254334][ T8882] RIP: 0033:0x7f1a6e75e90e [ 150.254351][ T8882] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 150.254363][ T8882] RSP: 002b:00007f1a6f6d8e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 150.254381][ T8882] RAX: ffffffffffffffda RBX: 00007f1a6f6da6c0 RCX: 00007f1a6e75e90e [ 150.254392][ T8882] RDX: 0000000000000024 RSI: 00007f1a6f6d9000 RDI: 0000000000000004 [ 150.254403][ T8882] RBP: 0000000000000000 R08: 00007f1a6f6d8f04 R09: 000000000000000c [ 150.254413][ T8882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 150.254423][ T8882] R13: 00007f1a6f6d8f58 R14: 00007f1a6f6d9000 R15: 0000000000000000 [ 150.254451][ T8882] [ 150.615870][ T8884] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 150.912655][ T8911] netlink: 164 bytes leftover after parsing attributes in process `syz.1.878'. [ 150.921872][ T8911] netlink: 16 bytes leftover after parsing attributes in process `syz.1.878'. [ 151.083405][ T8921] syzkaller0: entered promiscuous mode [ 151.097451][ T8921] syzkaller0: entered allmulticast mode [ 151.982175][ T8964] geneve0: entered promiscuous mode [ 152.004663][ T8964] macvlan2: entered promiscuous mode [ 152.038232][ T8967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.898'. [ 152.243587][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.897'. [ 152.300877][ T8982] tipc: Failed to obtain node identity [ 152.320095][ T8982] tipc: Enabling of bearer rejected, failed to enable media [ 152.432539][ T8971] netlink: 48 bytes leftover after parsing attributes in process `syz.1.897'. [ 152.605958][ T8992] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.663007][ T9002] netlink: 'syz.4.906': attribute type 1 has an invalid length. [ 152.828112][ T9008] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 152.855510][ T9009] xt_cgroup: invalid path, errno=-2 [ 152.908621][ T9015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.909300][ T9016] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.221532][ T9033] gre2: entered allmulticast mode [ 153.745453][ T9049] FAULT_INJECTION: forcing a failure. [ 153.745453][ T9049] name failslab, interval 1, probability 0, space 0, times 0 [ 153.801876][ T9049] CPU: 0 UID: 0 PID: 9049 Comm: syz.2.920 Not tainted syzkaller #0 PREEMPT(full) [ 153.801899][ T9049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 153.801908][ T9049] Call Trace: [ 153.801915][ T9049] [ 153.801922][ T9049] dump_stack_lvl+0xe8/0x150 [ 153.801950][ T9049] should_fail_ex+0x40c/0x560 [ 153.801972][ T9049] should_failslab+0xa8/0x100 [ 153.801997][ T9049] __kmalloc_cache_node_noprof+0xaa/0x630 [ 153.802021][ T9049] ? __get_vm_area_node+0x136/0x300 [ 153.802037][ T9049] ? __get_vm_area_node+0x136/0x300 [ 153.802060][ T9049] __get_vm_area_node+0x136/0x300 [ 153.802080][ T9049] __vmalloc_node_range_noprof+0x358/0x1730 [ 153.802099][ T9049] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 153.802123][ T9049] ? __lock_acquire+0x683/0x2cf0 [ 153.802173][ T9049] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 153.802193][ T9049] ? aa_file_perm+0x18b/0x15f0 [ 153.802219][ T9049] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 153.802238][ T9049] __vmalloc_noprof+0xd2/0x120 [ 153.802256][ T9049] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 153.802279][ T9049] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 153.802297][ T9049] ? bpf_prog_alloc+0x2a/0x1a0 [ 153.802319][ T9049] bpf_prog_alloc+0x3c/0x1a0 [ 153.802342][ T9049] bpf_prog_load+0x7f8/0x1c00 [ 153.802375][ T9049] ? __pfx_bpf_prog_load+0x10/0x10 [ 153.802416][ T9049] __sys_bpf+0xd0d/0xd90 [ 153.802441][ T9049] ? __pfx___sys_bpf+0x10/0x10 [ 153.802471][ T9049] ? __fget_files+0x2a/0x420 [ 153.802506][ T9049] ? ksys_write+0x242/0x270 [ 153.802531][ T9049] ? __pfx_ksys_write+0x10/0x10 [ 153.802559][ T9049] __x64_sys_bpf+0xba/0xd0 [ 153.802576][ T9049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.802595][ T9049] do_syscall_64+0x174/0x580 [ 153.802619][ T9049] ? trace_irq_disable+0x3b/0x140 [ 153.802637][ T9049] ? clear_bhb_loop+0x70/0xc0 [ 153.802656][ T9049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.802672][ T9049] RIP: 0033:0x7fa1bf59e0d9 [ 153.802688][ T9049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.802700][ T9049] RSP: 002b:00007fa1c0380028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 153.802717][ T9049] RAX: ffffffffffffffda RBX: 00007fa1bf825fa0 RCX: 00007fa1bf59e0d9 [ 153.802729][ T9049] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 0000000000000005 [ 153.802740][ T9049] RBP: 00007fa1c0380090 R08: 0000000000000000 R09: 0000000000000000 [ 153.802749][ T9049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.802758][ T9049] R13: 00007fa1bf826038 R14: 00007fa1bf825fa0 R15: 00007ffed1c609b8 [ 153.802785][ T9049] [ 154.857044][ T9077] __nla_validate_parse: 7 callbacks suppressed [ 154.857069][ T9077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.932'. [ 154.890416][ T9079] FAULT_INJECTION: forcing a failure. [ 154.890416][ T9079] name failslab, interval 1, probability 0, space 0, times 0 [ 154.925481][ T9079] CPU: 1 UID: 0 PID: 9079 Comm: syz.3.933 Not tainted syzkaller #0 PREEMPT(full) [ 154.925500][ T9079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.925507][ T9079] Call Trace: [ 154.925523][ T9079] [ 154.925529][ T9079] dump_stack_lvl+0xe8/0x150 [ 154.925552][ T9079] should_fail_ex+0x40c/0x560 [ 154.925569][ T9079] should_failslab+0xa8/0x100 [ 154.925587][ T9079] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 154.925604][ T9079] ? alloc_vmap_area+0x21c/0x1420 [ 154.925615][ T9079] ? alloc_vmap_area+0x21c/0x1420 [ 154.925632][ T9079] alloc_vmap_area+0x21c/0x1420 [ 154.925655][ T9079] ? __pfx_alloc_vmap_area+0x10/0x10 [ 154.925668][ T9079] ? __kmalloc_cache_node_noprof+0x1f2/0x630 [ 154.925683][ T9079] ? __get_vm_area_node+0x136/0x300 [ 154.925694][ T9079] ? __get_vm_area_node+0x136/0x300 [ 154.925710][ T9079] __get_vm_area_node+0x1f2/0x300 [ 154.925727][ T9079] __vmalloc_node_range_noprof+0x358/0x1730 [ 154.925743][ T9079] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 154.925760][ T9079] ? __lock_acquire+0x683/0x2cf0 [ 154.925790][ T9079] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 154.925804][ T9079] ? aa_file_perm+0x18b/0x15f0 [ 154.925823][ T9079] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 154.925836][ T9079] __vmalloc_noprof+0xd2/0x120 [ 154.925854][ T9079] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 154.925870][ T9079] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 154.925885][ T9079] ? bpf_prog_alloc+0x2a/0x1a0 [ 154.925902][ T9079] bpf_prog_alloc+0x3c/0x1a0 [ 154.925920][ T9079] bpf_prog_load+0x7f8/0x1c00 [ 154.925948][ T9079] ? __pfx_bpf_prog_load+0x10/0x10 [ 154.925981][ T9079] __sys_bpf+0xd0d/0xd90 [ 154.926001][ T9079] ? __pfx___sys_bpf+0x10/0x10 [ 154.926024][ T9079] ? __fget_files+0x2a/0x420 [ 154.926052][ T9079] ? ksys_write+0x242/0x270 [ 154.926072][ T9079] ? __pfx_ksys_write+0x10/0x10 [ 154.926094][ T9079] __x64_sys_bpf+0xba/0xd0 [ 154.926109][ T9079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.926124][ T9079] do_syscall_64+0x174/0x580 [ 154.926143][ T9079] ? trace_irq_disable+0x3b/0x140 [ 154.926161][ T9079] ? clear_bhb_loop+0x70/0xc0 [ 154.926179][ T9079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.926194][ T9079] RIP: 0033:0x7f1b97d9e0d9 [ 154.926210][ T9079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.926222][ T9079] RSP: 002b:00007f1b98d1b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 154.926238][ T9079] RAX: ffffffffffffffda RBX: 00007f1b98025fa0 RCX: 00007f1b97d9e0d9 [ 154.926249][ T9079] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 0000000000000005 [ 154.926259][ T9079] RBP: 00007f1b98d1b090 R08: 0000000000000000 R09: 0000000000000000 [ 154.926269][ T9079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.926279][ T9079] R13: 00007f1b98026038 R14: 00007f1b98025fa0 R15: 00007ffd5070a4b8 [ 154.926306][ T9079] [ 155.449991][ T9093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.938'. [ 155.853982][ T9115] netlink: 36 bytes leftover after parsing attributes in process `syz.2.945'. [ 155.892392][ T9112] bridge5: entered promiscuous mode [ 155.897334][ T9115] netlink: 60 bytes leftover