last executing test programs: 9.457072091s ago: executing program 0 (id=2981): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0xfffffffe}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000000040)={'veth1_vlan\x00', @random='D`\x00'}) r2 = socket$inet(0x2, 0x2, 0x1) sendmmsg$inet_sctp(r2, &(0x7f0000002ec0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x880}], 0x1, 0x8000) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 9.0798557s ago: executing program 0 (id=2985): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x10, 0x4908d13283d17e6b, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2001f}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e22}}]}, 0x4c}}, 0x40000) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000800)='\x00', 0x0}, 0x48) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5c000000100039001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200"/68], 0x5c}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x1f0, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) 8.969464247s ago: executing program 0 (id=2986): r0 = socket(0x15, 0x5, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x70}, 0x1, 0x0, 0x0, 0xc001}, 0x4884) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r2], 0x44}, 0x1, 0x2, 0x0, 0x4003}, 0x0) 8.837188938s ago: executing program 0 (id=2988): syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES8=r0, @ANYBLOB="010026bd7000fbdbdf25030000000c00040008000000000000000c00020005000000000000000c0004007a1f00a0000000000800010000000000040008000400000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) 8.537209828s ago: executing program 0 (id=2990): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002abd7000feefdf250900020073797a3100000000080041007369770014003300626f6e643000"/56], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) recvfrom(r5, &(0x7f0000000500)=""/134, 0x86, 0x10000, &(0x7f0000000640)=@llc={0x1a, 0x302, 0x8, 0x6, 0x5, 0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x80) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r10, &(0x7f00000001c0)={0x0, 0x7, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x2a0, 0xffffffff, 0xffffffff, 0x2a0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff0000ff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x800, 0x93, 0x6, '\x00', 'syz0\x00', {0x6}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0xffffff00], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x8, 0x2, 0x8, 'pptp\x00', 'syz1\x00', {0x5a}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x350) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8b04, &(0x7f0000000a40)={'wlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r12, &(0x7f0000000140)=@file={0x0, './file1\x00'}, 0x6e) connect$unix(r12, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x42013, 0x2020e}}, 0x20}, 0x1, 0x0, 0x0, 0x4000886}, 0x0) 7.637272612s ago: executing program 0 (id=2997): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000200)="560001002a00000000000000000101000100"/48, 0x30) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x44, 0x1, 0x70bd2a, 0x4, {0x3}, [@nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x13f}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200048c5}, 0x4008094) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14}]}}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) 5.895490067s ago: executing program 1 (id=3013): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xa, 0x4, &(0x7f0000000280)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x7a}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000680)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$sock_int(r1, 0x1, 0x54, &(0x7f00000006c0)=0x40, 0x4) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r4, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1ff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0xaa04a7558e254d5a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x437, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r3}]}}}]}, 0x38}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000068000000060a010400000000000000000100000040000480240001800b00010072656a6563740000140002800800014000000002050002000300000018000180080001006f7366000c000280080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xf0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xa, 0x4, &(0x7f0000000280)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x7a}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000680)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x54, &(0x7f00000006c0)=0x40, 0x4) (async) socket(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r3) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r4, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1ff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0xaa04a7558e254d5a) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x437, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r3}]}}}]}, 0x38}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000068000000060a010400000000000000000100000040000480240001800b00010072656a6563740000140002800800014000000002050002000300000018000180080001006f7366000c000280080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xf0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) (async) getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) 5.433476662s ago: executing program 1 (id=3016): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r4, &(0x7f0000000200)='O', 0x1, 0x80, &(0x7f0000000240)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x3}, 0x8) r5 = socket$inet(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000580)=ANY=[@ANYBLOB="01005e00001600112233445508004600002c0000400001024303c0a8010ae00000169404"], 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7c, &(0x7f00000002c0), &(0x7f0000000300)=0x8) sendmsg$rds(r3, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@cswp={0x58, 0x114, 0x7, {{0x6, 0x5e}, 0xfffffffffffffffd, 0x0, 0x480000000, 0x42, 0x29, 0x100000001, 0x5, 0x9}}], 0x58}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x7c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7fffffff}, @NL80211_ATTR_PMK={0x14, 0xfe, "ecd4d5f12c18b9dcea3b8fe23ef25c3f"}, @NL80211_ATTR_PMKID={0x14, 0x55, "a307b182668f78661ebc2dc2b9a1db11"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x23}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x9}, @NL80211_ATTR_PMK={0x14, 0xfe, "e646006d6de5c941c1e01fd1a2f72301"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4040040) 3.627666788s ago: executing program 1 (id=3018): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, &(0x7f0000000400)}, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x11, "b6acd7b8f7f0a0ae8c5d910c3378"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000208"], 0xe) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, &(0x7f0000000400)}, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x11, "b6acd7b8f7f0a0ae8c5d910c3378"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000208"], 0xe) (async) 3.462416487s ago: executing program 1 (id=3022): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x124, 0x40, 0x107, 0x70bd2c, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@typed={0x104, 0xf, 0x0, 0x0, @binary="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"}]}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'lo\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x40104) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1}}}}}}]}, 0x48}}, 0x0) 3.219570461s ago: executing program 2 (id=3024): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg$inet(r2, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4008860) socket$inet_sctp(0x2, 0x5, 0x84) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x8002, 0x2}}], 0x20}, 0x851) (async) sendmsg$inet_sctp(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x8002, 0x2}}], 0x20}, 0x851) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c894}, 0x4000) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c894}, 0x4000) 2.946422556s ago: executing program 1 (id=3026): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000100fffc0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c00048028000180080001006e6174001c000280080002400000dd0a080001400000000108000340000000000900010073797a30"], 0xc8}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a310000000008000a4000000004"], 0x90}, 0x1, 0x0, 0x0, 0xb6fcf63cacd6ccc4}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000240)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r3, 0x5) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) bind$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000b80)="68000000010905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x44) socket$inet(0x10, 0x2, 0x200) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000c00)={'wlan0\x00'}) r8 = socket(0x2b, 0x80801, 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000049c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000010080000900010073797a300000000068000000030a01010000000000000000010000040900010073797a300000000048000480080002403a2f310e1400030076657468305f746f5f62726964676500080002405f2be57c08000240481cf91b0800014000000001080002402cd8477808000240718e5dc494030000060a01040000000000000000010000000c000640000000000000000368030480100001800b0001006578746864720000540301800c0001006269747769736500440302800800034000000004080001400000001408000140000000102403048014000280080003400000000308000180fffffffb200002800900020073797a300000000008000340000000030800034000000004b00001004a7bb56e33f38c7fccccdce56b83b0eb164e492d691714d7324bfbb6915bfe6321bd1891f0fe31d3a531b454b6f8ed6dd6ef6bf113c31f7e5f52fd2ad7a4e6d66091ddce8b5e70f594a10cf9972d63d0c55756c9a95926e808304afc8c01985eeef35e510847f1ec744eaf24cb9eb5ac51e925a201b9aca126a9373c787dc63a07ceb2b5b2d86eccb286a7fcbde0af3ffb7c3aa3e6297cac37739adbe5e3dd1081a6b2a5a324140cd106f0a61d000100cac1a52038fad931b083efe0d6560ecb85660650b3229fec510000007b0001003b345696199e5d5cd7f33e2d8ecaf207769299e9383cfa966463dd7fbbe03a14dacac2b8e684101c5b1751b5fa5d3795cd9cb1686962ac4f059cbe584f50cc6e87caa82106145056083d9cccd28985480ad104bd9b07828e659608d72af7606d4158e2894eb57e23789477a56ffe5d32f4f6d870417218004000028008000340000000010900020073797a32000000000900020073797a3200000000080001800000000008000180000000000900020073797a3000000000420001004afcee79d6862f6bd635796d7b37b332ca9ee9b0909eb4f7fc322a01340e8beddde900dc7429347357a82cc8902d92d8c6b2d0a7ce85f467d74956ecc8f1000060000100d7967eb128d73b9e6ba3d561a26e09885be1e3269fa71ab48d076cf251c9c2c14e625db6de2f3995e39228c7d4261f06003c990f856ca74bf0373076ef40eff1374458ee691781a624b04086dd3dbd3c4d3aa7c4aaa93d8a3e26b553bc0001004067722ba8abda175f9d1bfd577d9fcd1b0d1a6c7cee77ce346893bfc9ee59ba9eda324770171a6fcbdfa2105b509a305ccb8f09e0bdefdedfc045c18ac7e3732115455b0b6dee7a705d298181cdfde71838ae4fa10b8030a46000b01b9c6b3cd7f69c98297f7c5c8750ac20ec5a6bea4a4ee93688779852dc99082b30c67e1bfd25ed90d437fbcb3befbea24057a51d835b5c5fd876c41d2f2b37b5a52ef8d6cce5544c98061093907da4142f7bffd94f2b524e8073dae4040005800900010073797a3000000000140000001100010000000000000000000100000a"], 0x444}}, 0x20008011) connect$inet6(r8, &(0x7f0000000dc0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x74, &(0x7f0000000ec0)={0x0, 0x0, 0x10}, &(0x7f0000000f00)=0x18) ioctl$PPPIOCSMRU(r8, 0x40047452, &(0x7f0000000f40)=0x7) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000f80)={r10, 0x2e6, 0xd8, "2554996e86fa6b91f9c3d9f37b76f52c3d804450439fefe10d989b0c3e1c8a610c58387990e93afdad4e30b2743500cf4780f550d5b3a29a219500fe34fa6e8866eee515ee3c51d3e631485145b1ec417d631d5cc391376ad86653dfb6ee6e493eaacdfcc4a939d9c26dcb67a20f70a620f37b73ec08dcc98aafa0d103e813c4d8087737f6094977c9764689e228cd82266230c1b56fb0360ded02206f40fc8eec66e721d948b93427af7922fad36ef9f4bdc9e7c96e010400b375a82f9dd0e1a2c851bd82338599ac101b0a65df1b8eff7f78edfe1d7063"}, 0xe0) sendmsg$nl_route_sched(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000004580)=@newtaction={0x344, 0x30, 0x1, 0x70bd26, 0x0, {}, [{0x330, 0x1, [@m_sample={0x118, 0x18, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x800, 0x1, 0x7, 0xd8bf}}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x800}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xf9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}]}, {0xa4, 0x6, "0b39f772433b8ab8a010baea0b3151318d8d6824e0b4d5ff753385e7746524867a2b0201fe22979cbb5758f5de2b669d1baf0efd64e62e13cf7a4faf297327b0988ac4b0fbc118fd6d79559298d1d8090009396df4c738a9574666d4732b32a8c84468b56a4da3319cd3d15c9c180db06cec610e483e60685868f63aee2b20edc99d8c382b2c0649c1ee5b8a5d4b2e1dcfbdd3e5d62b2dc2016e96092fb0138f"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0x17c, 0x3, 0x0, 0x0, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xe, 0x1, 0x1, 0x40}}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x8, 0xd, 0x2, 0x80000001}, {0x0, 0x6, 0xf, 0x9}, {0x9, 0xb, 0x8, 0x1}]}, @TCA_ACT_BPF_OPS={0x54, 0x4, [{0x8000, 0x2, 0xd, 0x401}, {0x1, 0x3, 0x80, 0xa}, {0x0, 0x7e, 0x5, 0x7955}, {0x8fb, 0x89, 0x0, 0x400}, {0x4, 0xdd, 0x9, 0x6}, {0xdd, 0x2, 0x8, 0x3}, {0x9, 0x1b, 0x4, 0xd}, {0x146, 0x7, 0x9, 0xd5}, {0xff0, 0x1, 0x3, 0x2}, {0x0, 0x0, 0x6, 0x9}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}]}, {0xa8, 0x6, "44bd20ce5818de08d5f90da3e3d3d853e0ad50ccb6d87623c256272473d2a50b772cea34e19e7d3bcb030e2d37741c50fd461ba6d53b9cfae907b08c21dc36d10119c4cfdac578988f9d2e204bda461480e197b5dd4bb64bb00b81491e31f69009b3f62ec5f8185dd87a27ff3ea6e853de52ed199f34da7cf2b8d405226830a9e29cbf80769501f74aad900c8b185c9b14842193de18d0f5c61bf70cd192d6c3f05ad287"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0x98, 0x8, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}]}, {0x61, 0x6, "5cee7a6abb664b3b6c1eec682a8b20ef14c6ace1b3b67e25a7f1ec34cb71cffa40e3107856bf6adeb7e020c1a0179aac03aa9c2fc2d30d195413463404062dd1f827c227fcfd8348e6a07841ecdb509c165040ec3fda1ca7eca6e8d06b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x344}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[{0x18, 0x110, 0x1, "12"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "12"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000100100000100000012000000000000001000000000000000100100000e000000ccf68915a2a79994b111a022eb4ea38868d069291737ddf801039abf77df0e7d7c482d308db3495470057a36659c644809bb4df9e2718b53d2bb8220bb3db53814585a9bc06ef1747ef48a8c74bf10bef722cc86addf15e2"], 0x28}, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000005c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0xf0}, 0x4000) recvmmsg(r2, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/197, 0xc5}, {&(0x7f0000000900)=""/138, 0x8a}, {&(0x7f0000000e00)=""/175, 0xaf}, {&(0x7f0000001300)=""/4088, 0xff8}], 0x4}, 0x2}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002380)=""/37, 0x25}, {&(0x7f00000023c0)=""/156, 0x9c}, {&(0x7f0000000300)=""/190, 0xbe}, {&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/4099, 0x1003}], 0x5}}], 0x7, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x7, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000041}, 0x850) 2.707483507s ago: executing program 2 (id=3027): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x22}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x10, 0x4, 0x4, 0x8}, 0x48) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000200)=@req={0x3fc, 0xfffffffc}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000280)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) bind$tipc(r4, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000200), &(0x7f0000000240)=""/52}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x270, 0x190, 0x0, 0x190, 0x0, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x20, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x6}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x3c}}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) 2.534005912s ago: executing program 2 (id=3029): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x1e, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00022cbd7000fcdbdf2512000000050029000a0000000600120105000000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000001400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000013c0)={&(0x7f00000004c0)={0xee0, r4, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0xc2c, 0x11d, 0x0, 0x1, [{0x45c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x14, 0x2, [{0x4, 0x2}, {0x5, 0x4}, {0x0, 0x3}, {0x1}, {0x7, 0x6}, {0x3, 0x5}, {0x3, 0x5}, {0x4, 0x3}, {0x0, 0x1}, {0x0, 0x7}, {0x6, 0x8}, {0x4, 0x1}, {0x4, 0x2}, {0x2, 0x5}, {0x2, 0x1}, {0x1, 0x3}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x30, 0x3, 0x12, 0x2, 0x12, 0x12, 0x18, 0x2, 0x1b, 0x2a, 0x60, 0x16, 0x2, 0x30, 0x48]}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x40, 0x0, 0x40, 0x8, 0x64, 0x7]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x0, 0x7}, {0x1, 0x7}, {0x6, 0x7}, {0x1, 0x5}, {0x0, 0xa}, {0x6, 0x9}, {0x2, 0x5}, {0x7, 0x2}, {0x7, 0x7}, {0x1, 0x1}, {0x0, 0x5}, {0x6, 0x2}, {0x0, 0x3}, {0x5, 0xa}, {0x7, 0xa}, {0x5, 0x3}, {0x4, 0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x6}, {0x4}, {0x6, 0x3}, {0x2, 0x1}, {0x3, 0x4}, {0x1, 0x5}, {0x3, 0x9}, {0x3, 0x6}, {0x0, 0x1}, {0x4, 0x9}, {0x1, 0x4}, {0x0, 0xa}, {0x2, 0x5}, {0x0, 0x9}, {0x0, 0x4}, {0x4, 0x3}, {0x2, 0x9}, {0x5, 0x4}, {0x0, 0x1}, {0x5, 0x13}, {0x4, 0x5}, {0x2, 0x7}, {0x2, 0x3}, {}, {0x0, 0xa}, {0x2, 0xa}, {}, {0x0, 0x5}, {0x7, 0x8}, {0x5, 0x1}, {0x1, 0x5}, {0x5, 0x6}, {0x6, 0x2}, {0x4, 0x8}, {0x2, 0x5}, {0x4}, {0x0, 0x7}, {0x2}, {0x2}, {0x0, 0x1}, {0x1, 0xa}, {0x4}, {0x2, 0x8}, {0x6, 0x2}, {0x3, 0x8}, {0x5, 0x8}, {0x4, 0x6}, {0x0, 0x3}, {0x1, 0x7}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x8}, {0x4, 0x5}, {0x7, 0x4}, {0x1, 0x8}, {0x2, 0x5}, {0x5, 0xa}, {0x1, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x283d, 0x0, 0x3, 0x7, 0x7, 0x9, 0x400, 0x7ea]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x24, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x48, 0x1b, 0xc, 0x1, 0xc, 0x48, 0x6, 0xc, 0xb, 0x3, 0x2, 0x1, 0x1, 0x18, 0x4, 0x56, 0x6c, 0x36, 0x16, 0x6, 0x2, 0x36, 0x18, 0x3, 0x12, 0x18, 0x36, 0x18, 0x1e55452db4203885, 0x6, 0xb, 0x6c]}]}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xc, 0x6c, 0x12, 0x30, 0x30, 0x4, 0x2, 0x5, 0x77, 0x6c, 0x32, 0x24, 0x60, 0xb, 0x12, 0x18, 0x4, 0x6, 0x74, 0x45faf433110e638e, 0x2, 0x4, 0x36]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x4, 0x4}, {0x4, 0x8}, {0x2, 0xa}, {0x6}, {0x2, 0x4}, {0x3, 0x8}, {0x0, 0x4}, {0x6, 0x2}, {0x3, 0x3}, {0x2}, {0x7, 0x1}, {0x3, 0x4}, {0x6, 0x8}, {0x3, 0x1}, {0x0, 0x3}, {0x6, 0x5}, {0x6, 0x7}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x5}, {0x4, 0xa}, {0x5, 0x6}, {0x5, 0x3}, {0x3, 0x5}, {0x1, 0x5}, {0x6, 0xa}, {0x7, 0x3}, {0x7, 0x7}, {0x2, 0x1}, {0x4, 0x6}, {0x1, 0x8}, {}, {0x4, 0x1}, {0x0, 0xa}, {0x4, 0x3}, {0x2, 0x3}, {0x5, 0x8}, {0x3, 0x9}, {0x6, 0x7}, {0x1, 0x4}, {0x1}, {0x5, 0x5}, {0x1, 0x4}, {0x4, 0x1}, {0x4, 0x9}, {0x6, 0x4}, {0x4, 0x5}, {0x7, 0x8}, {0x4, 0x7}, {0x0, 0x2}, {0x5}, {0x7, 0x1}, {0x3, 0x4}, {0x4, 0x1}, {0x6}, {0x0, 0x8}, {0x1, 0x4}, {0x0, 0x5}, {0x5, 0x4}, {0x0, 0x5}, {0x6, 0x7}, {0x3, 0x3}, {0x4, 0x3}, {0x1, 0x7}, {0x7, 0x7}, {0x4, 0xa}, {0x0, 0x9}, {0x2, 0x1}, {0x3, 0x9}, {0x7, 0x8}, {0x3, 0x2}, {0x3, 0x9}, {0x5, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x16, 0x16, 0x1, 0x60, 0x60, 0x6c, 0xb, 0x2, 0x1, 0x3, 0x6, 0x18, 0x18, 0x6c, 0x5, 0x1, 0x18, 0x1, 0x2, 0x24, 0x16, 0x36, 0x16, 0x6c, 0x5, 0x36, 0x4]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x480, 0x0, 0x8000, 0x0, 0x6, 0x100, 0x2]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x258, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x38a, 0x2, 0x0, 0x4, 0x1, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5c5, 0xea, 0x5, 0x4, 0x6, 0x1, 0x5a57]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x7, 0x7}, {0x3, 0x7}, {0x4, 0x7}, {0x1, 0x4}, {0x1}, {0x2, 0x3}, {0x6, 0x8}, {0x4, 0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x2, 0x1}, {0x5, 0x6}, {0x0, 0x8}, {}, {0x7, 0xa}, {0x3, 0x9}, {0x6, 0x1}, {0x6, 0x6}, {0x7, 0x1}, {0x1}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x8}, {0x1, 0x4}, {0x1, 0xa}, {0x4, 0x3}, {0x7, 0x7}, {0x2, 0x7}, {0x2, 0x4}, {0x1, 0x3}, {0x0, 0x8}, {0x5, 0x8}, {0x7, 0x2}, {0x2}, {0x2}, {0x0, 0x6}, {0x5, 0x3}, {0x6}, {0x2, 0x5}, {0x1, 0x2}, {0x7, 0x3}, {}, {0x5, 0x1}, {0x3, 0x6}, {0x2, 0x1}, {0x5, 0x7}, {0x0, 0x6}, {0x2, 0x8}, {0x1, 0x1}, {0x3, 0x9}, {0x0, 0x7}, {0x1, 0x4}, {0x2, 0x2}, {0x3, 0x7}, {0x7, 0x9}, {0x5, 0x7}, {0x3, 0xa}, {0x5, 0x8}, {0x0, 0x6}, {0x7, 0x1}, {0x7, 0x3}, {0x6, 0x9}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x2}, {0x7, 0x6}, {0x3, 0x4}, {0x6, 0x6}, {0x4, 0xa}, {0x0, 0x4}, {0x1, 0x3}, {0x0, 0x7}, {}, {0x1, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ede, 0x1, 0xfffa, 0xc8, 0x1000, 0x5, 0x1, 0x7ff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x3, 0x1}, {0x7, 0x5}, {0x4, 0xa}, {0x5, 0x2}, {0x7, 0x5}, {0x3}, {0x4, 0x1}, {0x1, 0x7}, {0x6, 0xa}, {0x0, 0x5}, {0x5, 0x4}, {0x5, 0x9}, {0x0, 0x9}, {0x4, 0x4}, {0x4, 0x4}, {0x6, 0x3}, {0x4, 0x8}, {0x1, 0x2}, {0x5, 0x1}, {0x6, 0x4}, {0x1, 0x1}, {0x4, 0x5}, {0x1, 0x2}, {0x2, 0x4}, {0x6, 0x5}, {0x5}, {0x4, 0x1}, {0x7, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x6, 0x6}, {0x6, 0x9}, {0x6, 0x4}, {0x4, 0x9}, {0x3, 0x7}, {0x7, 0x5}, {0x6, 0x5}, {0x1, 0x9}, {0x7, 0x4}, {0x5, 0x3}, {0x1}, {0x2, 0x1}, {0x7, 0x2}, {0x1, 0x6}, {0x5, 0x4}, {0x5, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x9, 0x5, 0x1, 0x9, 0x4d4, 0x2e0d]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0x2, 0x5, 0x3f, 0x0, 0xfff, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x48, 0x6, 0x48, 0x9, 0x36, 0x7d, 0x1, 0x2, 0x60, 0x16, 0x0, 0x60, 0x16]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x48, 0x18, 0x2, 0x4d, 0x4, 0x30, 0x9, 0x22, 0x1, 0x3, 0xa, 0x16, 0x6c, 0x60, 0xc, 0x60, 0x48, 0x24, 0x9, 0x16, 0x6, 0x36, 0x36]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x3}, {0x1, 0x5}, {0x4, 0x1}, {0x3, 0x3}, {0x4, 0x8}, {0x3, 0x7}, {0x2, 0x1}, {0x2, 0x5}, {0x4, 0x15}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x1, 0x9}, {0x1, 0x4}, {0x1, 0x2}, {0x0, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x322c, 0x7, 0x7430, 0x6, 0xaf1, 0xa41, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x1, 0xe, 0x4, 0x5, 0xc, 0x3]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x2, 0x1, 0x5, 0x1b, 0x9, 0x4, 0xb, 0x24, 0x4, 0x5, 0x16, 0x0, 0x12, 0x3d, 0x0, 0x13, 0x36, 0x36, 0x60, 0xb, 0x36]}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0xc26, 0xafe, 0x2, 0x800, 0x1, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x1, 0x3}, {0x4, 0x3}, {0x0, 0x3}, {0x0, 0x3}, {0x6, 0x6}, {0x2}, {0x3, 0x4}, {0x4, 0x5}, {0x4, 0x4}, {0x4, 0x1}, {0x5}, {0x3, 0xa}, {0x2, 0x1}, {0x4, 0x6}, {0x3, 0x3}, {0x3, 0x2}, {0x3}, {0x2, 0x5}, {0x6, 0x8}, {0x2, 0x1}, {0x5, 0x2}, {0x7, 0x9}, {0x7, 0x3}, {0x6, 0x4}, {0x0, 0x1}, {0x1}, {0x7, 0x1}, {0x0, 0x8}, {0x7, 0x1}, {0x1, 0x5}, {0x5, 0x8}, {0x1, 0x3}, {0x5, 0x7}, {0x2, 0x3}, {0x5, 0x5}, {0x6, 0x1}, {0x5, 0x7}, {0x1, 0x5}, {0x0, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x1a4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x30, 0x2, 0x6, 0x5, 0x2, 0x68, 0x5c, 0x12, 0x9, 0x36, 0x1b, 0x2, 0x9, 0x18, 0x1, 0xc, 0x24, 0x48, 0x3, 0x18, 0x0, 0x6c, 0x30, 0x24, 0xb, 0x6c, 0x12]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x7, 0x2}, {0x5, 0x7}, {0x2, 0x3}, {0x6, 0x2}, {0x1, 0x4}, {0x5, 0x6}, {0x3, 0x5}, {0x1, 0xa}, {0x4, 0x9}, {0x0, 0xa}, {0x1, 0x5}, {0x2, 0x3}, {0x5, 0x9}, {0x1, 0x8}, {0x3, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x7, 0x3}, {0x5, 0x7}, {0x0, 0xa}, {0x3, 0x6}, {0x1, 0x2}, {0x4, 0x8}, {0x5, 0xa}, {0x2, 0x5}, {0x6, 0x2}, {0x7, 0x7}, {0x2, 0x6}, {0x2, 0x5}, {0x6, 0x1}, {0x4, 0x1}, {0x4, 0xd}]}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2e}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x11c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x16, 0x1, 0x48, 0x36, 0x9, 0x12, 0x3, 0x6, 0x1, 0x16, 0x24, 0x4, 0x24, 0x3, 0x18, 0x3, 0x1b, 0x6c, 0x1, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb85c, 0xffff, 0x7, 0x5, 0xc, 0x101, 0xec9, 0x6d19]}}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xe, 0x1, 0x1, 0x8, 0x0, 0x79, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0xe0, 0x5, 0x9, 0x8, 0xc, 0x3, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x9, 0x2b0a, 0xc, 0x480, 0x7fff, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x1, 0x8, 0x4, 0x8, 0x5, 0x5, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x21, 0xe3d, 0x3, 0x8b3, 0x7f, 0x4, 