last executing test programs: 3m17.115806935s ago: executing program 3 (id=2586): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) close(r0) listen(r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@deltaction={0x5c, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r1, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000008400810000009500"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) 3m16.045073453s ago: executing program 3 (id=2593): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000b581000007000000"], 0x14}}, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x2, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0x3c}}, 0x800) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100), &(0x7f0000000140)=0x8) (async) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100), &(0x7f0000000140)=0x8) 3m14.018358843s ago: executing program 3 (id=2609): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x0, 0x1, 0x70bd22, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0xc890) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000040000008500000086000000bf91000000000000b7020000010000008500000085000000b70000000000008095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m13.574125756s ago: executing program 3 (id=2612): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x3, 0x0, 0x4, 0x0, 0x44}, 0x48) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000)=0x8101, 0x4) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) (async) sendmsg$nl_route(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@setlink={0x238, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, 0x312}, [@IFLA_VFINFO_LIST={0x1f4, 0x16, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xcd, 0xd2c, 0x8000, 0x88a8}}]}, @IFLA_VF_VLAN={0x10, 0x2, {0x0, 0x33e, 0x400}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x81}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x5, 0xca4}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5, 0x7c}}]}, {0x80, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x2, 0x2ad, 0x4, 0x88a8}}, {0x14, 0x1, {0xb4fb, 0x41e, 0x6, 0x8100}}, {0x14, 0x1, {0x1ff, 0xd25, 0x9, 0x8100}}, {0x14, 0x1, {0x6, 0xf6f, 0x0, 0x8100}}, {0x14, 0x1, {0x15837483, 0xc89, 0x2, 0x10200}}, {0x14, 0x1, {0x2, 0x5a3, 0x60, 0x8100}}]}]}, {0x6c, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x8, 0xcc1}}, @IFLA_VF_RATE={0x10, 0x6, {0x9, 0x6}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0x38fd}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x800, 0x3}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x101, 0x1}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x6, 0x2}}, @IFLA_VF_TX_RATE={0xc}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x4ac8, 0x2}}, @IFLA_VF_VLAN={0x10, 0x2, {0x6, 0x734, 0x6}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x24e, 0xe0000000}}]}, {0x4}, {0x70, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x1, 0x671, 0x7fffffff}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x3ff, 0xef49}}, @IFLA_VF_MAC={0x28, 0x1, {0x9, @remote}}, @IFLA_VF_MAC={0x28, 0x1, {0x0, @remote}}]}]}, @IFLA_MAP={0x24, 0xe, {0x22, 0x3, 0xd9e7, 0x10, 0x9, 0xb}}]}, 0x238}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r7 = socket(0x1, 0x803, 0x0) (rerun: 64) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x4c}}, 0x884) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x1c, r10, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) (async) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000300)=0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x11, @mcast1, 0x6}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) bind$inet6(r11, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) (async) sendmmsg$inet6(r11, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) 3m12.908552234s ago: executing program 3 (id=2617): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)=',\x00', 0x100, &(0x7f0000000040)={@align=0x7, {0x6, 0x8, 0x4, 0x8001}}, 0x2, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x1}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000140)=0x1, 0x8) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0x4, 0x3}, 0x6) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f00000001c0)={0x2a}) (async) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000200), 0x4) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0x34, 0xb, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4e}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x178, 0x9, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_USERDATA={0xe1, 0xd, 0x1, 0x0, "8ec1d0dd3afc56eec22eda949a13927b815e8012a07cb84e8df432cc07215952a7f3820a5827b9250bcf24320435b0c57dbc8a42fec98383d376dfac8542e183f8c0ccc52f06e7aecc3e8566f7bae97d8ce9ae256982858387ca9ade3f927c805078d60fc5488e88ba92e5b0ac5cafaea0ddec2da7e8f2492cc2c1bd6c392fe9eb2476388e6232cb0879c150dd9801a94fdd7ebb4026777a9276a8abf31667eb6b8c02658e8d4e68a62b6167951745355227a45b46d020137595681548df5ce6c78e953b1f23e211c3c8c144736d19e463242fad29f54ec3d1cd43c073"}, @NFTA_SET_USERDATA={0x70, 0xd, 0x1, 0x0, "827ac46108ce4499524e6ee7b22d68f96251966cf71b428c5a6bc8a4d3fd3bd88f088584a5da0b84cf322af46e2eb3bf601ddad55aa12a47210116d4dfca834b61fc0f9acbb3aa6344f0a265adf7fd699f45a5245f56a46cd63b814a5257bfc2808109e2701da9375207ff6e"}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x4c, 0x0, 0xa, 0x900, 0x0, 0x0, {0xe, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x2c, 0x6, "7503eccbf65026972204746d3cce59a767b94b3b86adfb6a4470c232534aab2fa7eb32a03d4bbb43"}]}, @NFT_MSG_DELRULE={0x1a0, 0x8, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88e7}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x18}]}, @NFTA_RULE_USERDATA={0xe1, 0x7, 0x1, 0x0, "c3634b56a2ffc201816668f82379598677c472ee64c179c2541985f82996b888bde367c829fdeb478bc2fc5a85b63386c4e0b9020b0e3f4b86c6632124edec478d2ff8bd012e62e5841c2ba8e99bbd044b61a06ac5ffc652d9c8ca778623bafa8fe9a0bba5c1bd12e2678fac21070f555bb0449dbeeb48f835fde3a946dc0fd739f042c7088f4b28d6e0c143bb3b2d466c653678edeaadc0ba326ee910a5772303445385c835597e0bb87dd2b1d01deb6e37949560342ecfdabd2c02ddfc623c36cfa5e07a94d3095334057b410b786bf29dd0d92036e23505885b1856"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x77, 0x7, 0x1, 0x0, "ae82c224ed1947c5cff8d28a04244b0e32e690a3356ff311db7fdb408b80a6278ee792f97f974e85d24faa296c6a15510411abeb71de86dbcb235d1e4a77049f3aeb4b612a7b93573fa70588b5f17fd759c21c91921394c3f160d1e7f05717e1b6bce3b71d1f08373f254773caeab291e316e4"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3e0}, 0x1, 0x0, 0x0, 0x4000854}, 0x2400c094) (async, rerun: 64) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000700)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000740)=0x2c) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, 0x3, 0x7, 0x5, 0x0, 0x0, {0x5}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_FILTER={0x4}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4045) (async) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000008c0)={0x9, 0x8, '\x00', 0x0, &(0x7f0000000880)=[0x0]}) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xec, 0xa, 0x6, 0x101, 0x0, 0x0, {0x6, 0x0, 0x5}, [@IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_to_bond\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x7c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0xc}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'geneve1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xa}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x9}}]}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x5}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xb7}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r4, 0x20, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000014}, 0x84) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r5, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x20, 0x140a, 0x8, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x24040001) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000d00)) r6 = socket$netlink(0x10, 0x3, 0xa) connect(r1, &(0x7f0000000e00)=@un=@file={0x1, './file0\x00'}, 0x80) (async, rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000e80)={0x4}) (async, rerun: 32) socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) r7 = accept4(r6, &(0x7f0000000f00)=@nl=@unspec, &(0x7f0000000f80)=0x80, 0x80800) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001000), r0) sendmsg$ETHTOOL_MSG_WOL_SET(r7, &(0x7f0000001140)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001100)={&(0x7f0000001040)={0xa8, r8, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_SOPASS={0x93, 0x3, "86f37611d1b85729fabeddb828679126aa819144f80cae07e5528680d5bd8a7c60cb28659e328bc895c30d5eebec307fd950e13f9f3c4d68070be629d13c00e2f95760915e26fcf46d26de0961ffe8bf96d9b8f4fd6a56a6289aa5fb104e371666d5f9330bce1906058274c014826cc0a042952b26032356160baddc286bf54ef50f5308cfa8bef9276c382dd69f72"}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x840) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f0000001340)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001300)={&(0x7f0000001200)={0x100, r9, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x12}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x401}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x3}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x265}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x264}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000840) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f0000001580)={&(0x7f0000001380)=0x6, 0x7, &(0x7f00000013c0)=[{}, {}], &(0x7f0000001540)}) 3m12.20295222s ago: executing program 3 (id=2624): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000cc0)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWFLOWTABLE={0x2a0, 0x16, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x274, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'caif0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xce}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'nicvf0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x2c8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20006004) bind$bt_sco(r1, 0x0, 0x0) listen(r1, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB="70010000", @ANYRES16=r4, @ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000002a80)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10a0002}, 0xc, &(0x7f0000002a40)={&(0x7f0000001b00)={0xf10, r5, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xe0, 