after parsing attributes in process `syz.2.945'. [ 155.916926][ T9112] bridge5: entered allmulticast mode [ 155.940398][ T9112] team0: Port device bridge5 added [ 155.975488][ T9118] bridge0: port 3(team0) entered blocking state [ 156.006418][ T9118] bridge0: port 3(team0) entered disabled state [ 156.040032][ T9120] IPv6: NLM_F_CREATE should be specified when creating new route [ 156.041737][ T9112] netlink: 244 bytes leftover after parsing attributes in process `syz.1.946'. [ 156.059891][ T9118] team0: entered allmulticast mode [ 156.098493][ T9118] team_slave_0: entered allmulticast mode [ 156.133025][ T9118] team_slave_1: entered allmulticast mode [ 156.187019][ T9118] team0: entered promiscuous mode [ 156.207311][ T9118] team_slave_0: entered promiscuous mode [ 156.213391][ T9118] team_slave_1: entered promiscuous mode [ 156.297476][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.936'. [ 156.351210][ T9137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.936'. [ 156.402940][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.952'. [ 156.482293][ T9137] geneve2: entered promiscuous mode [ 156.506148][ T9137] geneve2: entered allmulticast mode [ 156.768768][ T9158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.956'. [ 156.838572][ T7136] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.850369][ T9158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.956'. [ 156.871827][ T7136] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.960778][ T7137] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.990693][ T7137] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.132399][ T9173] Bluetooth: MGMT ver 1.23 [ 158.283527][ T9236] xt_connbytes: Forcing CT accounting to be enabled [ 158.300566][ T9236] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 158.323703][ T7141] IPVS: starting estimator thread 0... [ 158.335870][ T9234] IPVS: set_ctl: invalid protocol: 33 10.1.1.0:20000 [ 158.449050][ T9241] IPVS: using max 36 ests per chain, 86400 per kthread [ 158.945332][ T9277] netlink: 'syz.0.997': attribute type 1 has an invalid length. [ 159.127713][ T9277] bond1: entered promiscuous mode [ 159.169658][ T9277] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.209551][ T5615] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 159.216566][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 159.268791][ T9282] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.292319][ T9282] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 159.304111][ T9282] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 159.320472][ T9282] bond1: (slave xfrm1): making interface the new active one [ 159.327516][ T9292] netlink: 'syz.2.1000': attribute type 1 has an invalid length. [ 159.327911][ T9282] xfrm1: entered promiscuous mode [ 159.341053][ T9294] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 159.354335][ T9282] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 159.372339][ T9292] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 159.566648][ T9309] netlink: 'syz.2.1006': attribute type 5 has an invalid length. [ 159.606535][ T9311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.634395][ T9309] Bluetooth: MGMT ver 1.23 [ 159.972678][ T9329] tipc: Enabled bearer , priority 0 [ 160.013760][ T9329] syzkaller0: entered promiscuous mode [ 160.044887][ T9329] syzkaller0: entered allmulticast mode [ 160.149107][ T9329] tipc: Resetting bearer [ 160.272883][ T9329] tipc: Disabling bearer [ 160.350147][ T9350] x_tables: duplicate underflow at hook 1 [ 160.701817][ T9365] nbd: socks must be embedded in a SOCK_ITEM attr [ 161.074596][ T9376] __nla_validate_parse: 4 callbacks suppressed [ 161.074613][ T9376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1020'. [ 161.099591][ T9376] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1020'. [ 161.181451][ T9383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1020'. [ 161.457017][ T9383] team0: Port device team_slave_0 removed [ 161.524914][ T9376] syzkaller1: entered promiscuous mode [ 161.563866][ T9376] syzkaller1: entered allmulticast mode [ 161.784794][ T9399] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 163.286875][ T9463] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1040'. [ 163.401770][ T9468] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1042'. [ 163.435484][ T9468] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 163.461200][ T9468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1042'. [ 163.816626][ T9493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1047'. [ 164.060613][ T9501] syzkaller0: entered promiscuous mode [ 164.069341][ T9501] syzkaller0: entered allmulticast mode [ 164.081310][ T9501] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1050'. [ 164.130988][ T5702] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 164.284059][ T9515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1054'. [ 164.586530][ T9530] macsec1: entered promiscuous mode [ 164.609359][ T9530] macsec1: entered allmulticast mode [ 164.672641][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1058'. [ 164.695447][ T9536] IPv6: NLM_F_CREATE should be specified when creating new route [ 164.759755][ T9536] netlink: 'syz.1.1058': attribute type 1 has an invalid length. [ 165.207668][ T5702] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 165.228186][ T9562] bridge0: port 3(team0) entered blocking state [ 165.237485][ T9562] bridge0: port 3(team0) entered disabled state [ 165.244282][ T9562] team0: entered allmulticast mode [ 165.249753][ T9562] team_slave_0: entered allmulticast mode [ 165.255601][ T9562] team_slave_1: entered allmulticast mode [ 165.267844][ T9562] team0: entered promiscuous mode [ 165.277089][ T9562] team_slave_0: entered promiscuous mode [ 165.286555][ T9562] team_slave_1: entered promiscuous mode [ 165.295259][ T9562] bridge0: port 3(team0) entered blocking state [ 165.302511][ T9562] bridge0: port 3(team0) entered forwarding state [ 165.367585][ T9561] bridge2: entered promiscuous mode [ 165.386793][ T9561] bridge2: entered allmulticast mode [ 165.398638][ T9561] team0: Port device bridge2 added [ 165.426408][ T9554] veth3: entered allmulticast mode [ 165.591878][ T9568] syzkaller0: entered promiscuous mode [ 165.615109][ T9568] syzkaller0: entered allmulticast mode [ 166.154696][ T9615] __nla_validate_parse: 5 callbacks suppressed [ 166.154714][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1084'. [ 166.866800][ T9621] IPv6: NLM_F_CREATE should be specified when creating new route [ 166.938300][ T9628] netlink: 'syz.0.1086': attribute type 3 has an invalid length. [ 167.142804][ T9637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1091'. [ 167.352508][ T9645] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1094'. [ 167.383034][ T9645] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1094'. [ 167.408184][ T9645] netlink: 'syz.1.1094': attribute type 5 has an invalid length. [ 167.429356][ T9645] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1094'. [ 167.933172][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 168.047037][ T9674] xt_nat: multiple ranges no longer supported [ 168.299564][ T9674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1102'. [ 168.450426][ T9678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1103'. [ 168.902771][ T9687] unsupported nla_type 97 [ 168.981803][ T9690] openvswitch: netlink: Flow key attr not present in new flow. [ 169.186833][ T9700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.396371][ T9709] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1114'. [ 169.523694][ T9715] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1117'. [ 169.680639][ T9726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1122'. [ 169.727498][ T9728] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 169.795421][ T9734] netlink: 'syz.1.1121': attribute type 4 has an invalid length. [ 169.856372][ T9734] .