0x84]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb0, 0x4, 0x5, 0x4, 0xd05, 0xa, 0x1000, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x36, 0xc, 0x4d, 0x30, 0x0, 0x16, 0xe, 0x5, 0x5, 0x9, 0x48, 0x4, 0x6, 0x60, 0x1a, 0x16, 0x1b, 0xc, 0x3, 0x3, 0xb]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x60, 0x1b, 0x1, 0xc, 0x5, 0xb, 0x4, 0x24, 0xc, 0x9]}]}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffffff}]}, {0x5cc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1a4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xa2, 0x5b25, 0x9, 0x6, 0x5, 0xffb2, 0x7]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x2, 0x8}, {0x6, 0x2}, {0x1, 0x2}, {0x2}, {0x6, 0x4}, {0x6, 0x8}, {0x7, 0x4}, {0x5, 0x3}, {0x4, 0xa}, {0x1, 0x5}, {0x0, 0xa}, {0x2, 0xa}, {0x7, 0x1}, {0x4, 0x2}, {0x2, 0x2}, {0x1, 0x4}, {0x2, 0x1}, {0x0, 0x8}, {0x6}]}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x883, 0x8000, 0xb, 0x8, 0x8000, 0x100, 0x6b]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x7, 0x0, 0x4, 0x4, 0x2, 0x6, 0x800]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xfffb, 0x1, 0x5, 0xff, 0x2bd7, 0x8, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0xc963, 0x89, 0x4, 0x2, 0xb, 0x5dbc]}}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x7}, {0x6, 0x2}, {0x0, 0x3}, {0x4, 0x1}, {0x7, 0x6}, {0x4, 0x3}, {0x5, 0x6}, {0x0, 0x5}, {0x0, 0x3}, {0x5, 0x3}, {0x7, 0x4}, {0x4, 0x9}, {0x3, 0x2}, {0x4, 0x5}, {0x1}, {0x6, 0x6}, {0x4, 0x6}, {0x1, 0x1}, {0x7, 0x1}, {0x0, 0x3}, {0x1, 0x6}, {0x7, 0xa}, {0x5, 0x3}, {0x4, 0x4}, {0x5, 0x9}, {0x0, 0x4}, {0x5, 0x8}, {0x5, 0x7}, {0x0, 0x8}, {0x0, 0x8}, {0x7, 0x6}, {0x7, 0x3}, {0x7, 0x6}, {0x0, 0x1}, {0x1, 0x7}, {0x1, 0x2}, {0x1, 0x5}, {0x2, 0xa}, {0x2, 0x9}, {0x3, 0x7}, {0x6, 0x4}, {0x2, 0x1}, {0x2, 0x5}, {0x7, 0x8}, {0x7, 0x5}, {0x3, 0x7}, {0x1, 0x4}, {0x4, 0xa}, {0x2, 0x8}, {0x0, 0x7}, {0x0, 0x3}, {0x5, 0x1}, {0x1, 0x4}, {0x4, 0x7}, {0x5, 0xe}, {0x1, 0x4}, {0x0, 0xc}, {0x0, 0x7}, {0x0, 0x6}, {0x2}, {0x5, 0x1}, {0x1}, {0x1, 0x9}, {0x0, 0x9}, {}, {0x0, 0x4}, {0x0, 0x6}, {0x2}, {0x3, 0x7}, {0x2, 0x6}]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x8, 0x6d, 0x9, 0x800, 0x7, 0x60, 0x81]}}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xda2, 0xfff8, 0x100, 0x3, 0x0, 0x9, 0x7, 0xe]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0x5, 0x5, 0x3, 0x10, 0x1ff, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1, 0x40, 0x101, 0x8000, 0xe2ce, 0x2, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x3, 0x7, 0x0, 0x1, 0x8f, 0x3, 0x3]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x12]}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa29, 0x1000, 0x3, 0x0, 0x9c, 0x4, 0x7, 0x100]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x168, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8, 0x8633, 0x401, 0x6, 0xb0f, 0x9, 0xf0]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x36, 0x6, 0x8000, 0x7, 0x1ff, 0x8, 0x4]}}]}, @NL80211_BAND_60GHZ={0xfc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x401, 0xfff9, 0x5, 0x4, 0x4, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x3, 0x1}, {0x2, 0x2}, {0x6, 0x9}, {0x2, 0xa}, {0x2, 0x1}, {0x7, 0x8}, {0x3, 0x3}, {0x6, 0x6}, {0x7, 0x2}, {0x2, 0x9}, {0x6}, {0x7}, {0x1, 0x1}, {0x6, 0x8}, {0x0, 0x2}, {0x4, 0x5}, {0x1, 0x5}, {0x2, 0x7}, {}, {0x7, 0x9}, {0x6, 0x3}, {0x2}, {0x5}, {0x2, 0x3}, {0x0, 0xa}, {0x5, 0x2}, {0x0, 0x4}, {0x7, 0x1}, {0x2}, {0x1, 0x4}, {0x4, 0x5}, {0x0, 0x6}, {0x7, 0x6}, {0x0, 0x1}, {0x2, 0x5}, {0x7, 0x9}, {0x6, 0xa}, {0x2, 0xa}, {0x5, 0x6}, {0x0, 0x7}, {0x5}, {0x1, 0x4}, {0x4, 0xa}, {0x3, 0x8}, {0x0, 0x5}, {0x5, 0x8}, {0x1, 0x8}, {0x7, 0xa}, {0x6}, {0x3, 0x6}, {0x5}, {0x0, 0xa}, {0x1, 0x3}, {0x7, 0xa}, {0x7, 0x5}, {0x5, 0x2}, {0x5}, {0x7, 0x5}, {0x3, 0x6}, {0x0, 0xa}, {0x6}, {0x4, 0x5}, {0x5, 0x3}, {0x0, 0x5}, {0x1, 0x7}, {0x1, 0x5}, {0x5, 0x5}, {0x2, 0x4}, {0x1, 0x9}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x9, 0x18, 0x30, 0xb, 0x1, 0x36, 0x16, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x3, 0x3}, {0x1, 0xa}, {0x0, 0x1}, {0x3, 0x7}, {0x5, 0x5}, {0x3, 0x3}, {0x4, 0x9}, {0x7, 0x8}, {0x1, 0x7}, {0x4, 0x3}, {0x7, 0x4}, {0x5, 0x5}, {0x7, 0x9}, {0x2, 0x7}, {0x5, 0xa}, {0x5, 0x8}, {0x6, 0x5}, {0x6, 0x1}, {0x4, 0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x6, 0x9}, {0x6, 0x9}, {0x7, 0xa}, {0x3}, {0x5, 0x8}, {0x3, 0xa}, {0x3, 0x3}, {0x3, 0x3}, {0x6, 0x3}, {0x3, 0x9}, {0x0, 0x5}, {}, {0x0, 0xa}, {0x1, 0x2}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x6}, {0x1, 0x2}, {0x5, 0x6}, {0x1, 0x2}, {0x0, 0x7}, {0x0, 0x6}, {0x1, 0x4}, {0x4, 0x4}, {0x2, 0x2}, {0x5, 0x4}, {0x4, 0x6}, {0x0, 0x2}, {0x2, 0x6}, {0x1, 0x2}, {0x4, 0x7}, {0x1, 0x4}, {0x3, 0x6}, {0x2, 0x6}, {0x3, 0x7}, {0x0, 0x9}, {0x0, 0x4}, {0x6, 0x5}, {0x0, 0x5}, {}, {0x3, 0x4}, {0x0, 0x7}, {0x5, 0x5}, {0x6, 0x2}, {0x4, 0x6}, {0x0, 0x6}, {0x5, 0x2}, {0x6, 0x5}, {0x0, 0x6}, {0x1, 0xa}, {0x6, 0x2}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x7, 0x9, 0x4, 0x9, 0x70, 0x5, 0x2]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x48, 0x0, 0x36, 0x18, 0x16, 0x12, 0x48, 0x2, 0xc, 0x36, 0x5, 0xc, 0x9]}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x2, 0xa}, {0x4, 0x6}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x29c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x35, 0x2, [{0x1, 0x8}, {0x0, 0x3}, {0x0, 0x2}, {0x4}, {0x2, 0x7}, {0x4, 0x7}, {0x1, 0x4}, {0x3, 0x2}, {0x3}, {0x3, 0x1}, {0x1, 0x8}, {0x2, 0x8}, {0x4, 0x1}, {0x5}, {0x1, 0x7}, {0x1, 0x3}, {0x1, 0xa}, {0x5, 0x8}, {0x4, 0x6}, {0x7, 0x8}, {0x3, 0x2}, {0x2, 0x9}, {0x3, 0x4}, {0x1}, {0x4, 0x5}, {0x7, 0x3}, {0x5, 0x6}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x7}, {0x1, 0x5}, {0x1, 0x6}, {0x3}, {0x5, 0x3}, {0x1, 0x4}, {0x1, 0xa}, {0x0, 0x6}, {0x1, 0x6}, {0x4, 0x2}, {0x1, 0x5}, {0x2, 0x4}, {0x2, 0x7}, {0x6, 0x3}, {0x1, 0x4}, {0x2, 0x7}, {0x2, 0x9}, {0x6, 0xa}, {0x7, 0x1}, {0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x45, 0x1ff, 0xf, 0x5, 0x9, 0x0, 0x6, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x2, 0xa}, {0x0, 0x2}, {0x6, 0x9}, {0x7, 0x1}, {0x7, 0xa}, {0x1, 0x9}, {0x1, 0x6}, {0x2, 0xa}, {0x5, 0x4}, {0x1}, {0x5, 0x3}, {0x2, 0x5}, {0x0, 0xa}, {0x5, 0x2}, {0x0, 0x4}, {0x4, 0x8}, {0x4, 0x1}, {0x7, 0x5}, {0x6, 0x4}, {0x5, 0x7}, {0x0, 0x5}, {0x0, 0x4}, {0x7, 0x3}, {0x1, 0x3}, {0x5, 0x4}, {0x7, 0x7}, {0x6, 0xa}, {0x2, 0x4}, {0x2, 0x6}, {0x4, 0x6}, {0x2, 0x7}, {0x6, 0x2}, {0x3, 0x4}, {0x1, 0x4}, {0x6}, {0x5, 0x2}, {0x0, 0x1}, {0x0, 0x8}, {0x5, 0x4}, {0x4, 0x4}, {0x6, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x4}, {0x5, 0x3}, {0x5, 0x8}, {0x0, 0x9}, {0x7, 0x9}, {0x0, 0x5}, {0x0, 0x3}, {0x5, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x7}, {0x4, 0x5}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0xa}, {0x5, 0x9}, {0x7, 0xa}, {0x3, 0x2}, {0x1, 0x3}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x9}, {0x0, 0x1}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x5}, {0x2, 0x3}, {0x1}, {0x3, 0xa}, {0x6}, {0x0, 0x9}, {0x2, 0xa}, {0x7, 0x7}, {0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x6, 0x2, 0xa, 0x724, 0xb, 0x1000, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x9, 0xe, 0x4, 0x10, 0x0, 0x7af, 0xe61f]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x5, 0x9}, {0x2, 0x3}, {0x2, 0x2}, {0x3}, {0x0, 0x4}, {0x0, 0x4}, {0x6, 0xa}, {0x1, 0xa}, {0x0, 0x3}, {0x4, 0xa}, {0x4, 0x7}, {0x5, 0x1}, {0x2, 0x9}, {0x6, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x9, 0x18, 0x4, 0x48, 0x1, 0x12, 0x12, 0x2, 0x30, 0x18, 0xc, 0xb, 0x30, 0x60, 0x9, 0x6, 0xb]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0xb, 0x60, 0x6c, 0x30, 0x3, 0x9, 0x2, 0x6c, 0x6c, 0x12, 0x48, 0x60, 0x6c, 0x60, 0x1, 0x30, 0x1, 0x1, 0x30, 0x1b, 0x48, 0x1, 0xb, 0x48, 0x6, 0x16, 0x3, 0x6c, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x6, 0x2}, {0x3, 0x8}, {0x4, 0x3}, {0x3, 0x5}, {0x5, 0x8}, {0x0, 0xa}, {0x1, 0x1}, {0x1, 0x7}, {0x6, 0x5}, {0x0, 0x1}, {0x0, 0x3}, {0x5, 0x6}, {0x5}, {0x7}, {0x4, 0x2}, {0x3, 0x3}, {0x0, 0x6}, {0x6, 0x2}, {0x7, 0x4}, {0x7, 0x1}, {0x6}, {0x5, 0x6}, {0x6, 0x1}, {0x6}, {0x1, 0x3}, {0x0, 0xa}, {0x3, 0x7}, {0x5, 0x5}, {0x4, 0x8}, {0x5, 0x1}, {0x0, 0x4}, {0x4, 0x4}, {0x5, 0x3}, {0x4, 0x1}, {0x0, 0x4}, {0x0, 0x1}, {0x6, 0x1}, {0x2}, {0x1}, {0x7, 0x3}, {0x6, 0xa}, {0x1, 0x1}, {0x2}, {0x4, 0x4}, {0x6, 0x1}, {0x7, 0x6}, {0x3, 0x7}, {0x4, 0x8}, {0x0, 0x7}, {0x1, 0xa}, {0x0, 0xa}, {0x1, 0x4}, {0x6, 0x4}, {0x2, 0x3}, {0x1}, {0x1, 0x8}, {0x3}, {0x2, 0x6}, {0x4, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0xfff7, 0x2, 0x6, 0x4, 0x9, 0x401, 0xa328]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x91fa, 0x9dd3, 0x4, 0x1a, 0x400, 0x7fff, 0xfff]}}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x5}, {0x2, 0x7}, {0x7, 0x7}, {0x2, 0x3}, {0x3, 0x9}, {0x0, 0x1}, {0x1, 0x5}, {0x0, 0x6}, {0x1, 0x9}, {0x6, 0x2}, {0x3, 0x5}, {0x4, 0x7}, {0x7}, {0x4}, {0x3, 0x4}, {0x1, 0x4}, {0x4, 0x2}, {0x0, 0x1}, {0x2, 0x9}, {}, {0x6, 0x5}, {0x0, 0xa}, {0x4, 0x7}, {0x6}, {0x0, 0xa}, {0x3, 0x3}, {0x4, 0x9}, {0x3, 0x2}, {0x1, 0x4}, {0x4, 0x2}, {0x1, 0x1}, {0x0, 0x3}, {0x6, 0x6}, {0x0, 0x8}, {0x3, 0xa}, {0x4, 0x4}, {0x0, 0x8}, {0x5, 0x7}, {0x4, 0xa}, {0x0, 0xa}, {0x2, 0x1}, {0x7, 0xa}, {0x6, 0x6}, {0x5, 0x1}, {0x5, 0x2}, {0x2, 0x2}, {0x1, 0x8}, {0x6}, {0x4, 0x7}, {0x0, 0x4}, {0x2, 0x5}, {0x0, 0x9}, {0x7, 0xa}, {0x0, 0x3}, {0x5, 0x9}, {0x7, 0xa}, {0x4, 0x8}, {0x0, 0x6}, {0x6, 0x4}, {0x7, 0x9}, {0x3, 0x2}, {0x7, 0x5}, {0x5, 0x8}, {0x5, 0x5}, {0x2, 0x8}, {0x1, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x20, 0x81, 0x90, 0x9, 0x4, 0x2, 0x4]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x7, 0x30, 0x18, 0x12, 0x0, 0x0, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x9, 0x60, 0x18, 0x24, 0x4, 0x30, 0x12, 0x0, 0x0, 0x12, 0x1b, 0x69, 0x1, 0x0, 0xc, 0xc, 0x12, 0x9, 0x18, 0x60, 0x1a, 0x12, 0x9, 0x48, 0x6c, 0x2]}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x26}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x2a0, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x85}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2312}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7b}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x240, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xe4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x36, 0x1c, 0x2, 0x9, 0x36, 0x1b, 0x60, 0x18, 0xa, 0xc, 0x36, 0x18, 0x6, 0x48, 0x1, 0x48, 0x18, 0x4, 0x5, 0x30, 0x9, 0x4, 0x9, 0x6, 0x7, 0x24, 0x24, 0x2d, 0x4]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x1, 0x4}, {0x3, 0xa}, {0x3, 0x9}, {0x3, 0x7}, {0x2, 0x1}, {0x3, 0xa}, {0x4, 0x8}, {0x2, 0x7}, {0x0, 0x5}, {0x0, 0x6}, {0x5, 0x7}, {0x6, 0x9}, {0x5, 0x9}, {0x6, 0x3}, {0x5, 0x4}, {0x7, 0x1}, {0x1, 0x4}, {0x7}, {0x2, 0x7}, {0x2, 0x9}, {0x0, 0x7}, {0x4, 0xa}, {0x5, 0x7}, {0x2}, {0x0, 0x4}, {0x3, 0x9}, {0x5, 0x2}, {0x7, 0xa}, {0x1, 0x9}, {0x6, 0x2}, {0x4, 0x3}, {0x2, 0x1}, {0x4, 0x5}, {0x4, 0x8}, {0x6, 0x5}, {0x1, 0x6}, {0x1, 0x3}, {0x2, 0x3}, {0x2, 0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x2, 0x1}, {0x5, 0x8}, {0x7, 0x6}, {0x5}, {0x1, 0x4}, {0x1, 0x9}, {0x6, 0x9}, {0x3, 0x1}, {0x0, 0x6}, {0x7, 0x1c}, {0x5, 0x5}, {0x3, 0x3}, {0x2, 0x1}, {0x4}]}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x5, 0x1}, {0x7, 0x9}, {0x6}, {0x6, 0xa}, {0x0, 0xa}, {0x1, 0x3}, {0x5, 0x2}, {0x6, 0x2}, {0x1, 0x1}, {0x7}, {0x5, 0x4}, {0x1, 0x4}, {0x2, 0x8}, {0x3, 0x3}, {0x4, 0x7}, {0x6, 0x2}, {0x4, 0x1}, {0x3, 0x8}, {0x7, 0xa}, {0x0, 0x3}, {0x5, 0xa}, {0x6, 0x9}, {0x2, 0x7}, {0x7}, {0x4, 0x7}, {0x6, 0x2}, {0x5}, {0x5, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xb, 0x30, 0x60, 0x18, 0x1, 0xb, 0x18, 0x12, 0x9, 0x60, 0x5, 0x18, 0x0, 0x18, 0x5, 0x3, 0xc, 0x6, 0x6c, 0x18, 0xb, 0x2, 0x30, 0x6, 0x1, 0x4, 0x45, 0x6, 0x16, 0x18, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4, 0x2, 0x4, 0xff, 0xfff, 0xf0, 0x500]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xebcf9af00e6ea6ba, 0x2, 0x8, 0x6c, 0x24, 0x48, 0x1, 0x5, 0x5, 0x24, 0x0, 0x3, 0xb, 0x9, 0xc, 0x18, 0x12, 0x4, 0x5, 0x24, 0x16]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x6, 0x9}, {0x3, 0x6}, {}, {0x6}, {0x5, 0x1}, {0x0, 0xa}, {0x0, 0x1}, {0x0, 0x5}, {0x0, 0x8}, {0x6, 0x3}, {0x5}, {0x6, 0xa}, {0x6}, {0x7, 0x6}, {0x7, 0x1}, {0x1, 0x5}, {0x4, 0xa}, {0x7, 0x1}, {0x7, 0x1}, {0x0, 0x9}, {0x3, 0x3}, {0x2}, {0x1, 0x6}, {0x5, 0x3}, {0x7}, {0x7, 0x7}, {0x0, 0x4}, {}, {}, {0x0, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x2, 0x6}, {0x3, 0x2}, {0x6, 0x7}, {0x1, 0xa}, {}, {0x3, 0xa}, {0x6, 0x5}, {0x0, 0x6}, {0x4, 0x8}, {0x0, 0x8}, {0x3, 0x1}, {0x2}, {0x7, 0x6}, {0x6, 0x1}, {0x3, 0x7}, {0x7, 0x2}, {0x0, 0x9}, {0x6, 0x3}, {0x0, 0xa}, {0x7, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x4, 0x8}, {0x6, 0x6}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xf84, 0x2, 0x0, 0x8, 0x413e, 0x8, 0x6]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x42, 0x3, 0x9, 0x55d9, 0x2, 0x2, 0x8, 0x7ff]}}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x16, 0x36, 0x16, 0x36, 0x18, 0x24, 0x1b, 0x36, 0x2, 0x4, 0x5, 0x6, 0x36, 0x9, 0x6, 0x19, 0x36, 0x6c, 0x2, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdb6, 0x3c, 0x5, 0x9, 0x8, 0x3, 0x7ff, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1000, 0xfff3, 0x4, 0x8b, 0x6, 0x6, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x65, 0x3, 0xe, 0x4, 0x3, 0x7, 0x9, 0xe7d7]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}]}]}, 0xee0}, 0x1, 0x0, 0x0, 0x40080}, 0x20008800) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0808020000000000"], 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) getsockopt$inet_tcp_int(r2, 0x6, 0x1e, 0x0, &(0x7f0000000180)) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00022cbd7000fcdbdf2512000000050029000a0000000600120105000000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000001400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000013c0)={&(0x7f00000004c0)={0xee0, r4, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0xc2c, 0x11d, 0x0, 0x1, [{0x45c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x14, 0x2, [{0x4, 0x2}, {0x5, 0x4}, {0x0, 0x3}, {0x1}, {0x7, 0x6}, {0x3, 0x5}, {0x3, 0x5}, {0x4, 0x3}, {0x0, 0x1}, {0x0, 0x7}, {0x6, 0x8}, {0x4, 0x1}, {0x4, 0x2}, {0x2, 0x5}, {0x2, 0x1}, {0x1, 0x3}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x30, 0x3, 0x12, 0x2, 0x12, 0x12, 0x18, 0x2, 0x1b, 0x2a, 0x60, 0x16, 0x2, 0x30, 0x48]}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x40, 0x0, 0x40, 0x8, 0x64, 0x7]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x0, 0x7}, {0x1, 0x7}, {0x6, 0x7}, {0x1, 0x5}, {0x0, 0xa}, {0x6, 0x9}, {0x2, 0x5}, {0x7, 0x2}, {0x7, 0x7}, {0x1, 0x1}, {0x0, 0x5}, {0x6, 0x2}, {0x0, 0x3}, {0x5, 0xa}, {0x7, 0xa}, {0x5, 0x3}, {0x4, 0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x6}, {0x4}, {0x6, 0x3}, {0x2, 0x1}, {0x3, 0x4}, {0x1, 0x5}, {0x3, 0x9}, {0x3, 0x6}, {0x0, 0x1}, {0x4, 0x9}, {0x1, 0x4}, {0x0, 0xa}, {0x2, 0x5}, {0x0, 0x9}, {0x0, 0x4}, {0x4, 0x3}, {0x2, 0x9}, {0x5, 0x4}, {0x0, 0x1}, {0x5, 0x13}, {0x4, 0x5}, {0x2, 0x7}, {0x2, 0x3}, {}, {0x0, 0xa}, {0x2, 0xa}, {}, {0x0, 0x5}, {0x7, 0x8}, {0x5, 0x1}, {0x1, 0x5}, {0x5, 0x6}, {0x6, 0x2}, {0x4, 0x8}, {0x2, 0x5}, {0x4}, {0x0, 0x7}, {0x2}, {0x2}, {0x0, 0x1}, {0x1, 0xa}, {0x4}, {0x2, 0x8}, {0x6, 0x2}, {0x3, 0x8}, {0x5, 0x8}, {0x4, 0x6}, {0x0, 0x3}, {0x1, 0x7}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x8}, {0x4, 0x5}, {0x7, 0x4}, {0x1, 0x8}, {0x2, 0x5}, {0x5, 0xa}, {0x1, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x283d, 0x0, 0x3, 0x7, 0x7, 0x9, 0x400, 0x7ea]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x24, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x48, 0x1b, 0xc, 0x1, 0xc, 0x48, 0x6, 0xc, 0xb, 0x3, 0x2, 0x1, 0x1, 0x18, 0x4, 0x56, 0x6c, 0x36, 0x16, 0x6, 0x2, 0x36, 0x18, 0x3, 0x12, 0x18, 0x36, 0x18, 0x1e55452db4203885, 0x6, 0xb, 0x6c]}]}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xc, 0x6c, 0x12, 0x30, 0x30, 0x4, 0x2, 0x5, 0x77, 0x6c, 0x32, 0x24, 0x60, 0xb, 0x12, 0x18, 0x4, 0x6, 0x74, 0x45faf433110e638e, 0x2, 0x4, 0x36]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x4, 0x4}, {0x4, 0x8}, {0x2, 0xa}, {0x6}, {0x2, 0x4}, {0x3, 0x8}, {0x0, 0x4}, {0x6, 0x2}, {0x3, 0x3}, {0x2}, {0x7, 0x1}, {0x3, 0x4}, {0x6, 0x8}, {0x3, 0x1}, {0x0, 0x3}, {0x6, 0x5}, {0x6, 0x7}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x5}, {0x4, 0xa}, {0x5, 0x6}, {0x5, 0x3}, {0x3, 0x5}, {0x1, 0x5}, {0x6, 0xa}, {0x7, 0x3}, {0x7, 0x7}, {0x2, 0x1}, {0x4, 0x6}, {0x1, 0x8}, {}, {0x4, 0x1}, {0x0, 0xa}, {0x4, 0x3}, {0x2, 0x3}, {0x5, 0x8}, {0x3, 0x9}, {0x6, 0x7}, {0x1, 0x4}, {0x1}, {0x5, 0x5}, {0x1, 0x4}, {0x4, 0x1}, {0x4, 0x9}, {0x6, 0x4}, {0x4, 0x5}, {0x7, 0x8}, {0x4, 0x7}, {0x0, 0x2}, {0x5}, {0x7, 0x1}, {0x3, 0x4}, {0x4, 0x1}, {0x6}, {0x0, 0x8}, {0x1, 0x4}, {0x0, 0x5}, {0x5, 0x4}, {0x0, 0x5}, {0x6, 0x7}, {0x3, 0x3}, {0x4, 0x3}, {0x1, 0x7}, {0x7, 0x7}, {0x4, 0xa}, {0x0, 0x9}, {0x2, 0x1}, {0x3, 0x9}, {0x7, 0x8}, {0x3, 0x2}, {0x3, 0x9}, {0x5, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x16, 0x16, 0x1, 0x60, 0x60, 0x6c, 0xb, 0x2, 0x1, 0x3, 0x6, 0x18, 0x18, 0x6c, 0x5, 0x1, 0x18, 0x1, 0x2, 0x24, 0x16, 0x36, 0x16, 0x6c, 0x5, 0x36, 0x4]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x480, 0x0, 0x8000, 0x0, 0x6, 0x100, 0x2]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x258, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x38a, 0x2, 0x0, 0x4, 0x1, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5c5, 0xea, 0x5, 0x4, 0x6, 0x1, 0x5a57]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x7, 0x7}, {0x3, 0x7}, {0x4, 0x7}, {0x1, 0x4}, {0x1}, {0x2, 0x3}, {0x6, 0x8}, {0x4, 0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x2, 0x1}, {0x5, 0x6}, {0x0, 0x8}, {}, {0x7, 0xa}, {0x3, 0x9}, {0x6, 0x1}, {0x6, 0x6}, {0x7, 0x1}, {0x1}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x8}, {0x1, 0x4}, {0x1, 0xa}, {0x4, 0x3}, {0x7, 0x7}, {0x2, 0x7}, {0x2, 0x4}, {0x1, 0x3}, {0x0, 0x8}, {0x5, 0x8}, {0x7, 0x2}, {0x2}, {0x2}, {0x0, 0x6}, {0x5, 0x3}, {0x6}, {0x2, 0x5}, {0x1, 0x2}, {0x7, 0x3}, {}, {0x5, 0x1}, {0x3, 0x6}, {0x2, 0x1}, {0x5, 0x7}, {0x0, 0x6}, {0x2, 0x8}, {0x1, 0x1}, {0x3, 0x9}, {0x0, 0x7}, {0x1, 0x4}, {0x2, 0x2}, {0x3, 0x7}, {0x7, 0x9}, {0x5, 0x7}, {0x3, 0xa}, {0x5, 0x8}, {0x0, 0x6}, {0x7, 0x1}, {0x7, 0x3}, {0x6, 0x9}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x2}, {0x7, 0x6}, {0x3, 0x4}, {0x6, 0x6}, {0x4, 0xa}, {0x0, 0x4}, {0x1, 0x3}, {0x0, 0x7}, {}, {0x1, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ede, 0x1, 0xfffa, 0xc8, 0x1000, 0x5, 0x1, 0x7ff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x3, 0x1}, {0x7, 0x5}, {0x4, 0xa}, {0x5, 0x2}, {0x7, 0x5}, {0x3}, {0x4, 0x1}, {0x1, 0x7}, {0x6, 0xa}, {0x0, 0x5}, {0x5, 0x4}, {0x5, 0x9}, {0x0, 0x9}, {0x4, 0x4}, {0x4, 0x4}, {0x6, 0x3}, {0x4, 0x8}, {0x1, 0x2}, {0x5, 0x1}, {0x6, 0x4}, {0x1, 0x1}, {0x4, 0x5}, {0x1, 0x2}, {0x2, 0x4}, {0x6, 0x5}, {0x5}, {0x4, 0x1}, {0x7, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x6, 0x6}, {0x6, 0x9}, {0x6, 0x4}, {0x4, 0x9}, {0x3, 0x7}, {0x7, 0x5}, {0x6, 0x5}, {0x1, 0x9}, {0x7, 0x4}, {0x5, 0x3}, {0x1}, {0x2, 0x1}, {0x7, 0x2}, {0x1, 0x6}, {0x5, 0x4}, {0x5, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x9, 0x5, 0x1, 0x9, 0x4d4, 0x2e0d]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0x2, 0x5, 0x3f, 0x0, 0xfff, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x48, 0x6, 0x48, 0x9, 0x36, 0x7d, 0x1, 0x2, 0x60, 0x16, 0x0, 0x60, 0x16]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x48, 0x18, 0x2, 0x4d, 0x4, 0x30, 0x9, 0x22, 0x1, 0x3, 0xa, 0x16, 0x6c, 0x60, 0xc, 0x60, 0x48, 0x24, 0x9, 0x16, 0x6, 0x36, 0x36]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x3}, {0x1, 0x5}, {0x4, 0x1}, {0x3, 0x3}, {0x4, 0x8}, {0x3, 0x7}, {0x2, 0x1}, {0x2, 0x5}, {0x4, 0x15}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x1, 0x9}, {0x1, 0x4}, {0x1, 0x2}, {0x0, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x322c, 0x7, 0x7430, 0x6, 0xaf1, 0xa41, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x1, 0xe, 0x4, 0x5, 0xc, 0x3]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x2, 0x1, 0x5, 0x1b, 0x9, 0x4, 0xb, 0x24, 0x4, 0x5, 0x16, 0x0, 0x12, 0x3d, 0x0, 0x13, 0x36, 0x36, 0x60, 0xb, 0x36]}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0xc26, 0xafe, 0x2, 0x800, 0x1, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x1, 0x3}, {0x4, 0x3}, {0x0, 0x3}, {0x0, 0x3}, {0x6, 0x6}, {0x2}, {0x3, 0x4}, {0x4, 0x5}, {0x4, 0x4}, {0x4, 0x1}, {0x5}, {0x3, 0xa}, {0x2, 0x1}, {0x4, 0x6}, {0x3, 0x3}, {0x3, 0x2}, {0x3}, {0x2, 0x5}, {0x6, 0x8}, {0x2, 0x1}, {0x5, 0x2}, {0x7, 0x9}, {0x7, 0x3}, {0x6, 0x4}, {0x0, 0x1}, {0x1}, {0x7, 0x1}, {0x0, 0x8}, {0x7, 0x1}, {0x1, 0x5}, {0x5, 0x8}, {0x1, 0x3}, {0x5, 0x7}, {0x2, 0x3}, {0x5, 0x5}, {0x6, 0x1}, {0x5, 0x7}, {0x1, 0x5}, {0x0, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x1a4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x30, 0x2, 0x6, 0x5, 0x2, 0x68, 0x5c, 0x12, 0x9, 0x36, 0x1b, 0x2, 0x9, 0x18, 0x1, 0xc, 0x24, 0x48, 0x3, 0x18, 0x0, 0x6c, 0x30, 0x24, 0xb, 0x6c, 0x12]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x7, 0x2}, {0x5, 0x7}, {0x2, 0x3}, {0x6, 0x2}, {0x1, 0x4}, {0x5, 0x6}, {0x3, 0x5}, {0x1, 0xa}, {0x4, 0x9}, {0x0, 0xa}, {0x1, 0x5}, {0x2, 0x3}, {0x5, 0x9}, {0x1, 0x8}, {0x3, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x7, 0x3}, {0x5, 0x7}, {0x0, 0xa}, {0x3, 0x6}, {0x1, 0x2}, {0x4, 0x8}, {0x5, 0xa}, {0x2, 0x5}, {0x6, 0x2}, {0x7, 0x7}, {0x2, 0x6}, {0x2, 0x5}, {0x6, 0x1}, {0x4, 0x1}, {0x4, 0xd}]}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2e}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x11c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x16, 0x1, 0x48, 0x36, 0x9, 0x12, 0x3, 0x6, 0x1, 0x16, 0x24, 0x4, 0x24, 0x3, 0x18, 0x3, 0x1b, 0x6c, 0x1, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb85c, 0xffff, 0x7, 0x5, 0xc, 0x101, 0xec9, 0x6d19]}}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xe, 0x1, 0x1, 0x8, 0x0, 0x79, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0xe0, 0x5, 0x9, 0x8, 0xc, 0x3, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x9, 0x2b0a, 0xc, 0x480, 0x7fff, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x1, 0x8, 0x4, 0x8, 0x5, 0x5, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x21, 0xe3d, 0x3, 0x8b3, 0x7f, 0x4, 0x84]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb0, 0x4, 0x5, 0x4, 0xd05, 0xa, 0x1000, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x36, 0xc, 0x4d, 0x30, 0x0, 0x16, 0xe, 0x5, 0x5, 0x9, 0x48, 0x4, 0x6, 0x60, 0x1a, 0x16, 0x1b, 0xc, 0x3, 0x3, 0xb]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x60, 0x1b, 0x1, 0xc, 0x5, 0xb, 0x4, 0x24, 0xc, 0x9]}]}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffffff}]}, {0x5cc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1a4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xa2, 0x5b25, 0x9, 0x6, 0x5, 0xffb2, 0x7]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x2, 0x8}, {0x6, 0x2}, {0x1, 0x2}, {0x2}, {0x6, 0x4}, {0x6, 0x8}, {0x7, 0x4}, {0x5, 0x3}, {0x4, 0xa}, {0x1, 0x5}, {0x0, 0xa}, {0x2, 0xa}, {0x7, 0x1}, {0x4, 0x2}, {0x2, 0x2}, {0x1, 0x4}, {0x2, 0x1}, {0x0, 0x8}, {0x6}]}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x883, 0x8000, 0xb, 0x8, 0x8000, 0x100, 0x6b]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x7, 0x0, 0x4, 0x4, 0x2, 0x6, 0x800]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xfffb, 0x1, 0x5, 0xff, 0x2bd7, 0x8, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0xc963, 0x89, 0x4, 0x2, 0xb, 0x5dbc]}}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x7}, {0x6, 0x2}, {0x0, 0x3}, {0x4, 0x1}, {0x7, 0x6}, {0x4, 0x3}, {0x5, 0x6}, {0x0, 0x5}, {0x0, 0x3}, {0x5, 0x3}, {0x7, 0x4}, {0x4, 0x9}, {0x3, 0x2}, {0x4, 0x5}, {0x1}, {0x6, 0x6}, {0x4, 0x6}, {0x1, 0x1}, {0x7, 0x1}, {0x0, 0x3}, {0x1, 0x6}, {0x7, 0xa}, {0x5, 0x3}, {0x4, 0x4}, {0x5, 0x9}, {0x0, 0x4}, {0x5, 0x8}, {0x5, 0x7}, {0x0, 0x8}, {0x0, 0x8}, {0x7, 0x6}, {0x7, 0x3}, {0x7, 0x6}, {0x0, 0x1}, {0x1, 0x7}, {0x1, 0x2}, {0x1, 0x5}, {0x2, 0xa}, {0x2, 0x9}, {0x3, 0x7}, {0x6, 0x4}, {0x2, 0x1}, {0x2, 0x5}, {0x7, 0x8}, {0x7, 0x5}, {0x3, 0x7}, {0x1, 0x4}, {0x4, 0xa}, {0x2, 0x8}, {0x0, 0x7}, {0x0, 0x3}, {0x5, 0x1}, {0x1, 0x4}, {0x4, 0x7}, {0x5, 0xe}, {0x1, 0x4}, {0x0, 0xc}, {0x0, 0x7}, {0x0, 0x6}, {0x2}, {0x5, 0x1}, {0x1}, {0x1, 0x9}, {0x0, 0x9}, {}, {0x0, 0x4}, {0x0, 0x6}, {0x2}, {0x3, 0x7}, {0x2, 0x6}]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x8, 0x6d, 0x9, 0x800, 0x7, 0x60, 0x81]}}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xda2, 0xfff8, 0x100, 0x3, 0x0, 0x9, 0x7, 0xe]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0x5, 0x5, 0x3, 0x10, 0x1ff, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1, 0x40, 0x101, 0x8000, 0xe2ce, 