0x11d, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9e}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x93}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4b}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe7}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7f}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9c}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x6c, 0x11d, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x85}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xa}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7a}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x220, 0x11d, 0x0, 0x1, [{0x180, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x168, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xf7, 0x101, 0x8001, 0x5, 0xfb, 0x6, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x3, 0x8}, {0x0, 0x5}, {0x0, 0x6}, {0x1, 0x8}, {0x0, 0x4}, {0x1, 0x5}, {0x0, 0x2}, {0x2, 0x9}, {0x3, 0x8}, {0x6, 0x7}, {0x1}, {0x4, 0x3}, {}, {0x2, 0x7}, {0x1}, {0x2, 0x3}, {0x3, 0x8}, {0x1}, {0x4, 0x3}, {0x7, 0x5}, {0x5, 0x9}, {0x3, 0x5}, {0x0, 0x9}, {0x2, 0x4}, {0x0, 0x7}, {0x1, 0x5}, {0x5, 0x9}, {0x3, 0x5}, {0x7, 0x9}, {0x7, 0x4}, {0x4, 0x5}, {0x1, 0x2}, {0x2, 0x2}, {0x4, 0x3}, {0x1, 0x6}, {0x0, 0x6}, {0x0, 0x3}, {0x7, 0x5}, {0x2, 0x6}, {0x0, 0x3}, {0x7, 0x2}, {0x0, 0xa}, {0x1, 0x1}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x0, 0x3}, {}, {0x0, 0x8}, {0x7, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x2, 0x6}, {0x5, 0x7}, {0x4, 0x9}, {0x1, 0x2}, {0x0, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x800, 0x1, 0x8, 0x6, 0x0, 0x8]}}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x0, 0x3}, {0x6, 0xa}, {0x0, 0xa}, {0x7}, {0x5, 0x2}, {0x3, 0x5}, {0x3, 0x8}, {0x1, 0x3}, {0x0, 0x9}, {0x0, 0x7}, {0x4, 0x1}, {0x7, 0x8}, {0x6, 0x3}, {0x2, 0x7}, {0x6, 0x7}, {0x3, 0xa}, {0x1, 0x9}]}]}, @NL80211_BAND_60GHZ={0xd8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xeb0, 0x200, 0xfffd, 0x8001, 0x8, 0x4, 0x3, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0xc, 0x13, 0x6c, 0x12, 0x48, 0x1, 0x30, 0x36, 0xb, 0x30, 0x60, 0x60, 0x24, 0x18, 0x9, 0xc, 0x36, 0x9, 0x4, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x2, 0x2}, {0x7, 0xa}, {0x6, 0xa}, {0x2, 0xa}, {0x5, 0x2}, {0x5, 0x7}, {0x6, 0x2}, {0x4, 0x1}, {0x0, 0x8}, {0x7, 0x6}, {0x4, 0x5}, {0x4, 0x2}, {0x0, 0x1}, {0x7, 0x1}, {0x2, 0x4}, {0x0, 0x6}, {0x7, 0x2}, {0x7, 0x6}, {0x1}, {0x0, 0x5}, {0x2, 0x2}, {0x3, 0x4}, {0x2, 0x5}, {0x0, 0x4}, {0x5, 0x7}, {0x0, 0x4}, {0x6}, {0x1}, {0x1, 0x5}, {0x1, 0x2}, {0x2, 0x6}, {0x5, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x6, 0x2}, {0x3, 0x8}, {0x0, 0x3}, {0x0, 0x1}, {0x0, 0x7}, {0x4, 0x2}, {0x2, 0x8}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x3}, {0x7, 0x7}, {0x1}, {0x2, 0x1}, {0x5, 0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x3, 0x30, 0x9, 0xc, 0x6f, 0x2, 0x31, 0x3, 0x4, 0x24, 0x6, 0x12, 0x1, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0xe35f, 0x80, 0x6, 0xe3d3, 0x8, 0xfff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x81, 0x0, 0x7, 0x0, 0xfffc, 0x7, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x60, 0xc, 0x30, 0x18, 0x16, 0x3, 0x47, 0x36, 0x9, 0x1b, 0x36, 0xb, 0x6c, 0x3, 0x1, 0x16, 0xc, 0x1, 0x6c, 0x24, 0x1b]}]}]}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xb}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x90}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd7}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x29}]}]}, @NL80211_ATTR_TID_CONFIG={0xb88, 0x11d, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdb}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1fc, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x3]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x12, 0x3, 0x12, 0x24, 0x5, 0x16, 0xd, 0x1b, 0x0, 0xc, 0x9, 0xc, 0xb, 0x4, 0x6, 0x12, 0x30, 0x9, 0x12, 0x48, 0x24, 0x24, 0x2, 0x1, 0x1b]}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x7, 0xfff9, 0x3, 0x7, 0x0, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xffff, 0x5, 0x6, 0x6, 0x0, 0x8093, 0x1]}}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7590, 0x7, 0x8, 0x8, 0x1, 0x10, 0x5f87]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xe, 0x4, 0x101, 0xc609, 0x8, 0xd, 0xf1fa]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x4, 0xa}, {0x5, 0x8}, {0x6, 0x6}, {0x0, 0x7}, {0x0, 0x2}, {0x1, 0x7}, {0x7, 0xa}, {0x0, 0x1}, {0x0, 0x2}, {0x5, 0x6}, {0x6}, {0x5, 0x1}, {0x4, 0x9}, {0x0, 0x4}, {0x0, 0x1}, {0x5}, {0x7, 0xa}, {0x5, 0x4}, {0x1, 0x4}, {0x4, 0x4}, {0x7, 0x1}, {0x6, 0x1}, {0x0, 0x3}, {0x0, 0x2}, {0x2, 0x5}, {0x1, 0x4}, {0x2, 0xa}, {0x0, 0x5}, {0x3, 0x4}, {0x5}, {0x5, 0x8}, {0x1, 0x8}, {0x3, 0x7}, {0x6, 0xa}, {0x4, 0x2}, {0x6, 0x6}, {0x1, 0x3}, {0x5, 0x3}, {0x2, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x5, 0xa}, {0x7, 0x3}, {0x6, 0x4}, {0x1, 0x8}, {0x5, 0x2}, {0x3, 0x5}, {0x7, 0x2}, {0x6, 0x7}, {0x2, 0x3}, {0x2}, {0x1, 0x5}]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0x9, 0x6, 0xe, 0x6, 0x4, 0x43]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x24, 0x4, 0x1b, 0x6, 0x18, 0x2, 0x1b, 0x12, 0x30, 0x6, 0x9, 0x18, 0x16, 0x16, 0x3, 0xb, 0xc, 0x60, 0x6, 0x2, 0xc, 0x9, 0x12, 0x1, 0x5, 0x6]}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x8}, {0x0, 0x3}, {0x3}, {0x6, 0x1}, {0x4, 0x2}, {0x1, 0x5}, {0x6, 0x5}, {0x2, 0x6}, {0x7, 0x1}, {0x1, 0x2}, {0x6, 0x1}, {0x0, 0x8}, {0x5, 0x4}, {0x6, 0x5}, {0x0, 0x5}, {0x6, 0xa}, {0x1, 0x8}, {0x7, 0x4}, {0x0, 0x5}, {0x0, 0x5}, {0x4, 0x9}, {0x1, 0x1}, {0x1, 0x3}, {0x6, 0xa}, {0x6, 0x8}, {0x0, 0x4}, {0x5, 0xa}, {0x2}, {0x4, 0x9}, {0x3, 0x7}, {0x1, 0x8}, {0x2, 0x9}, {0x2, 0x5}, {0x0, 0x4}, {0x6, 0x8}, {0x2, 0xa}, {0x6, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xfffa, 0x1, 0x401, 0x7, 0xff80, 0x7, 0x1]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x30, 0x16, 0x18, 0x3e, 0x48, 0x6c, 0x4, 0x30, 0x4, 0x6, 0x24, 0x12, 0x4, 0x1, 0xb, 0x2, 0x60, 0x16, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xea1, 0x7, 0xb1, 0x6f, 0x1ff, 0x5, 0x5, 0x618c]}}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x6, 0x9}, {0x3, 0xa}, {0x0, 0xa}, {0x6, 0x9}, {0x7, 0x6}, {0x0, 0x7}, {0x6, 0x8}, {0x1, 0x5}, {0x7, 0x3}, {0x7}, {0x5, 0x7}, {0x2, 0x3}, {0x0, 0x6}, {0x4, 0x5}, {0x3, 0x6}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x60, 0x16, 0x9, 0x16, 0x60, 0x4, 0xc, 0x18, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, {0x124, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x22}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x118, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xe4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x3, 0x2, 0x1, 0x36, 0x30, 0x24, 0xd988943e2c358b0b, 0x6, 0x24, 0x36, 0xc, 0x60]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x1, 0x3}, {0x6}, {0x5, 0x8}, {0x1, 0x6}, {0x6, 0x6}, {0x5, 0x6}, {0x4, 0x3}, {0x6, 0x7}, {0x5, 0x6}, {0x7, 0x4}, {0x1, 0x8}, {0x0, 0x5}, {0x7, 0x7}, {0x4, 0x1}, {0x3, 0x8}, {0x1, 0x8}, {0x0, 0x4}, {0x1, 0xa}, {0x0, 0x9}, {0x4, 0x7}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x3, 0x2}, {0x1, 0x4}, {0x3, 0x3}, {0x5, 0x3}, {0x1, 0x2}, {0x5, 0x6}, {0x3, 0xa}, {0x0, 0x8}, {0x1, 0x8}, {0x7, 0x8}, {0x4, 0xa}, {0x7, 0x9}, {0x1, 0xa}, {0x2, 0xa}, {0x6, 0x2}, {0x4, 0x7}, {0x3, 0x7}, {0x5, 0x4}, {0x0, 0x3}, {0x5, 0x3}, {0x0, 0xa}, {0x0, 0x3}, {0x1, 0x4}, {}, {0x4, 0x8}, {0x0, 0x3}, {0x7}, {0x3, 0xa}, {0x6, 0x2}, {0x0, 0x7}, {0x1, 0x6}, {0x2, 0x8}, {0x2}, {0x3, 0x3}, {0x5}, {0x3, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x6, 0x3, 0x5, 0x8, 0x7fff, 0x5, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x4e, 0x2, [{}, {0x6, 0x7}, {0x2, 0x5}, {0x7, 0x3}, {0x1, 0x3}, {0x6, 0x8}, {0x6, 0x16}, {0x2, 0xa}, {0x6, 0xa}, {0x4, 0x9}, {0x1, 0x6}, {0x0, 0x7}, {0x4, 0x9}, {0x1, 0x4}, {0x5, 0x7}, {0x7, 0x2}, {0x4, 0x2}, {0x2}, {0x5}, {0x7, 0xa}, {0x1, 0x9}, {0x0, 0x4}, {0x3, 0x4}, {0x1, 0x4}, {0x4, 0x7}, {0x5, 0x7}, {0x7, 0x8}, {0x0, 0x7}, {0x4, 0x5}, {0x1, 0x2}, {0x1, 0x8}, {0x3, 0x6}, {0x7, 0x3}, {0x7, 0x9}, {0x1, 0x2}, {0x0, 0x7}, {0x3, 0x6}, {0x2, 0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x1, 0xa}, {0x2, 0x8}, {0x7, 0x2}, {0x1, 0x8}, {0x3, 0x3}, {0x5}, {0x4, 0x4}, {0x4, 0x9}, {0x0, 0x6}, {0x4, 0x4}, {0x5, 0x8}, {0x0, 0x8}, {0x1, 0x7}, {0x1, 0x2}, {0x7, 0x2}, {0x0, 0x3}, {0x0, 0x2}, {0x0, 0x7}, {0x3, 0x6}, {0x0, 0x4}, {0x2, 0x4}, {0x0, 0x7}, {0x7, 0x7}, {0x7, 0xa}, {0x1, 0x1}, {0x2, 0x8}, {0x7}, {0x4, 0x8}, {0x4, 0x6}, {0x0, 0x7}, {0x4, 0x9}, {0x5, 0xa}, {0x5, 0x5}, {0x0, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6000, 0x4, 0x7, 0x1f42, 0xd, 0x3]}}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x70a, 0x9, 0x4, 0x4, 0xfff, 0xd321, 0x2]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}]}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x99}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x284, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x25c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x48, 0x60, 0x36, 0xb, 0x1, 0x6, 0x60, 0x2, 0x6c, 0x3, 0x60, 0x30, 0x12, 0x48, 0x48]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x4, 0x24, 0x60, 0x18, 0x16, 0xc, 0x7, 0x6]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x0, 0x7}, {0x7, 0x9}, {0x1, 0x1}, {0x6, 0x8}, {0x6}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x2, 0x24, 0x1b, 0x4, 0x75, 0x12]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x5e, 0xc, 0x18]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xd, 0x1, 0xe, 0x200, 0xffff, 0xfff, 0xb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0x7, 0x3, 0x5, 0x5, 0xff33, 0x5a31]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x5, 0x6, 0x5, 0x0, 0x5, 0xfffc]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x27, 0x3, 0x5, 0x9, 0x36, 0x24, 0x24, 0x1b, 0x3, 0x12]}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xc, 0x2, 0x8, 0x1, 0x1, 0x6, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xe2, 0x94be, 0x3, 0x81, 0xb00, 0x8000, 0x1]}}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x400, 0x0, 0x7b3, 0x1, 0xcac2, 0x2, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0xb63, 0x6, 0x292, 0x1, 0x4, 0x5, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x5, 0x2, 0xc08, 0xfffd, 0x3, 0x1, 0x9]}}]}, @NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0xb, 0x6e, 0x4, 0x6c, 0x1b, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffd, 0x0, 0x3e9, 0x7, 0x9, 0x91, 0x7, 0x101]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x2, 0x0, 