`: renamed from bond0 [ 170.115755][ T9747] can: request_module (can-proto-0) failed. [ 170.122650][ T9746] can: request_module (can-proto-0) failed. [ 170.482407][ T5732] bridge0: entered promiscuous mode [ 171.108923][ T9795] netlink: 'syz.2.1144': attribute type 4 has an invalid length. [ 171.684499][ T9826] __nla_validate_parse: 7 callbacks suppressed [ 171.684515][ T9826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1154'. [ 171.734410][ T9828] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1152'. [ 171.912214][ T9838] FAULT_INJECTION: forcing a failure. [ 171.912214][ T9838] name failslab, interval 1, probability 0, space 0, times 0 [ 171.935172][ T9838] CPU: 0 UID: 0 PID: 9838 Comm: syz.2.1157 Not tainted syzkaller #0 PREEMPT(full) [ 171.935200][ T9838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.935209][ T9838] Call Trace: [ 171.935217][ T9838] [ 171.935224][ T9838] dump_stack_lvl+0xe8/0x150 [ 171.935252][ T9838] should_fail_ex+0x40c/0x560 [ 171.935275][ T9838] should_failslab+0xa8/0x100 [ 171.935299][ T9838] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 171.935318][ T9838] ? local_lock_release+0x9c/0x160 [ 171.935344][ T9838] ? __alloc_skb+0x1d7/0x7a0 [ 171.935365][ T9838] ? __alloc_skb+0x1d7/0x7a0 [ 171.935395][ T9838] __alloc_skb+0x1d7/0x7a0 [ 171.935423][ T9838] netlink_ack+0x136/0xb30 [ 171.935440][ T9838] ? __pfx_genl_rcv_msg+0x10/0x10 [ 171.935479][ T9838] netlink_rcv_skb+0x2a4/0x4a0 [ 171.935499][ T9838] ? __pfx_genl_rcv_msg+0x10/0x10 [ 171.935523][ T9838] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 171.935557][ T9838] ? down_read+0x2be/0x330 [ 171.935584][ T9838] genl_rcv+0x28/0x40 [ 171.935604][ T9838] netlink_unicast+0x7bb/0x940 [ 171.935633][ T9838] netlink_sendmsg+0x813/0xb40 [ 171.935662][ T9838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.935685][ T9838] ? aa_sock_msg_perm+0xf1/0x1b0 [ 171.935712][ T9838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.935729][ T9838] sock_sendmsg_nosec+0x13a/0x180 [ 171.935755][ T9838] ____sys_sendmsg+0x54e/0x850 [ 171.935779][ T9838] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.935806][ T9838] ? import_iovec+0x73/0xa0 [ 171.935832][ T9838] ___sys_sendmsg+0x2a5/0x360 [ 171.935855][ T9838] ? __lock_acquire+0x683/0x2cf0 [ 171.935876][ T9838] ? __pfx____sys_sendmsg+0x10/0x10 [ 171.935927][ T9838] ? __fget_files+0x2a/0x420 [ 171.935946][ T9838] ? __fget_files+0x3a2/0x420 [ 171.935976][ T9838] __x64_sys_sendmsg+0x1b1/0x290 [ 171.935997][ T9838] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 171.936033][ T9838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.936051][ T9838] do_syscall_64+0x174/0x580 [ 171.936071][ T9838] ? trace_irq_disable+0x3b/0x140 [ 171.936091][ T9838] ? clear_bhb_loop+0x70/0xc0 [ 171.936111][ T9838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.936127][ T9838] RIP: 0033:0x7fa1bf59e0d9 [ 171.936143][ T9838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.936156][ T9838] RSP: 002b:00007fa1c0380028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.936174][ T9838] RAX: ffffffffffffffda RBX: 00007fa1bf825fa0 RCX: 00007fa1bf59e0d9 [ 171.936185][ T9838] RDX: 0000000002000040 RSI: 0000200000001940 RDI: 0000000000000004 [ 171.936196][ T9838] RBP: 00007fa1c0380090 R08: 0000000000000000 R09: 0000000000000000 [ 171.936206][ T9838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.936215][ T9838] R13: 00007fa1bf826038 R14: 00007fa1bf825fa0 R15: 00007ffed1c609b8 [ 171.936245][ T9838] [ 172.628659][ T9847] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1159'. [ 172.964014][ T9870] netlink: 'syz.1.1166': attribute type 2 has an invalid length. [ 172.987483][ T9870] ´: entered promiscuous mode [ 173.070222][ T9871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1165'. [ 173.109710][ T9871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1165'. [ 173.128142][ T9875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1170'. [ 173.149934][ T9879] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1169'. [ 173.161910][ T9875] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 173.174762][ T9880] FAULT_INJECTION: forcing a failure. [ 173.174762][ T9880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.226543][ T9880] CPU: 1 UID: 0 PID: 9880 Comm: syz.3.1168 Not tainted syzkaller #0 PREEMPT(full) [ 173.226568][ T9880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 173.226577][ T9880] Call Trace: [ 173.226584][ T9880] [ 173.226590][ T9880] dump_stack_lvl+0xe8/0x150 [ 173.226614][ T9880] should_fail_ex+0x40c/0x560 [ 173.226633][ T9880] _copy_from_user+0x2d/0xb0 [ 173.226653][ T9880] kstrtouint_from_user+0xd6/0x180 [ 173.226671][ T9880] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 173.226701][ T9880] proc_fail_nth_write+0x8e/0x210 [ 173.226720][ T9880] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 173.226749][ T9880] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 173.226766][ T9880] vfs_write+0x296/0xba0 [ 173.226792][ T9880] ? __pfx_vfs_write+0x10/0x10 [ 173.226813][ T9880] ? __fget_files+0x2a/0x420 [ 173.226833][ T9880] ? __fget_files+0x3a2/0x420 [ 173.226849][ T9880] ? __fget_files+0x2a/0x420 [ 173.226873][ T9880] ksys_write+0x150/0x270 [ 173.226896][ T9880] ? __pfx_ksys_write+0x10/0x10 [ 173.226926][ T9880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.226943][ T9880] do_syscall_64+0x174/0x580 [ 173.226962][ T9880] ? trace_irq_disable+0x3b/0x140 [ 173.226979][ T9880] ? clear_bhb_loop+0x70/0xc0 [ 173.226998][ T9880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.227014][ T9880] RIP: 0033:0x7f1b97d5e90e [ 173.227027][ T9880] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 173.227039][ T9880] RSP: 002b:00007f1b98d1afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 173.227057][ T9880] RAX: ffffffffffffffda RBX: 00007f1b98d1b6c0 RCX: 00007f1b97d5e90e [ 173.227069][ T9880] RDX: 0000000000000001 RSI: 00007f1b98d1b0a0 RDI: 0000000000000003 [ 173.227078][ T9880] RBP: 00007f1b98d1b090 R08: 0000000000000000 R09: 0000000000000000 [ 173.227087][ T9880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.227094][ T9880] R13: 00007f1b98026038 R14: 00007f1b98025fa0 R15: 00007ffd5070a4b8 [ 173.227118][ T9880] [ 173.468564][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1172'. [ 173.521130][ T9890] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1172'. [ 173.827962][ T9907] syzkaller1: entered promiscuous mode [ 173.857340][ T9907] syzkaller1: entered allmulticast mode [ 173.923212][ T9913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1182'. [ 174.031150][ T9916] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 174.411398][ T9943] netlink: 'syz.2.1192': attribute type 13 has an invalid length. [ 174.652854][ T9962] netlink: 'syz.0.1196': attribute type 1 has an invalid length. [ 174.700466][ T9945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.739779][ T9948] bond0: (slave bond_slave_0): Releasing backup interface [ 174.790864][ T9948] bond_slave_0: entered promiscuous mode [ 174.796626][ T9948] bond_slave_0: entered allmulticast mode [ 174.809950][ T9957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.818978][ T9957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.828260][ T9957] batman_adv: batadv0: Interface deactivated: gretap1 [ 174.835675][ T9957] batman_adv: batadv0: Removing interface: gretap1 [ 174.872590][ T9962] 8021q: adding VLAN 0 to HW filter on device bond3 [ 174.893457][ T9963] veth3: entered allmulticast mode [ 174.904158][ T9963] bond3: (slave veth3): Enslaving as an active interface with a down link [ 174.920043][ T9965] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 174.985868][ T9966] macvlan3: entered promiscuous mode [ 175.018754][ T9966] macvlan3: entered allmulticast mode [ 175.053018][ T9966] bond3: entered promiscuous mode [ 175.103086][ T9966] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 175.128623][ T9966] bond3: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 175.148806][ T9966] bond3: left promiscuous mode [ 175.544802][ T9992] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 175.714340][ T9996] Cannot find add_set index 0 as target [ 176.016639][T10020] syz_tun: entered allmulticast mode [ 176.078887][T10018] dvmrp8: entered allmulticast mode [ 176.121666][T10017] syz_tun: left allmulticast mode [ 176.485789][T10038] veth1_macvtap: entered promiscuous mode [ 176.512059][T10038] macsec2: entered promiscuous mode [ 176.541892][T10038] veth1_macvtap: left promiscuous mode [ 176.840597][T10064] __nla_validate_parse: 