0x2, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x3, 0x7, 0x0, 0x1, 0x8f, 0x3, 0x3]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x12]}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa29, 0x1000, 0x3, 0x0, 0x9c, 0x4, 0x7, 0x100]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x168, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8, 0x8633, 0x401, 0x6, 0xb0f, 0x9, 0xf0]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x36, 0x6, 0x8000, 0x7, 0x1ff, 0x8, 0x4]}}]}, @NL80211_BAND_60GHZ={0xfc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x401, 0xfff9, 0x5, 0x4, 0x4, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x3, 0x1}, {0x2, 0x2}, {0x6, 0x9}, {0x2, 0xa}, {0x2, 0x1}, {0x7, 0x8}, {0x3, 0x3}, {0x6, 0x6}, {0x7, 0x2}, {0x2, 0x9}, {0x6}, {0x7}, {0x1, 0x1}, {0x6, 0x8}, {0x0, 0x2}, {0x4, 0x5}, {0x1, 0x5}, {0x2, 0x7}, {}, {0x7, 0x9}, {0x6, 0x3}, {0x2}, {0x5}, {0x2, 0x3}, {0x0, 0xa}, {0x5, 0x2}, {0x0, 0x4}, {0x7, 0x1}, {0x2}, {0x1, 0x4}, {0x4, 0x5}, {0x0, 0x6}, {0x7, 0x6}, {0x0, 0x1}, {0x2, 0x5}, {0x7, 0x9}, {0x6, 0xa}, {0x2, 0xa}, {0x5, 0x6}, {0x0, 0x7}, {0x5}, {0x1, 0x4}, {0x4, 0xa}, {0x3, 0x8}, {0x0, 0x5}, {0x5, 0x8}, {0x1, 0x8}, {0x7, 0xa}, {0x6}, {0x3, 0x6}, {0x5}, {0x0, 0xa}, {0x1, 0x3}, {0x7, 0xa}, {0x7, 0x5}, {0x5, 0x2}, {0x5}, {0x7, 0x5}, {0x3, 0x6}, {0x0, 0xa}, {0x6}, {0x4, 0x5}, {0x5, 0x3}, {0x0, 0x5}, {0x1, 0x7}, {0x1, 0x5}, {0x5, 0x5}, {0x2, 0x4}, {0x1, 0x9}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x9, 0x18, 0x30, 0xb, 0x1, 0x36, 0x16, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x3, 0x3}, {0x1, 0xa}, {0x0, 0x1}, {0x3, 0x7}, {0x5, 0x5}, {0x3, 0x3}, {0x4, 0x9}, {0x7, 0x8}, {0x1, 0x7}, {0x4, 0x3}, {0x7, 0x4}, {0x5, 0x5}, {0x7, 0x9}, {0x2, 0x7}, {0x5, 0xa}, {0x5, 0x8}, {0x6, 0x5}, {0x6, 0x1}, {0x4, 0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x6, 0x9}, {0x6, 0x9}, {0x7, 0xa}, {0x3}, {0x5, 0x8}, {0x3, 0xa}, {0x3, 0x3}, {0x3, 0x3}, {0x6, 0x3}, {0x3, 0x9}, {0x0, 0x5}, {}, {0x0, 0xa}, {0x1, 0x2}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x6}, {0x1, 0x2}, {0x5, 0x6}, {0x1, 0x2}, {0x0, 0x7}, {0x0, 0x6}, {0x1, 0x4}, {0x4, 0x4}, {0x2, 0x2}, {0x5, 0x4}, {0x4, 0x6}, {0x0, 0x2}, {0x2, 0x6}, {0x1, 0x2}, {0x4, 0x7}, {0x1, 0x4}, {0x3, 0x6}, {0x2, 0x6}, {0x3, 0x7}, {0x0, 0x9}, {0x0, 0x4}, {0x6, 0x5}, {0x0, 0x5}, {}, {0x3, 0x4}, {0x0, 0x7}, {0x5, 0x5}, {0x6, 0x2}, {0x4, 0x6}, {0x0, 0x6}, {0x5, 0x2}, {0x6, 0x5}, {0x0, 0x6}, {0x1, 0xa}, {0x6, 0x2}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x7, 0x9, 0x4, 0x9, 0x70, 0x5, 0x2]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x48, 0x0, 0x36, 0x18, 0x16, 0x12, 0x48, 0x2, 0xc, 0x36, 0x5, 0xc, 0x9]}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x2, 0xa}, {0x4, 0x6}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x29c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x35, 0x2, [{0x1, 0x8}, {0x0, 0x3}, {0x0, 0x2}, {0x4}, {0x2, 0x7}, {0x4, 0x7}, {0x1, 0x4}, {0x3, 0x2}, {0x3}, {0x3, 0x1}, {0x1, 0x8}, {0x2, 0x8}, {0x4, 0x1}, {0x5}, {0x1, 0x7}, {0x1, 0x3}, {0x1, 0xa}, {0x5, 0x8}, {0x4, 0x6}, {0x7, 0x8}, {0x3, 0x2}, {0x2, 0x9}, {0x3, 0x4}, {0x1}, {0x4, 0x5}, {0x7, 0x3}, {0x5, 0x6}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x7}, {0x1, 0x5}, {0x1, 0x6}, {0x3}, {0x5, 0x3}, {0x1, 0x4}, {0x1, 0xa}, {0x0, 0x6}, {0x1, 0x6}, {0x4, 0x2}, {0x1, 0x5}, {0x2, 0x4}, {0x2, 0x7}, {0x6, 0x3}, {0x1, 0x4}, {0x2, 0x7}, {0x2, 0x9}, {0x6, 0xa}, {0x7, 0x1}, {0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x45, 0x1ff, 0xf, 0x5, 0x9, 0x0, 0x6, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x2, 0xa}, {0x0, 0x2}, {0x6, 0x9}, {0x7, 0x1}, {0x7, 0xa}, {0x1, 0x9}, {0x1, 0x6}, {0x2, 0xa}, {0x5, 0x4}, {0x1}, {0x5, 0x3}, {0x2, 0x5}, {0x0, 0xa}, {0x5, 0x2}, {0x0, 0x4}, {0x4, 0x8}, {0x4, 0x1}, {0x7, 0x5}, {0x6, 0x4}, {0x5, 0x7}, {0x0, 0x5}, {0x0, 0x4}, {0x7, 0x3}, {0x1, 0x3}, {0x5, 0x4}, {0x7, 0x7}, {0x6, 0xa}, {0x2, 0x4}, {0x2, 0x6}, {0x4, 0x6}, {0x2, 0x7}, {0x6, 0x2}, {0x3, 0x4}, {0x1, 0x4}, {0x6}, {0x5, 0x2}, {0x0, 0x1}, {0x0, 0x8}, {0x5, 0x4}, {0x4, 0x4}, {0x6, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x4}, {0x5, 0x3}, {0x5, 0x8}, {0x0, 0x9}, {0x7, 0x9}, {0x0, 0x5}, {0x0, 0x3}, {0x5, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x7}, {0x4, 0x5}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0xa}, {0x5, 0x9}, {0x7, 0xa}, {0x3, 0x2}, {0x1, 0x3}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x9}, {0x0, 0x1}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x5}, {0x2, 0x3}, {0x1}, {0x3, 0xa}, {0x6}, {0x0, 0x9}, {0x2, 0xa}, {0x7, 0x7}, {0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x6, 0x2, 0xa, 0x724, 0xb, 0x1000, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x9, 0xe, 0x4, 0x10, 0x0, 0x7af, 0xe61f]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x5, 0x9}, {0x2, 0x3}, {0x2, 0x2}, {0x3}, {0x0, 0x4}, {0x0, 0x4}, {0x6, 0xa}, {0x1, 0xa}, {0x0, 0x3}, {0x4, 0xa}, {0x4, 0x7}, {0x5, 0x1}, {0x2, 0x9}, {0x6, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x9, 0x18, 0x4, 0x48, 0x1, 0x12, 0x12, 0x2, 0x30, 0x18, 0xc, 0xb, 0x30, 0x60, 0x9, 0x6, 0xb]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0xb, 0x60, 0x6c, 0x30, 0x3, 0x9, 0x2, 0x6c, 0x6c, 0x12, 0x48, 0x60, 0x6c, 0x60, 0x1, 0x30, 0x1, 0x1, 0x30, 0x1b, 0x48, 0x1, 0xb, 0x48, 0x6, 0x16, 0x3, 0x6c, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x6, 0x2}, {0x3, 0x8}, {0x4, 0x3}, {0x3, 0x5}, {0x5, 0x8}, {0x0, 0xa}, {0x1, 0x1}, {0x1, 0x7}, {0x6, 0x5}, {0x0, 0x1}, {0x0, 0x3}, {0x5, 0x6}, {0x5}, {0x7}, {0x4, 0x2}, {0x3, 0x3}, {0x0, 0x6}, {0x6, 0x2}, {0x7, 0x4}, {0x7, 0x1}, {0x6}, {0x5, 0x6}, {0x6, 0x1}, {0x6}, {0x1, 0x3}, {0x0, 0xa}, {0x3, 0x7}, {0x5, 0x5}, {0x4, 0x8}, {0x5, 0x1}, {0x0, 0x4}, {0x4, 0x4}, {0x5, 0x3}, {0x4, 0x1}, {0x0, 0x4}, {0x0, 0x1}, {0x6, 0x1}, {0x2}, {0x1}, {0x7, 0x3}, {0x6, 0xa}, {0x1, 0x1}, {0x2}, {0x4, 0x4}, {0x6, 0x1}, {0x7, 0x6}, {0x3, 0x7}, {0x4, 0x8}, {0x0, 0x7}, {0x1, 0xa}, {0x0, 0xa}, {0x1, 0x4}, {0x6, 0x4}, {0x2, 0x3}, {0x1}, {0x1, 0x8}, {0x3}, {0x2, 0x6}, {0x4, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0xfff7, 0x2, 0x6, 0x4, 0x9, 0x401, 0xa328]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x91fa, 0x9dd3, 0x4, 0x1a, 0x400, 0x7fff, 0xfff]}}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x5}, {0x2, 0x7}, {0x7, 0x7}, {0x2, 0x3}, {0x3, 0x9}, {0x0, 0x1}, {0x1, 0x5}, {0x0, 0x6}, {0x1, 0x9}, {0x6, 0x2}, {0x3, 0x5}, {0x4, 0x7}, {0x7}, {0x4}, {0x3, 0x4}, {0x1, 0x4}, {0x4, 0x2}, {0x0, 0x1}, {0x2, 0x9}, {}, {0x6, 0x5}, {0x0, 0xa}, {0x4, 0x7}, {0x6}, {0x0, 0xa}, {0x3, 0x3}, {0x4, 0x9}, {0x3, 0x2}, {0x1, 0x4}, {0x4, 0x2}, {0x1, 0x1}, {0x0, 0x3}, {0x6, 0x6}, {0x0, 0x8}, {0x3, 0xa}, {0x4, 0x4}, {0x0, 0x8}, {0x5, 0x7}, {0x4, 0xa}, {0x0, 0xa}, {0x2, 0x1}, {0x7, 0xa}, {0x6, 0x6}, {0x5, 0x1}, {0x5, 0x2}, {0x2, 0x2}, {0x1, 0x8}, {0x6}, {0x4, 0x7}, {0x0, 0x4}, {0x2, 0x5}, {0x0, 0x9}, {0x7, 0xa}, {0x0, 0x3}, {0x5, 0x9}, {0x7, 0xa}, {0x4, 0x8}, {0x0, 0x6}, {0x6, 0x4}, {0x7, 0x9}, {0x3, 0x2}, {0x7, 0x5}, {0x5, 0x8}, {0x5, 0x5}, {0x2, 0x8}, {0x1, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x20, 0x81, 0x90, 0x9, 0x4, 0x2, 0x4]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x7, 0x30, 0x18, 0x12, 0x0, 0x0, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x9, 0x60, 0x18, 0x24, 0x4, 0x30, 0x12, 0x0, 0x0, 0x12, 0x1b, 0x69, 0x1, 0x0, 0xc, 0xc, 0x12, 0x9, 0x18, 0x60, 0x1a, 0x12, 0x9, 0x48, 0x6c, 0x2]}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x26}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x2a0, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x85}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2312}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7b}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x240, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xe4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x36, 0x1c, 0x2, 0x9, 0x36, 0x1b, 0x60, 0x18, 0xa, 0xc, 0x36, 0x18, 0x6, 0x48, 0x1, 0x48, 0x18, 0x4, 0x5, 0x30, 0x9, 0x4, 0x9, 0x6, 0x7, 0x24, 0x24, 0x2d, 0x4]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x1, 0x4}, {0x3, 0xa}, {0x3, 0x9}, {0x3, 0x7}, {0x2, 0x1}, {0x3, 0xa}, {0x4, 0x8}, {0x2, 0x7}, {0x0, 0x5}, {0x0, 0x6}, {0x5, 0x7}, {0x6, 0x9}, {0x5, 0x9}, {0x6, 0x3}, {0x5, 0x4}, {0x7, 0x1}, {0x1, 0x4}, {0x7}, {0x2, 0x7}, {0x2, 0x9}, {0x0, 0x7}, {0x4, 0xa}, {0x5, 0x7}, {0x2}, {0x0, 0x4}, {0x3, 0x9}, {0x5, 0x2}, {0x7, 0xa}, {0x1, 0x9}, {0x6, 0x2}, {0x4, 0x3}, {0x2, 0x1}, {0x4, 0x5}, {0x4, 0x8}, {0x6, 0x5}, {0x1, 0x6}, {0x1, 0x3}, {0x2, 0x3}, {0x2, 0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x2, 0x1}, {0x5, 0x8}, {0x7, 0x6}, {0x5}, {0x1, 0x4}, {0x1, 0x9}, {0x6, 0x9}, {0x3, 0x1}, {0x0, 0x6}, {0x7, 0x1c}, {0x5, 0x5}, {0x3, 0x3}, {0x2, 0x1}, {0x4}]}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x5, 0x1}, {0x7, 0x9}, {0x6}, {0x6, 0xa}, {0x0, 0xa}, {0x1, 0x3}, {0x5, 0x2}, {0x6, 0x2}, {0x1, 0x1}, {0x7}, {0x5, 0x4}, {0x1, 0x4}, {0x2, 0x8}, {0x3, 0x3}, {0x4, 0x7}, {0x6, 0x2}, {0x4, 0x1}, {0x3, 0x8}, {0x7, 0xa}, {0x0, 0x3}, {0x5, 0xa}, {0x6, 0x9}, {0x2, 0x7}, {0x7}, {0x4, 0x7}, {0x6, 0x2}, {0x5}, {0x5, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xb, 0x30, 0x60, 0x18, 0x1, 0xb, 0x18, 0x12, 0x9, 0x60, 0x5, 0x18, 0x0, 0x18, 0x5, 0x3, 0xc, 0x6, 0x6c, 0x18, 0xb, 0x2, 0x30, 0x6, 0x1, 0x4, 0x45, 0x6, 0x16, 0x18, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4, 0x2, 0x4, 0xff, 0xfff, 0xf0, 0x500]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xebcf9af00e6ea6ba, 0x2, 0x8, 0x6c, 0x24, 0x48, 0x1, 0x5, 0x5, 0x24, 0x0, 0x3, 0xb, 0x9, 0xc, 0x18, 0x12, 0x4, 0x5, 0x24, 0x16]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x6, 0x9}, {0x3, 0x6}, {}, {0x6}, {0x5, 0x1}, {0x0, 0xa}, {0x0, 0x1}, {0x0, 0x5}, {0x0, 0x8}, {0x6, 0x3}, {0x5}, {0x6, 0xa}, {0x6}, {0x7, 0x6}, {0x7, 0x1}, {0x1, 0x5}, {0x4, 0xa}, {0x7, 0x1}, {0x7, 0x1}, {0x0, 0x9}, {0x3, 0x3}, {0x2}, {0x1, 0x6}, {0x5, 0x3}, {0x7}, {0x7, 0x7}, {0x0, 0x4}, {}, {}, {0x0, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x2, 0x6}, {0x3, 0x2}, {0x6, 0x7}, {0x1, 0xa}, {}, {0x3, 0xa}, {0x6, 0x5}, {0x0, 0x6}, {0x4, 0x8}, {0x0, 0x8}, {0x3, 0x1}, {0x2}, {0x7, 0x6}, {0x6, 0x1}, {0x3, 0x7}, {0x7, 0x2}, {0x0, 0x9}, {0x6, 0x3}, {0x0, 0xa}, {0x7, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x4, 0x8}, {0x6, 0x6}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xf84, 0x2, 0x0, 0x8, 0x413e, 0x8, 0x6]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x42, 0x3, 0x9, 0x55d9, 0x2, 0x2, 0x8, 0x7ff]}}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x16, 0x36, 0x16, 0x36, 0x18, 0x24, 0x1b, 0x36, 0x2, 0x4, 0x5, 0x6, 0x36, 0x9, 0x6, 0x19, 0x36, 0x6c, 0x2, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdb6, 0x3c, 0x5, 0x9, 0x8, 0x3, 0x7ff, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1000, 0xfff3, 0x4, 0x8b, 0x6, 0x6, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x65, 0x3, 0xe, 0x4, 0x3, 0x7, 0x9, 0xe7d7]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}]}]}, 0xee0}, 0x1, 0x0, 0x0, 0x40080}, 0x20008800) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0808020000000000"], 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x0) (async) 2.279559969s ago: executing program 2 (id=3032): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x32) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000080)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000580)={[{0x2d, 'memory'}]}, 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$inet6_tcp_int(r0, 0x11a, 0x5, &(0x7f0000000000)=0x3f9, 0x2) 2.069624647s ago: executing program 2 (id=3035): socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1234, @loopback}, 0x10) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000180)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000040), &(0x7f0000000080)=@udp=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r1], 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, &(0x7f0000000800)='\x00\x00\x00\x00\x00\x00\x00\x00\n', 0x0}, 0x50) 2.0010383s ago: executing program 1 (id=3037): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xa, 0x4, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000100), 0x0}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f00000007c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) (async) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f00000007c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) socket(0x2, 0x80805, 0x0) (async) r3 = socket(0x2, 0x80805, 0x0) socket$inet(0x2, 0x80001, 0x84) (async) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000800)=@assoc_value={0x0}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000a00)={r5, 0xa11c}, 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000a00)={r5, 0xa11c}, 0x8) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r1) (async) r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r1) openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000900)={0xd4, r8, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "89cf483d492802467a5435fff4fa455b4598d34e736fffe4b554c286eba53eed"}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "c649e08976d091ac47cfae8b0c6c7ccaec4850aa10b2db44175fe0d52ce3e4ba"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "145b06b5dbdef454c57d12b64d683b9dcdfd6985249d3d387cc9738254dff462"}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "8ef32152b85b422ba54385b0707fe213e6a074283afc9d24aeaef2e600"}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4008801}, 0x20000001) (async) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000900)={0xd4, r8, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "89cf483d492802467a5435fff4fa455b4598d34e736fffe4b554c286eba53eed"}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "c649e08976d091ac47cfae8b0c6c7ccaec4850aa10b2db44175fe0d52ce3e4ba"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "145b06b5dbdef454c57d12b64d683b9dcdfd6985249d3d387cc9738254dff462"}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "8ef32152b85b422ba54385b0707fe213e6a074283afc9d24aeaef2e600"}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4008801}, 0x20000001) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000340)=0x0) r10 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r10, 0x11, 0x67, &(0x7f0000000500)=0x91, 0x4) connect$inet6(r10, &(0x7f0000000540)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) (async) connect$inet6(r10, &(0x7f0000000540)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000580)={0xab, 0x7, 0x1}) sendmmsg$inet6(r10, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000b40), 0x171}}], 0x400000000000172, 0x4001c00) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r11) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, r12, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000480)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000005c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000005c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000600)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r6, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4) 1.90970395s ago: executing program 2 (id=3038): r0 = socket$inet6(0x10, 0x80000, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) unshare(0x2040400) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fddbdf25021f00c8", @ANYRES32=r2, @ANYBLOB="080004006401010108000200ac1414aa08000200ac1414aa2900090006"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) unshare(0x8010400) r7 = openat$cgroup_devices(r6, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) getsockopt$inet6_tcp_TLS(r0, 0x11a, 0x1, &(0x7f0000000200)=""/63, &(0x7f0000000240)=0x3f) mkdirat$cgroup(r6, &(0x7f0000000100)='syz0\x00', 0x1ff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$cgroup_devices(r7, &(0x7f0000000140)=ANY=[@ANYRES32=r3], 0x9) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) syz_emit_ethernet(0x9e, &(0x7f0000000280)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @void, {@llc={0x4, {@snap={0x1, 0xaa, "49ab", "f8dee7", 0x9300, "55c6e6e04b5b76fe1a5786361c8ca1c348fc5b4e68d037e3294b73efd412136aa2b9fb00eaeecd30dbc9be6c78a613d596abf194a2d80a363c45d7a6fce08a41827351a81fac6e86c29a50c9c6bc15515a59b436f5754225fd80cfd6200a99f2d85d805bd9a99f556b380343ce53ae3947a560d5f34af0765ebd2de7d6d62bd1a898285af27bf1"}}}}}, &(0x7f0000000340)={0x1, 0x1, [0xc9e, 0x39e, 0xda7, 0x2e5]}) 1.875346837s ago: executing program 4 (id=3039): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000040)="c1", 0xfe41) poll(&(0x7f0000000080)=[{r1, 0x4}], 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000006a"], 0x18}}, 0x0) 1.70471055s ago: executing program 4 (id=3040): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80000) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x4085) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r3) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000100)="14000000070000000000000003", 0xd) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001000a0000000c0005"], 0x30}}, 0x0) 1.612131653s ago: executing program 4 (id=3041): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001880)=@ipv6_delroute={0x38, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8, 0x1e}, @RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x38}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f00000017c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001780)={&(0x7f00000000c0)={0x20, 0x1, 0x7, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008802}, 0x4040010) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x16, 0xb, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f00000016c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001700)={r3, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="5400000030000106010000000000000000000000400001803c0001800f00010074756e6e656c5f6b65790000280002801c00020000000000000000000000000000000000000000000100000008000b8004000280"], 0x54}, {&(0x7f0000000180)={0x11d8, 0x2f, 0x0, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x11c8, 0x93, 0x0, 0x1, [@generic="4092878b9fd25ff214e625b3aba25464f5b9476616b61a228b81e59945f35c60d3c7ea2367a30e40fc2624a3a0b661b969b26b483aef86a9378434e0ec85d2dd", @generic="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", @generic="cc1788d7a4b2832b5a0ed5c2ce73a1c1ba76153d3a70", @generic="deb3aac5706179b4917aadab2b8b49888c7d3ed6ea979115aec246c426f9588fe916a1490eccde173edfd497cd4518c6340fb7d75620805c957c0869b24dab70d504cc75be86751d5ac1e3acf84cf143b7d699a9fa8f2a59f440048849864b3dba065c856fd819d9622bd44bf59fb171881f2d16d63acf207318daaecb919399756aafdb332dc21f07857a0df4be432dcdeacb3b28f5a45432b18eca3a5b135c1e0890dc99c04043e9124cd3c45ca2cb0802c78a0c1fbd378b47bb8e52abfcf9fb53b7cb8019931f1de8d2172e16ab09782934c00de0c76c422d969c5395f726e715c8", @typed={0x8, 0xe8, 0x0, 0x0, @u32=0xfffffff2}, @nested={0x4, 0x2e}, @generic="1aa5053c79fb9910fd199d78b8a33a2f798db54ee0441a1a7b52ea1c08d8d41223b752d638f2eba487666d2860ddab10d83be9718b48516793548d24d7344f150ac10678f40a254c77e218c6332cdc979de9e4451de4ea35c4c09e46e5b75c22dcd7522c5d834ca00213a51942bbd3e662655368cdbfb9ae7ed69fc27022d7"]}]}, 0x11d8}, {&(0x7f0000001380)={0x1b4, 0x42, 0x400, 0x70bd26, 0x25dfdbfc, "", [@typed={0x8, 0x149, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x19c, 0x14b, 0x0, 0x1, [@nested={0x4, 0x116}, @nested={0x4, 0xce}, @generic="8993c5865e0427d177d8938447dc55650d74059cb043bc5b6a07e4ce62206f02563c48deb018e53023e3f1acde3f3ec87e072a3e4b7beaf15ca5bc381e7cf2d5076feb0b3df286c2eb43fc78ea1cfa221f35022f3d83a991ab2c628095c038fecc727fb58d24a219abf7eaa1ff3da2d0290c45d7b87ee50912e47d62c7326b206287e7eaa6a912e0865d0e4b5dfaaf5f97e1f04ce7cf71349bf8c76ee3410b459265280cfda82bd1752f703231800c9f8e454c1cb788a4318e2dc4ce0466b7167914cea1309a9cec33fc8229bb6261ac0a4a8bc82ebaa047839cf1cb80a64ff2c54ef43f58bcb78762e9806791fb39c6c26e55c8540c09ff0b091b", @generic="45999c4eb9d774700be244b7388a9315b84276968884c98cd1119db20088299b0e06f3d7ae61af0c62c4ec47a0a40fa609824f2a00a4807b21e8f8adf0116a16cb86840d59d63a44763da82825d6cc3d9adba71e9e01b7466ab0f7ac50dc3f575f28b9bb889726646bbf5a6ef0697dc54c076a856012a3f2ed3232a4560f59eafa1c663417d316f1a46423b8eabadcc3cb", @nested={0x4, 0x50}]}]}, 0x1b4}], 0x3}, 0xc0) 1.548096191s ago: executing program 4 (id=3042): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x4008800) listen(r1, 0x0) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000240)=""/206, &(0x7f0000000340)=0xce) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8}]}}}]}, 0x3c}}, 0x0) 1.331742593s ago: executing program 3 (id=3044): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0xa20, 0x1114}}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x100, 0x80bc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 1.222517657s ago: executing program 4 (id=3045): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x2c}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x409, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4, 0x5}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@random="20b6ac7f6ea4", @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x4, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}, 0x0) 1.210594303s ago: executing program 3 (id=3046): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1, 0x0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000009110af000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xa}}, &(0x7f0000000240)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1b, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, 0x0, 0x1, 0x0, &(0x7f0000000280)=[{0x0, 0xa, 0xd, 0x2}], 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1}, 0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000009110af000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xa}}, &(0x7f0000000240)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1b, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, 0x0, 0x1, 0x0, &(0x7f0000000280)=[{0x0, 0xa, 0xd, 0x2}], 0x10, 0x3}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) (async) 1.110220901s ago: executing program 4 (id=3047): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r2, 0x84, 0x7d, &(0x7f00000005c0)=""/4127, &(0x7f0000001600)=0x101f) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtfilter={0x98, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x64, 0x2, [@TCA_MATCHALL_ACT={0x60, 0x2, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x29}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast2}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x98}}, 0x20044080) write(r1, &(0x7f00000003c0)="000008004500001c12340000402fe5c8ac141401ac14140204d204d200080000", 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000480)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r6, &(0x7f0000001640)=ANY=[@ANYBLOB="2f0100003201"], 0x138) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASCONF_SUPPORTED(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000400)={0x0, 0x9}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r8, 0x84, 0x5, &(0x7f0000000500)={r9, @in={{0x2, 0x4e22, @empty}}}, 0x84) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r7, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x30}}, 0x0) 1.095442961s ago: executing program 3 (id=3048): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000b80)="8c638bebcdfa5465a4b0537c78", 0xd}, {0x0}], 0x2}}], 0x1, 0xc810) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000005c0)={'syzkaller0\x00', 0x1002}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000840)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030004797a6b616c6e18735dbd4152fcffffff000000afbf7ff48fcba009e788d42754021bc58a2b3cc219c3378959d98f99004c1138936b9dcff2d730d6bf1202750556d1da987c4ea0", @ANYRES32=r1], 0x3c}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @empty, @random="5ec57dc8b5aa", @rand_addr=0x64010101}}}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000440)={0x0, 0xb006}, 0x4) write(r0, &(0x7f0000000940)="ffffffffffff0011223344554305000f32001800000100112233445500112233445500ff0000", 0xfdef) 1.006105533s ago: executing program 3 (id=3049): socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x8, 0x70bd29, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_VF_PORTS={0x4}, @IFLA_ADDRESS={0xa, 0x3, @random="18882862fff7"}]}, 0x30}}, 0x0) 931.46962ms ago: executing program 3 (id=3050): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x44800) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'syzkaller1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001780)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, 