0x4, 0xdd, 0x7, 0x9, 0xe]}}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x3, 0x7}, {0x3, 0x2}, {0x7}, {0x7, 0x2}, {0x0, 0x6}, {0x1, 0xa}, {0x7, 0x5}, {0x2}, {0x3, 0x9}, {0x7, 0x9}, {0x6, 0x9}, {0x6, 0xa}, {0x5, 0xa}, {0x7, 0x2}, {0x5, 0x9}, {0x5, 0x8}, {0x0, 0x2}, {0x6}, {0x0, 0x3}, {0x0, 0x9}, {0x3, 0xa}, {0x2}, {0x6, 0x6}, {0x7, 0x9}, {0x0, 0x1}, {0x2, 0x4}, {0x6, 0x2}, {0x6, 0xa}, {0x1, 0x5}, {0x3, 0x3}, {0x5, 0x1}, {0x7, 0x4}, {0x7, 0xa}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x3}, {0x6, 0x1}, {0x1, 0x3}, {0x1}, {0x0, 0xa}, {0x7, 0x2}, {0x5, 0x6}, {0x4, 0x6}, {0x0, 0x2}, {0x4, 0x9}, {0x4, 0x8}, {0x1, 0x5}, {0x2, 0x1}, {0x6, 0x2}, {0x1, 0x6}, {0x4, 0x5}, {0x0, 0x7}, {0x0, 0xa}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x9}, {0x1}, {0x6, 0x7}, {0x1, 0x2}, {0x7, 0x8}, {}, {0x7, 0x4}, {0x0, 0x7}, {0x7, 0x8}, {0x6, 0x7}, {0x6, 0x9}, {0x0, 0x9}, {0x2}, {0x7, 0x3}, {0x3, 0x1}, {0x5, 0x7}, {0x3, 0x6}, {0x6, 0x5}, {0x0, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xf64a, 0x9, 0x0, 0x101, 0x1, 0x2, 0xb7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x8dd1, 0x5, 0x7, 0x8, 0x5, 0xf001, 0x4]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x9, 0x5, 0x0, 0x2, 0x6, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x7, 0x8, 0x5b1, 0x9b, 0x400, 0x2, 0x8f]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x59}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7f}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x12c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x104, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x100, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x1b, 0xc, 0x9, 0x36, 0x0, 0x48, 0x30, 0x5, 0x1, 0x24, 0xc, 0x0, 0x60, 0x30, 0x1b, 0xc, 0x36, 0x12, 0x30, 0xb, 0x60, 0xb, 0x1b, 0xb, 0x6, 0x30, 0x12, 0x1b, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x5, 0x9}, {0x4, 0x2}, {0x7, 0x1}, {0x0, 0x2}, {0x2, 0x9}, {0x4}, {0x5, 0x7}, {0x7, 0x8}, {0x5, 0x8}, {0x1, 0xa}, {0x1, 0x2}, {0x3, 0x4}, {0x0, 0x7}, {0x7, 0x8}, {0x3, 0xa}, {0x0, 0x1}, {0x2, 0x9}, {0x5, 0x2}, {0x7, 0x3}, {0x1, 0x7}, {0x4, 0x6}, {0x0, 0x7}, {0x6, 0x1}, {0x5, 0x9}, {0x4, 0x7}, {0x6, 0x9}, {0x5, 0xa}, {0x5, 0x3}, {0x6, 0x8}, {0x0, 0x3}, {0x5, 0x5}, {0x4, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x100, 0xb, 0x80, 0x0, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x5, 0x4}, {0x7, 0x9}, {0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x3, 0x1}, {0x7, 0x7}, {0x0, 0x8}, {0x3, 0x3}, {0x1, 0x8}, {0x1, 0x7}, {0x5, 0x1}, {0x5, 0x5}, {0x6, 0x6}, {0x1, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x7, 0x4}, {0x2, 0x2}, {0x6, 0xa}, {0x5, 0x8}, {0x7, 0x3}, {0x1, 0x1}, {0x5, 0x3}, {0x6, 0x6}, {0x6, 0x8}, {0x7, 0x1}, {0x0, 0x4}, {0x1, 0x9}, {0x0, 0x5}, {0x7}, {0x1, 0x4}, {0x1, 0x5}, {0x2, 0x6}, {0x4, 0x6}, {}, {0x2, 0x8}, {0x5, 0x9}, {0x4, 0x4}, {0x4, 0x5}, {0x2, 0x8}, {0x0, 0x5}, {0x5, 0x6}, {0x6, 0x9}, {0x4}, {0x1, 0x4}, {0x5}, {0x7, 0xa}, {0x5, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xffff, 0x6, 0x7, 0x4, 0x0, 0x9, 0x5]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x18, 0xb, 0x1b, 0x1b, 0x48, 0x1, 0x5, 0x8, 0x1, 0x24, 0x3, 0x5, 0x12, 0x24, 0x48, 0x6c, 0x3, 0xc, 0x18, 0x5, 0x73, 0x24, 0x4, 0x36, 0x1b, 0x12, 0x5, 0xc, 0x9, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3, 0x4, 0x2, 0x7, 0x1, 0x80, 0x200]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2d21}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x40c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xec, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x18, 0x2, [{0x4, 0x1}, {0x2, 0x1}, {0x6, 0x4}, {0x7}, {0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x2, 0x7}, {0x2, 0x4}, {0x4, 0x6}, {0x1}, {}, {0x3, 0xa}, {0x6}, {0x5, 0x4}, {0x0, 0x6}, {0x4, 0x1}, {0x3, 0x8}, {0x3, 0x1}, {0x1, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x0, 0xa}, {0x3, 0x4}, {0x6, 0x5}, {0x2, 0x6}, {0x1, 0x8}, {0x7, 0x5}, {0x4, 0x8}, {0x0, 0x6}, {0x7, 0x9}, {0x2, 0x1}, {0x6, 0xa}, {0x0, 0x3}, {0x1, 0x3}, {0x7, 0x4}, {0x4}, {0x0, 0x1}, {0x5, 0x7}, {0x7}, {0x6, 0x4}, {0x1, 0x9}, {0x6, 0x4}, {0x7, 0x4}, {0x6, 0x9}, {0x7, 0x7}, {0x3, 0xa}, {0x3}, {0x3, 0x9}, {0x2, 0x4}, {0x1, 0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x3, 0x5}, {0x7, 0x2}, {0x2, 0x9}, {0x0, 0x2}, {0x1, 0x5}, {0x7, 0x1}, {0x5, 0x2}, {0x0, 0x6}, {0x3, 0x5}, {0x0, 0x8}, {0x0, 0x7}, {0x4, 0x8}, {0x0, 0x1}, {0x7, 0x1}, {0x0, 0x4}, {0x0, 0xa}, {0x1, 0x8}, {0x5, 0x7}, {0x5, 0x8}, {0x7, 0x2}, {0x0, 0x5}, {0x4}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x1, 0x36, 0xb, 0x3, 0x9, 0x6c, 0x4, 0x6c, 0x24, 0x60, 0x5, 0x60, 0x4, 0x2, 0x1, 0x9, 0x5, 0x6, 0xb, 0xb, 0xb, 0x36, 0x5, 0x2, 0x5, 0x18, 0x6, 0x9, 0x16, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0xf, 0x1, 0x2e, 0x1, 0x8000, 0x5]}}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x3, 0x2}, {0x1, 0x1}, {0x7, 0x2}, {}, {0x0, 0x8}, {0x7, 0x3}, {0x3, 0x5}, {0x1, 0x6}, {0x1, 0x8}, {0x7, 0x3}, {0x0, 0x2}, {0x1, 0x5}, {0x5, 0x5}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0xa}, {0x1, 0x7}, {0x2, 0x8}, {0x3, 0x4}, {0x3, 0x5}, {0x5, 0x1}, {0x4, 0x8}, {0x3, 0x8}, {0x7, 0x5}, {0x3, 0x6}, {0x5, 0x9}, {0x0, 0x1}, {0x7, 0x2}, {0x5, 0x6}, {0x2, 0x14}, {0x6, 0x9}, {0x2, 0x6}, {0x5, 0x5}, {0x7, 0x9}, {0x6, 0x3}, {0x1, 0x4}, {0x6, 0x1}, {0x5, 0x6}, {0x4, 0x2}, {0x5}, {0x5, 0x1}, {0x2, 0x9}, {0x6, 0x8}, {0x1, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xe, 0xdb96, 0x3, 0x9, 0x70, 0x1000, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3ff}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6f}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xbc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6, 0x18, 0x24, 0x4, 0x36, 0x12, 0xb, 0x12, 0x1, 0xb, 0x16, 0x3, 0x6c, 0x16, 0x0, 0x60, 0x2, 0x0, 0x16, 0x3, 0xc, 0x3, 0x1, 0x48, 0x5, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0x6, 0x7ff, 0x2, 0x0, 0xc000, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3, 0x101, 0x0, 0x6, 0x80, 0x9, 0x7ff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x6, 0x2}, {0x1, 0x8}, {0x2, 0xa}, {0x5, 0x9}, {0x3, 0x8}, {0x2, 0x7}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x1, 0x8}, {0x4, 0x9}, {0x6, 0x9}, {0x2, 0x9}, {0x4, 0x8}, {0x3, 0x5}, {0x7, 0x8}, {0x7, 0x6}, {0x6, 0x7}, {0x1, 0xa}, {0x2, 0x1a}, {0x5, 0x7}, {0x2}, {0x5, 0x8}, {0x1, 0x6}, {0x7, 0x2}, {0x1, 0x3}, {0x7, 0x5}, {0x6, 0x9}, {0x2, 0x1}, {0x1, 0x9}, {0x2, 0x6}, {0x3, 0x5}, {0x6, 0x6}, {0x2, 0x9}, {0x0, 0x8}, {0x0, 0x5}, {0x3, 0x5}, {0x7, 0x2}, {0x0, 0x3}, {0x1, 0x4}, {0x2, 0x1}, {0x3, 0x6}, {0x2, 0x2}, {0x3, 0x2}, {0x4, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x5, 0x2, 0x92, 0x3, 0x0, 0x6, 0x3]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x18, 0x36, 0x1, 0x16, 0x5, 0x5, 0x6c, 0x18, 0xb, 0x12, 0x36, 0x9, 0x6, 0x6]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x228, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x37, 0x2, [{0x6, 0x4}, {0x7, 0xa}, {0x0, 0x6}, {0x6, 0x5}, {0x0, 0x1}, {0x0, 0x7}, {0x4, 0x4}, {0x5, 0x8}, {0x6, 0x4}, {0x0, 0xa}, {0x3, 0x2}, {0x3, 0x2}, {0x0, 0x4}, {0x1, 0x6}, {0x6, 0x9}, {0x2, 0x7}, {0x3, 0x7}, {0x1, 0x9}, {0x7, 0x6}, {0x5, 0x6}, {0x1, 0x5}, {0x0, 0xa}, {0x7, 0x8}, {0x0, 0x9}, {0x5, 0x5}, {0x3, 0xa}, {0x4, 0xa}, {0x7, 0x8}, {0x5, 0x4}, {0x4, 0x3}, {0x1, 0xa}, {0x3, 0x2}, {0x7, 0x1}, {0x1, 0xa}, {0x7, 0x2}, {0x1, 0x9}, {0x0, 0x2}, {0x4, 0x2}, {0x1, 0x3}, {0x2, 0x5}, {0x7, 0x7}, {0x2, 0x4}, {0x1, 0x18}, {0x7, 0x5}, {0x2}, {0x3, 0x5}, {0x1, 0x8}, {0x4, 0x8}, {0x1, 0x8}, {0x4, 0x6}, {0x7, 0x5}]}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6, 0x48, 0x1b, 0x16, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0x101, 0x8, 0x5, 0x101, 0x9, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xcd6, 0x15ad, 0x4, 0xfff8, 0x1, 0x25, 0x3, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0x2, 0x1b, 0x28, 0x1b, 0x1, 0x3, 0x12, 0x2, 0x60, 0x30, 0x24, 0x42, 0x1, 0x36, 0x6c, 0xb, 0x36, 0x36, 0x48, 0x3, 0x5, 0x5, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa038, 0x33, 0xf, 0x3, 0x0, 0x10, 0x8000, 0x1000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x3ff, 0x4, 0x6, 0x7, 0x0, 0x1]}}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfa45, 0x6, 0x9513, 0xa4b, 0x0, 0x8748, 0x401, 0xffff]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1b, 0xc11c7acb280a9cea, 0x12, 0x6, 0x1, 0x3, 0x1, 0x18, 0x60, 0x30, 0x48, 0x0, 0x5, 0x3, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xadc, 0xfff8, 0x4, 0x8, 0x5, 0x1, 0x7fff, 0x7]}}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x20, 0x2, [{0x6}, {0x5, 0x7}, {0x7}, {0x7, 0x1}, {0x1, 0x3}, {0x0, 0x5}, {0x7, 0x8}, {0x4}, {0x6, 0x1}, {0x7, 0x7}, {0x4, 0x6}, {0x7, 0x7}, {0x2, 0x9}, {0x0, 0x4}, {0x4, 0x7}, {0x0, 0x1}, {0x1}, {0x3, 0x2}, {0x6, 0xa}, {0x1, 0x6}, {0x7, 0x5}, {0x7, 0x4}, {0x2, 0x7}, {0x1, 0x5}, {0x1, 0x9}, {0x1, 0x1}, {0x4, 0x6}, {0x7, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x2, 0x4}, {0x3, 0x3}, {0x1, 0x4}, {0x1, 0x3}, {0x7, 0x1}, {0x0, 0x6}, {0x1, 0x6}, {0x0, 0x8}, {0x1, 0x3}, {0x0, 0x4}, {0x4, 0x4}, {0x6, 0x8}, {0x5, 0x7}, {0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x12, 0x6, 0x5, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0x8, 0x6, 0x81, 0x0, 0x108, 0x7a]}}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xa, 0x9, 0x9, 0xfff, 0x7ef, 0x5c4, 0x1]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x1b, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x9, 0x36, 0x5, 0xc, 0x24, 0xb, 0x36, 0x18, 0x48, 0x24, 0x30, 0x36, 0xb, 0x1, 0x9, 0x24, 0x5, 0x2, 0x16, 0x60]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x5, 0x9, 0xc, 0x3, 0x48, 0x4, 0x24, 0x24, 0xb, 0xb7c4f23d9fadb69c, 0x30, 0x24, 0x6, 0x3, 0x36, 0x2, 0x1, 0x1b, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x15, 0x6, 0x8, 0x4, 0x8, 0x3, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2c6, 0x2c0, 0x5, 0x2, 0x4, 0xf, 0x1f6a, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x7, 0xeac, 0xff2a, 0x7]}}]}]}]}]}]}, 0xf10}, 0x1, 0x0, 0x0, 0x804}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @local}], 0x20) listen(r8, 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r7, 0x7) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}]}], {0x14}}, 0xc8}}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, 0x3, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}]}, 0x2c}}, 0x40010) r9 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r9, &(0x7f0000000800)={&(0x7f0000000300)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000380)=""/136, 