7 callbacks suppressed [ 176.840615][T10064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1223'. [ 176.966065][T10074] netlink: 'syz.0.1223': attribute type 1 has an invalid length. [ 177.188415][T10074] 8021q: adding VLAN 0 to HW filter on device bond4 [ 177.780381][T10120] x_tables: duplicate underflow at hook 2 [ 177.845206][T10129] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1238'. [ 178.315963][T10153] bond1: left promiscuous mode [ 178.339121][T10153] bridge1: left promiscuous mode [ 178.393503][T10153] ip6tnl1: left allmulticast mode [ 178.474690][T10153] vlan3: left promiscuous mode [ 178.489584][T10153] bond2: left promiscuous mode [ 178.495389][T10153] bridge4: left promiscuous mode [ 178.501427][T10153] vlan3: left allmulticast mode [ 178.506429][T10153] bond2: left allmulticast mode [ 178.511539][T10153] bridge4: left allmulticast mode [ 178.528553][T10165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1244'. [ 178.570578][T10168] netlink: 'syz.0.1245': attribute type 3 has an invalid length. [ 178.586143][T10153] veth3: left allmulticast mode [ 178.658722][T10158] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1241'. [ 179.705669][T10216] netlink: 'syz.2.1261': attribute type 11 has an invalid length. [ 179.771728][T10216] netlink: 'syz.2.1261': attribute type 11 has an invalid length. [ 179.797676][T10216] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1261'. [ 179.824674][T10223] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 180.189072][T10246] virt_wifi0: entered promiscuous mode [ 180.226238][T10246] batman_adv: batadv0: Adding interface: virt_wifi0 [ 180.250332][T10246] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.342019][T10246] batman_adv: batadv0: Interface activated: virt_wifi0 [ 180.656819][T10258] netlink: 'syz.1.1273': attribute type 13 has an invalid length. [ 181.202101][T10283] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1281'. [ 181.276460][T10289] virt_wifi0: entered promiscuous mode [ 181.313001][T10289] batman_adv: batadv0: Adding interface: virt_wifi0 [ 181.327517][T10289] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.383981][T10289] batman_adv: batadv0: Interface activated: virt_wifi0 [ 182.340113][T10331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1298'. [ 182.580061][T10341] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1301'. [ 182.720408][T10350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1301'. [ 183.380449][T10372] nftables ruleset with unbound set [ 183.594977][T10379] netlink: 'syz.3.1310': attribute type 4 has an invalid length. [ 183.680609][T10385] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 183.714474][T10385] virt_wifi0: entered promiscuous mode [ 183.734217][T10385] batman_adv: batadv0: Adding interface: virt_wifi0 [ 183.774715][T10385] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.842032][T10385] batman_adv: batadv0: Interface activated: virt_wifi0 [ 183.906050][T10393] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 183.992527][T10404] netlink: 'syz.2.1317': attribute type 2 has an invalid length. [ 184.268166][T10419] syzkaller0: entered promiscuous mode [ 184.276575][T10419] syzkaller0: entered allmulticast mode [ 184.608384][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.635333][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.655859][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.681798][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.754383][T10433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1326'. [ 184.792703][T10433] hsr_slave_1 (unregistering): left promiscuous mode [ 185.318559][T10447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1331'. [ 185.331903][T10447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1331'. [ 185.350346][T10447] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 185.740236][T10471] netlink: 'syz.2.1338': attribute type 2 has an invalid length. [ 185.755580][T10471] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1338'. [ 185.834764][T10480] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1338'. [ 185.911031][T10484] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1343'. [ 186.059466][T10492] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1344'. [ 186.292517][ T7138] IPVS: starting estimator thread 0... [ 186.308591][T10507] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:65534 [ 186.336238][T10507] netlink: 'syz.0.1350': attribute type 10 has an invalid length. [ 186.369517][T10507] team0: Device vxcan0 is of different type [ 186.407536][T10508] IPVS: using max 42 ests per chain, 100800 per kthread [ 186.426654][T10507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.460504][T10507] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.520018][T10507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.626159][T10507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.648493][T10507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.676518][T10507] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 186.692453][T10507] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.706658][T10507] virt_wifi0: left promiscuous mode [ 186.728772][T10507] veth1_vlan: left promiscuous mode [ 186.735332][T10507] veth0_vlan: left promiscuous mode [ 186.756871][T10507] veth0_vlan: entered promiscuous mode [ 186.774725][T10507] veth1_vlan: entered promiscuous mode [ 186.801890][T10507] veth1_macvtap: left promiscuous mode [ 186.832580][T10507] veth0_macvtap: left promiscuous mode [ 186.855632][T10507] veth0_macvtap: entered promiscuous mode [ 186.880524][T10507] veth1_macvtap: entered promiscuous mode [ 186.954221][T10507] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 186.979441][T10507] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 186.990214][T10507] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 187.003609][T10507] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 187.070111][T10507] macvlan2: left promiscuous mode [ 187.094401][T10507] bond1: left promiscuous mode [ 187.106142][T10507] xfrm1: left promiscuous mode [ 187.124097][T10507] 8021q: adding VLAN 0 to HW filter on device bond2 [ 187.174918][ T7140] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.182131][ T7140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.217148][ T7140] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.224413][ T7140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.507302][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.955720][T10573] netlink: 'syz.4.1366': attribute type 1 has an invalid length. [ 188.065447][T10574] af_packet: tpacket_rcv: packet too big, clamped from 68 to 4294967272. macoff=96 [ 188.124042][T10581] __nla_validate_parse: 4 callbacks suppressed [ 188.124060][T10581] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1366'. [ 188.124093][T10580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1368'. [ 188.139614][ T7160] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.155841][ T7160] bond3: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 188.183949][ T7160] bond3: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 188.236003][ T7160] bond3: (slave veth3): making interface the new active one [ 188.244446][T10583] FAULT_INJECTION: forcing a failure. [ 188.244446][T10583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.264848][T10583] CPU: 0 UID: 0 PID: 10583 Comm: syz.0.1370 Not tainted syzkaller #0 PREEMPT(full) [ 188.264870][T10583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 188.264882][T10583] Call Trace: [ 188.264889][T10583] [ 188.264896][T10583] dump_stack_lvl+0xe8/0x150 [ 188.264921][T10583] should_fail_ex+0x40c/0x560 [ 188.264942][T10583] _copy_from_user+0x2d/0xb0 [ 188.264963][T10583] __sys_bpf+0x2e7/0xd90 [ 188.264986][T10583] ? __pfx___sys_bpf+0x10/0x10 [ 188.265011][T10583] ? __fget_files+0x2a/0x420 [ 188.265043][T10583] ? ksys_write+0x242/0x270 [ 188.265067][T10583] ? __pfx_ksys_write+0x10/0x10 [ 188.265093][T10583] __x64_sys_bpf+0xba/0xd0 [ 188.265111][T10583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.265129][T10583] do_syscall_64+0x174/0x580 [ 188.265149][T10583] ? trace_irq_disable+0x3b/0x140 [ 188.265163][T10583] ? clear_bhb_loop+0x70/0xc0 [ 