0x0, &(0x7f0000001940)) sendmsg$nl_route(r6, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001a00)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001ac0)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL={0x5, 0x3, 0xc}]}}}, @IFLA_MASTER={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000002080)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002040)={&(0x7f0000001b40)={0x4e0, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xc}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xa0, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x6, 0x1, 0x6, 0x28000}, {0x2, 0x2d, 0xfb}, {0x1, 0x7f, 0x2a, 0x34}, {0x8, 0x64, 0xae}, {0x1000, 0x7, 0x6e, 0x6}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x4e0}, 0x1, 0x0, 0x0, 0xe023f23aadfd8545}, 0x4001) 0s ago: executing program 3 (id=3051): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000004c0)={0x11, @empty, 0x0, 0x0, 'sh\x00', 0x13}, 0x2c) syz_emit_ethernet(0x2a, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x14, 0x4e21, 0x8}}}}}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000480)={'veth0_to_bond\x00', {0x2, 0x4e20, @empty}}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000440)={r1, &(0x7f0000000340)='\x00', 0x2900, &(0x7f0000000380)={@_ha_fsid={[0xfffffffb, 0xcb]}, {0x3, 0x7fff, 0x2, 0x2}}, 0x6, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0x5}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) connect$inet(r3, &(0x7f0000000580)={0x2, 0x4e21, @remote}, 0x10) getsockopt$inet_mptcp_MPTCP_INFO(r3, 0x11c, 0x1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000640)=0x60) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000680), r5) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x20, r6, 0x5, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, r4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000780)={0x2, 0x4e21, @remote}, 0x10) getsockopt$inet_mptcp_MPTCP_INFO(r7, 0x11c, 0x1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000840)=0x60) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000880), r9) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r9, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x20, r10, 0x5, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, r8}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000a40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x6c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, r4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbc}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, r8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x40) syz_emit_ethernet(0x30e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tipc_packet={0x2, 0x6, "79eb6d", 0x2d8, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, {[@dstopts={0x84, 0x43, '\x00', [@generic={0x1, 0x107, "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"}, @generic={0x11, 0xe9, "25cd896930b67dd42d3b8397774f5f3c7225f5637d9ad6cf948bdf4ab328d4e121ee31598e5c7f93334d93ba1403ee860a0de7d01f5c4e49b0ed68ae9a76658438d5525dac923689c5d544b1e0dd577cbcfc553322c2461a1a5632d9d8671470c6cd28b3a0acbb8b810ab66b8057646d242908c93b8f6287d9940d22652922f015e0c11530ab59cdcd59a0a50ea3d23166b7d9d23ab276c220dbbb70f186bffad75cdebc1390ddfae485ddb25eb290fc149792399bb695c153bad1c52c4d9ed3e661fa195732d76e8cc32b3187801ff98d7e325a20f555bbb1334473e4a41e1a105f97e984bb549208"}, @calipso={0x7, 0x10, {0x2, 0x2, 0xb, 0x8, [0x0]}}, @jumbo={0xc2, 0x4, 0x80000001}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x9}]}, @srh={0x2f, 0x2, 0x4, 0x4, 0x0, 0x30, 0x9, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @routing={0x0, 0x8, 0x1, 0x10, 0x0, [@empty, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @srh={0x32, 0x4, 0x4, 0x3, 0x1, 0x38, 0x653, {@ipv4={'\x00', '\xff\xff', @private=0xa010101}, [@local]}}], @payload_named={{{{{0x28, 0x0, 0x0, 0x1, 0x1, 0xa, 0x1, 0x2, 0x2, 0x0, 0x2, 0x5, 0x1, 0x2, 0x1147, 0x0, 0x2, 0x4e23, 0x4e24}}, 0x1, 0x2}}}}}}}}, 0x0) kernel console output (not intermixed with test programs): g up backlog [ 269.829561][T10937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1316'. [ 269.848263][T10935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1315'. [ 270.123731][T10952] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1321'. [ 270.268324][ T6624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.442923][T10967] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1325'. [ 270.543439][T10972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.584176][T10976] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1329'. [ 270.585274][T10976] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1329'. [ 270.585311][T10976] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1329'. [ 270.622668][T10977] ip_tables: iptables: counters copy to user failed while replacing table [ 270.708486][T10972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1328'. [ 270.756719][ T7571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.387495][ T6621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.692711][T11039] tipc: Trying to set illegal importance in message [ 271.806269][ T7573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.888264][ T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.124336][T11053] netlink: 'syz.1.1354': attribute type 7 has an invalid length. [ 272.497367][ T2234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.511323][T11080] netlink: 'syz.1.1358': attribute type 4 has an invalid length. [ 272.511370][T11080] netlink: 'syz.1.1358': attribute type 10 has an invalid length. [ 273.907314][T11106] sctp: [Deprecated]: syz.0.1366 (pid 11106) Use of int in max_burst socket option. [ 273.907314][T11106] Use struct sctp_assoc_value instead [ 274.276489][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 274.341858][T11110] __nla_validate_parse: 8 callbacks suppressed [ 274.341886][T11110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1368'. [ 274.464617][T11118] syzkaller0: entered promiscuous mode [ 274.464640][T11118] syzkaller0: entered allmulticast mode [ 274.493327][T11118] tipc: Started in network mode [ 274.493412][T11118] tipc: Node identity be6b4deea0eb, cluster identity 4711 [ 274.493651][T11118] tipc: Enabled bearer , priority 0 [ 274.519037][T11116] tipc: Resetting bearer [ 274.673026][T11116] tipc: Disabling bearer [ 274.740543][ T32] net_ratelimit: 4 callbacks suppressed [ 274.740564][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.917979][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.921654][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.991676][T11145] wg0 speed is unknown, defaulting to 1000 [ 275.131424][T11145] wg0 speed is unknown, defaulting to 1000 [ 275.224657][T11145] wg0 speed is unknown, defaulting to 1000 [ 275.350125][T11155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1378'. [ 275.350162][T11155] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1378'. [ 275.647121][T11176] ip6gre1: entered promiscuous mode [ 275.661496][T11145] infiniband syz0: set active [ 275.661552][ T991] wg0 speed is unknown, defaulting to 1000 [ 275.661611][T11145] infiniband syz0: added wg0 [ 275.663705][T11145] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 275.681622][T11145] infiniband syz0: Couldn't open port 1 [ 275.682165][T11145] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 275.682258][T11145] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 275.682363][T11145] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 275.775766][T11145] RDS/IB: syz0: added [ 275.775835][T11145] smc: adding ib device syz0 with port count 1 [ 275.775855][T11145] smc: ib device syz0 port 1 has no pnetid [ 275.793193][ T5852] wg0 speed is unknown, defaulting to 1000 [ 275.799861][T11145] wg0 speed is unknown, defaulting to 1000 [ 275.837669][T11112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.956243][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.981769][T11145] wg0 speed is unknown, defaulting to 1000 [ 276.158437][T11145] wg0 speed is unknown, defaulting to 1000 [ 276.196943][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.316108][T11145] wg0 speed is unknown, defaulting to 1000 [ 276.462072][T11145] wg0 speed is unknown, defaulting to 1000 [ 276.936528][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.996288][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.448079][T11194] syzkaller0: entered promiscuous mode [ 277.450236][T11194] syzkaller0: entered allmulticast mode [ 277.573801][T11204] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1390'. [ 277.956391][ T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.036353][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.423521][T11205] tipc: Enabled bearer , priority 0 [ 278.445614][T11189] tipc: Resetting bearer [ 278.545124][T11189] tipc: Disabling bearer [ 278.844005][T11228] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1396'. [ 278.871065][T11225] 8021q: adding VLAN 0 to HW filter on device bond7 [ 278.872523][T11225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1395'. [ 278.872560][T11225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1395'. [ 279.214877][T11241] netlink: 'syz.3.1399': attribute type 83 has an invalid length. [ 279.237092][T11249] netlink: 'syz.0.1402': attribute type 1 has an invalid length. [ 279.306765][T11249] 8021q: adding VLAN 0 to HW filter on device bond3 [ 279.531978][T11263] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1404'. [ 279.532368][T11263] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1404'. [ 279.532556][T11263] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1404'. [ 279.532738][T11263] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1404'. [ 279.533005][T11263] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1404'. [ 279.533188][T11263] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1404'. [ 279.567763][T11263] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1404'. [ 279.568323][T11263] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1404'. [ 279.568939][T11263] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1404'. [ 279.581085][T11263] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1404'. [ 280.116180][ T5850] net_ratelimit: 7 callbacks suppressed [ 280.116206][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.247059][ T723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.996362][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.156182][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.347012][T11108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.161497][T11273] syzkaller0: entered promiscuous mode [ 282.161522][T11273] syzkaller0: entered allmulticast mode [ 282.203512][T11281] tipc: Enabled bearer , priority 0 [ 282.214144][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.230872][T11265] tipc: Resetting bearer [ 282.280813][T11265] tipc: Disabling bearer [ 282.447365][ T1432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.684629][T11301] 8021q: adding VLAN 0 to HW filter on device bond10 [ 282.809942][T11301] bond10: (slave ip6tnl2): refused to change device type [ 282.858415][T11323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.858614][T11323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.858748][T11323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.055328][T11330] syzkaller0: entered promiscuous mode [ 283.055353][T11330] syzkaller0: entered allmulticast mode [ 283.150227][T11330] tipc: Enabled bearer , priority 0 [ 283.154520][T11329] tipc: Resetting bearer [ 283.225152][T11329] tipc: Disabling bearer [ 283.448225][T11352] vlan2: entered allmulticast mode [ 283.448249][T11352] veth0_vlan: entered allmulticast mode [ 283.451298][T11352] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 283.463218][T11352] Bluetooth: hci0: unsupported parameter 5161 [ 283.463271][T11352] Bluetooth: hci0: unsupported parameter 8192 [ 283.463294][T11352] Bluetooth: hci0: unsupported parameter 5161 [ 283.463307][T11352] Bluetooth: hci0: unsupported parameter 8192 [ 283.743112][T11367] syzkaller0: entered promiscuous mode [ 283.743134][T11367] syzkaller0: entered allmulticast mode [ 283.759223][T11367] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 284.168167][T11387] syzkaller0: entered promiscuous mode [ 284.168190][T11387] syzkaller0: entered allmulticast mode [ 284.208703][T11387] tipc: Enabled bearer , priority 0 [ 284.210645][T11395] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 284.210660][T11395] IPv6: NLM_F_CREATE should be set when creating new route [ 284.210719][T11395] IPv6: NLM_F_CREATE should be set when creating new route [ 284.210744][T11395] IPv6: NLM_F_CREATE should be set when creating new route [ 284.212014][T11386] tipc: Resetting bearer [ 284.283427][T11386] tipc: Disabling bearer [ 284.517566][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 284.562973][T11410] __nla_validate_parse: 27 callbacks suppressed [ 284.562994][T11410] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1448'. [ 284.601639][T11415] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1449'. [ 284.649630][T11404] netlink: 'syz.1.1445': attribute type 1 has an invalid length. [ 284.649655][T11404] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1445'. [ 284.705451][T11423] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 284.802127][T11435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1454'. [ 285.330925][ T5852] net_ratelimit: 19 callbacks suppressed [ 285.330947][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.458410][T11465] IPVS: twos: TCP 127.0.0.1:21 - no destination available [ 285.757620][ T1432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.796126][T11483] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1466'. [ 285.853846][T11483] sctp: [Deprecated]: syz.1.1466 (pid 11483) Use of int in maxseg socket option. [ 285.853846][T11483] Use struct sctp_assoc_value instead [ 286.028245][T11491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1470'. [ 286.050864][T11495] Cannot find add_set index 0 as target [ 286.098891][T11495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.098913][T11495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.324239][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1473'. [ 286.357332][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.425276][T11515] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1477'. [ 286.437475][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.477829][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.477887][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.564104][T11517] ieee802154 phy0 wpan0: encryption failed: -126 [ 286.739420][T11527] ipt_ah: unknown flags FF [ 286.739795][T11528] ipt_ah: unknown flags FF [ 286.856977][ T723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.982404][T11536] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1486'. [ 286.997213][T11536] gretap0: entered promiscuous mode [ 287.077772][ T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.186922][T11539] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 287.393113][T11552] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1490'. [ 287.408474][ T7573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.923437][T11573] bond4: (slave bond_slave_0): Device is not our slave [ 287.923459][T11573] bond4: option active_slave: invalid value (bond_slave_0) [ 287.946532][T11573] bond4 (unregistering): Released all slaves [ 288.343105][T11589] netlink: 'syz.4.1502': attribute type 1 has an invalid length. [ 288.540114][T11589] 8021q: adding VLAN 0 to HW filter on device bond4 [ 288.916477][T11615] netlink: 'syz.0.1509': attribute type 1 has an invalid length. [ 288.959330][T11620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.053263][T11628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.054002][T11622] bond5: entered allmulticast mode [ 289.054486][T11622] 8021q: adding VLAN 0 to HW filter on device bond5 [ 289.089638][T11628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.152507][T11630] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 289.154528][T11620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.169393][T11620] netlink: 'syz.3.1511': attribute type 1 has an invalid length. [ 289.193839][T11620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.312219][T11628] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 289.345559][T11628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.361925][T11628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.661208][T11662] lo: entered allmulticast mode [ 289.677880][T11660] lo: left allmulticast mode [ 289.828428][T11669] syzkaller0: entered promiscuous mode [ 289.828452][T11669] syzkaller0: entered allmulticast mode [ 289.859651][T11669] tipc: Enabled bearer , priority 0 [ 289.862718][T11667] tipc: Resetting bearer [ 289.909362][T11667] tipc: Disabling bearer [ 289.931410][T11675] bond0: Caught tx_queue_len zero misconfig [ 289.948178][T11675] __nla_validate_parse: 11 callbacks suppressed [ 289.948198][T11675] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1526'. [ 289.948219][T11675] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1526'. [ 290.230417][T11697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1528'. [ 290.518644][ T5852] net_ratelimit: 9 callbacks suppressed [ 290.518665][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.573440][T11713] ip6t_rt: address list match requested but addrnr is 0 [ 290.765368][T11730] syzkaller0: entered promiscuous mode [ 290.765392][T11730] syzkaller0: entered allmulticast mode [ 290.779702][T11731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1537'. [ 290.782266][T11108] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.782345][T11108] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.782383][T11108] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.782419][T11108] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.893070][T11730] tipc: Enabled bearer , priority 0 [ 291.014921][T11738] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1542'. [ 291.105664][T11744] : renamed from bond0 (while UP) [ 291.238868][ T7573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.277579][T11108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.362926][T11760] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1549'. [ 291.397772][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.546284][T11777] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1554'. [ 291.556917][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.580893][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.582597][ T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.582828][ T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.721813][T11792] syzkaller0: entered promiscuous mode [ 291.721838][T11792] syzkaller0: entered allmulticast mode [ 291.757329][T11792] tipc: Enabled bearer , priority 0 [ 291.759459][T11791] tipc: Resetting bearer [ 291.802862][T11791] tipc: Disabling bearer [ 291.910011][T11800] bond0: (slave team0): Releasing backup interface [ 291.934946][T11800] bridge_slave_0: left allmulticast mode [ 291.934974][T11800] bridge_slave_0: left promiscuous mode [ 291.936938][T11800] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.962911][T11800] bridge_slave_1: left allmulticast mode [ 291.962936][T11800] bridge_slave_1: left promiscuous mode [ 291.963167][T11800] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.990204][T11800] bond0: (slave bond_slave_0): Releasing backup interface [ 292.012486][T11800] bond0: (slave bond_slave_1): Releasing backup interface [ 292.044018][T11800] team0: Port device team_slave_0 removed [ 292.070651][T11800] team0: Port device team_slave_1 removed [ 292.074261][T11800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.074277][T11800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.096951][T11800] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 292.118407][T11802] team0: Device xfrm0 is of different type [ 292.144191][ T5769] tipc: Node number set to 2371636580 [ 292.148247][T11804] tipc: Enabled bearer , priority 0 [ 292.158053][ T7573] syz1: Port: 1 Link DOWN [ 292.276283][ T7573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.527669][T11824] xt_hashlimit: max too large, truncated to 1048576 [ 292.528687][T11824] xt_CT: You must specify a L4 protocol and not use inversions on it [ 292.532547][T11824] netlink: 'syz.1.1566': attribute type 12 has an invalid length. [ 292.533662][T11824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1566'. [ 292.648733][T11830] netlink: 'syz.1.1566': attribute type 1 has an invalid length. [ 292.648759][T11830] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1566'. [ 292.881541][T11835] syzkaller0: entered promiscuous mode [ 292.881566][T11835] syzkaller0: entered allmulticast mode [ 292.931714][T11835] tipc: Enabled bearer , priority 0 [ 292.942979][T11834] tipc: Resetting bearer [ 293.003007][T11834] tipc: Disabling bearer [ 293.267323][ T5769] tipc: Node number set to 43690 [ 293.366639][T11861] netlink: 'syz.4.1573': attribute type 1 has an invalid length. [ 293.366666][T11861] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1573'. [ 293.608713][T11870] netlink: 'syz.2.1578': attribute type 1 has an invalid length. [ 293.645747][T11870] 8021q: adding VLAN 0 to HW filter on device bond3 [ 293.674233][T11873] netlink: 'syz.4.1577': attribute type 17 has an invalid length. [ 293.700584][T11870] bond3: (slave bridge5): making interface the new active one [ 293.702616][T11870] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 293.742037][T11873] gretap0: entered promiscuous mode [ 293.755151][T11873] gretap0: left promiscuous mode [ 294.086382][T11893] netlink: 'syz.4.1585': attribute type 5 has an invalid length. [ 294.105146][T11893] geneve5: entered promiscuous mode [ 294.105171][T11893] geneve5: entered allmulticast mode [ 294.138294][T11108] netdevsim netdevsim4 : set [1, 1] type 2 family 0 port 256 - 0 [ 294.138342][T11108] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 294.138379][T11108] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 294.138417][T11108] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 294.496927][T11917] syz.2.1592: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 294.497076][T11917] CPU: 0 UID: 0 PID: 11917 Comm: syz.2.1592 Not tainted syzkaller #0 PREEMPT(full) [ 294.497101][T11917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 294.497122][T11917] Call Trace: [ 294.497130][T11917] [ 294.497140][T11917] dump_stack_lvl+0xe8/0x150 [ 294.497184][T11917] warn_alloc+0x24d/0x270 [ 294.497211][T11917] ? stack_depot_save_flags+0x33/0x810 [ 294.497245][T11917] ? __pfx_warn_alloc+0x10/0x10 [ 294.497270][T11917] ? kasan_save_track+0x4f/0x80 [ 294.497300][T11917] ? __kasan_kmalloc+0x93/0xb0 [ 294.497331][T11917] ? xsk_init_queue+0x8a/0xe0 [ 294.497356][T11917] ? xsk_setsockopt+0x52a/0x960 [ 294.497391][T11917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.497427][T11917] __vmalloc_node_range_noprof+0x12c/0x16f0 [ 294.497484][T11917] ? rcu_is_watching+0x16/0xb0 [ 294.497523][T11917] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 294.497548][T11917] ? __kmalloc_cache_noprof+0x31c/0x600 [ 294.497576][T11917] ? __kmalloc_cache_noprof+0x148/0x600 [ 294.497603][T11917] ? xskq_create+0x56/0x220 [ 294.497635][T11917] xskq_create+0x148/0x220 [ 294.497662][T11917] ? xsk_init_queue+0x8a/0xe0 [ 294.497691][T11917] xsk_init_queue+0x8a/0xe0 [ 294.497721][T11917] xsk_setsockopt+0x52a/0x960 [ 294.497749][T11917] ? __pfx_xsk_setsockopt+0x10/0x10 [ 294.497775][T11917] ? __pfx_aa_sk_perm+0x10/0x10 [ 294.497817][T11917] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 294.497845][T11917] ? __pfx_xsk_setsockopt+0x10/0x10 [ 294.497872][T11917] do_sock_setsockopt+0x17c/0x1b0 [ 294.497902][T11917] __x64_sys_setsockopt+0x13d/0x1b0 [ 294.497931][T11917] do_syscall_64+0x16a/0x530 [ 294.497959][T11917] ? trace_irq_disable+0x3b/0x140 [ 294.497989][T11917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.498011][T11917] ? clear_bhb_loop+0x70/0xc0 [ 294.498037][T11917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.498058][T11917] RIP: 0033:0x7f34c2ba94d9 [ 294.498077][T11917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.498095][T11917] RSP: 002b:00007f34c0df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 294.498117][T11917] RAX: ffffffffffffffda RBX: 00007f34c2e26360 RCX: 00007f34c2ba94d9 [ 294.498133][T11917] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 294.498146][T11917] RBP: 00007f34c2c3804e R08: 0000000000000004 R09: 0000000000000000 [ 294.498159][T11917] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.498173][T11917] R13: 00007f34c2e263f8 R14: 00007f34c2e26360 R15: 00007fffcc265d28 [ 294.498208][T11917] [ 294.500018][T11917] Mem-Info: [ 294.500032][T11917] active_anon:5599 inactive_anon:0 isolated_anon:0 [ 294.500032][T11917] active_file:0 inactive_file:43171 isolated_file:0 [ 294.500032][T11917] unevictable:0 dirty:56 writeback:0 [ 294.500032][T11917] slab_reclaimable:11568 slab_unreclaimable:108032 [ 294.500032][T11917] mapped:29227 shmem:533 pagetables:1203 [ 294.500032][T11917] sec_pagetables:0 bounce:0 [ 294.500032][T11917] kernel_misc_reclaimable:0 [ 294.500032][T11917] free:1311339 free_pcp:10750 free_cma:0 [ 294.500093][T11917] Node 0 active_anon:22396kB inactive_anon:0kB active_file:0kB inactive_file:172492kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116908kB dirty:224kB writeback:0kB shmem:2132kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13700kB pagetables:4684kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 294.500153][T11917] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 294.500209][T11917] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 294.500272][T11917] lowmem_reserve[]: 0 2463 2464 2464 2464 [ 294.500312][T11917] Node 0 DMA32 free:1301092kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22396kB inactive_anon:0kB active_file:0kB inactive_file:172492kB unevictable:0kB writepending:224kB zspages:0kB present:3129332kB managed:2522760kB mlocked:0kB bounce:0kB free_pcp:39224kB local_pcp:21692kB free_cma:0kB [ 294.500384][T11917] lowmem_reserve[]: 0 0 1 1 1 [ 294.500423][T11917] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1392kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 294.501672][T11917] lowmem_reserve[]: 0 0 0 0 0 [ 294.501712][T11917] Node 1 Normal free:3928904kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:3776kB local_pcp:1768kB free_cma:0kB [ 294.502265][T11917] lowmem_reserve[]: 0 0 0 0 0 [ 294.502303][T11917] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 294.502440][T11917] Node 0 DMA32: 1273*4kB (UME) 806*8kB (UME) 545*16kB (UM) 320*32kB (UM) 62*64kB (UM) 34*128kB (UM) 25*256kB (UM) 10*512kB (UME) 3*1024kB (ME) 3*2048kB (M) 303*4096kB (UM) = 1300644kB [ 294.502598][T11917] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 294.502698][T11917] Node 1 Normal: 3*4kB (UM) 2*8kB (UM) 2*16kB (UM) 2*32kB (UM) 2*64kB (UM) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 958*4096kB (UM) = 3928956kB [ 294.535463][T11917] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 294.535510][T11917] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 294.535568][T11917] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 294.535596][T11917] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 294.535647][T11917] 43700 total pagecache pages [ 294.535677][T11917] 0 pages in swap cache [ 294.535705][T11917] Free swap = 124996kB [ 294.535727][T11917] Total swap = 124996kB [ 294.535752][T11917] 2097051 pages RAM [ 294.535773][T11917] 0 pages HighMem/MovableOnly [ 294.535792][T11917] 434397 pages reserved [ 294.535812][T11917] 0 pages cma reserved [ 295.209675][T11922] __nla_validate_parse: 12 callbacks suppressed [ 295.209696][T11922] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1595'. [ 295.284041][T11924] ip6t_hbh: Not strict - not implemented [ 295.292953][T11924] netlink: 'syz.3.1596': attribute type 11 has an invalid length. [ 295.310564][T11924] ip6tnl0: Caught tx_queue_len zero misconfig [ 295.310762][T11924] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 295.444590][T11928] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.488964][T11928] bridge_slave_0 (unregistering): left allmulticast mode [ 295.488995][T11928] bridge_slave_0 (unregistering): left promiscuous mode [ 295.489086][T11928] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.580296][T11933] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1599'. [ 295.607552][T11940] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1600'. [ 295.697171][ T51] net_ratelimit: 33 callbacks suppressed [ 295.697192][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.722229][ T7573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.868364][T11950] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1602'. [ 295.879086][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.954859][T11962] syzkaller0: entered promiscuous mode [ 295.954885][T11962] syzkaller0: entered allmulticast mode [ 295.989556][T11962] tipc: Enabled bearer , priority 0 [ 295.995706][T11961] tipc: Resetting bearer [ 296.042659][ T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.056291][T11961] tipc: Disabling bearer [ 296.091277][T11965] netlink: 'syz.3.1608': attribute type 39 has an invalid length. [ 296.190310][T11977] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1610'. [ 296.201237][ T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.316252][T11983] netlink: 'syz.0.1613': attribute type 1 has an invalid length. [ 296.405369][T11982] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1612'. [ 296.407678][T11982] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1612'. [ 296.552473][T11988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1614'. [ 296.690401][ T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.707747][T11836] udevd[11836]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 296.758419][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.808683][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.824872][T11999] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1615'. [ 296.903977][T11994] 8021q: VLANs not supported on ip6gre0 [ 296.916338][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.156273][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.184170][T12025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1620'. [ 297.324817][T12040] netlink: 'syz.3.1619': attribute type 1 has an invalid length. [ 297.379087][T12040] 8021q: adding VLAN 0 to HW filter on device bond8 [ 297.510280][T12047] netlink: 'syz.4.1625': attribute type 1 has an invalid length. [ 297.532795][T12050] xt_connbytes: Forcing CT accounting to be enabled [ 297.532848][T12050] xt_CT: You must specify a L4 protocol and not use inversions on it [ 297.734523][ T51] IPVS: starting estimator thread 0... [ 297.816112][T12067] IPVS: using max 26 ests per chain, 62400 per kthread [ 298.177742][T12083] bond9: entered promiscuous mode [ 298.177768][T12083] bond9: entered allmulticast mode [ 298.475064][T12098] netlink: 'syz.2.1638': attribute type 1 has an invalid length. [ 298.519920][T12098] 8021q: adding VLAN 0 to HW filter on device bond4 [ 298.897155][T12122] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 298.897174][T12122] IPv6: NLM_F_CREATE should be set when creating new route [ 298.897201][T12122] IPv6: NLM_F_CREATE should be set when creating new route [ 299.120441][T12131] netlink: 'syz.0.1651': attribute type 3 has an invalid length. [ 299.181435][T12133] syzkaller0: left promiscuous mode [ 299.181459][T12133] syzkaller0: left allmulticast mode [ 299.242577][T12135] netlink: 'syz.2.1653': attribute type 12 has an invalid length. [ 299.242613][T12135] netlink: 'syz.2.1653': attribute type 29 has an invalid length. [ 299.462913][T12146] netlink: 'syz.2.1657': attribute type 1 has an invalid length. [ 299.462937][T12146] netlink: 'syz.2.1657': attribute type 2 has an invalid length. [ 299.464357][T12147] netlink: 'syz.2.1657': attribute type 1 has an invalid length. [ 299.464392][T12147] netlink: 'syz.2.1657': attribute type 2 has an invalid length. [ 299.575704][ T31] audit: type=1804 audit(1794650133.483:2): pid=12150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1658" name="/newroot/333/cgroup.controllers" dev="tmpfs" ino=1726 res=1 errno=0 [ 299.601644][ T31] audit: type=1800 audit(1794650133.513:3): pid=12150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1658" name="cgroup.controllers" dev="tmpfs" ino=1726 res=0 errno=-22 [ 299.621163][T12151] veth0: entered promiscuous mode [ 299.715986][T12148] veth0: left promiscuous mode [ 299.777745][T12161] netlink: 'syz.4.1662': attribute type 4 has an invalid length. [ 299.778918][T12161] netlink: 'syz.4.1662': attribute type 1 has an invalid length. [ 300.203577][T12176] 8021q: adding VLAN 0 to HW filter on device bond12 [ 300.264935][T12183] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 300.413199][T12187] __nla_validate_parse: 9 callbacks suppressed [ 300.413220][T12187] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1670'. [ 300.916398][ T7573] net_ratelimit: 791 callbacks suppressed [ 300.916418][ T7573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.087727][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.158752][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.162917][T12232] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1682'. [ 301.184851][T12216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1679'. [ 301.238215][T11108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.296681][T12238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.296927][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.392226][T12243] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1687'. [ 301.450417][T12246] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1688'. [ 301.450600][T12247] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1688'. [ 301.567845][T12254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.594394][T12252] 8021q: adding VLAN 0 to HW filter on device bond13 [ 301.664092][T12255] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1689'. [ 301.809470][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.809704][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.957173][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.152100][T12271] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1692'. [ 302.255380][T12273] tipc: Enabling of bearer rejected, no device for the media [ 302.404291][T12279] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1696'. [ 302.404336][T12279] NCSI netlink: No device for ifindex 813332851 [ 302.624224][T12297] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 302.624244][T12297] IPv6: NLM_F_CREATE should be set when creating new route [ 302.747956][T12305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1704'. [ 302.954372][T12314] 8021q: adding VLAN 0 to HW filter on device bond5 [ 303.173395][T12331] nbd: must specify an index to disconnect [ 304.469028][T12403] validate_nla: 7 callbacks suppressed [ 304.469052][T12403] netlink: 'syz.4.1732': attribute type 1 has an invalid length. [ 304.529236][T12403] 8021q: adding VLAN 0 to HW filter on device bond6 [ 304.574892][T12409] bond6: (slave veth3): Enslaving as an active interface with a down link [ 304.764668][T12416] ifb0: entered allmulticast mode [ 304.850158][T12419] bridge0: port 1(30ªî{X¹¦) entered blocking state [ 304.851137][T12419] bridge0: port 1(30ªî{X¹¦) entered disabled state [ 304.851306][T12419] 0ªî{X¹¦: entered allmulticast mode [ 304.863486][T12419] 0ªî{X¹¦: entered promiscuous mode [ 304.869931][T12419] bridge0: port 1(30ªî{X¹¦) entered blocking state [ 304.870066][T12419] bridge0: port 1(30ªî{X¹¦) entered forwarding state [ 305.193643][T12445] bond15: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 305.195820][T12445] bond15 (unregistering): Released all slaves [ 306.039574][T12467] __nla_validate_parse: 12 callbacks suppressed [ 306.039597][T12467] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1751'. [ 306.067797][T12469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1750'. [ 306.067819][T12469] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1750'. [ 306.068013][T12469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1750'. [ 306.068028][T12469] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1750'. [ 306.127202][ T7573] net_ratelimit: 33 callbacks suppressed [ 306.127232][ T7573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.290534][ T7573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.842014][ T1432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.921873][ T1432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.156218][ T7573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.316575][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.386284][T12504] netlink: 'syz.2.1760': attribute type 1 has an invalid length. [ 307.440188][T12504] 8021q: adding VLAN 0 to HW filter on device bond6 [ 307.462452][T12507] bond6: (slave geneve4): making interface the new active one [ 307.464793][T12507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.465807][T12507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.482282][T12507] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 307.509441][ T2234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.525950][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.635318][T12513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1762'. [ 307.698411][T12518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1764'. [ 308.270939][T12532] xt_hashlimit: size too large, truncated to 1048576 [ 308.837428][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 309.286767][T12555] netlink: 'syz.0.1775': attribute type 2 has an invalid length. [ 309.319277][T12554] netlink: 'syz.4.1776': attribute type 1 has an invalid length. [ 309.319301][T12554] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1776'. [ 309.350048][T12554] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 309.395062][T12563] netlink: 'syz.3.1773': attribute type 1 has an invalid length. [ 309.534690][T12571] bond10: (slave gretap1): making interface the new active one [ 309.545585][T12571] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 309.640834][T12575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1778'. [ 309.715837][T12579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1778'. [ 310.085148][T12602] bridge7: entered promiscuous mode [ 310.085174][T12602] bridge7: entered allmulticast mode [ 311.232843][T12653] bond0: entered promiscuous mode [ 311.234746][T12653] batadv0: entered promiscuous mode [ 311.243274][T12653] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 311.250253][T12653] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 311.267734][T11108] net_ratelimit: 25 callbacks suppressed [ 311.267751][T11108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.268315][T12653] bond0: left promiscuous mode [ 311.275256][T12653] batadv0: left promiscuous mode [ 311.322402][T12656] __nla_validate_parse: 4 callbacks suppressed [ 311.322423][T12656] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1801'. [ 311.346450][T12658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.346651][T12658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.347045][T12658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.348451][T12658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.382659][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.401742][ T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.566111][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.566216][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.566860][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.014486][T12683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1807'. [ 312.014711][T12683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1807'. [ 312.014896][T12683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1807'. [ 312.015080][T12683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1807'. [ 312.015272][T12683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1807'. [ 312.015450][T12683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1807'. [ 312.015626][T12683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1807'. [ 312.015818][T12683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1807'. [ 312.096246][T12683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1807'. [ 312.648637][T12710] netlink: 'syz.1.1814': attribute type 21 has an invalid length. [ 312.648663][T12710] IPv6: NLM_F_CREATE should be specified when creating new route [ 313.180536][T12745] netlink: 'syz.2.1821': attribute type 4 has an invalid length. [ 313.180571][T12745] netlink: 'syz.2.1821': attribute type 10 has an invalid length. [ 313.310862][T12748] syzkaller0: entered promiscuous mode [ 313.310887][T12748] syzkaller0: entered allmulticast mode [ 313.346096][T12748] tipc: Enabled bearer , priority 0 [ 313.349150][T12747] tipc: Resetting bearer [ 313.395776][T12747] tipc: Disabling bearer [ 313.445943][T12750] syzkaller1: entered promiscuous mode [ 313.445966][T12750] syzkaller1: entered allmulticast mode [ 313.774402][T12767] xt_CT: You must specify a L4 protocol and not use inversions on it [ 314.015789][T12783] syzkaller0: entered promiscuous mode [ 314.015813][T12783] syzkaller0: entered allmulticast mode [ 314.596299][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.596326][ C0] bridge0: topology change detected, propagating [ 314.695682][T12788] tipc: Started in network mode [ 314.695717][T12788] tipc: Node identity 9ec3e461b8c6, cluster identity 4711 [ 314.718109][T12788] tipc: Enabled bearer , priority 0 [ 314.779273][T12782] tipc: Resetting bearer [ 314.862137][T12782] tipc: Disabling bearer [ 315.158183][T12823] ip6t_srh: unknown srh invflags 4000 [ 315.367693][T12828] netlink: 'syz.0.1844': attribute type 30 has an invalid length. [ 315.393959][T12833] netlink: 'syz.0.1844': attribute type 30 has an invalid length. [ 315.453342][T12836] syzkaller1: entered promiscuous mode [ 315.453367][T12836] syzkaller1: entered allmulticast mode [ 315.824826][T12849] syzkaller0: entered promiscuous mode [ 315.824850][T12849] syzkaller0: entered allmulticast mode [ 315.889868][T12849] tipc: Enabled bearer , priority 0 [ 315.913384][T12847] tipc: Resetting bearer [ 316.002784][T12847] tipc: Disabling bearer [ 316.183494][T12865] netlink: 'syz.4.1853': attribute type 1 has an invalid length. [ 316.265078][T12865] 8021q: adding VLAN 0 to HW filter on device bond7 [ 316.307416][ T2234] net_ratelimit: 1863 callbacks suppressed [ 316.307436][ T2234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.380596][T12877] veth0: Caught tx_queue_len zero misconfig [ 316.380624][T12877] netlink: 'syz.3.1860': attribute type 3 has an invalid length. [ 316.495468][T12884] xt_limit: Overflow, try lower: 536871034/127 [ 316.571920][T12887] __nla_validate_parse: 69 callbacks suppressed [ 316.571942][T12887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1863'. [ 316.573668][T12887] hsr_slave_0: left promiscuous mode [ 316.580989][T12887] hsr_slave_1: left promiscuous mode [ 316.597202][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.795316][T12903] syzkaller0: entered promiscuous mode [ 316.795341][T12903] syzkaller0: entered allmulticast mode [ 316.824454][T12903] tipc: Enabled bearer , priority 0 [ 316.827237][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.842971][T12902] tipc: Resetting bearer [ 316.903446][T12902] tipc: Disabling bearer [ 317.157004][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.206130][T12918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1874'. [ 317.254477][T12920] netlink: 'syz.2.1875': attribute type 11 has an invalid length. [ 317.333195][T12923] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1876'. [ 317.408145][ T2234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.416969][T12923] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1876'. [ 317.639297][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.796382][ T2234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.926741][ T6621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.083404][T12940] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1881'. [ 318.115231][T12940] macsec1: entered promiscuous mode [ 318.115255][T12940] hsr0: entered promiscuous mode [ 318.199357][T12945] syzkaller1: entered promiscuous mode [ 318.199401][T12945] syzkaller1: entered allmulticast mode [ 318.290658][T12949] netlink: 'syz.2.1884': attribute type 1 has an invalid length. [ 318.290683][T12949] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1884'. [ 318.333661][T12948] syzkaller0: entered promiscuous mode [ 318.333687][T12948] syzkaller0: entered allmulticast mode [ 318.357840][ T51] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.357887][ T51] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.357924][ T51] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.357959][ T51] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.412032][T12948] tipc: Enabled bearer , priority 0 [ 318.438613][ T2234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.510303][ T6621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.746950][T12962] nbd: must specify a size in bytes for the device [ 318.824203][T12966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1889'. [ 318.824228][T12966] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1889'. [ 318.850541][T12958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1888'. [ 319.245017][T12980] netlink: 'syz.3.1893': attribute type 1 has an invalid length. [ 319.573179][T12996] syzkaller0: entered promiscuous mode [ 319.573204][T12996] syzkaller0: entered allmulticast mode [ 319.574506][T12998] netlink: 'syz.3.1896': attribute type 211 has an invalid length. [ 319.652824][T12996] tipc: Enabled bearer , priority 0 [ 319.670842][T12994] tipc: Resetting bearer [ 319.742797][T12994] tipc: Disabling bearer [ 319.918799][T13014] netlink: 'syz.4.1902': attribute type 12 has an invalid length. [ 320.006785][T13014] bond8: option primary_reselect: invalid value (255) [ 320.011532][T13014] bond8 (unregistering): Released all slaves [ 320.123955][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1905'. [ 320.201272][T13027] Bluetooth: hci0: unsupported parameter 5135 [ 320.201294][T13027] Bluetooth: hci0: unsupported parameter 8192 [ 320.201308][T13027] Bluetooth: hci0: unsupported parameter 5135 [ 320.201320][T13027] Bluetooth: hci0: unsupported parameter 8192 [ 320.507004][T13050] sctp: [Deprecated]: syz.1.1914 (pid 13050) Use of int in max_burst socket option. [ 320.507004][T13050] Use struct sctp_assoc_value instead [ 320.511666][T13047] netlink: 'syz.2.1913': attribute type 3 has an invalid length. [ 320.512605][T13048] netlink: 'syz.2.1913': attribute type 3 has an invalid length. [ 320.964695][T13073] netlink: 'syz.3.1918': attribute type 2 has an invalid length. [ 321.169395][T13082] netlink: 'syz.4.1923': attribute type 10 has an invalid length. [ 321.170433][T13082] netlink: 'syz.4.1923': attribute type 1 has an invalid length. [ 321.638524][ T5646] net_ratelimit: 14 callbacks suppressed [ 321.638548][ T5646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.817314][T11108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.864628][T13082] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 321.871413][T13096] syzkaller0: entered promiscuous mode [ 321.871438][T13096] syzkaller0: entered allmulticast mode [ 321.876870][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.166163][T13116] trusted_key: syz.1.1929 sent an empty control message without MSG_MORE. [ 322.202086][T13124] netlink: 'syz.4.1933': attribute type 29 has an invalid length. [ 322.310277][T13125] __nla_validate_parse: 5 callbacks suppressed [ 322.310298][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1932'. [ 322.356781][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.604401][T13143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1939'. [ 322.649308][T13139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1937'. [ 322.725583][T13153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1939'. [ 322.919609][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.950280][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.277610][T13190] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1952'. [ 323.308534][T13196] validate_nla: 1 callbacks suppressed [ 323.308554][T13196] netlink: 'syz.0.1948': attribute type 1 has an invalid length. [ 323.389472][T13205] xt_bpf: check failed: parse error [ 323.456700][ T2234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.526814][T13196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.545055][T13208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1953'. [ 323.566668][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.674576][T13197] bond8: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 