0x88}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000580)=""/20, 0x14}, {&(0x7f0000000640)=""/214, 0xd6}], 0x4, &(0x7f0000000780)=""/102, 0x66}, 0x2102) 2m46.708380519s ago: executing program 32 (id=2624): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000cc0)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWFLOWTABLE={0x2a0, 0x16, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x274, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'caif0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xce}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'nicvf0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x2c8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20006004) bind$bt_sco(r1, 0x0, 0x0) listen(r1, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB="70010000", @ANYRES16=r4, @ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000002a80)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10a0002}, 0xc, &(0x7f0000002a40)={&(0x7f0000001b00)={0xf10, r5, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xe0, 0x11d, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9e}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x93}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4b}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe7}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7f}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9c}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x6c, 0x11d, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x85}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xa}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7a}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x220, 0x11d, 0x0, 0x1, [{0x180, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x168, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xf7, 0x101, 0x8001, 0x5, 0xfb, 0x6, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x3, 0x8}, {0x0, 0x5}, {0x0, 0x6}, {0x1, 0x8}, {0x0, 0x4}, {0x1, 0x5}, {0x0, 0x2}, {0x2, 0x9}, {0x3, 0x8}, {0x6, 0x7}, {0x1}, {0x4, 0x3}, {}, {0x2, 0x7}, {0x1}, {0x2, 0x3}, {0x3, 0x8}, {0x1}, {0x4, 0x3}, {0x7, 0x5}, {0x5, 0x9}, {0x3, 0x5}, {0x0, 0x9}, {0x2, 0x4}, {0x0, 0x7}, {0x1, 0x5}, {0x5, 0x9}, {0x3, 0x5}, {0x7, 0x9}, {0x7, 0x4}, {0x4, 0x5}, {0x1, 0x2}, {0x2, 0x2}, {0x4, 0x3}, {0x1, 0x6}, {0x0, 0x6}, {0x0, 0x3}, {0x7, 0x5}, {0x2, 0x6}, {0x0, 0x3}, {0x7, 0x2}, {0x0, 0xa}, {0x1, 0x1}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x0, 0x3}, {}, {0x0, 0x8}, {0x7, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x2, 0x6}, {0x5, 0x7}, {0x4, 0x9}, {0x1, 0x2}, {0x0, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x800, 0x1, 0x8, 0x6, 0x0, 0x8]}}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x0, 0x3}, {0x6, 0xa}, {0x0, 0xa}, {0x7}, {0x5, 0x2}, {0x3, 0x5}, {0x3, 0x8}, {0x1, 0x3}, {0x0, 0x9}, {0x0, 0x7}, {0x4, 0x1}, {0x7, 0x8}, {0x6, 0x3}, {0x2, 0x7}, {0x6, 0x7}, {0x3, 0xa}, {0x1, 0x9}]}]}, @NL80211_BAND_60GHZ={0xd8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xeb0, 0x200, 0xfffd, 0x8001, 0x8, 0x4, 0x3, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0xc, 0x13, 0x6c, 0x12, 0x48, 0x1, 0x30, 0x36, 0xb, 0x30, 0x60, 0x60, 0x24, 0x18, 0x9, 0xc, 0x36, 0x9, 0x4, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x2, 0x2}, {0x7, 0xa}, {0x6, 0xa}, {0x2, 0xa}, {0x5, 0x2}, {0x5, 0x7}, {0x6, 0x2}, {0x4, 0x1}, {0x0, 0x8}, {0x7, 0x6}, {0x4, 0x5}, {0x4, 0x2}, {0x0, 0x1}, {0x7, 0x1}, {0x2, 0x4}, {0x0, 0x6}, {0x7, 0x2}, {0x7, 0x6}, {0x1}, {0x0, 0x5}, {0x2, 0x2}, {0x3, 0x4}, {0x2, 0x5}, {0x0, 0x4}, {0x5, 0x7}, {0x0, 0x4}, {0x6}, {0x1}, {0x1, 0x5}, {0x1, 0x2}, {0x2, 0x6}, {0x5, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x6, 0x2}, {0x3, 0x8}, {0x0, 0x3}, {0x0, 0x1}, {0x0, 0x7}, {0x4, 0x2}, {0x2, 0x8}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x3}, {0x7, 0x7}, {0x1}, {0x2, 0x1}, {0x5, 0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x3, 0x30, 0x9, 0xc, 0x6f, 0x2, 0x31, 0x3, 0x4, 0x24, 0x6, 0x12, 0x1, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0xe35f, 0x80, 0x6, 0xe3d3, 0x8, 0xfff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x81, 0x0, 0x7, 0x0, 0xfffc, 0x7, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x60, 0xc, 0x30, 0x18, 0x16, 0x3, 0x47, 0x36, 0x9, 0x1b, 0x36, 0xb, 0x6c, 0x3, 0x1, 0x16, 0xc, 0x1, 0x6c, 0x24, 0x1b]}]}]}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xb}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x90}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd7}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x29}]}]}, @NL80211_ATTR_TID_CONFIG={0xb88, 0x11d, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdb}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1fc, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x3]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x12, 0x3, 0x12, 0x24, 0x5, 0x16, 0xd, 0x1b, 0x0, 0xc, 0x9, 0xc, 0xb, 0x4, 0x6, 0x12, 0x30, 0x9, 0x12, 0x48, 0x24, 0x24, 0x2, 0x1, 0x1b]}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x7, 0xfff9, 0x3, 0x7, 0x0, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xffff, 0x5, 0x6, 0x6, 0x0, 0x8093, 0x1]}}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7590, 0x7, 0x8, 0x8, 0x1, 0x10, 0x5f87]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xe, 0x4, 0x101, 0xc609, 0x8, 0xd, 0xf1fa]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x4, 0xa}, {0x5, 0x8}, {0x6, 0x6}, {0x0, 0x7}, {0x0, 0x2}, {0x1, 0x7}, {0x7, 0xa}, {0x0, 0x1}, {0x0, 0x2}, {0x5, 0x6}, {0x6}, {0x5, 0x1}, {0x4, 0x9}, {0x0, 0x4}, {0x0, 0x1}, {0x5}, {0x7, 0xa}, {0x5, 0x4}, {0x1, 0x4}, {0x4, 0x4}, {0x7, 0x1}, {0x6, 0x1}, {0x0, 0x3}, {0x0, 0x2}, {0x2, 0x5}, {0x1, 0x4}, {0x2, 0xa}, {0x0, 0x5}, {0x3, 0x4}, {0x5}, {0x5, 0x8}, {0x1, 0x8}, {0x3, 0x7}, {0x6, 0xa}, {0x4, 0x2}, {0x6, 0x6}, {0x1, 0x3}, {0x5, 0x3}, {0x2, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x5, 0xa}, {0x7, 0x3}, {0x6, 0x4}, {0x1, 0x8}, {0x5, 0x2}, {0x3, 0x5}, {0x7, 0x2}, {0x6, 0x7}, {0x2, 0x3}, {0x2}, {0x1, 0x5}]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0x9, 0x6, 0xe, 0x6, 0x4, 0x43]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x24, 0x4, 0x1b, 0x6, 0x18, 0x2, 0x1b, 0x12, 0x30, 0x6, 0x9, 0x18, 0x16, 0x16, 0x3, 0xb, 0xc, 0x60, 0x6, 0x2, 0xc, 0x9, 0x12, 0x1, 0x5, 0x6]}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x8}, {0x0, 0x3}, {0x3}, {0x6, 0x1}, {0x4, 0x2}, {0x1, 0x5}, {0x6, 0x5}, {0x2, 0x6}, {0x7, 0x1}, {0x1, 0x2}, {0x6, 0x1}, {0x0, 0x8}, {0x5, 0x4}, {0x6, 0x5}, {0x0, 0x5}, {0x6, 0xa}, {0x1, 0x8}, {0x7, 0x4}, {0x0, 0x5}, {0x0, 0x5}, {0x4, 0x9}, {0x1, 0x1}, {0x1, 0x3}, {0x6, 0xa}, {0x6, 0x8}, {0x0, 0x4}, {0x5, 0xa}, {0x2}, {0x4, 0x9}, {0x3, 0x7}, {0x1, 0x8}, {0x2, 0x9}, {0x2, 0x5}, {0x0, 0x4}, {0x6, 0x8}, {0x2, 0xa}, {0x6, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xfffa, 0x1, 0x401, 0x7, 0xff80, 0x7, 0x1]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x30, 0x16, 0x18, 0x3e, 0x48, 0x6c, 0x4, 0x30, 0x4, 0x6, 0x24, 0x12, 0x4, 0x1, 0xb, 0x2, 0x60, 0x16, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xea1, 0x7, 0xb1, 0x6f, 0x1ff, 0x5, 0x5, 0x618c]}}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x6, 0x9}, {0x3, 0xa}, {0x0, 0xa}, {0x6, 0x9}, {0x7, 0x6}, {0x0, 0x7}, {0x6, 0x8}, {0x1, 0x5}, {0x7, 0x3}, {0x7}, {0x5, 0x7}, {0x2, 0x3}, {0x0, 0x6}, {0x4, 0x5}, {0x3, 0x6}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x60, 0x16, 0x9, 0x16, 0x60, 0x4, 0xc, 0x18, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, {0x124, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x22}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x118, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xe4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x3, 0x2, 0x1, 0x36, 0x30, 0x24, 0xd988943e2c358b0b, 0x6, 0x24, 0x36, 0xc, 0x60]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x1, 0x3}, {0x6}, {0x5, 0x8}, {0x1, 0x6}, {0x6, 0x6}, {0x5, 0x6}, {0x4, 0x3}, {0x6, 0x7}, {0x5, 0x6}, {0x7, 0x4}, {0x1, 0x8}, {0x0, 0x5}, {0x7, 0x7}, {0x4, 0x1}, {0x3, 0x8}, {0x1, 0x8}, {0x0, 0x4}, {0x1, 0xa}, {0x0, 0x9}, {0x4, 0x7}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x3, 0x2}, {0x1, 0x4}, {0x3, 0x3}, {0x5, 0x3}, {0x1, 0x2}, {0x5, 0x6}, {0x3, 0xa}, {0x0, 0x8}, {0x1, 0x8}, {0x7, 0x8}, {0x4, 0xa}, {0x7, 0x9}, {0x1, 0xa}, {0x2, 0xa}, {0x6, 0x2}, {0x4, 0x7}, {0x3, 0x7}, {0x5, 0x4}, {0x0, 0x3}, {0x5, 0x3}, {0x0, 0xa}, {0x0, 0x3}, {0x1, 0x4}, {}, {0x4, 0x8}, {0x0, 0x3}, {0x7}, {0x3, 0xa}, {0x6, 0x2}, {0x0, 0x7}, {0x1, 0x6}, {0x2, 0x8}, {0x2}, {0x3, 0x3}, {0x5}, {0x3, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x6, 0x3, 0x5, 0x8, 0x7fff, 0x5, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x4e, 0x2, [{}, {0x6, 0x7}, {0x2, 0x5}, {0x7, 0x3}, {0x1, 0x3}, {0x6, 0x8}, {0x6, 0x16}, {0x2, 0xa}, {0x6, 0xa}, {0x4, 0x9}, {0x1, 0x6}, {0x0, 0x7}, {0x4, 0x9}, {0x1, 0x4}, {0x5, 0x7}, {0x7, 0x2}, {0x4, 0x2}, {0x2}, {0x5}, {0x7, 0xa}, {0x1, 0x9}, {0x0, 0x4}, {0x3, 0x4}, {0x1, 0x4}, {0x4, 0x7}, {0x5, 0x7}, {0x7, 0x8}, {0x0, 0x7}, {0x4, 0x5}, {0x1, 0x2}, {0x1, 0x8}, {0x3, 0x6}, {0x7, 0x3}, {0x7, 0x9}, {0x1, 0x2}, {0x0, 0x7}, {0x3, 0x6}, {0x2, 0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x1, 0xa}, {0x2, 0x8}, {0x7, 0x2}, {0x1, 0x8}, {0x3, 0x3}, {0x5}, {0x4, 0x4}, {0x4, 0x9}, {0x0, 0x6}, {0x4, 0x4}, {0x5, 0x8}, {0x0, 0x8}, {0x1, 0x7}, {0x1, 0x2}, {0x7, 0x2}, {0x0, 0x3}, {0x0, 0x2}, {0x0, 0x7}, {0x3, 0x6}, {0x0, 0x4}, {0x2, 0x4}, {0x0, 0x7}, {0x7, 0x7}, {0x7, 0xa}, {0x1, 0x1}, {0x2, 0x8}, {0x7}, {0x4, 0x8}, {0x4, 0x6}, {0x0, 0x7}, {0x4, 0x9}, {0x5, 0xa}, {0x5, 0x5}, {0x0, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6000, 0x4, 0x7, 0x1f42, 0xd, 0x3]}}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x70a, 0x9, 0x4, 0x4, 0xfff, 0xd321, 0x2]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}]}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x99}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x284, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x25c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x48, 0x60, 0x36, 0xb, 0x1, 0x6, 0x60, 0x2, 0x6c, 0x3, 0x60, 0x30, 0x12, 0x48, 0x48]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x4, 0x24, 0x60, 0x18, 0x16, 0xc, 0x7, 0x6]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x0, 0x7}, {0x7, 0x9}, {0x1, 0x1}, {0x6, 0x8}, {0x6}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x2, 0x24, 0x1b, 0x4, 0x75, 0x12]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x5e, 0xc, 