188.265180][T10583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.265194][T10583] RIP: 0033:0x7fce5539e0d9 [ 188.265209][T10583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.265220][T10583] RSP: 002b:00007fce5625a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 188.265236][T10583] RAX: ffffffffffffffda RBX: 00007fce55625fa0 RCX: 00007fce5539e0d9 [ 188.265248][T10583] RDX: 0000000000000020 RSI: 0000200000000440 RDI: 0000000000000001 [ 188.265258][T10583] RBP: 00007fce5625a090 R08: 0000000000000000 R09: 0000000000000000 [ 188.265268][T10583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.265278][T10583] R13: 00007fce55626038 R14: 00007fce55625fa0 R15: 00007ffd4d13ca18 [ 188.265303][T10583] [ 188.275575][ T7160] bond3: active interface up! [ 188.590326][T10573] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.713471][ T7138] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.781395][ T7141] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.021908][T10618] can: request_module (can-proto-0) failed. [ 189.141804][T10622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1381'. [ 189.306550][T10628] 8021q: adding VLAN 0 to HW filter on device bond4 [ 189.400066][T10646] netlink: 'syz.0.1387': attribute type 1 has an invalid length. [ 189.551074][T10641] bond5 (unregistering): Released all slaves [ 189.640106][T10661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1390'. [ 189.757644][T10668] netlink: 'syz.1.1391': attribute type 2 has an invalid length. [ 189.832839][T10669] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1391'. [ 189.886236][T10671] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1392'. [ 189.964258][T10666] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1389'. [ 189.970975][T10662] gre2: left allmulticast mode [ 189.996768][T10662] veth3: left allmulticast mode [ 190.035127][T10662] 8021q: adding VLAN 0 to HW filter on device bond5 [ 190.123422][T10656] lo: entered allmulticast mode [ 190.159913][T10640] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 190.191655][T10669] lo speed is unknown, defaulting to 1000 [ 190.211647][T10656] lo: left allmulticast mode [ 190.267697][T10669] lo speed is unknown, defaulting to 1000 [ 190.309091][T10669] lo speed is unknown, defaulting to 1000 [ 190.352328][T10669] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 190.415854][T10669] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 190.487317][T10669] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 190.561418][T10669] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 190.571304][T10688] lo: entered allmulticast mode [ 190.602180][T10669] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 190.635389][T10687] lo: left allmulticast mode [ 190.820319][T10669] lo speed is unknown, defaulting to 1000 [ 190.842674][T10694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1399'. [ 190.855676][T10669] lo speed is unknown, defaulting to 1000 [ 190.877482][T10694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1399'. [ 190.909661][T10669] lo speed is unknown, defaulting to 1000 [ 190.954069][T10669] lo speed is unknown, defaulting to 1000 [ 190.982643][T10669] lo speed is unknown, defaulting to 1000 [ 191.018502][T10669] lo speed is unknown, defaulting to 1000 [ 191.250957][T10713] x_tables: duplicate underflow at hook 2 [ 191.431131][T10724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1410'. [ 191.635899][T10737] FAULT_INJECTION: forcing a failure. [ 191.635899][T10737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.690560][T10737] CPU: 1 UID: 0 PID: 10737 Comm: syz.1.1415 Not tainted syzkaller #0 PREEMPT(full) [ 191.690608][T10737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 191.690630][T10737] Call Trace: [ 191.690645][T10737] [ 191.690660][T10737] dump_stack_lvl+0xe8/0x150 [ 191.690715][T10737] should_fail_ex+0x40c/0x560 [ 191.690742][T10737] _copy_to_user+0x31/0xb0 [ 191.690766][T10737] simple_read_from_buffer+0xe1/0x170 [ 191.690794][T10737] proc_fail_nth_read+0x1bb/0x230 [ 191.690820][T10737] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.690846][T10737] ? rw_verify_area+0x24a/0x4c0 [ 191.690871][T10737] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.690893][T10737] vfs_read+0x213/0xa80 [ 191.690920][T10737] ? __pfx___mutex_lock+0x10/0x10 [ 191.690944][T10737] ? __pfx_vfs_read+0x10/0x10 [ 191.690968][T10737] ? __fget_files+0x2a/0x420 [ 191.690993][T10737] ? __fget_files+0x3a2/0x420 [ 191.691012][T10737] ? __fget_files+0x2a/0x420 [ 191.691041][T10737] ksys_read+0x150/0x270 [ 191.691066][T10737] ? __pfx_ksys_read+0x10/0x10 [ 191.691098][T10737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.691117][T10737] do_syscall_64+0x174/0x580 [ 191.691138][T10737] ? trace_irq_disable+0x3b/0x140 [ 191.691158][T10737] ? clear_bhb_loop+0x70/0xc0 [ 191.691179][T10737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.691196][T10737] RIP: 0033:0x7f1a6e75e90e [ 191.691213][T10737] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 191.691227][T10737] RSP: 002b:00007f1a6f6d9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 191.691245][T10737] RAX: ffffffffffffffda RBX: 00007f1a6f6da6c0 RCX: 00007f1a6e75e90e [ 191.691258][T10737] RDX: 000000000000000f RSI: 00007f1a6f6da0a0 RDI: 0000000000000006 [ 191.691268][T10737] RBP: 00007f1a6f6da090 R08: 0000000000000000 R09: 0000000000000000 [ 191.691279][T10737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.691290][T10737] R13: 00007f1a6ea26038 R14: 00007f1a6ea25fa0 R15: 00007ffce850a9e8 [ 191.691319][T10737] [ 191.951902][T10726] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 192.049871][T10726] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 192.067500][T10726] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 192.089423][T10726] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 192.512171][T10763] macsec0: entered promiscuous mode [ 192.545831][T10763] veth1_macvtap: entered promiscuous mode [ 192.572089][T10763] macsec0: left promiscuous mode [ 192.726029][T10772] xt_hashlimit: size too large, truncated to 1048576 [ 192.799225][T10776] No such timeout policy "syz1" [ 192.804436][T10774] No such timeout policy "syz1" [ 193.153856][T10789] __nla_validate_parse: 12 callbacks suppressed [ 193.153873][T10789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1433'. [ 193.628727][T10806] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1439'. [ 193.701593][T10791] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.709164][T10791] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.161549][T10825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.165005][T10791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.174022][T10824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.175607][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.220303][T10791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.301743][T10791] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 194.523236][T10791] geneve0: left promiscuous mode [ 194.737651][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.749705][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.818262][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.847228][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.860351][T10830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1444'. [ 195.095373][T10836] lo speed is unknown, defaulting to 1000 [ 195.352525][T10858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1455'. [ 195.394511][T10858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1455'. [ 195.626237][T10867] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1458'. [ 195.852270][ T7138] IPVS: starting estimator thread 0... [ 195.947561][T10876] IPVS: using max 30 ests per chain, 72000 per kthread [ 196.581371][T10922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1475'. [ 196.619024][T10925] xt_hashlimit: size too large, truncated to 1048576 [ 196.862314][T10933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1478'. [ 196.877022][T10933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1478'. [ 197.197067][T10945] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1481'. [ 197.245758][T10943] lo speed is unknown, defaulting to 1000 [ 197.282387][T10945] netlink: 'syz.4.1481': attribute type 4 has an invalid length. [ 197.311765][T10952] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:65534 [ 197.329641][T10952] netlink: 'syz.1.1484': attribute type 10 has an invalid length. [ 197.363737][T10952] vxcan0: entered promiscuous mode [ 197.375412][T10952] vxcan0: entered allmulticast mode [ 197.382678][T10952] team0: Device vxcan0 is of different type [ 197.438632][T10956] 8021q: adding VLAN 0 to HW filter on device .