323.691691][T13197] bond8 (unregistering): Released all slaves [ 323.773261][T13227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.966581][ T7568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.003911][ T11] wg0 speed is unknown, defaulting to 1000 [ 324.024378][T13231] netlink: 'syz.3.1956': attribute type 1 has an invalid length. [ 324.086387][T13231] xt_limit: Overflow, try lower: 536871034/127 [ 324.094171][T13231] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1956'. [ 324.162044][T13241] veth0: Caught tx_queue_len zero misconfig [ 324.512954][T13245] ip_vti0: left promiscuous mode [ 324.553834][T13245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.566827][T13245] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.569300][T13245] tipc: Resetting bearer [ 324.572354][T13245] tipc: Resetting bearer [ 326.310746][T13263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1966'. [ 326.408916][T13278] 8021q: VLANs not supported on vxcan1 [ 326.471689][T13281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1971'. [ 326.472548][T13281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1971'. [ 326.512234][T13281] 8021q: VLANs not supported on vxcan1 [ 326.590410][T13299] netlink: 'syz.1.1972': attribute type 1 has an invalid length. [ 326.649788][ T11] net_ratelimit: 17 callbacks suppressed [ 326.649809][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.730078][T13299] 8021q: adding VLAN 0 to HW filter on device bond15 [ 326.775054][T13307] netlink: 'syz.3.1976': attribute type 1 has an invalid length. [ 326.775077][T13307] netlink: 'syz.3.1976': attribute type 2 has an invalid length. [ 326.803311][ T1432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.882979][T13311] netlink: 'syz.3.1978': attribute type 8 has an invalid length. [ 327.076899][ T7568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.176750][T13330] tipc: Enabling of bearer rejected, failed to enable media [ 327.346694][T13334] netlink: 'syz.0.1985': attribute type 8 has an invalid length. [ 327.346716][T13334] __nla_validate_parse: 2 callbacks suppressed [ 327.346727][T13334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1985'. [ 327.346756][T13334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1985'. [ 327.393488][ T723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.528619][T13344] netlink: 'syz.1.1991': attribute type 13 has an invalid length. [ 327.535530][T13350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1990'. [ 327.561410][T13339] ip_tables: iptables: counters copy to user failed while replacing table [ 327.575352][T13339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.575612][T13339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.579723][T13339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.596281][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.611021][T13338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.990131][T13379] netlink: 67 bytes leftover after parsing attributes in process `syz.3.2000'. [ 328.152800][T13390] netlink: 'syz.4.2001': attribute type 1 has an invalid length. [ 328.195481][T13395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2004'. [ 328.241869][T13390] 8021q: adding VLAN 0 to HW filter on device bond8 [ 328.402097][T13405] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2007'. [ 328.574139][T13417] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 328.634707][T13421] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2011'. [ 328.908046][T13428] bond11 (unregistering): Released all slaves [ 329.157884][T13447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2017'. [ 329.159756][T13447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2017'. [ 329.263310][T13452] netlink: 'syz.2.2016': attribute type 1 has an invalid length. [ 329.356710][T13452] 8021q: adding VLAN 0 to HW filter on device bond7 [ 329.565214][T13468] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2022'. [ 330.170702][T13484] netlink: 'syz.3.2028': attribute type 10 has an invalid length. [ 330.189353][T13484] geneve4: entered promiscuous mode [ 330.189375][T13484] geneve4: entered allmulticast mode [ 330.389763][T13498] tipc: Enabling of bearer rejected, already enabled [ 330.531377][T13507] bridge7: entered promiscuous mode [ 330.531444][T13507] bridge7: entered allmulticast mode [ 330.591475][T13509] bridge8: entered promiscuous mode [ 330.591536][T13509] bridge8: entered allmulticast mode [ 330.982646][T13534] tipc: Enabling of bearer rejected, already enabled [ 331.806190][ T5769] net_ratelimit: 33 callbacks suppressed [ 331.806212][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.850748][ T1432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.978793][T13570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.979352][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.993789][T13573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.995574][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.140788][T13577] tipc: Enabling of bearer rejected, already enabled [ 332.141091][T13579] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 332.288834][ T7568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.377910][T13585] __nla_validate_parse: 7 callbacks suppressed [ 332.377930][T13585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2059'. [ 332.403177][ T2234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.427898][T13596] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 332.610295][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88804826bc00: rx timeout, send abort [ 332.818922][T13619] syzkaller0: entered promiscuous mode [ 332.818947][T13619] syzkaller0: entered allmulticast mode [ 332.846403][T13619] tipc: Enabled bearer , priority 0 [ 332.850683][T13618] tipc: Resetting bearer [ 332.897237][T13618] tipc: Disabling bearer [ 333.110933][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88804826bc00: abort rx timeout. Force session deactivation [ 333.112672][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88804826b800: rx timeout, send abort [ 333.301499][T13640] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2077'. [ 333.372686][T13644] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2079'. [ 333.562805][T13653] netlink: 'syz.0.2080': attribute type 1 has an invalid length. [ 333.581330][T13657] netlink: 'syz.2.2081': attribute type 1 has an invalid length. [ 333.612755][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88804826b800: abort rx timeout. Force session deactivation [ 333.647702][T13653] 8021q: adding VLAN 0 to HW filter on device bond4 [ 333.689762][T13657] 8021q: adding VLAN 0 to HW filter on device bond8 [ 333.756979][T13668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2083'. [ 333.894626][T13676] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2085'. [ 333.950547][T13679] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2086'. [ 333.996065][T13681] Cannot find map_set index 135 as target [ 334.038592][T13681] Cannot find map_set index 135 as target [ 334.109432][T13693] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2086'. [ 334.447243][T13704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2089'. [ 334.610031][T13708] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2093'. [ 334.964321][T13727] syz_tun: entered allmulticast mode [ 335.011639][T13726] syz_tun: left allmulticast mode [ 335.037068][T13739] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2099'. [ 335.037098][T13739] netlink: 'syz.1.2099': attribute type 5 has an invalid length. [ 335.970875][T13788] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 336.227848][T13798] bond9: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 336.249427][T13798] bond9 (unregistering): Released all slaves [ 336.717102][T13837] Bluetooth: hci0: unsupported parameter 5135 [ 336.717126][T13837] Bluetooth: hci0: unsupported parameter 8192 [ 336.717140][T13837] Bluetooth: hci0: unsupported parameter 5135 [ 336.717154][T13837] Bluetooth: hci0: unsupported parameter 8192 [ 336.772281][T13827] bond9 (unregistering): Released all slaves [ 336.847872][ T723] net_ratelimit: 16 callbacks suppressed [ 336.847893][ T723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.160754][T13859] tipc: Failed to remove unknown binding: 66,1,1/0:1671549819/1671549821 [ 337.160788][T13859] tipc: Failed to remove unknown binding: 66,1,1/0:1671549819/1671549821 [ 337.315993][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.369930][T13871] ip_tables: iptables: counters copy to user failed while replacing table [ 337.388968][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.479117][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.481089][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.791310][T13892] netlink: 'syz.4.2137': attribute type 1 has an invalid length. [ 337.791339][T13892] netlink: 'syz.4.2137': attribute type 3 has an invalid length. [ 337.791353][T13892] __nla_validate_parse: 6 callbacks suppressed [ 337.791365][T13892] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2137'. [ 337.891120][T13898] syzkaller0: left promiscuous mode [ 337.891144][T13898] syzkaller0: left allmulticast mode [ 337.937113][T13900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.937334][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.958538][ T723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.137721][T13914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2142'. [ 338.137748][T13914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2142'. [ 338.338383][T13922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2145'. [ 338.345654][T13922] ifb0: entered allmulticast mode [ 338.356325][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.564697][T13935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2149'. [ 338.609246][T13941] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2150'. [ 338.612021][T13937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2149'. [ 338.641005][T13941] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2150'. [ 338.643401][T13935] 8021q: adding VLAN 0 to HW filter on device bond9 [ 338.782437][T13950] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2152'. [ 338.782668][T13950] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2152'. [ 338.886493][T13956] netlink: 'syz.2.2153': attribute type 2 has an invalid length. [ 339.399073][T13979] netlink: 'syz.3.2161': attribute type 7 has an invalid length. [ 339.588754][T13987] unsupported nlmsg_type 40 [ 340.174986][T14018] syzkaller1: entered promiscuous mode [ 340.175010][T14018] syzkaller1: entered allmulticast mode [ 340.229195][T14023] netlink: 'syz.1.2176': attribute type 1 has an invalid length. [ 340.281793][T14023] 8021q: adding VLAN 0 to HW filter on device bond16 [ 340.313990][T14025] bond16: (slave gretap0): making interface the new active one [ 340.315311][T14025] bond16: (slave gretap0): Enslaving as an active interface with an up link [ 340.339369][T14026] bridge_slave_1: entered promiscuous mode [ 340.364163][T14032] netlink: 'syz.4.2177': attribute type 1 has an invalid length. [ 340.671492][T14047] x_tables: duplicate underflow at hook 2 [ 340.746368][T14049] ipt_ECN: cannot use operation on non-tcp rule [ 340.921850][T14068] tunl0: entered promiscuous mode [ 341.098776][T14077] nbd: must specify a device to reconfigure [ 341.098932][T14075] nbd: must specify a device to reconfigure [ 341.161090][T14076] ipt_rpfilter: unknown options [ 341.304343][T14088] syzkaller0: entered promiscuous mode [ 341.304374][T14088] syzkaller0: entered allmulticast mode [ 341.679571][T14105] block nbd0: reconnected socket [ 341.679600][T14105] block nbd0: Unsupported socket: should be TCP or UNIX. [ 341.683701][ T5658] block nbd0: Receive control failed (result -32) [ 341.895682][T14124] nftables ruleset with unbound set [ 341.906239][ C0] net_ratelimit: 21 callbacks suppressed [ 341.906257][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.908614][T14123] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 341.908630][T14123] IPv6: NLM_F_CREATE should be set when creating new route [ 342.111711][T14133] netlink: 'syz.3.2206': attribute type 28 has an invalid length. [ 342.111735][T14133] netlink: 'syz.3.2206': attribute type 3 has an invalid length. [ 342.284867][T14137] tipc: Failed to remove unknown binding: 66,0,2/43690:1138301511/1138301512 [ 342.285230][T14137] tipc: Failed to remove unknown binding: 66,0,2/43690:1138301511/1138301512 [ 342.643968][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.688385][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.917911][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.156277][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.156530][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.156745][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.156969][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.157207][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.157413][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.018149][T14135] ªªªªª»: renamed from bridge_slave_0 (while UP) [ 344.119187][ T32] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.119224][ T32] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 344.119323][ T32] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.119350][ T32] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 344.119384][ T32] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.119411][ T32] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 344.119453][ T32] netdevsim netdevsim4 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.119479][ T32] netdevsim netdevsim4 : unset [1, 1] type 2 family 0 port 256 - 0 [ 344.312751][T14179] netlink: 'syz.3.2219': attribute type 1 has an invalid length. [ 344.312777][T14179] __nla_validate_parse: 79 callbacks suppressed [ 344.312792][T14179] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2219'. [ 344.312833][T14179] netlink: 'syz.3.2219': attribute type 1 has an invalid length. [ 344.312848][T14179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2219'. [ 344.471136][T14188] team_slave_0: entered allmulticast mode [ 344.485209][T14188] team_slave_0: entered promiscuous mode [ 344.643211][T14203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2223'. [ 344.688279][T14203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2223'. [ 344.705618][ T6621] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.705667][ T6621] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.705707][ T6621] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.705747][ T6621] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.848103][T14212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2225'. [ 344.848133][T14212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2225'. [ 344.883936][T14212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2225'. [ 344.883962][T14212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2225'. [ 345.224284][T14230] sch_tbf: peakrate 2 is lower than or equals to rate 5 ! [ 345.517742][T14250] netlink: 'syz.1.2235': attribute type 1 has an invalid length. [ 345.549779][T14250] 8021q: adding VLAN 0 to HW filter on device bond17 [ 345.572880][T14250] macvlan2: entered promiscuous mode [ 345.572903][T14250] macvlan2: entered allmulticast mode [ 345.574067][T14250] bond17: entered promiscuous mode [ 345.574382][T14250] bond17: entered allmulticast mode [ 345.575083][T14250] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 345.623797][T14250] bond17: left allmulticast mode [ 345.623839][T14250] bond17: left promiscuous mode [ 345.813241][T14277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2239'. [ 346.057602][T14291] netlink: 15 bytes leftover after parsing attributes in process `syz.1.2243'. [ 346.449829][T14306] tipc: Resetting bearer [ 346.483501][T14306] team0: No ports can be present during mode change [ 346.920098][T14332] netlink: 'syz.2.2253': attribute type 1 has an invalid length. [ 346.920120][T14332] netlink: 'syz.2.2253': attribute type 3 has an invalid length. [ 346.929344][T14331] netlink: 'syz.2.2253': attribute type 1 has an invalid length. [ 346.929394][T14331] netlink: 'syz.2.2253': attribute type 3 has an invalid length. [ 347.012190][T14335] netlink: 'syz.0.2255': attribute type 8 has an invalid length. [ 347.399467][ T51] net_ratelimit: 153 callbacks suppressed [ 347.399490][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.878498][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.057170][T14298] NFSD: Failed to start, no listeners configured. [ 348.097125][T14387] syzkaller1: entered promiscuous mode [ 348.098075][T14387] syzkaller1: entered allmulticast mode [ 348.509100][ T723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.703630][T14426] x_tables: duplicate underflow at hook 2 [ 348.919414][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.515551][T14474] __nla_validate_parse: 18 callbacks suppressed [ 349.515572][T14474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2290'. [ 349.522070][T14470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2288'. [ 349.610738][T14468] syzkaller0: entered promiscuous mode [ 349.610766][T14468] syzkaller0: entered allmulticast mode [ 349.630528][ T723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.848860][T14479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2290'. [ 349.848906][T14479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2290'. [ 349.948379][T14498] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2294'. [ 349.966793][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.771080][ T723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.002629][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.086981][ T2234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.351492][T14494] bond7: option mode: unable to set because the bond device is up [ 351.481164][T14516] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2298'. [ 351.482213][T14517] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2298'. [ 351.583808][T14522] 8021q: adding VLAN 0 to HW filter on device bond18 [ 351.589171][T14522] bond0: (slave bond18): Enslaving as an active interface with an up link [ 351.671839][T14529] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2302'. [ 351.718553][T11108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.809134][T14535] IPv6: sit4: Disabled Multicast RS [ 351.860465][T14540] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2306'. [ 351.872799][T14541] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2306'. [ 352.131269][T14557] netlink: 'syz.3.2311': attribute type 4 has an invalid length. [ 352.265529][T14570] netlink: 'syz.3.2311': attribute type 10 has an invalid length. [ 352.274000][T14570] ipvlan1: entered promiscuous mode [ 352.274113][T14570] ipvlan1: entered allmulticast mode [ 352.274151][T14570] veth0_vlan: entered allmulticast mode [ 352.279802][T14570] bridge0: port 1(ipvlan1) entered blocking state [ 352.280233][T14570] bridge0: port 1(ipvlan1) entered disabled state [ 352.599876][T14587] syzkaller1: entered promiscuous mode [ 352.599900][T14587] syzkaller1: entered allmulticast mode [ 353.000201][ T51] net_ratelimit: 3 callbacks suppressed [ 353.000222][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.087136][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.204388][T14617] netlink: 'syz.4.2324': attribute type 21 has an invalid length. [ 353.204417][T14617] IPv6: NLM_F_CREATE should be specified when creating new route [ 353.765664][T14654] openvswitch: netlink: Key 24 has unexpected len 0 expected 4 [ 353.809224][T14659] netlink: 'syz.2.2337': attribute type 16 has an invalid length. [ 353.836904][T14654] netlink: 'syz.4.2335': attribute type 83 has an invalid length. [ 354.051656][T14667] netlink: 'syz.4.2341': attribute type 49 has an invalid length. [ 354.109803][ T2234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.118255][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.159003][T14674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.159411][T14674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.159843][T14674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.160289][T14674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.160727][T14674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.222732][T14667] ip6gretap0: entered promiscuous mode [ 354.222754][T14667] ip6gretap0: entered allmulticast mode [ 354.357632][T14686] netlink: 'syz.4.2345': attribute type 9 has an invalid length. [ 354.556115][T14686] netlink: 'syz.4.2345': attribute type 9 has an invalid length. [ 354.556138][T14686] __nla_validate_parse: 14 callbacks suppressed [ 354.556150][T14686] netlink: 134780 bytes leftover after parsing attributes in process `syz.4.2345'. [ 354.556611][T14692] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2345'. [ 354.950961][T14715] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.2349'. [ 354.951047][T14715] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.2349'. [ 354.990794][T14719] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.2349'. [ 354.990883][T14719] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.2349'. [ 355.441363][T14740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2354'. [ 355.476412][T14742] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2354'. [ 355.478090][T14739] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2355'. [ 355.921649][T14759] syzkaller1: entered promiscuous mode [ 355.921675][T14759] syzkaller1: entered allmulticast mode [ 355.923621][T14759] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4116 [ 356.585524][T14791] netlink: 'syz.2.2363': attribute type 1 has an invalid length. [ 356.693600][T14791] 8021q: adding VLAN 0 to HW filter on device bond10 [ 356.722000][T14792] syz_tun: entered allmulticast mode [ 357.102116][T14807] netlink: 'syz.4.2367': attribute type 1 has an invalid length. [ 357.102144][T14807] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2367'. [ 357.474648][T14826] netlink: 'syz.0.2373': attribute type 1 has an invalid length. [ 357.578561][T14836] bond5: (slave geneve4): making interface the new active one [ 357.579046][T14836] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 357.596644][T14838] : renamed from bond0 [ 357.616604][ T6621] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 357.616650][ T6621] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 357.616687][ T6621] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 357.616722][ T6621] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 357.894180][T14859] geneve0: Caught tx_queue_len zero misconfig [ 358.270748][T14884] tipc: Enabling of bearer rejected, already enabled [ 358.276773][ T30] net_ratelimit: 38 callbacks suppressed [ 358.276819][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.317155][T14885] syzkaller0: entered promiscuous mode [ 358.317177][T14885] syzkaller0: entered allmulticast mode [ 358.397370][T14887] 0: reclassify loop, rule prio 0, protocol 800 [ 358.678956][T11108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.935815][T14926] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 359.207916][T14942] tunl0: left promiscuous mode [ 359.316303][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.323406][T14942] tipc: Resetting bearer [ 359.370840][T14942] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 359.371071][T14944] veth1_macvtap: left promiscuous mode [ 359.768625][T14975] netlink: 'syz.2.2417': attribute type 33 has an invalid length. [ 359.788338][T11108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.845768][T14975] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 359.850985][T14975] bond0 (unregistering): Released all slaves [ 360.362668][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.891499][T15030] __nla_validate_parse: 6 callbacks suppressed [ 360.891523][T15030] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2432'. [ 360.912056][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.974109][T15038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2434'. [ 361.202672][T15053] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2439'. [ 361.225686][T15053] netlink: zone id is out of range [ 361.225702][T15053] netlink: zone id is out of range [ 361.612453][T15075] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2450'. [ 361.631960][T15076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2451'. [ 