0x18]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xd, 0x1, 0xe, 0x200, 0xffff, 0xfff, 0xb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0x7, 0x3, 0x5, 0x5, 0xff33, 0x5a31]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x5, 0x6, 0x5, 0x0, 0x5, 0xfffc]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x27, 0x3, 0x5, 0x9, 0x36, 0x24, 0x24, 0x1b, 0x3, 0x12]}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xc, 0x2, 0x8, 0x1, 0x1, 0x6, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xe2, 0x94be, 0x3, 0x81, 0xb00, 0x8000, 0x1]}}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x400, 0x0, 0x7b3, 0x1, 0xcac2, 0x2, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0xb63, 0x6, 0x292, 0x1, 0x4, 0x5, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x5, 0x2, 0xc08, 0xfffd, 0x3, 0x1, 0x9]}}]}, @NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0xb, 0x6e, 0x4, 0x6c, 0x1b, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffd, 0x0, 0x3e9, 0x7, 0x9, 0x91, 0x7, 0x101]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x2, 0x0, 0x4, 0xdd, 0x7, 0x9, 0xe]}}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x3, 0x7}, {0x3, 0x2}, {0x7}, {0x7, 0x2}, {0x0, 0x6}, {0x1, 0xa}, {0x7, 0x5}, {0x2}, {0x3, 0x9}, {0x7, 0x9}, {0x6, 0x9}, {0x6, 0xa}, {0x5, 0xa}, {0x7, 0x2}, {0x5, 0x9}, {0x5, 0x8}, {0x0, 0x2}, {0x6}, {0x0, 0x3}, {0x0, 0x9}, {0x3, 0xa}, {0x2}, {0x6, 0x6}, {0x7, 0x9}, {0x0, 0x1}, {0x2, 0x4}, {0x6, 0x2}, {0x6, 0xa}, {0x1, 0x5}, {0x3, 0x3}, {0x5, 0x1}, {0x7, 0x4}, {0x7, 0xa}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x3}, {0x6, 0x1}, {0x1, 0x3}, {0x1}, {0x0, 0xa}, {0x7, 0x2}, {0x5, 0x6}, {0x4, 0x6}, {0x0, 0x2}, {0x4, 0x9}, {0x4, 0x8}, {0x1, 0x5}, {0x2, 0x1}, {0x6, 0x2}, {0x1, 0x6}, {0x4, 0x5}, {0x0, 0x7}, {0x0, 0xa}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x9}, {0x1}, {0x6, 0x7}, {0x1, 0x2}, {0x7, 0x8}, {}, {0x7, 0x4}, {0x0, 0x7}, {0x7, 0x8}, {0x6, 0x7}, {0x6, 0x9}, {0x0, 0x9}, {0x2}, {0x7, 0x3}, {0x3, 0x1}, {0x5, 0x7}, {0x3, 0x6}, {0x6, 0x5}, {0x0, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xf64a, 0x9, 0x0, 0x101, 0x1, 0x2, 0xb7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x8dd1, 0x5, 0x7, 0x8, 0x5, 0xf001, 0x4]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x9, 0x5, 0x0, 0x2, 0x6, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x7, 0x8, 0x5b1, 0x9b, 0x400, 0x2, 0x8f]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x59}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7f}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x12c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x104, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x100, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x1b, 0xc, 0x9, 0x36, 0x0, 0x48, 0x30, 0x5, 0x1, 0x24, 0xc, 0x0, 0x60, 0x30, 0x1b, 0xc, 0x36, 0x12, 0x30, 0xb, 0x60, 0xb, 0x1b, 0xb, 0x6, 0x30, 0x12, 0x1b, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x5, 0x9}, {0x4, 0x2}, {0x7, 0x1}, {0x0, 0x2}, {0x2, 0x9}, {0x4}, {0x5, 0x7}, {0x7, 0x8}, {0x5, 0x8}, {0x1, 0xa}, {0x1, 0x2}, {0x3, 0x4}, {0x0, 0x7}, {0x7, 0x8}, {0x3, 0xa}, {0x0, 0x1}, {0x2, 0x9}, {0x5, 0x2}, {0x7, 0x3}, {0x1, 0x7}, {0x4, 0x6}, {0x0, 0x7}, {0x6, 0x1}, {0x5, 0x9}, {0x4, 0x7}, {0x6, 0x9}, {0x5, 0xa}, {0x5, 0x3}, {0x6, 0x8}, {0x0, 0x3}, {0x5, 0x5}, {0x4, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x100, 0xb, 0x80, 0x0, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x5, 0x4}, {0x7, 0x9}, {0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x3, 0x1}, {0x7, 0x7}, {0x0, 0x8}, {0x3, 0x3}, {0x1, 0x8}, {0x1, 0x7}, {0x5, 0x1}, {0x5, 0x5}, {0x6, 0x6}, {0x1, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x7, 0x4}, {0x2, 0x2}, {0x6, 0xa}, {0x5, 0x8}, {0x7, 0x3}, {0x1, 0x1}, {0x5, 0x3}, {0x6, 0x6}, {0x6, 0x8}, {0x7, 0x1}, {0x0, 0x4}, {0x1, 0x9}, {0x0, 0x5}, {0x7}, {0x1, 0x4}, {0x1, 0x5}, {0x2, 0x6}, {0x4, 0x6}, {}, {0x2, 0x8}, {0x5, 0x9}, {0x4, 0x4}, {0x4, 0x5}, {0x2, 0x8}, {0x0, 0x5}, {0x5, 0x6}, {0x6, 0x9}, {0x4}, {0x1, 0x4}, {0x5}, {0x7, 0xa}, {0x5, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xffff, 0x6, 0x7, 0x4, 0x0, 0x9, 0x5]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x18, 0xb, 0x1b, 0x1b, 0x48, 0x1, 0x5, 0x8, 0x1, 0x24, 0x3, 0x5, 0x12, 0x24, 0x48, 0x6c, 0x3, 0xc, 0x18, 0x5, 0x73, 0x24, 0x4, 0x36, 0x1b, 0x12, 0x5, 0xc, 0x9, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3, 0x4, 0x2, 0x7, 0x1, 0x80, 0x200]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2d21}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x40c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xec, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x18, 0x2, [{0x4, 0x1}, {0x2, 0x1}, {0x6, 0x4}, {0x7}, {0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x2, 0x7}, {0x2, 0x4}, {0x4, 0x6}, {0x1}, {}, {0x3, 0xa}, {0x6}, {0x5, 0x4}, {0x0, 0x6}, {0x4, 0x1}, {0x3, 0x8}, {0x3, 0x1}, {0x1, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x0, 0xa}, {0x3, 0x4}, {0x6, 0x5}, {0x2, 0x6}, {0x1, 0x8}, {0x7, 0x5}, {0x4, 0x8}, {0x0, 0x6}, {0x7, 0x9}, {0x2, 0x1}, {0x6, 0xa}, {0x0, 0x3}, {0x1, 0x3}, {0x7, 0x4}, {0x4}, {0x0, 0x1}, {0x5, 0x7}, {0x7}, {0x6, 0x4}, {0x1, 0x9}, {0x6, 0x4}, {0x7, 0x4}, {0x6, 0x9}, {0x7, 0x7}, {0x3, 0xa}, {0x3}, {0x3, 0x9}, {0x2, 0x4}, {0x1, 0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x3, 0x5}, {0x7, 0x2}, {0x2, 0x9}, {0x0, 0x2}, {0x1, 0x5}, {0x7, 0x1}, {0x5, 0x2}, {0x0, 0x6}, {0x3, 0x5}, {0x0, 0x8}, {0x0, 0x7}, {0x4, 0x8}, {0x0, 0x1}, {0x7, 0x1}, {0x0, 0x4}, {0x0, 0xa}, {0x1, 0x8}, {0x5, 0x7}, {0x5, 0x8}, {0x7, 0x2}, {0x0, 0x5}, {0x4}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x1, 0x36, 0xb, 0x3, 0x9, 0x6c, 0x4, 0x6c, 0x24, 0x60, 0x5, 0x60, 0x4, 0x2, 0x1, 0x9, 0x5, 0x6, 0xb, 0xb, 0xb, 0x36, 0x5, 0x2, 0x5, 0x18, 0x6, 0x9, 0x16, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0xf, 0x1, 0x2e, 0x1, 0x8000, 0x5]}}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x3, 0x2}, {0x1, 0x1}, {0x7, 0x2}, {}, {0x0, 0x8}, {0x7, 0x3}, {0x3, 0x5}, {0x1, 0x6}, {0x1, 0x8}, {0x7, 0x3}, {0x0, 0x2}, {0x1, 0x5}, {0x5, 0x5}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0xa}, {0x1, 0x7}, {0x2, 0x8}, {0x3, 0x4}, {0x3, 0x5}, {0x5, 0x1}, {0x4, 0x8}, {0x3, 0x8}, {0x7, 0x5}, {0x3, 0x6}, {0x5, 0x9}, {0x0, 0x1}, {0x7, 0x2}, {0x5, 0x6}, {0x2, 0x14}, {0x6, 0x9}, {0x2, 0x6}, {0x5, 0x5}, {0x7, 0x9}, {0x6, 0x3}, {0x1, 0x4}, {0x6, 0x1}, {0x5, 0x6}, {0x4, 0x2}, {0x5}, {0x5, 0x1}, {0x2, 0x9}, {0x6, 0x8}, {0x1, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xe, 0xdb96, 0x3, 0x9, 0x70, 0x1000, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3ff}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6f}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xbc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6, 0x18, 0x24, 0x4, 0x36, 0x12, 0xb, 0x12, 0x1, 0xb, 0x16, 0x3, 0x6c, 0x16, 0x0, 0x60, 0x2, 0x0, 0x16, 0x3, 0xc, 0x3, 0x1, 0x48, 0x5, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0x6, 0x7ff, 0x2, 0x0, 0xc000, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3, 0x101, 0x0, 0x6, 0x80, 0x9, 0x7ff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x6, 0x2}, {0x1, 0x8}, {0x2, 0xa}, {0x5, 0x9}, {0x3, 0x8}, {0x2, 0x7}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x1, 0x8}, {0x4, 0x9}, {0x6, 0x9}, {0x2, 0x9}, {0x4, 0x8}, {0x3, 0x5}, {0x7, 0x8}, {0x7, 0x6}, {0x6, 0x7}, {0x1, 0xa}, {0x2, 0x1a}, {0x5, 0x7}, {0x2}, {0x5, 0x8}, {0x1, 0x6}, {0x7, 0x2}, {0x1, 0x3}, {0x7, 0x5}, {0x6, 0x9}, {0x2, 0x1}, {0x1, 0x9}, {0x2, 0x6}, {0x3, 0x5}, {0x6, 0x6}, {0x2, 0x9}, {0x0, 0x8}, {0x0, 0x5}, {0x3, 0x5}, {0x7, 0x2}, {0x0, 0x3}, {0x1, 0x4}, {0x2, 0x1}, {0x3, 0x6}, {0x2, 0x2}, {0x3, 0x2}, {0x4, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x5, 0x2, 0x92, 0x3, 0x0, 0x6, 0x3]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x18, 0x36, 0x1, 0x16, 0x5, 0x5, 0x6c, 0x18, 0xb, 0x12, 0x36, 0x9, 0x6, 0x6]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x228, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x37, 0x2, [{0x6, 0x4}, {0x7, 0xa}, {0x0, 0x6}, {0x6, 0x5}, {0x0, 0x1}, {0x0, 0x7}, {0x4, 0x4}, {0x5, 0x8}, {0x6, 0x4}, {0x0, 0xa}, {0x3, 0x2}, {0x3, 0x2}, {0x0, 0x4}, {0x1, 0x6}, {0x6, 0x9}, {0x2, 0x7}, {0x3, 0x7}, {0x1, 0x9}, {0x7, 0x6}, {0x5, 0x6}, {0x1, 0x5}, {0x0, 0xa}, {0x7, 0x8}, {0x0, 0x9}, {0x5, 0x5}, {0x3, 0xa}, {0x4, 0xa}, {0x7, 0x8}, {0x5, 0x4}, {0x4, 0x3}, {0x1, 0xa}, {0x3, 0x2}, {0x7, 0x1}, {0x1, 0xa}, {0x7, 0x2}, {0x1, 0x9}, {0x0, 0x2}, {0x4, 0x2}, {0x1, 0x3}, {0x2, 0x5}, {0x7, 0x7}, {0x2, 0x4}, {0x1, 0x18}, {0x7, 0x5}, {0x2}, {0x3, 0x5}, {0x1, 0x8}, {0x4, 0x8}, {0x1, 0x8}, {0x4, 0x6}, {0x7, 0x5}]}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6, 0x48, 0x1b, 0x16, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0x101, 0x8, 0x5, 0x101, 0x9, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xcd6, 0x15ad, 0x4, 0xfff8, 0x1, 0x25, 0x3, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0x2, 0x1b, 0x28, 0x1b, 0x1, 0x3, 0x12, 0x2, 0x60, 0x30, 0x24, 0x42, 0x1, 0x36, 0x6c, 0xb, 0x36, 0x36, 0x48, 0x3, 0x5, 0x5, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa038, 0x33, 0xf, 0x3, 0x0, 0x10, 0x8000, 0x1000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x3ff, 0x4, 0x6, 0x7, 0x0, 0x1]}}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfa45, 0x6, 0x9513, 0xa4b, 0x0, 0x8748, 0x401, 0xffff]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1b, 0xc11c7acb280a9cea, 0x12, 0x6, 0x1, 0x3, 0x1, 0x18, 0x60, 0x30, 0x48, 0x0, 0x5, 0x3, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xadc, 0xfff8, 0x4, 0x8, 0x5, 0x1, 0x7fff, 0x7]}}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x20, 0x2, [{0x6}, {0x5, 0x7}, {0x7}, {0x7, 0x1}, {0x1, 0x3}, {0x0, 0x5}, {0x7, 0x8}, {0x4}, {0x6, 0x1}, {0x7, 0x7}, {0x4, 0x6}, {0x7, 0x7}, {0x2, 0x9}, {0x0, 0x4}, {0x4, 0x7}, {0x0, 0x1}, {0x1}, {0x3, 0x2}, {0x6, 0xa}, {0x1, 0x6}, {0x7, 0x5}, {0x7, 0x4}, {0x2, 0x7}, {0x1, 0x5}, {0x1, 0x9}, {0x1, 0x1}, {0x4, 0x6}, {0x7, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x2, 0x4}, {0x3, 0x3}, {0x1, 0x4}, {0x1, 0x3}, {0x7, 0x1}, {0x0, 0x6}, {0x1, 0x6}, {0x0, 0x8}, {0x1, 0x3}, {0x0, 0x4}, {0x4, 0x4}, {0x6, 0x8}, {0x5, 0x7}, {0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x12, 0x6, 0x5, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0x8, 0x6, 0x81, 0x0, 0x108, 0x7a]}}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xa, 0x9, 0x9, 0xfff, 0x7ef, 0x5c4, 0x1]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x1b, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x9, 0x36, 