` [ 197.446371][T10956] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.458107][T10956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.497516][T10956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.506413][T10956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.517771][T10956] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 197.528733][T10956] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.543261][T10956] batman_adv: batadv0: Interface activated: virt_wifi0 [ 197.550889][T10956] veth1_vlan: left promiscuous mode [ 197.556957][T10956] veth0_vlan: left promiscuous mode [ 197.563299][T10956] veth0_vlan: entered promiscuous mode [ 197.570447][T10956] veth1_vlan: entered promiscuous mode [ 197.579641][T10956] veth1_macvtap: left promiscuous mode [ 197.589988][T10956] veth0_macvtap: left promiscuous mode [ 197.596667][T10956] veth0_macvtap: entered promiscuous mode [ 197.603521][T10956] veth1_macvtap: entered promiscuous mode [ 197.614200][T10956] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 197.622531][T10956] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 197.630995][T10956] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 197.639303][T10956] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 197.648083][T10956] batman_adv: batadv0: Interface activated: wlan0 [ 197.679840][T10956] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 197.691565][T10956] 8021q: adding VLAN 0 to HW filter on device bond1 [ 197.712865][T10956] 8021q: adding VLAN 0 to HW filter on device bond2 [ 197.731854][T10956] 8021q: adding VLAN 0 to HW filter on device bond3 [ 197.745550][T10956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.787693][ T7160] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.798331][ T5732] lo speed is unknown, defaulting to 1000 [ 197.805261][ T5732] syz2: Port: 1 Link ACTIVE [ 197.818353][ T5702] bridge0: entered promiscuous mode [ 197.834616][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.841809][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.868492][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.875712][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.935647][ T12] bridge0: port 3(team0) entered blocking state [ 197.942093][ T12] bridge0: port 3(team0) entered forwarding state [ 197.993904][T10960] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 198.204352][T10972] bridge_slave_1: left allmulticast mode [ 198.212336][T10972] bridge_slave_1: left promiscuous mode [ 198.227986][T10972] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.253579][T10972] bridge_slave_0: left allmulticast mode [ 198.269718][T10972] bridge_slave_0: left promiscuous mode [ 198.278621][T10972] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.430030][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.446840][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.503557][T10986] __nla_validate_parse: 1 callbacks suppressed [ 198.503575][T10986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1496'. [ 198.541202][ T7140] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 198.576039][ T5702] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 198.576039][ T7140] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 198.645675][T10992] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:65534 [ 198.665356][T10992] netlink: 'syz.2.1498': attribute type 10 has an invalid length. [ 198.674942][ T5702] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 198.683513][T10992] team0: Device vxcan0 is of different type [ 198.688619][T10995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1497'. [ 198.702794][T10995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1497'. [ 198.748362][T10992] virt_wifi0: left promiscuous mode [ 198.764102][T10992] macvtap0: left promiscuous mode [ 198.784729][T10992] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 198.795008][T10992] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.812235][T10992] 8021q: adding VLAN 0 to HW filter on device bond2 [ 198.838620][T10999] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 198.857675][T10999] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 198.906045][ T7140] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 198.947401][ T7140] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.420001][T11017] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1505'. [ 199.471335][ T2163] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 199.488219][T11017] ieee802154 phy0 wpan0: encryption failed: -126 [ 199.652292][T11026] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1507'. [ 201.103334][T11032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1510'. [ 201.243706][T11040] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:65534 [ 201.275112][T11040] netlink: 'syz.4.1511': attribute type 10 has an invalid length. [ 201.342519][T11040] vxcan0: entered promiscuous mode [ 201.379009][T11040] vxcan0: entered allmulticast mode [ 201.388484][T11040] team0: Device vxcan0 is of different type [ 201.509538][T11047] virt_wifi0: left promiscuous mode [ 201.534066][T11047] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 201.602742][ T7141] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.628051][T11058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1518'. [ 201.643212][ T7141] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.657701][T11058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1518'. [ 201.665968][ T7141] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.700980][ T7141] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.727843][T11068] netlink: 'syz.1.1520': attribute type 1 has an invalid length. [ 201.776624][T11068] 8021q: adding VLAN 0 to HW filter on device bond4 [ 201.863485][T11080] batadv0: entered promiscuous mode [ 201.884115][T11080] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 202.180079][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1530'. [ 202.295617][T11099] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:65534 [ 202.327857][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 202.350989][T11099] netlink: 'syz.1.1532': attribute type 10 has an invalid length. [ 202.402130][T11099] team0: Device vxcan0 is of different type [ 202.438635][T11109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1535'. [ 202.550209][ T5732] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 202.687719][ T5732] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 202.771072][T11121] netlink: 'syz.4.1539': attribute type 1 has an invalid length. [ 202.807060][T11123] netlink: 'syz.4.1539': attribute type 1 has an invalid length. [ 202.841172][T11121] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 202.894635][T11123] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 202.967686][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 203.380472][T11156] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.845477][T11165] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:65534 [ 203.860521][T11165] netlink: 'syz.3.1552': attribute type 10 has an invalid length. [ 203.980125][T11165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.991270][T11165] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.096889][T11165] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 204.111360][T11165] virt_wifi0: left promiscuous mode [ 204.119142][T11165] veth1_macvtap: left promiscuous mode [ 204.148598][T11165] veth0_macvtap: left promiscuous mode [ 204.177065][T11165] veth0_macvtap: entered promiscuous mode [ 204.198383][T11165] veth1_macvtap: entered promiscuous mode [ 204.225866][T11165] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 204.254276][T11165] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 