361.676710][T15080] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2449'. [ 361.767956][T15082] netlink: 'syz.0.2454': attribute type 1 has an invalid length. [ 361.767978][T15082] netlink: 'syz.0.2454': attribute type 3 has an invalid length. [ 361.767991][T15082] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2454'. [ 361.775272][T15082] netlink: 'syz.0.2454': attribute type 1 has an invalid length. [ 361.775290][T15082] netlink: 'syz.0.2454': attribute type 3 has an invalid length. [ 361.775303][T15082] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2454'. [ 362.104509][T15108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2458'. [ 362.160748][T15108] bond11: entered promiscuous mode [ 362.163269][T15108] 8021q: adding VLAN 0 to HW filter on device bond11 [ 362.914995][T15148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2466'. [ 363.274226][T15167] netlink: 'syz.3.2471': attribute type 1 has an invalid length. [ 363.388807][T15167] 8021q: adding VLAN 0 to HW filter on device bond12 [ 363.476820][ T30] net_ratelimit: 726 callbacks suppressed [ 363.476841][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.066297][T15203] netlink: 'syz.1.2483': attribute type 1 has an invalid length. [ 364.232049][T15205] Bluetooth: hci0: unsupported parameter 5135 [ 364.232071][T15205] Bluetooth: hci0: unsupported parameter 8192 [ 364.232084][T15205] Bluetooth: hci0: unsupported parameter 5135 [ 364.232096][T15205] Bluetooth: hci0: unsupported parameter 8192 [ 364.287005][ T2234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.414993][T15224] openvswitch: netlink: Actions may not be safe on all matching packets [ 364.516549][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.977026][T15261] netlink: 'syz.3.2495': attribute type 1 has an invalid length. [ 365.149394][T15261] 8021q: adding VLAN 0 to HW filter on device bond13 [ 365.396975][ T2234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.435008][T15284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.435729][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.498815][T15289] openvswitch: netlink: Flow key attribute not present in set flow. [ 365.502036][T15292] openvswitch: netlink: Flow key attribute not present in set flow. [ 365.566590][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.897088][T15317] nbd: nbd0 already in use [ 365.897369][T15317] block nbd0: NBD_DISCONNECT [ 365.897397][T15317] block nbd0: Send disconnect failed -32 [ 365.897418][T15317] block nbd0: Send disconnect failed -32 [ 365.897438][T15317] block nbd0: shutting down sockets [ 367.328527][T15334] 8021q: adding VLAN 0 to HW filter on device bond19 [ 367.332368][T15334] bond0: (slave bond19): Enslaving as an active interface with an up link [ 367.928302][T15362] __nla_validate_parse: 8 callbacks suppressed [ 367.928324][T15362] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2517'. [ 368.041536][T15385] netlink: 'syz.4.2518': attribute type 1 has an invalid length. [ 368.146238][T15385] 8021q: adding VLAN 0 to HW filter on device bond9 [ 368.464702][T15400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2521'. [ 368.676246][ T5759] net_ratelimit: 7 callbacks suppressed [ 368.676266][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.728934][T11108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.910340][T15417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2524'. [ 368.910369][T15417] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2524'. [ 368.910389][T15417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2524'. [ 368.941636][T15417] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2524'. [ 368.941713][T15417] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2524'. [ 368.997467][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.084537][T15419] netlink: 'syz.3.2525': attribute type 9 has an invalid length. [ 369.084562][T15419] netlink: 134780 bytes leftover after parsing attributes in process `syz.3.2525'. [ 369.371265][T15427] batman_adv: batadv0: Interface deactivated: veth0 [ 369.371304][T15427] batman_adv: batadv0: Removing interface: veth0 [ 369.395075][T15427] bridge_slave_0: left allmulticast mode [ 369.395099][T15427] bridge_slave_0: left promiscuous mode [ 369.395309][T15427] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.439048][T15427] bridge_slave_1: left allmulticast mode [ 369.439075][T15427] bridge_slave_1: left promiscuous mode [ 369.439281][T15427] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.459796][T15427] : (slave bond_slave_0): Releasing backup interface [ 369.484771][T15427] : (slave bond_slave_1): Releasing backup interface [ 369.580629][T15427] team0: Port device team_slave_0 removed [ 369.657719][T15427] team0: Port device team_slave_1 removed [ 369.662781][T15427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.662804][T15427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.719776][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.730161][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.748961][T15427] bond1: (slave bond2): Releasing backup interface [ 369.751809][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.791572][T15445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2531'. [ 369.812637][T15427] bond3: (slave bridge5): Releasing active interface [ 369.824209][T15446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2529'. [ 369.857587][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.869802][T15427] bond6: (slave geneve4): Releasing active interface [ 369.969769][ T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.970240][ T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.063798][T15460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.138097][T15464] netlink: 'syz.2.2534': attribute type 1 has an invalid length. [ 370.335304][T15464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.719173][T15492] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode [ 370.848230][T15506] team_slave_0: Caught tx_queue_len zero misconfig [ 371.595670][ T5296] veth0_macvtap: left promiscuous mode [ 371.895272][T15566] x_tables: duplicate entry at hook 2 [ 371.966482][T15530] netlink: 'syz.3.2545': attribute type 10 has an invalid length. [ 372.962219][T15628] __nla_validate_parse: 16 callbacks suppressed [ 372.962241][T15628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2567'. [ 373.011547][T15628] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2567'. [ 373.236665][T15635] tipc: Enabled bearer , priority 0 [ 373.334092][T15635] syzkaller0: entered promiscuous mode [ 373.334120][T15635] syzkaller0: entered allmulticast mode [ 373.334809][T15635] tipc: Resetting bearer [ 373.430150][T15633] tipc: Resetting bearer [ 373.499711][T15650] netlink: 'syz.0.2573': attribute type 1 has an invalid length. [ 373.565644][T15652] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2573'. [ 373.694581][T15659] netlink: 'syz.0.2573': attribute type 1 has an invalid length. [ 373.881444][ T7568] net_ratelimit: 20 callbacks suppressed [ 373.881464][ T7568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.122932][T11108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.918425][ T7568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.231348][T15633] tipc: Disabling bearer [ 375.235742][T15650] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 375.263836][T15659] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 375.319787][T15672] syzkaller0: left promiscuous mode [ 375.319829][T15672] syzkaller0: left allmulticast mode [ 375.327228][ T5759] tipc: Node number set to 1758328139 [ 375.741327][T15715] pimreg: entered allmulticast mode [ 375.941862][T15724] netlink: 'syz.2.2601': attribute type 2 has an invalid length. [ 375.941892][T15724] netlink: 'syz.2.2601': attribute type 2 has an invalid length. [ 375.969440][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.172182][T15737] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2608'. [ 376.172218][T15737] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2608'. [ 376.203216][T15737] erspan0: entered promiscuous mode [ 376.210274][T15742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2607'. [ 376.223980][T15737] erspan0: left promiscuous mode [ 376.260619][T15737] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2608'. [ 376.260656][T15737] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2608'. [ 376.295586][T15737] erspan0: entered promiscuous mode [ 376.310643][T15737] erspan0: left promiscuous mode [ 376.342201][T15748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2610'. [ 376.367396][T15737] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2608'. [ 376.389693][T15737] erspan0: entered promiscuous mode [ 376.403726][T15737] erspan0: left promiscuous mode [ 376.485611][T15737] erspan0: entered promiscuous mode [ 376.498563][T15737] erspan0: left promiscuous mode [ 376.562851][T15737] erspan0: entered promiscuous mode [ 376.584076][T15737] erspan0: left promiscuous mode [ 376.680880][T15737] erspan0: entered promiscuous mode [ 376.713177][T15737] erspan0: left promiscuous mode [ 376.825105][T15737] erspan0: entered promiscuous mode [ 376.849585][T15737] erspan0: left promiscuous mode [ 376.933764][T15737] erspan0: entered promiscuous mode [ 376.955158][T15737] erspan0: left promiscuous mode [ 377.000817][ T7568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.215075][T15788] sctp: [Deprecated]: syz.0.2622 (pid 15788) Use of int in maxseg socket option. [ 377.215075][T15788] Use struct sctp_assoc_value instead [ 377.373960][T15792] SET target dimension over the limit! [ 377.435053][T15797] netlink: 'syz.0.2628': attribute type 142 has an invalid length. [ 377.670940][T15801] bond6 (unregistering): Released all slaves [ 377.790534][T15807] tipc: Resetting bearer [ 377.791011][T15807] tipc: Resetting bearer [ 377.961610][ T6621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.013980][T15840] __nla_validate_parse: 24 callbacks suppressed [ 378.014002][T15840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2638'. [ 378.036147][ T7568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.135290][T15842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.198432][T15843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2638'. [ 378.283858][T15863] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 378.285358][T15863] netlink: 'syz.3.2642': attribute type 13 has an invalid length. [ 378.307912][T15863] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 378.420167][T15866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2644'. [ 378.420201][T15866] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2644'. [ 378.567619][T15877] netlink: 284 bytes leftover after parsing attributes in process `syz.0.2647'. [ 378.567733][T15877] ip6tnl0: Caught tx_queue_len zero misconfig [ 378.699881][T15881] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2649'. [ 378.870058][T15887] netlink: 'syz.1.2651': attribute type 12 has an invalid length. [ 378.959652][T15889] netlink: 'syz.1.2651': attribute type 12 has an invalid length. [ 379.077958][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.119378][T15904] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 379.137007][T15904] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 379.145477][T15904] xt_hashlimit: overflow, try lower: 3/0 [ 379.168061][ T1432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.241186][T15907] gtp0: entered promiscuous mode [ 379.241211][T15907] gtp0: entered allmulticast mode [ 379.273966][T15909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2661'. [ 379.290618][T15909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2661'. [ 379.410637][T15918] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2663'. [ 379.411498][T15918] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2663'. [ 380.116573][ T7568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.490867][T15981] lo: entered allmulticast mode [ 380.643544][T15970] lo: left allmulticast mode [ 380.945772][T16002] tipc: Enabled bearer , priority 10 [ 381.105621][T16013] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 3, id = 0 [ 381.166460][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.828051][T16049] netlink: 'syz.4.2696': attribute type 3 has an invalid length. [ 381.914250][T16062] netlink: 'syz.4.2696': attribute type 3 has an invalid length. [ 381.936879][ T5759] tipc: Node number set to 511725038 [ 382.198132][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.257549][T16083] ip_tables: iptables: counters copy to user failed while replacing table [ 382.990474][T16130] team_slave_0: left promiscuous mode [ 383.007610][T16130] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 383.011656][ T2234] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.011778][ T2234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.049823][T16126] __nla_validate_parse: 66 callbacks suppressed [ 383.049843][T16126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2713'. [ 383.050853][T16126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2713'. [ 383.072953][T16126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2713'. [ 383.093511][T16126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2713'. [ 383.106710][T16126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2713'. [ 383.109952][T16126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2713'. [ 383.112639][T16126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2713'. [ 383.114137][T16126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2713'. [ 383.144459][T16126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2713'. [ 383.164456][T16126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2713'. [ 383.239408][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.398422][T16160] netlink: 'syz.1.2722': attribute type 1 has an invalid length. [ 383.424906][T16158] netlink: 'syz.4.2723': attribute type 1 has an invalid length. [ 383.561889][T16172] netlink: 'syz.2.2724': attribute type 10 has an invalid length. [ 383.674888][T16172] team0: Port device wg2 added [ 383.717772][ T1432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.873772][T16192] vcan0: tx drop: invalid da for name 0xfffffffffffffffe [ 384.279774][ T30] net_ratelimit: 1 callbacks suppressed [ 384.279795][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.356844][ T1432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.487338][T16218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.487637][T16218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.487883][T16218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.516420][T16218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.517341][T16218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.517953][T16218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.518731][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.548500][T16219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.739776][T16226] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 384.745520][T16227] bridge: RTM_NEWNEIGH with invalid ether address [ 384.788365][T16227] netlink: 'syz.3.2737': attribute type 3 has an invalid length. [ 384.788552][T16227] netlink: 'syz.3.2737': attribute type 3 has an invalid length. [ 384.788683][T16227] netlink: 'syz.3.2737': attribute type 3 has an invalid length. [ 384.788813][T16227] netlink: 'syz.3.2737': attribute type 3 has an invalid length. [ 384.788951][T16227] netlink: 'syz.3.2737': attribute type 3 has an invalid length. [ 385.022335][T16236] bond14: entered promiscuous mode [ 385.022725][T16236] 8021q: adding VLAN 0 to HW filter on device bond14 [ 385.042188][T16236] bond14: entered allmulticast mode [ 385.093148][T16236] bond14: (slave bridge8): making interface the new active one [ 385.093172][T16236] bridge8: entered promiscuous mode [ 385.093338][T16236] bridge8: entered allmulticast mode [ 385.121885][T16236] bond14: (slave bridge8): Enslaving as an active interface with an up link [ 385.539058][T16272] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 385.599008][T16272] xt_hashlimit: size too large, truncated to 1048576 [ 385.629929][T16280] bond15: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 385.632641][T16280] bond15 (unregistering): Released all slaves [ 386.113765][T16303] ip6erspan0: left allmulticast mode [ 386.752361][T16339] NFSD: Failed to start, no listeners configured. [ 386.920801][T16356] bridge0: port 1(ªªªªª») entered disabled state [ 387.121292][T16364] validate_nla: 32 callbacks suppressed [ 387.121314][T16364] netlink: 'syz.4.2773': attribute type 2 has an invalid length. [ 387.194584][T16364] !;: entered promiscuous mode [ 388.693537][T16466] netlink: 'syz.1.2793': attribute type 1 has an invalid length. [ 388.701443][T16467] netlink: 'syz.1.2793': attribute type 1 has an invalid length. [ 388.899607][T16478] __nla_validate_parse: 94 callbacks suppressed [ 388.899629][T16478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2797'. [ 388.899647][T16478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2797'. [ 388.926740][T16478] netlink: 'syz.1.2797': attribute type 4 has an invalid length. [ 388.926794][T16478] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2797'. [ 388.970972][T16478] .`: renamed from bond0 [ 388.984530][T16478] bond1: Primary slave changed to .`, reselecting active slave [ 389.022159][ T1432] bond1: (slave .`): link status definitely down, disabling slave [ 389.035334][T16490] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2800'. [ 389.035418][ T1432] bond1: now running without any active interface! [ 389.224760][T16499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2804'. [ 389.237234][T16500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2804'. [ 389.272243][T16507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2803'. [ 389.384494][T16516] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2808'. [ 389.477916][ T5759] net_ratelimit: 313 callbacks suppressed [ 389.477937][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.582715][T16525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2811'. [ 389.582740][T16525] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2811'. [ 389.640730][T16526] x_tables: unsorted entry at hook 3 [ 389.661102][T16530] x_tables: unsorted entry at hook 3 [ 389.794051][T16545] bridge0: port 1(ªªªªª») entered blocking state [ 389.794183][T16545] bridge0: port 1(ªªªªª») entered listening state [ 389.810991][T16545] bridge0: entered promiscuous mode [ 389.811142][T16545] bridge0: entered allmulticast mode [ 389.959661][T16555] syzkaller0: left promiscuous mode [ 389.959685][T16555] syzkaller0: left allmulticast mode [ 389.983435][T16555] netlink: 'syz.0.2819': attribute type 3 has an invalid length. [ 390.118826][ T6624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.199159][T16574] xt_IDLETIMER: timeout value is too big [ 390.245577][T16574] syzkaller0: entered allmulticast mode [ 390.267493][T16577] @0Ù: renamed from bond_slave_1 (while UP) [ 390.518103][ T7568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.608406][T16592] netlink: 'syz.4.2833': attribute type 1 has an invalid length. [ 391.559070][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.585156][T16650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.595061][T16650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.595542][T16650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.607532][T16650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.610031][T16650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.612553][T16650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.550578][T16701] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 392.616914][T16708] netlink: 'syz.0.2861': attribute type 1 has an invalid length. [ 392.803467][T16711] syzkaller1: entered promiscuous mode [ 392.803491][T16711] syzkaller1: entered allmulticast mode [ 392.838668][ T5660] block nbd296: Receive control failed (result -32) [ 393.071813][ T5658] block nbd0: Receive control failed (result -32) [ 393.071811][ T5664] block nbd0: Receive control failed (result -32) [ 393.379756][T16736] 8021q: adding VLAN 0 to HW filter on device bond10 [ 393.447317][T16735] bond11: (slave dummy0): Device is not bonding slave [ 393.447353][T16735] bond11: option active_slave: invalid value (dummy0) [ 393.453899][T16735] bond11 (unregistering): Released all slaves [ 393.610679][T16751] sctp: [Deprecated]: syz.2.2869 (pid 16751) Use of struct sctp_assoc_value in delayed_ack socket option. [ 393.610679][T16751] Use struct sctp_sack_info instead [ 394.167837][T16770] xt_hashlimit: size too large, truncated to 1048576 [ 394.686598][ T7568] net_ratelimit: 5 callbacks suppressed [ 394.686617][ T7568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.859086][T16797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.955443][T16800] __nla_validate_parse: 76 callbacks suppressed [ 394.955465][T16800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2885'. [ 394.955479][T16800] netlink: 5740 bytes leftover after parsing attributes in process `syz.0.2885'. [ 395.203049][T16809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2887'. [ 395.216977][T16808] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2887'. [ 395.285559][T16808] bond11 (unregistering): Released all slaves [ 395.449560][T16818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2892'. [ 395.453596][T16819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2892'. [ 395.454980][T16819] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 395.491000][T16818] netlink: 'syz.0.2892': attribute type 83 has an invalid length. [ 395.716460][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.879324][ T723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.993243][ T5658] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 396.003942][ T5658] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 396.016467][ T5658] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 396.030258][ T5658] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 396.031293][ T5658] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 396.175181][ T5664] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 396.175565][ T5664] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 396.178135][ T5664] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 396.208719][ T5664] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 396.211161][ T5664] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 396.306441][T16858] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2896'. [ 396.599800][T16866] netlink: 'syz.1.2898': attribute type 1 has an invalid length. [ 396.664916][T16869] netlink: 'syz.1.2898': attribute type 1 has an invalid length. [ 396.757418][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.034123][T16880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2901'. [ 397.071008][T16880] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 397.155303][ T6624] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.155341][ T6624] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.244223][T16881] syzkaller1: entered promiscuous mode [ 397.244247][T16881] syzkaller1: entered allmulticast mode [ 397.328595][ T6624] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.328643][ T6624] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.479999][T16889] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2902'. [ 397.501606][ T6624] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.501655][ T6624] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.612855][ T6624] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.612911][ T6624] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.743029][T16899] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2904'. [ 397.757105][T16841] wg0 speed is unknown, defaulting to 1000 [ 397.799379][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.231589][T16915] netlink: 'syz.3.2905': attribute type 1 has an invalid length. [ 398.276449][ T5658] Bluetooth: hci5: command tx timeout [ 398.727053][ T6624]  (unregistering): Released all slaves [ 398.732181][ T6624] bond1 (unregistering): Released all slaves [ 398.754612][ T6624] bond2 (unregistering): Released all slaves [ 398.790759][ T6624] bond3 (unregistering): Released all slaves [ 398.808159][ T6624] bond4 (unregistering): Released all slaves [ 398.825760][ T6624] bond5 (unregistering): Released all slaves [ 398.847496][ T6624] bond6 (unregistering): Released