0x5, 0xc, 0x24, 0xb, 0x36, 0x18, 0x48, 0x24, 0x30, 0x36, 0xb, 0x1, 0x9, 0x24, 0x5, 0x2, 0x16, 0x60]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x5, 0x9, 0xc, 0x3, 0x48, 0x4, 0x24, 0x24, 0xb, 0xb7c4f23d9fadb69c, 0x30, 0x24, 0x6, 0x3, 0x36, 0x2, 0x1, 0x1b, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x15, 0x6, 0x8, 0x4, 0x8, 0x3, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2c6, 0x2c0, 0x5, 0x2, 0x4, 0xf, 0x1f6a, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x7, 0xeac, 0xff2a, 0x7]}}]}]}]}]}]}, 0xf10}, 0x1, 0x0, 0x0, 0x804}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @local}], 0x20) listen(r8, 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r7, 0x7) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}]}], {0x14}}, 0xc8}}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, 0x3, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}]}, 0x2c}}, 0x40010) r9 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r9, &(0x7f0000000800)={&(0x7f0000000300)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000380)=""/136, 0x88}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000580)=""/20, 0x14}, {&(0x7f0000000640)=""/214, 0xd6}], 0x4, &(0x7f0000000780)=""/102, 0x66}, 0x2102) 2m26.28110384s ago: executing program 4 (id=2807): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0xa, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x8010) (async) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0xa, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x8010) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) (async) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, 0x0, 0x60, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'wlan0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x7, 0x7}}) socket$inet6_sctp(0xa, 0x5, 0x84) 2m26.117817261s ago: executing program 4 (id=2808): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x2003fffe, 0x0, 0x2, 0xb, 0xfffffffd, 0x100000, 0x7}}) socket$alg(0x26, 0x5, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r3) socket$packet(0x11, 0x3, 0x300) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc"], 0x23c}}, 0x4004000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1c}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r6, 0x0) getsockopt$inet_buf(r5, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000004ec0)={0x0, 0x0, &(0x7f0000004e80)={&(0x7f0000004e40)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r12, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="100031bd7000ffe0df251fddffff880001007770616e3000000008e70fe4b2273a63cafceca8283bda00020084dc90c9004dc0b40eb1336efe7a92303eb148e339b43ce218a7eb2ed34736cf7e5dc2f9316efc563f6048ccde6617dbc4c029d0394bdd565ff7e70db0aae06e79ad549d7e93131a4e4761ed70000000000000", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=r9, @ANYBLOB="08000200", @ANYRES32=r12, @ANYBLOB="0a0001007770616e3400000008000200", @ANYRES32=0x0, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x48894}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000400)={'gre0\x00', 0x0, 0x80, 0x8, 0x0, 0xd60, {{0x2a, 0x4, 0x0, 0x8, 0xa8, 0x66, 0x0, 0x7, 0x4, 0x0, @remote, @broadcast, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x3e, 0x3, [{0x7, 0x3, "89"}, {0x5, 0x6, 'E<[V'}, {0x5, 0xd, "0f1f48abf3ca881e1f59d2"}, {0x0, 0x5, 'dQz'}, {0x0, 0x11, "d070b5cc5c4397c67edcf966893a12"}, {0x6, 0x2}, {0x2, 0xa, "79973ba93cde6bd0"}]}, @rr={0x7, 0x17, 0x80, [@broadcast, @multicast2, @multicast2, @rand_addr=0x64010100, @loopback]}, @generic={0x88, 0x9, "5ceb335a0fc0a7"}, @cipso={0x86, 0x32, 0x3, [{0x6, 0x5, "86bacf"}, {0x2, 0x9, "56dcad092235a0"}, {0x1, 0x12, "f4597d935f4dde338ced1af355f4bf27"}, {0x5, 0x8, "9104d94b0d44"}, {0x6, 0x4, "936b"}]}]}}}}}) r14 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r1, &(0x7f0000000540)={0x2c, 0x3, r13, 0x1e, r14}, 0x10) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000074000000090a010400000000000000000100000008130a40000000000900020073797a3100000000080005400000001b08000540000000253c0011800a0001006c696d69740000002c0002800c0002400006000000000003080003400000000108000440000000010c000140ffffffffffffffff140000001000010000000000000000000000000a"], 0xbc}, 0x1, 0x0, 0x0, 0x810}, 0xc4) 2m25.400950275s ago: executing program 4 (id=2812): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0367c2000000bba8bbbbbbbb0806"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000007400018014000180080001000000000008000200e00000020c00028005000100000000004300028005000100060000000c0003ef05000100000000000c0002"], 0xc0}}, 0x0) (async) syz_emit_ethernet(0x26, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a8350081001300000c040000e005010000c736997e7734ddfc"], &(0x7f00000002c0)={0x1, 0x2, [0x4d4, 0x327, 0xc91, 0x66e]}) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) (async) r7 = accept4(r6, 0x0, 0x0, 0x800) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000200), 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) recvmsg(r7, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x10002) (async) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0x1}, 0x18) (async) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg$sock(r4, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000004fc0)="14733f9daa4e98c0c2", 0x9}], 0x1}}], 0x1, 0x0) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000100)=[{0x0, 0x3, {0x2, 0xf1, 0x1}, {0x2, 0x0, 0x1}, 0xff, 0xfd}, {0x0, 0x2, {0x2, 0xff, 0xe}, {0x2, 0x1, 0x4}, 0x0, 0xfd}, {0xfffffffffffffffd, 0x3, {0x1, 0x1, 0x3}, {0x1, 0x0, 0x2}, 0x1, 0xfd}], 0x60) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r10, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004012}, 0x20000050) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=@getqdisc={0x2c, 0x26, 0x8, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xffff}, {0xb}, {0xffe1, 0xa}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x95) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r11, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r12, 0xa, 0x70bd25, 0x25dfdbfb}, 0x14}}, 0x24001800) 2m25.13934636s ago: executing program 4 (id=2814): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x74, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x30, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xbc}}, 0x20050800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x1505, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000010) 2m24.723325s ago: executing program 4 (id=2821): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0xec, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xbc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xb0, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7b}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x81}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7f}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6a}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xbb}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xa0}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xffff}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) 2m24.461030998s ago: executing program 4 (id=2825): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x8000, 0xfff, @local, 0x9}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) recvmsg$kcm(r3, &(0x7f0000000740)={&(0x7f0000000180)=@generic, 0x80, &(0x7f0000000640)=[{&(0x7f0000000380)=""/212, 0xd4}, {&(0x7f0000000480)=""/166, 0xa6}, {&(0x7f0000000540)=""/198, 0xc6}], 0x3, &(0x7f0000000680)=""/130, 0x82}, 0x20) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0x53b, 0x0, 0x0, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x820}, 0x800) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}}, 0x1c) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4000, r6}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) getsockopt$sock_int(r5, 0x1, 0x26, 0x0, &(0x7f0000000080)) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) 2m9.351322249s ago: executing program 33 (id=2825): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x8000, 0xfff, @local, 0x9}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) recvmsg$kcm(r3, &(0x7f0000000740)={&(0x7f0000000180)=@generic, 0x80, &(0x7f0000000640)=[{&(0x7f0000000380)=""/212, 0xd4}, {&(0x7f0000000480)=""/166, 0xa6}, {&(0x7f0000000540)=""/198, 0xc6}], 0x3, &(0x7f0000000680)=""/130, 0x82}, 0x20) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0x53b, 0x0, 0x0, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x820}, 0x800) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}}, 0x1c) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4000, r6}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) getsockopt$sock_int(r5, 0x1, 0x26, 0x0, &(0x7f0000000080)) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) 5.608780651s ago: executing program 5 (id=4188): r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x12, 0x80000) splice(r0, &(0x7f00000001c0)=0x7ce, 0xffffffffffffffff, &(0x7f0000000200)=0x4, 0x4, 0x1) syz_emit_ethernet(0x20, &(0x7f0000002480)={@random="2b893c1caa3e", @random="caf66222e6aa", @void, {@llc_tr={0x11, {@snap={0xaa, 0xab, "a3", "d6d9cc", 0x884c, "45bb8c97ec23fa20ead1"}}}}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x80, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x50, 0x2, [@TCA_CGROUP_EMATCHES={0x4c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x28, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0xd}, {{0x3, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}]}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 4.970368398s ago: executing program 5 (id=4195): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@kern={0x10, 0x0, 0x0, 0x400}, 0x1b) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) sendmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)="b440a89edc6e9dda0d73ff868d171dae4abf68a9d8244d988291f73a4ceb70da27398ce07e2132727d616be2a31404000000000000009e1a198e8d2cf571dabaad9faeaf692337c760c608c13e5bbf14b01d25b83538a790ccfa67cfc7c947ec595a64e927107a8e4bd88b7ffa772dbf39a0d08d5f56639775f06b1394a35158f954fccb03a36a642a6ae03a31f76084", 0x90}], 0x1}}], 0x1, 0x20044030) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x9c}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa3"], 0x0}, 0x94) syz_emit_ethernet(0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004e00004c00000000000690780a010102ac1414aa070f0476bc4b4c9e3e260cbfad990444140b01e000000100000000e0000001000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090ddb82a"], 