204.270296][T11165] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 204.304400][T11165] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 204.329226][T11165] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 204.492962][T11165] 8021q: adding VLAN 0 to HW filter on device bond1 [ 204.534060][T11165] 8021q: adding VLAN 0 to HW filter on device bond2 [ 204.549049][T11165] bridge1: left promiscuous mode [ 204.564620][T11165] geneve2: left promiscuous mode [ 204.585336][T11165] virt_wifi0: entered promiscuous mode [ 204.597172][T11165] virt_wifi0: entered allmulticast mode [ 204.612644][T11165] macsec1: left promiscuous mode [ 204.710296][ T7141] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.717576][ T7141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.760008][ T7141] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.767276][ T7141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.822725][T11213] bond0: Caught tx_queue_len zero misconfig [ 204.849648][T11218] __nla_validate_parse: 6 callbacks suppressed [ 204.849665][T11218] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1570'. [ 204.943371][T11218] netlink: 'syz.4.1570': attribute type 13 has an invalid length. [ 204.955464][T11221] netlink: 'syz.3.1571': attribute type 10 has an invalid length. [ 205.031429][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.039975][T11218] netlink: 'syz.4.1570': attribute type 13 has an invalid length. [ 205.076792][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.139021][ T7143] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.158980][ T7143] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.455983][T11240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1579'. [ 205.520124][T11240] veth0_macvtap: left promiscuous mode [ 205.535283][T11242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1580'. [ 205.552683][T11242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1580'. [ 205.725008][T11257] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1582'. [ 205.741747][ T29] audit: type=1804 audit(1786090341.107:3): pid=11262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1586" name="/newroot/298/cgroup.controllers" dev="tmpfs" ino=1530 res=1 errno=0 [ 205.821799][ T29] audit: type=1800 audit(1786090341.127:4): pid=11262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1586" name="cgroup.controllers" dev="tmpfs" ino=1530 res=0 errno=0 [ 206.100268][T11275] ieee802154 phy0 wpan0: encryption failed: -126 [ 206.254853][T11287] IPVS: set_ctl: invalid protocol: 46536 172.30.0.3:20004 [ 206.357547][ T7140] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 206.385297][T11289] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 206.564996][T11299] syzkaller0: entered promiscuous mode [ 206.586573][T11299] syzkaller0: entered allmulticast mode [ 206.616088][T11299] tipc: Started in network mode [ 206.630054][T11299] tipc: Node identity 86d7b30a3c41, cluster identity 4711 [ 206.643971][T11299] tipc: Enabled bearer , priority 0 [ 206.678412][T11299] tipc: Resetting bearer [ 206.696239][T11298] tipc: Resetting bearer [ 206.721531][T11298] tipc: Disabling bearer [ 206.754650][T11304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1599'. [ 206.779800][T11304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1599'. [ 207.505254][T11335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1612'. [ 207.686959][T11345] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1615'. [ 207.715218][T11345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1615'. [ 207.816365][T11351] ip6tnl0: Caught tx_queue_len zero misconfig [ 207.835885][T11351] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 207.943180][T11360] netlink: 'syz.4.1619': attribute type 29 has an invalid length. [ 208.008890][T11362] lo: entered allmulticast mode [ 208.075261][T11355] lo: left allmulticast mode [ 208.326769][T11381] netlink: 'syz.2.1626': attribute type 1 has an invalid length. [ 208.432427][T11384] hsr_slave_1 (unregistering): left promiscuous mode [ 208.546158][T11391] erspan0: refused to change device tx_queue_len [ 208.960528][T11412] netlink: 'syz.3.1636': attribute type 1 has an invalid length. [ 209.044347][T11416] netlink: 'syz.1.1637': attribute type 21 has an invalid length. [ 209.054323][T11412] 8021q: adding VLAN 0 to HW filter on device bond3 [ 209.105513][T11416] netlink: 'syz.1.1637': attribute type 20 has an invalid length. [ 209.121435][T11426] bond0: (slave veth0_to_bond): Releasing backup interface [ 209.176251][T11429] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 209.298935][T11429] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 209.382159][T11429] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 209.623454][T11429] batman_adv: batadv0: Interface deactivated: wlan0 [ 209.654309][ T5604] block nbd64: NBD_DISCONNECT [ 209.714992][T11450] bridge0: port 3(vlan2) entered blocking state [ 209.732431][T11450] bridge0: port 3(vlan2) entered disabled state [ 209.745661][T11450] vlan2: entered allmulticast mode [ 209.755585][T11450] bridge0: entered allmulticast mode [ 209.778477][T11450] vlan2: left allmulticast mode [ 209.797173][T11450] bridge0: left allmulticast mode [ 209.884091][T11453] __nla_validate_parse: 10 callbacks suppressed [ 209.884112][T11453] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1645'. [ 209.961963][ T5604] udevd[5604]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 210.167677][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 210.453503][T11476] netlink: 'syz.0.1650': attribute type 1 has an invalid length. [ 210.542838][T11482] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1652'. [ 210.569823][T11482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1652'. [ 210.598525][T11476] 8021q: adding VLAN 0 to HW filter on device bond6 [ 210.650571][T11481] bond3: (slave veth0_to_bond): Releasing active interface [ 210.681180][T11481] veth3: entered promiscuous mode [ 210.775531][T11491] netlink: 'syz.4.1655': attribute type 18 has an invalid length. [ 210.795352][T11491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1655'. [ 210.795726][T11494] FAULT_INJECTION: forcing a failure. [ 210.795726][T11494] name failslab, interval 1, probability 0, space 0, times 0 [ 210.811431][T11479] xt_CT: You must specify a L4 protocol and not use inversions on it [ 210.823550][T11491] netlink: 'syz.4.1655': attribute type 18 has an invalid length. [ 210.833627][T11494] CPU: 0 UID: 0 PID: 11494 Comm: syz.1.1654 Not tainted syzkaller #0 PREEMPT(full) [ 210.833650][T11494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 210.833659][T11494] Call Trace: [ 210.833664][T11494] [ 210.833670][T11494] dump_stack_lvl+0xe8/0x150 [ 210.833694][T11494] should_fail_ex+0x40c/0x560 [ 210.833711][T11494] should_failslab+0xa8/0x100 [ 210.833730][T11494] __kmalloc_cache_noprof+0xa8/0x660 [ 210.833747][T11494] ? xfrm_policy_alloc+0x78/0x2b0 [ 210.833760][T11494] ? xfrm_policy_alloc+0x78/0x2b0 [ 210.833778][T11494] xfrm_policy_alloc+0x78/0x2b0 [ 210.833792][T11494] xfrm_policy_construct+0x39/0x6b0 [ 210.833815][T11494] xfrm_add_policy+0x273/0x690 [ 210.833839][T11494] ? __pfx_xfrm_add_policy+0x10/0x10 [ 210.833852][T11494] ? apparmor_capable+0x126/0x170 [ 210.833871][T11494] ? __nla_parse+0x40/0x60 [ 210.833890][T11494] xfrm_user_rcv_msg+0x7a8/0xf30 [ 210.833912][T11494] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 210.833952][T11494] ? __mutex_trylock_common+0x15f/0x270 [ 210.833973][T11494] ? __pfx___mutex_trylock_common+0x10/0x10 [ 210.834000][T11494] ? rcu_is_watching+0x15/0xb0 [ 210.834019][T11494] ? trace_contention_end+0x3d/0x140 [ 210.834042][T11494] netlink_rcv_skb+0x226/0x4a0 [ 210.834059][T11494] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 210.834076][T11494] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 210.834104][T11494] ? netlink_deliver_tap+0x2e/0x1b0 [ 210.834119][T11494] ? netlink_deliver_tap+0x2e/0x1b0 [ 210.834137][T11494] xfrm_netlink_rcv+0x79/0x90 [ 210.834155][T11494] netlink_unicast+0x7bb/0x940 [ 210.834179][T11494] netlink_sendmsg+0x813/0xb40 [ 210.834205][T11494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.834227][T11494] ? aa_sock_msg_perm+0xf1/0x1b0 [ 