all slaves [ 398.877763][ T6624] bond7 (unregistering): Released all slaves [ 398.895582][ T6624] bond8 (unregistering): Released all slaves [ 398.911902][ T6624] bond9 (unregistering): Released all slaves [ 398.930110][ T6624] bond10 (unregistering): Released all slaves [ 398.950973][ T6624] bond0 (unregistering): Released all slaves [ 398.979172][T16915] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 399.026405][ T5793] wg0 speed is unknown, defaulting to 1000 [ 399.026456][ T5793] syz0: Port: 1 Link DOWN [ 399.070643][ T5793] wg0 speed is unknown, defaulting to 1000 [ 399.368067][ T6624] tipc: Left network mode [ 399.503827][ T6624] IPVS: stopping master sync thread 8321 ... [ 400.063701][T16968] __nla_validate_parse: 1 callbacks suppressed [ 400.063723][T16968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2918'. [ 400.314663][T16981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2921'. [ 400.355926][ T5658] Bluetooth: hci5: command tx timeout [ 400.371850][T16979] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 400.427287][T16997] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 400.427647][T16997] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 400.429168][T16997] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 400.434168][T16997] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 400.434587][T16997] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 400.434951][T16997] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 400.437253][T16997] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 400.441089][T16997] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 400.468727][T16997] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 400.479809][T16997] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 400.641236][T16841] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.641346][T16841] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.641495][T16841] bridge_slave_0: entered allmulticast mode [ 400.681051][T16841] bridge_slave_0: entered promiscuous mode [ 400.701403][T16841] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.701514][T16841] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.701650][T16841] bridge_slave_1: entered allmulticast mode [ 400.731236][T16841] bridge_slave_1: entered promiscuous mode [ 400.883274][T17002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2923'. [ 400.927948][ T5296] 8021q: adding VLAN 0 to HW filter on device eth2 [ 400.929616][T17010] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2926'. [ 400.974691][T17014] xt_ipcomp: unknown flags 1D [ 401.079318][T16841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.114896][T16841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.252698][ T6624] veth1_vlan: left promiscuous mode [ 401.252798][ T6624] veth0_vlan: left promiscuous mode [ 401.981915][ T6624] team0 (unregistering): Port device wg2 removed [ 402.011271][ T51] smc: removing ib device syz0 [ 402.064413][ T51] smbdirect: ib_dev[syz0] removed [ 402.198911][T17049] netlink: 'syz.3.2932': attribute type 5 has an invalid length. [ 402.225576][T16841] team0: Port device team_slave_0 added [ 402.249117][T16841] team0: Port device team_slave_1 added [ 402.437561][ T5658] Bluetooth: hci5: command tx timeout [ 402.502655][T17051] IPv6: sit1: Disabled Multicast RS [ 402.514642][T16841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.514658][T16841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.514684][T16841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.573970][T16841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.573987][T16841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.574016][T16841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.025091][T17066] bond6: option min_links: invalid value (18446744073709551614) [ 403.025118][T17066] bond6: option min_links: allowed values 0 - 2147483647 [ 403.047899][T17066] bond6 (unregistering): Released all slaves [ 403.381050][T16841] hsr_slave_0: entered promiscuous mode [ 403.393914][T16841] hsr_slave_1: entered promiscuous mode [ 403.458192][T17094] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2937'. [ 403.460606][T17073] ip6gre1: entered allmulticast mode [ 403.812109][ T5296] 8021q: adding VLAN 0 to HW filter on device eth3 [ 403.812177][T17100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2939'. [ 403.814132][T17100] tipc: Resetting bearer [ 403.891365][T17100] tipc: Disabling bearer [ 404.304515][T17113] 8021q: adding VLAN 0 to HW filter on device bond11 [ 404.321936][T17113] bridge0: port 1(bond11) entered blocking state [ 404.322834][T17113] bridge0: port 1(bond11) entered disabled state [ 404.323000][T17113] bond11: entered allmulticast mode [ 404.358348][T17113] bond11: entered promiscuous mode [ 404.439955][T17119] IPVS: Error connecting to the multicast addr [ 404.445048][T17124] wg2: Caught tx_queue_len zero misconfig [ 404.516096][ T5658] Bluetooth: hci5: command tx timeout [ 404.798640][T17138] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2950'. [ 405.387487][ T6624] IPVS: stop unused estimator thread 0... [ 405.540994][T17175] net_ratelimit: 58 callbacks suppressed [ 405.541017][T17175] openvswitch: netlink: Unknown nsh attribute 0 [ 405.605408][T17148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2952'. [ 405.656832][T17153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2952'. [ 405.692004][T17171] can: request_module (can-proto-0) failed. [ 405.751835][T17148] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 405.842712][T17186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2958'. [ 406.097193][T17192] netlink: 'syz.0.2959': attribute type 2 has an invalid length. [ 406.264624][T16841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 406.285636][T16841] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 406.291966][T16841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 406.316040][T16841] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 406.316899][T16841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 406.373729][T16841] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 406.374634][T16841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 406.415368][T16841] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 406.480957][T17210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2962'. [ 406.480985][T17210] netlink: 87 bytes leftover after parsing attributes in process `syz.1.2962'. [ 406.604057][T17215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2961'. [ 406.884609][T16841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.959127][T16841] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.995300][ T723] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.995404][ T723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.125597][ T723] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.125680][ T723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.257729][T17248] netlink: 'syz.0.2971': attribute type 11 has an invalid length. [ 407.257752][T17248] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2971'. [ 407.300310][T17237] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2967'. [ 407.449111][T17257] IPv4: Oversized IP packet from 127.202.26.0 [ 407.499506][T17260] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2972'. [ 407.581241][T17263] ip_tables: iptables: counters copy to user failed while replacing table [ 408.399704][T17306] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2982'. [ 408.519377][T16841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.575332][T17313] x_tables: duplicate entry at hook 1 [ 408.605155][T17314] tipc: Enabling of bearer rejected, media not registered [ 408.677281][T16841] veth0_vlan: entered promiscuous mode [ 408.697885][T16841] veth1_vlan: entered promiscuous mode [ 408.782427][T16841] veth0_macvtap: entered promiscuous mode [ 408.811933][T16841] veth1_macvtap: entered promiscuous mode [ 408.902966][T16841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.940961][T16841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.076874][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.077713][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.077987][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.079498][ T2234] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.361637][T17344] siw: device registration error -23 [ 409.452061][T17344] 8021q: adding VLAN 0 to HW filter on device bond6 [ 409.512089][T17348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.535758][T17348] bond6: (slave bond0): Enslaving as an active interface with a down link [ 409.590401][ T6621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.590424][ T6621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.649612][T17344] bond6 (unregistering): (slave bond0): Releasing active interface [ 409.677224][T17344] bond6 (unregistering): Released all slaves [ 409.889606][ T6621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.889629][ T6621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.948522][T17366] 0ªî{X¹¦: left allmulticast mode [ 409.948551][T17366] 0ªî{X¹¦: left promiscuous mode [ 409.948823][T17366] bridge0: port 1(30ªî{X¹¦) entered disabled state [ 409.991861][T17366] bridge_slave_1: left allmulticast mode [ 409.991888][T17366] bridge_slave_1: left promiscuous mode [ 409.992118][T17366] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.581960][T17394] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 410.875766][T17410] netlink: 'syz.2.3004': attribute type 9 has an invalid length. [ 410.875801][T17410] __nla_validate_parse: 5 callbacks suppressed [ 410.876045][T17410] netlink: 134780 bytes leftover after parsing attributes in process `syz.2.3004'. [ 411.122390][ T5664] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 411.136851][ T5664] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 411.137855][ T5664] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 411.140680][ T5664] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 411.145634][ T5664] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 411.373426][T17438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3009'. [ 411.448438][ T5656] syz_tun (unregistering): left allmulticast mode [ 411.532083][T17442] team0: Caught tx_queue_len zero misconfig [ 411.689627][T17438] syzkaller0: entered promiscuous mode [ 411.689655][T17438] syzkaller0: entered allmulticast mode [ 412.143729][T17474] netlink: 'syz.3.3012': attribute type 3 has an invalid length. [ 412.143754][T17474] netlink: 'syz.3.3012': attribute type 1 has an invalid length. [ 412.143771][T17474] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3012'. [ 412.143789][T17474] NCSI netlink: No device for ifindex 4294967289 [ 412.614041][T17489] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3017'. [ 413.237064][ T5664] Bluetooth: hci2: command tx timeout [ 413.884810][T17462] veth0: entered promiscuous mode [ 413.922843][T17455] veth0: left promiscuous mode [ 414.124387][T17425] rxe_eth0 speed is unknown, defaulting to 1000 [ 414.145717][T17425] rxe_eth0 speed is unknown, defaulting to 1000 [ 414.153625][T17425] rxe_eth0 speed is unknown, defaulting to 1000 [ 414.231090][T17511] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 414.267628][T17505] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 414.448509][T17425] infiniband rxe0: set active [ 414.448531][T17425] infiniband rxe0: added rxe_eth0 [ 414.479349][T17425] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 414.479403][T17425] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 414.479445][T17425] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 414.530020][ T5793] rxe_eth0 speed is unknown, defaulting to 1000 [ 414.566231][T17513] macsec1: entered promiscuous mode [ 414.598534][T17425] RDS/IB: rxe0: added [ 414.598586][T17425] smc: adding ib device rxe0 with port count 1 [ 414.598603][T17425] smc: ib device rxe0 port 1 has no pnetid [ 414.684064][T17519] erspan0: entered promiscuous mode [ 414.693562][T17425] rxe_eth0 speed is unknown, defaulting to 1000 [ 414.704166][ T7569] rxe_eth0 speed is unknown, defaulting to 1000 [ 414.731155][T17531] netlink: 'syz.3.3025': attribute type 10 has an invalid length. [ 414.731175][T17531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3025'. [ 414.731375][T17531] netlink: 'syz.3.3025': attribute type 10 has an invalid length. [ 414.731389][T17531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3025'. [ 414.731585][T17531] netlink: 'syz.3.3025': attribute type 10 has an invalid length. [ 414.731599][T17531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3025'. [ 414.733410][T17531] netlink: 'syz.3.3025': attribute type 10 has an invalid length. [ 414.733426][T17531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3025'. [ 414.734442][T17531] netlink: 'syz.3.3025': attribute type 10 has an invalid length. [ 414.734457][T17531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3025'. [ 414.734652][T17531] netlink: 'syz.3.3025': attribute type 10 has an invalid length. [ 414.734667][T17531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3025'. [ 414.743567][T17531] netlink: 'syz.3.3025': attribute type 10 has an invalid length. [ 414.743973][T17531] netlink: 'syz.3.3025': attribute type 10 has an invalid length. [ 415.060390][T17425] rxe_eth0 speed is unknown, defaulting to 1000 [ 415.316053][ T5664] Bluetooth: hci2: command tx timeout [ 415.325144][T17546] Bluetooth: MGMT ver 1.23 [ 415.374189][T17425] rxe_eth0 speed is unknown, defaulting to 1000 [ 415.754097][T17425] rxe_eth0 speed is unknown, defaulting to 1000 [ 415.879123][T17582] __nla_validate_parse: 29 callbacks suppressed [ 415.879145][T17582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3038'. [ 416.199046][T17425] rxe_eth0 speed is unknown, defaulting to 1000 [ 416.429930][T17605] bond_slave_0: entered promiscuous mode [ 416.610206][T17425] rxe_eth0 speed is unknown, defaulting to 1000 [ 417.054733][T17425] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.054853][T17425] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.055172][T17425] bridge_slave_0: entered allmulticast mode [ 417.058223][T17425] bridge_slave_0: entered promiscuous mode [ 417.071307][T17425] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.071694][T17425] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.072000][T17425] bridge_slave_1: entered allmulticast mode [ 417.076302][T17425] bridge_slave_1: entered promiscuous mode [ 417.130251][T17425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.133284][T17425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.173672][T17425] team0: Port device team_slave_0 added [ 417.177407][T17425] team0: Port device team_slave_1 added [ 417.207166][T17425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.207183][T17425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.207211][T17425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.210148][T17425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.210163][T17425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.210192][T17425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.322167][T17425] hsr_slave_0: entered promiscuous mode [ 417.322990][T17425] hsr_slave_1: entered promiscuous mode [ 417.323673][T17425] debugfs: 'hsr0' already exists in 'hsr' [ 417.323691][T17425] Cannot create hsr debugfs directory [ 417.406383][ T5664] Bluetooth: hci2: command tx timeout [ 417.527070][T17425] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.527110][T17425] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.527138][T17425] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 417.612746][T17425] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.612775][T17425] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.612795][T17425] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 417.673668][T17425] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.673694][T17425] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.673713][T17425] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 417.744203][T17425] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.744230][T17425] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.744250][T17425] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 417.804829][T17425] ------------[ cut here ]------------ [ 417.804841][T17425] devlink_rates_check(devlink, NULL, NULL) [ 417.804852][T17425] WARNING: net/devlink/core.c:544 at devlink_free+0x359/0x450, CPU#1: syz-executor/17425 [ 417.827984][T17425] Modules linked in: [ 417.832124][T17425] CPU: 1 UID: 0 PID: 17425 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 417.842282][T17425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 417.853223][T17425] RIP: 0010:devlink_free+0x359/0x450 [ 417.858784][T17425] Code: 00 e8 fb 62 e8 f6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 e6 62 e8 f6 90 0f 0b 90 e9 02 fd ff ff e8 d8 62 e8 f6 90 <0f> 0b 90 e9 29 fd ff ff e8 ca 62 e8 f6 90 0f 0b 90 e9 59 fd ff ff [ 417.881551][T17425] RSP: 0018:ffffc900038a78b8 EFLAGS: 00010293 [ 417.888065][T17425] RAX: ffffffff8ae0be08 RBX: ffff8880797aa000 RCX: ffff8880546a9f40 [ 417.896393][T17425] RDX: 0000000000000000 RSI: 00000000fffffff0 RDI: 0000000000000000 [ 417.904416][T17425] RBP: 00000000fffffff0 R08: ffffffff91be00bf R09: 1ffffffff237c017 [ 417.913014][T17425] R10: dffffc0000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 417.921330][T17425] R13: 1ffff1100f2f5400 R14: ffff8880797aa1f8 R15: ffff8880797aa3e0 [ 417.929769][T17425] FS: 000055557a90f500(0000) GS:ffff888123508000(0000) knlGS:0000000000000000 [ 417.939155][T17425] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 417.946091][T17425] CR2: 00007fd61b5f0ce0 CR3: 000000002bf22000 CR4: 00000000003526f0 [ 417.954270][T17425] Call Trace: [ 417.957693][T17425] [ 417.960664][T17425] ? __pfx_nsim_bus_remove+0x10/0x10 [ 417.966392][T17425] nsim_drv_remove+0x146/0x170 [ 417.971193][T17425] device_release_driver_internal+0x42b/0x7d0 [ 417.977374][T17425] bus_remove_device+0x444/0x560 [ 417.982404][T17425] ? __pfx_bus_remove_device+0x10/0x10 [ 417.987989][T17425] ? kernfs_remove_by_name_ns+0x101/0x140 [ 417.993770][T17425] device_del+0x524/0x8f0 [ 417.998635][T17425] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 418.004513][T17425] ? __pfx_device_del+0x10/0x10 [ 418.009477][T17425] ? lock_acquire+0x115/0x350 [ 418.014221][T17425] device_unregister+0x21/0xf0 [ 418.019116][T17425] del_device_store+0x2b5/0x370 [ 418.024022][T17425] ? __pfx_del_device_store+0x10/0x10 [ 418.029884][T17425] ? sysfs_file_kobj+0x1e4/0x230 [ 418.034869][T17425] ? sysfs_kf_write+0x166/0x260 [ 418.039924][T17425] ? __pfx_sysfs_kf_write+0x10/0x10 [ 418.045364][T17425] kernfs_fop_write_iter+0x3a4/0x540 [ 418.050925][T17425] vfs_write+0x612/0xba0 [ 418.055253][T17425] ? __pfx_vfs_write+0x10/0x10 [ 418.060546][T17425] ? do_sys_openat2+0x18d/0x200 [ 418.065453][T17425] ? kmem_cache_free+0x182/0x650 [ 418.070473][T17425] ? fdget+0x16b/0x250 [ 418.074596][T17425] ksys_write+0x150/0x270 [ 418.078986][T17425] ? __pfx_ksys_write+0x10/0x10 [ 418.083943][T17425] do_syscall_64+0x16a/0x530 [ 418.088916][T17425] ? trace_irq_disable+0x3b/0x140 [ 418.094008][T17425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.100201][T17425] ? clear_bhb_loop+0x70/0xc0 [ 418.104921][T17425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.110912][T17425] RIP: 0033:0x7ffbf2169d0e [ 418.115363][T17425] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 418.135585][T17425] RSP: 002b:00007ffef50b4238 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 418.144123][T17425] RAX: ffffffffffffffda RBX: 000055557a90f500 RCX: 00007ffbf2169d0e [ 418.152418][T17425] RDX: 0000000000000001 RSI: 00007ffef50b42c0 RDI: 0000000000000005 [ 418.160996][T17425] RBP: 00007ffbf223891c R08: 0000000000000000 R09: 0000000000000000 [ 418.169103][T17425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.177188][T17425] R13: 00007ffef50b42c0 R14: 00007ffef50b4b00 R15: 0000000000000003 [ 418.185201][T17425] [ 418.188666][T17425] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 418.195980][T17425] CPU: 1 UID: 0 PID: 17425 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 418.205578][T17425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 418.215659][T17425] Call Trace: [ 418.218979][T17425] [ 418.221965][T17425] vpanic+0x26f/0x710 [ 418.225991][T17425] panic+0xc5/0xd0 [ 418.229740][T17425] ? __pfx_panic+0x10/0x10 [ 418.234180][T17425] __warn+0x315/0x4c0 [ 418.238162][T17425] ? devlink_free+0x359/0x450 [ 418.242854][T17425] ? devlink_free+0x359/0x450 [ 418.247583][T17425] __report_bug+0x276/0x570 [ 418.252125][T17425] ? devlink_free+0x359/0x450 [ 418.256830][T17425] ? __pfx___report_bug+0x10/0x10 [ 418.261924][T17425] ? rcu_is_watching+0x16/0xb0 [ 418.266730][T17425] ? trace_contention_end+0x3d/0x140 [ 418.272065][T17425] ? __mutex_lock+0x305/0x15a0 [ 418.276878][T17425] ? lock_acquire+0x115/0x350 [ 418.281596][T17425] ? devlink_free+0x359/0x450 [ 418.286321][T17425] report_bug+0x16b/0x220 [ 418.290685][T17425] ? devlink_free+0x359/0x450 [ 418.295420][T17425] ? devlink_free+0x35b/0x450 [ 418.300122][T17425] handle_bug+0x9c/0x200 [ 418.304429][T17425] exc_invalid_op+0x1a/0x50 [ 418.308970][T17425] asm_exc_invalid_op+0x1a/0x20 [ 418.313857][T17425] RIP: 0010:devlink_free+0x359/0x450 [ 418.319183][T17425] Code: 00 e8 fb 62 e8 f6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 e6 62 e8 f6 90 0f 0b 90 e9 02 fd ff ff e8 d8 62 e8 f6 90 <0f> 0b 90 e9 29 fd ff ff e8 ca 62 e8 f6 90 0f 0b 90 e9 59 fd ff ff [ 418.338827][T17425] RSP: 0018:ffffc900038a78b8 EFLAGS: 00010293 [ 418.344943][T17425] RAX: ffffffff8ae0be08 RBX: ffff8880797aa000 RCX: ffff8880546a9f40 [ 418.352939][T17425] RDX: 0000000000000000 RSI: 00000000fffffff0 RDI: 0000000000000000 [ 418.360934][T17425] RBP: 00000000fffffff0 R08: ffffffff91be00bf R09: 1ffffffff237c017 [ 418.369020][T17425] R10: dffffc0000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 418.377010][T17425] R13: 1ffff1100f2f5400 R14: ffff8880797aa1f8 R15: ffff8880797aa3e0 [ 418.385013][T17425] ? devlink_free+0x358/0x450 [ 418.389730][T17425] ? devlink_free+0x358/0x450 [ 418.394441][T17425] ? __pfx_nsim_bus_remove+0x10/0x10 [ 418.399758][T17425] nsim_drv_remove+0x146/0x170 [ 418.404574][T17425] device_release_driver_internal+0x42b/0x7d0 [ 418.410704][T17425] bus_remove_device+0x444/0x560 [ 418.415781][T17425] ? __pfx_bus_remove_device+0x10/0x10 [ 418.421285][T17425] ? kernfs_remove_by_name_ns+0x101/0x140 [ 418.427046][T17425] device_del+0x524/0x8f0 [ 418.431404][T17425] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 418.437251][T17425] ? __pfx_device_del+0x10/0x10 [ 418.442141][T17425] ? lock_acquire+0x115/0x350 [ 418.446852][T17425] device_unregister+0x21/0xf0 [ 418.451656][T17425] del_device_store+0x2b5/0x370 [ 418.456558][T17425] ? __pfx_del_device_store+0x10/0x10 [ 418.461967][T17425] ? sysfs_file_kobj+0x1e4/0x230 [ 418.466962][T17425] ? sysfs_kf_write+0x166/0x260 [ 418.471839][T17425] ? __pfx_sysfs_kf_write+0x10/0x10 [ 418.477094][T17425] kernfs_fop_write_iter+0x3a4/0x540 [ 418.482421][T17425] vfs_write+0x612/0xba0 [ 418.486738][T17425] ? __pfx_vfs_write+0x10/0x10 [ 418.491565][T17425] ? do_sys_openat2+0x18d/0x200 [ 418.496439][T17425] ? kmem_cache_free+0x182/0x650 [ 418.501419][T17425] ? fdget+0x16b/0x250 [ 418.505520][T17425] ksys_write+0x150/0x270 [ 418.509879][T17425] ? __pfx_ksys_write+0x10/0x10 [ 418.514769][T17425] do_syscall_64+0x16a/0x530 [ 418.519393][T17425] ? trace_irq_disable+0x3b/0x140 [ 418.524450][T17425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.530568][T17425] ? clear_bhb_loop+0x70/0xc0 [ 418.535271][T17425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.541182][T17425] RIP: 0033:0x7ffbf2169d0e [ 418.545622][T17425] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 418.565240][T17425] RSP: 002b:00007ffef50b4238 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 418.573706][T17425] RAX: ffffffffffffffda RBX: 000055557a90f500 RCX: 00007ffbf2169d0e [ 418.581706][T17425] RDX: 0000000000000001 RSI: 00007ffef50b42c0 RDI: 0000000000000005 [ 418.589700][T17425] RBP: 00007ffbf223891c R08: 0000000000000000 R09: 0000000000000000 [ 418.597696][T17425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.605681][T17425] R13: 00007ffef50b42c0 R14: 00007ffef50b4b00 R15: 0000000000000003 [ 418.613692][T17425] [ 418.617352][T17425] Kernel Offset: disabled [ 418.621689][T17425] Rebooting in 86400 seconds..