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 3.917882016s ago: executing program 2 (id=4201): socket$unix(0x1, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001180)={0x38, 0x40, 0x107, 0x70bd25, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x6, 0xb, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$igmp(0x2, 0x3, 0x2) r3 = socket(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r4}]}, 0x3c}}, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000680)={0x0, {0x2, 0x4e23, @private=0xa010100}, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @local}, 0x2, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000280)='lo\x00', 0x0, 0x3, 0x6}) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) close(r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0xfff7, 0x1000, 0x5, 0x401, 0x400, 0xb, 0x9]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4080) r6 = socket$inet(0x2, 0x6, 0xfffffffa) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmmsg$inet_sctp(r6, &(0x7f0000000600)=[{&(0x7f0000000000)=@in={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)="7bfa1b493fae6f0cea0a2dbdafbc93dab616859b349ec5fb60dbf3ada32a2a9ebabb1ae3d799e77e50ebcdd6933f039dd7b53ea69bff9af2d4681f", 0x3b}], 0x1, &(0x7f0000000180)=[@init={0x18, 0x84, 0x0, {0xd, 0x5, 0xfffc, 0x5}}, @dstaddrv6={0x20, 0x84, 0x8, @private2}, @init={0x18, 0x84, 0x0, {0x4, 0x0, 0x3ff, 0xff}}], 0x50, 0x4004}, {&(0x7f0000000200)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000240)="742d70bc8b498c32bcb22f225fe3215b71c201d894606f44c7e42f407a5e30e609466d3e6487f63b32113160395d07db02002a3f6bb5c2", 0x37}, {&(0x7f0000000300)="021f1ff295f55d17f70f8525dd129892e812237d8e76b4e76becda00077af3bfe2eea236349d6684715f6e14c6d2909f84bf8bb091481e433ce8d05e1e579e164be579edf92647c9a183381c119237c26700fc2c5e4bdcb214a5953dd022ffa57488ab3c46f6e11457badf7f8288557d6165489886e138aa5f04c4ff3e5ab08c9ec23d734bf7852504dcd0d5cab3cef73dd329612a883d359f6d0bf3ce614ceb7ea7a3448f303449", 0xa8}, {&(0x7f00000003c0)="2089034aa30c808655a24b5799b7d78c025976f24b2d136799ddd6045d9ae9a3dc0a94933beda7827bbad4e7a176bd7d", 0x30}, {&(0x7f0000000400)="f550787347c3165d22a4a6b32d0ce3c15a409b96dc90d447558d1992f544231dc914f3690a62fe0626258953e7ebebd637a34db76b036eea38dcc9be5892a9831d63e8cdf0751f367c24099179fd7d155e78dc49e9da9543c8371335327d82dd7edcf3b639055a8fe49ec4dfac46fa21190568852ce24e8b3b92fab302d55239c56d91f8e3e395ab099d7127f8465d67de8228278665e73725ea3d835a3eeb31614bf32fb460be6b3af49058370f6e7c8d8ec719bd58bd8ba6f531eee7fd927a6f61d2f4eaaffd5e2702310049ffa0728c76893963be2867c91bc8aa5efef71d424d41e435c5", 0xe6}], 0x4, &(0x7f0000000540)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010102}, @init={0x18, 0x84, 0x0, {0x2, 0xfa, 0xfff8, 0x800}}, @authinfo={0x18, 0x84, 0x6, {0x9}}, @prinfo={0x18, 0x84, 0x5, {0x20}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}, @authinfo={0x18, 0x84, 0x6, {0x8000}}], 0xb0, 0x80}], 0x2, 0x10) 1.790380278s ago: executing program 2 (id=4202): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"/1426], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xffff0002, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) close(0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x40041) write$cgroup_pid(r2, &(0x7f0000000080)=r3, 0x12) 1.789042815s ago: executing program 6 (id=4203): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71186a000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x625}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'virt_wifi0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, r4, 0x305, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4004018}, 0x20000000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)={0x10, 0x1403, 0x1}, 0x10}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000180)={'veth1_virt_wifi\x00', @multicast}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x1, 0x2, 0x8, 0x100}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x7}}, @TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'nicvf0\x00', @random="4b154af4ab3b"}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x70}}, 0x0) sendto$packet(r8, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$smc(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r11, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, r12, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={0x20, r13, 0x377415be5c917c03, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x200048c0}, 0x4800) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) 1.65844042s ago: executing program 5 (id=4205): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x14, r2, 0x601, 0x70bd25}, 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmmsg(0xffffffffffffffff, &(0x7f0000000540)=[{{&(0x7f0000000080)=@nfc={0x27, r0, 0x1, 0x5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)="9dbb08601aa96b358e418531532cb89903aa392704b5e75715f6fdc5c0472ffc98778e4edbee2b0c6c7c97a0a9ffbeb5cf79c0ca", 0x34}, {&(0x7f0000000180)="8d49b691531de2ff6afe966cbeaf89163a7b134a6dc7b71d9b7a4d6d91f18eadf551795d42fc7d88a9dc", 0x2a}, {&(0x7f00000001c0)="b5cfed334a48db764c00c3600ccdc463a9ac75b7549431cc9dca0d8e6edb18a24cb75ec4cfbfec5e4a5db169dc1536d3ffc760b818be0ace312aecdfb84edc6684b53a028c89c2d1a991bf89fd36f6687fdcfbc98ce70a479e77ba2d32294d0471620e8cc7506cd6f55d3e1560366aa0917737eea015259a", 0x78}, {&(0x7f0000000240)}, {&(0x7f00000003c0)="516e6deabb70f7ada24565522c099ea8a435ddc1669488719d7feded35262721e04d358a31715bdfce20e8fb15eb367751a1cf37990aa2058976c1b172f8f4444367dc1a18952223c544981ec50ae284a028cf8285f752752d69017e1537f472ea52989f1742c8b338af575d48e3ebb15bd9aff235466f45db03acc90dc6a0d59001359ac3f4ef316b9aa1c92f6a3fa658defd74aea911c80896254cee1b66ccf7ce5624743485fbe08ab26a56d56f8a", 0xb0}, {&(0x7f0000000480)="be5b0b3f60b4577d4b69c3b7a21fc39f6b1742a0abefe83b9adddb", 0x1b}], 0x6}}], 0x1, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91100b000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 1.118324626s ago: executing program 5 (id=4207): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xb2, @name2}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYBLOB="0221000000000000140003006e657464657673696d300000", @ANYRESHEX=r0, @ANYBLOB="cc001680c80001800c000500ff0f00000008000014000a0004000000000000000400000000000000100006"], 0x108}}, 0x24040800) 1.112090376s ago: executing program 1 (id=4209): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001c0035742bbd7000fedbdf2502000000", @ANYRES32=r2, @ANYBLOB="1e002606080001"], 0x24}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000004) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f00000004c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff}}}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001c0035742bbd7000fedbdf2502000000", @ANYRES32=r2, @ANYBLOB='!'], 0x24}, 0x1, 0x0, 0x0, 0x8803}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002c80)=[{{&(0x7f00000002c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/222, 0xde}, {&(0x7f0000000540)=""/231, 0xe7}, {&(0x7f0000000640)=""/197, 0xc5}], 0x3, &(0x7f0000000780)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000001780)=@nfc, 0x80, &(0x7f0000002a00)=[{&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/163, 0xa3}, {&(0x7f00000028c0)=""/252, 0xfc}, {&(0x7f00000029c0)=""/5, 0x5}], 0x4, &(0x7f0000002a40)=""/136, 0x88}, 0x100}, {{&(0x7f0000002b00), 0x80, 0xfffffffffffffffc, 0x0, &(0x7f0000002b80)=""/254, 0xfe}}], 0x3, 0x2000, &(0x7f0000002d40)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000380)={'gre0\x00'}) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000020101130bbb7e7c280fa1cd4196ad1d0204000017dd638abe08e208000000681ffcdb8600000000000002f3ffff230002801400018008000100e000000108000200e00000010c000280050001000000000070dbc18e4fc22d4171207d9f879bde0bacfad4dc3c825a17a36e7d683c5a02caeb3589c722f6"], 0x38}}, 0x0) 1.111620266s ago: executing program 2 (id=4210): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000000), 0x4) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x4, 0x1}, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x0, 'rose0\x00', {}, 0x2}) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000001c0)={r1, &(0x7f00000000c0)='rose0\x00', 0x4000, &(0x7f0000000100)={@align=0x3, {0x7ff, 0x7ff, 0x2, 0x4}}, 0x8a67, &(0x7f0000000140), &(0x7f0000000180)=0xfffffdad}) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008004}, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x20, 0x7800, 0x1, 0x2, {{0x12, 0x4, 0x2, 0x5, 0x48, 0x67, 0x0, 0x1, 0x4, 0x0, @broadcast, @private=0xa010101, {[@end, @cipso={0x86, 0x31, 0x3, [{0x5, 0xe, "18b0bc31bb873913d530ba2b"}, {0x5, 0xe, "546fb2e94fcea75c4dd2128e"}, {0x7, 0xf, "04d20152aef923d0b6ae9025b1"}]}, @end]}}}}}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff43af}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x25d89355ab188e66}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x1, 0x15, &(0x7f00000003c0)=""/21, 0x41000, 0x1, '\x00', r3, 0x0, r2, 0x8, &(0x7f00000004c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x9, 0x64, 0xe}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r2, 0xffffffffffffffff, r2], 0x0, 0x10, 0x37}, 0x94) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) ioctl$XFS_IOC_FSGROWFSRT(r2, 0x40105870, &(0x7f0000000640)={0x6, 0x20000}) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'ipvlan0\x00'}) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f00000007c0)={r2, &(0x7f00000006c0)='ip_vti0\x00', 0x200080, &(0x7f0000000700)={@align=0x5, {0x4, 0x9, 0x40, 0x8000}}, 0x1000, &(0x7f0000000740), &(0x7f0000000780)=0x8}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r2) sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, r7, 0x400, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x20000880) r8 = socket$nl_route(0x10, 0x3, 0x0) recvmsg$can_raw(r2, &(0x7f0000000c80)={&(0x7f0000000980)=@sco, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000a00)=""/51, 0x33}, {&(0x7f0000000a40)=""/161, 0xa1}, {&(0x7f0000000b00)=""/249, 0xf9}], 0x3, &(0x7f0000000c40)=""/59, 0x3b}, 0x40000020) connect$pptp(r2, &(0x7f0000000cc0)={0x18, 0x2, {0x0, @empty}}, 0x1e) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000d00)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "be340b79c18071"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000001d00)={r9, 