210.834256][T11494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.834273][T11494] sock_sendmsg_nosec+0x13a/0x180 [ 210.834296][T11494] ____sys_sendmsg+0x54e/0x850 [ 210.834320][T11494] ? __pfx_____sys_sendmsg+0x10/0x10 [ 210.834346][T11494] ? import_iovec+0x73/0xa0 [ 210.834371][T11494] ___sys_sendmsg+0x2a5/0x360 [ 210.834388][T11494] ? __lock_acquire+0x683/0x2cf0 [ 210.834412][T11494] ? __pfx____sys_sendmsg+0x10/0x10 [ 210.834461][T11494] ? __fget_files+0x2a/0x420 [ 210.834481][T11494] ? __fget_files+0x3a2/0x420 [ 210.834510][T11494] __x64_sys_sendmsg+0x1b1/0x290 [ 210.834530][T11494] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 210.834562][T11494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.834581][T11494] do_syscall_64+0x174/0x580 [ 210.834602][T11494] ? trace_irq_disable+0x3b/0x140 [ 210.834622][T11494] ? clear_bhb_loop+0x70/0xc0 [ 210.834643][T11494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.834660][T11494] RIP: 0033:0x7f1a6e79e0d9 [ 210.834677][T11494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.834692][T11494] RSP: 002b:00007f1a6f6da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.834710][T11494] RAX: ffffffffffffffda RBX: 00007f1a6ea25fa0 RCX: 00007f1a6e79e0d9 [ 210.834723][T11494] RDX: 000000002c000010 RSI: 0000200000000240 RDI: 0000000000000003 [ 210.834734][T11494] RBP: 00007f1a6f6da090 R08: 0000000000000000 R09: 0000000000000000 [ 210.834744][T11494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.834754][T11494] R13: 00007f1a6ea26038 R14: 00007f1a6ea25fa0 R15: 00007ffce850a9e8 [ 210.834783][T11494] [ 211.155110][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1658'. [ 211.206757][T11491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1655'. [ 211.406072][T11509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1660'. [ 211.447502][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 211.511626][T11521] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1660'. [ 211.736647][T11528] netlink: 'syz.0.1666': attribute type 1 has an invalid length. [ 211.774153][T11530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1667'. [ 211.826912][T11528] 8021q: adding VLAN 0 to HW filter on device bond7 [ 211.945411][T11541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1669'. [ 212.692053][T11569] Bluetooth: MGMT ver 1.23 [ 213.034976][T11582] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20002 [ 213.260074][T11589] netlink: 'syz.4.1686': attribute type 2 has an invalid length. [ 213.326951][T11591] netlink: 'syz.4.1686': attribute type 2 has an invalid length. [ 213.341449][T11589] þ: entered promiscuous mode [ 213.909566][T11610] Cannot find del_set index 17 as target [ 214.035250][T11623] netlink: 'syz.3.1696': attribute type 4 has an invalid length. [ 214.262163][T11632] lo speed is unknown, defaulting to 1000 [ 214.270653][T11642] x_tables: duplicate underflow at hook 1 [ 214.472315][T11652] dvmrp0: entered allmulticast mode [ 215.039601][T11670] syzkaller0: entered promiscuous mode [ 215.047597][T11670] syzkaller0: entered allmulticast mode [ 215.106961][T11674] __nla_validate_parse: 12 callbacks suppressed [ 215.106981][T11674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1713'. [ 215.212498][T11677] netlink: 280 bytes leftover after parsing attributes in process `syz.0.1714'. [ 215.233484][T11680] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1715'. [ 215.339998][T11678] team0 (unregistering): Port device team_slave_0 removed [ 215.362173][T11678] team0 (unregistering): Port device team_slave_1 removed [ 215.457860][T11680] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1715'. [ 215.818094][T11713] dvmrp8: entered allmulticast mode [ 216.023538][T11722] netlink: 'syz.0.1728': attribute type 4 has an invalid length. [ 216.043242][T11722] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1728'. [ 216.080499][T11722] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1728'. [ 216.085155][T11725] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1729'. [ 216.104511][T11723] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1728'. [ 216.154135][T11734] netlink: 'syz.2.1731': attribute type 63 has an invalid length. [ 216.164585][T11734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1731'. [ 216.631194][T11753] block nbd2: server does not support multiple connections per device. [ 216.643939][T11753] block nbd2: shutting down sockets [ 216.838421][T11767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1742'. [ 216.906799][T11767] netlink: 'syz.3.1742': attribute type 10 has an invalid length. [ 216.919162][T11772] IPv6: addrconf: prefix option has invalid lifetime [ 216.971352][T11769] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 216.992963][T11769] [ 216.996899][T11769] ============================= [ 217.002012][T11769] WARNING: suspicious RCU usage [ 217.006906][T11769] syzkaller #0 Not tainted [ 217.011443][T11769] ----------------------------- [ 217.016317][T11769] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 217.024919][T11769] [ 217.024919][T11769] other info that might help us debug this: [ 217.024919][T11769] [ 217.035350][T11769] [ 217.035350][T11769] rcu_scheduler_active = 2, debug_locks = 1 [ 217.043516][T11769] 1 lock held by syz.0.1744/11769: [ 217.048770][T11769] #0: ffffffff8eb59e58 (rcu_tasks_trace_srcu_struct){....}-{0:0}, at: rcu_read_lock_trace+0x25/0x110 [ 217.059915][T11769] [ 217.059915][T11769] stack backtrace: [ 217.065845][T11769] CPU: 1 UID: 0 PID: 11769 Comm: syz.0.1744 Not tainted syzkaller #0 PREEMPT(full) [ 217.065872][T11769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 217.065890][T11769] Call Trace: [ 217.065898][T11769] [ 217.065907][T11769] dump_stack_lvl+0xe8/0x150 [ 217.065938][T11769] lockdep_rcu_suspicious+0x13f/0x1d0 [ 217.065972][T11769] get_callchain_entry+0x2b6/0x3c0 [ 217.066004][T11769] get_perf_callchain+0xd5/0x880 [ 217.066027][T11769] ? lockdep_hardirqs_on+0x7a/0x110 [ 217.066059][T11769] ? __pfx_get_perf_callchain+0x10/0x10 [ 217.066088][T11769] ? __schedule+0x17ef/0x56c0 [ 217.066120][T11769] __bpf_get_stack+0x3e9/0xa70 [ 217.066156][T11769] ? __pfx___bpf_get_stack+0x10/0x10 [ 217.066179][T11769] ? __resched_curr+0x23e/0x530 [ 217.066205][T11769] ? __lock_acquire+0x683/0x2cf0 [ 217.066234][T11769] bpf_get_stack+0x33/0x50 [ 217.066257][T11769] ? bpf_prog_42db8cfdf50901c9+0x46/0x4e [ 217.066276][T11769] bpf_get_stack_raw_tp+0x1a4/0x210 [ 217.066302][T11769] bpf_prog_42db8cfdf50901c9+0x46/0x4e [ 217.066322][T11769] bpf_prog_run_pin_on_cpu+0x142/0x470 [ 217.066353][T11769] bpf_prog_test_run_syscall+0x324/0x4c0 [ 217.066380][T11769] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 217.066401][T11769] ? __fget_files+0x2a/0x420 [ 217.066431][T11769] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 217.066456][T11769] bpf_prog_test_run+0x2c5/0x340 [ 217.066486][T11769] __sys_bpf+0xa22/0xd90 [ 217.066516][T11769] ? __pfx___sys_bpf+0x10/0x10 [ 217.066542][T11769] ? do_futex+0x458/0x4e0 [ 217.066598][T11769] ? rcu_is_watching+0x15/0xb0 [ 217.066632][T11769] __x64_sys_bpf+0xba/0xd0 [ 217.066654][T11769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.066675][T11769] do_syscall_64+0x174/0x580 [ 217.066699][T11769] ? trace_irq_disable+0x3b/0x140 [ 217.066722][T11769] ? clear_bhb_loop+0x70/0xc0 [ 217.066745][T11769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.066764][T11769] RIP: 0033:0x7fce5539e0d9 [ 217.066781][T11769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.066797][T11769] RSP: 002b:00007fce5625a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 217.066817][T11769] RAX: ffffffffffffffda RBX: 00007fce55625fa0 RCX: 00007fce5539e0d9 [ 217.066832][T11769] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 217.066844][T11769] RBP: 00007fce55435024 R08: 0000000000000000 R09: 0000000000000000 [ 217.066856][T11769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.066867][T11769] R13: 00007fce55626038 R14: 00007fce55625fa0 R15: 00007ffd4d13ca18 [ 217.066906][T11769] [ 217.470889][T11778] netlink: 'syz.4.1746': attribute type 4 has an invalid length. [ 217.524588][T11780] netlink: 'syz.4.1746': attribute type 4 has an invalid length. [ 225.527461][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!