0x0, "e5d05464230083d56cfd114ad3eaaefc40cfca7f91d2d695750136ca876d9a29bf8b422f1b32aaaa34aec120c310dece81e2f38f95f4d3c9795e192e08db49fe648c6c58313a51c2512b5fd0992192df70805bd3d1236bbce7f8629a11d78500fb19e31edc55c0099d02af5d65d71a52e7c166d04b6e7d8db2063079c0c089b107a14b7388a8ff1d873b00af6086b1c5f70836be4c8a561af410eadc5daf3db00512edd9ad36b0b8ac4d74c877d9a1fc8b78dd5d871cb79a636f46477cb63f890cef45e621fa6aa88ff0e1113cf06dc2a5b2329a229acf087c2ef0313c6da265df46a570c6ab5a4e81669eeba03e01e625592047c65aec974ae7a82ca94f7145", "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"}) connect$rxrpc(r2, &(0x7f0000002d00)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @private=0xa010101}}, 0x24) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000002e00)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d80)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000060) splice(r4, &(0x7f0000002e40)=0x2, r6, &(0x7f0000002e80)=0x6, 0x4, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000002ec0)={'wlan1\x00'}) ioctl$XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f0000002f00)={0x0, r8, r2, 0xf9e, 0x2, '\x00', {0xfffffffffffffffc, 0x8, 0x9, 0x8, 0x2, 0x6, 0x3, 0x1, {0x9, 0x9}, {0x0, 0xffffffff}, {0x888, 0x7}, 0x6, 0x100, 0x4, 0x2, 0xbd, 0xad0, 0x200, 0x8000, 0x5c2a, 0x69, '\x00', 0x81, 0x9, 0x3, 0xc}}) socket(0x23, 0x2, 0x1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000002fc0), r10) 1.11096161s ago: executing program 0 (id=4211): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f00000002c0)=0x10401, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000d00)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60000000009c1100fe8000000000000000000000000000bbff02000000000000000000000000000100000e22009c90"], 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x7e, 0x0, 0x0, 0x1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000000013"], 0x24}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000140)={r5, r8}) sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0x100, 0x1, 0x2, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7fff}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_NAT={0x24, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xffffff81}, @CTA_EXPECT_MASK={0x7c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private1}}}]}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xff}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r10 = socket$unix(0x1, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r7, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x4000081) getsockopt(r10, 0x1, 0x7, &(0x7f0000000040)=""/177, &(0x7f0000000100)=0xb1) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010027bd7000fbdbdfa500000000", @ANYRES32=r9, @ANYBLOB="104e04000362010024001280110001000200696467595f736c617665000000000c000580060002"], 0x44}, 0x1, 0x0, 0x0, 0x404c000}, 0x2) r11 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r7) sendmsg$TEAM_CMD_NOOP(r7, &(0x7f00000019c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001980)={&(0x7f0000000d40)={0xc34, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x66dd}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r9}, {0x270, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x40, 0x5, 0x3, 0xfffffffe}, {0x0, 0x2, 0x6, 0x8}, {0xc239, 0x7, 0xc, 0x100000}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r9}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ab7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r9}, {0x1dc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x1a0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r9}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}]}, 0xc34}, 0x1, 0x0, 0x0, 0x48010}, 0x5538797b787ac29d) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r11, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x40011) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112df000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x64}, 0x1, 0x0, 0x0, 0xc880}, 0x24000000) 1.109003979s ago: executing program 6 (id=4212): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000540)=@framed={{0x18, 0x8, 0x0, 0x0, 0xed00, 0x0, 0x0, 0x0, 0x7ffffffd}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x5}, @generic={0x24, 0x8, 0x0, 0x0, 0xb000}, @initr0, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xef, &(0x7f0000000440)=""/239}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000560000009500"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x1d, 0x800, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x5e, &(0x7f00000002c0)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev}}}}}}, 0x0) close(r1) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x12, 0x0, &(0x7f0000003c00)) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x2e8, 0x12, 0x60d, 0x1d8, 0x202, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xff], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x74, 0x2}}, @common=@icmp6={{0x28}, {0xd, "ea9c", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x5, 0x8001, 0xf53, 'syz0\x00', 'syz1\x00', {0xffffffffffffff7f}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}]}}}]}, 0x40}}, 0x0) 1.108614085s ago: executing program 5 (id=4213): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e21, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'}) socket$netlink(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x84010200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3fa, 0x4, 0x70bd2a, 0x25dfdbfc, {0x1, 0x0, 0x1, 0x1}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 923.899675ms ago: executing program 2 (id=4214): syz_80211_inject_frame(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800, 0xc0024) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x1f}, 0x4, 0x1, 0x3, 0x4, 0x1, 0x2}, 0x20) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000040)={0xa, 0x4e24, 0xd2d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="4980b4d1c03071a8fdb4f10d38b6ac440d8b7b321b68ad5d3195b36bcae032ccbba1eddecb72ca0da7428c05c5917bf529ebfaf3c897e1dc12d4a307f38936cf829e27a23dceb2610491f127c85ae124b47a84b22abf4c98", 0x58}, {&(0x7f0000000100)="b357753276ca5bf89d6d0e3beb738b70f5e24609400554a7fb6ba5a50cae6d3734fe174b63c49a6aec232659ef6d17280ee1f067253ae304a5aeec9fe7093473c1dd5740fd42256c56350681ea126eb478540f3216df996615d77b472f1dad190043bf8cc18df7e85f2c3fd0d51f0f718f07dcfef230a420098217f7710ff2e27b8604a3577dd5b4f556a22e55efd5559ab108f6cbeb23f8692b3ef4c017d4773d8b0f838f0d70083c2bfda057551a", 0xaf}], 0x2, &(0x7f0000000200)=[@rthdr_2292={{0xb8, 0x29, 0x39, {0x2e, 0x14, 0x1, 0x9, 0x0, [@mcast2, @empty, @private0, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x1e}, @local]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x3c, 0x2, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x8}, @jumbo={0xc2, 0x4, 0x9650}, @enc_lim={0x4, 0x1, 0x9}]}}}], 0x118}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) 918.244644ms ago: executing program 5 (id=4215): r0 = socket(0x2b, 0x1, 0x0) listen(r0, 0x0) r1 = accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r5}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) r6 = gettid() r7 = syz_open_procfs$namespace(r6, &(0x7f0000000040)='ns/cgroup\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000003f00)={{{@in6=@private2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000004000)=0xe8) r9 = getgid() gettid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000004040)={{{@in=@private, @in=@broadcast}}, {{@in6=@private2}, 0x0, @in=@broadcast}}, &(0x7f0000004140)=0xe8) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000020c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0106000000074f78e009a2e0cd77f50e020000000000525a001c000000", @ANYRES32=r12, @ANYBLOB="080005000c0000001400040074756e6c3000"/28], 0x38}}, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000004180)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000041c0)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@private0}}, &(0x7f00000042c0)=0xe8) r15 = getgid() sendmmsg$unix(r0, &(0x7f00000043c0)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000500)="a119870de2371a1571bb5ea79d37217b7716e776954face2f1faf13656b3683ed638efb8f0072a7b31516176de6cd9f72a545365a177f68914b08e6685e13b08512d6d252e11aca794595f2e0eeedfd76dae44727a98c37d9e96beb2058f789fffaaa1145b954a5746542b7dd9c7372675f86d85f198b3761e487120571213b65e58e2f38ace21985370323b44e6dada570c64b39a22fe03f2a7a9751f61386484256e7879a67ea097fa8c136ae5df414e64322f532fde2dcd8da164c50abf2d3b6edb9dde007798463b8624cc1637b933649ddd40", 0xd5}, {&(0x7f0000000780)="9bc97dc6672c11b5bc53e206b6551bf842acd99d6efe7c66f1f203012df699e177dcd05d272cc07bab7e63ae7c5b60105f7533637aea88016be1dc5357fde9979f8eb33baf5cf5d7e12c0a6350651d0ee7db27c7549ddb8ee752a3c6edfb6b1b18a7c07fa7a810d50c03ac0439bb57d08349f91f24cf7bb76d2dbc04dd92c8f2984754639da1dcfa3a5a328f4d1382889eda4244e81b8e49f993", 0x9a}, {&(0x7f0000000840)="6b4d582efa381e1fceba350b7fcd4c8ba480bab5ba12f9a50f", 0x19}, {&(0x7f0000000880)="b473f65836fd4e585c9dc67b45861ff922442f989be5d50d4fc2208cbf8692e30f70919246fc1b9039906b953c7de8a8b38e80b5e9e02a43217d0600b1fb91d7da58af64b7f8202b2d4bd3da564ad889de902bec10ec5369ba622ec7fcd2c6273252caf0d25b8b1a2e0fdcc5c1e6e12e44", 0x71}], 0x4, &(0x7f00000009c0)=[@rights={{0x1c, 0x1, 0x1, [r1, r1, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r4, r3, r2, r1, r0]}}, @rights={{0x10}}], 0x78, 0x30008004}}, {{&(0x7f0000000a40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000ac0)="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", 0xfe}, {&(0x7f0000000bc0)="2b6327f4cf9c8f290b2d55cbb46bf1fbb4faf5ae1795d44e0fbb0fbe7a72e522e1e94e5c0151923903ef20c7cc15c438dd55fbfef19d1e9c3b0bd56b766b4d38ad9ba428adb14636f3b964e8da329e51def4a12a0ec223575af7cb302bef61a4b8adb336231d7e92e23f355e2ace5f8d5fcf4962597c35fa4fe5dfe9a3143aba9f64138305a41b1f30cc338c0e09d94db161ffd76cf46255645e17e23660c56945ad", 0xa2}, {&(0x7f0000000c80)="c1ee775658ec1f021d20e713115898ca091bda5a836c592208bf8c4c4dc76eb0107dae96c9d166af998e13c2782280922fc2205dfc29af09b07db8b115679a343e02bb6e8d79937ec64b8a1e504e40474b4b9fceb4e41c47b5871bd21d13172c106a703f05a62e5b061a30a5a730c34f65cd08187b7d7096", 0x78}, {&(0x7f0000000d00)="f532f3f9e7217079a1ffeb52e22de57efaf364cd8b32023a6efb95246cff8931bf87932773c3ec96b013bdfe61772ebe", 0x30}, {&(0x7f0000000e40)="378fef5c19ac01e78e20d8d3d18ee4bd85c4b5ece2d98ff4e110a06690b7ea083e0dc2debf8d5e5eb1d48da64a9bc725fc2834638b2cd2ddaffe11a665f6bcf473e6b2137304cf93a274a34e87a020822d17474fbbb0ae34014be629b0ca1eea4171", 0x62}, {&(0x7f0000000ec0)="4182337135001c1ac448839924aff592f9f49bd99f71c9f0c9d877c71f546d30ddf3d0885c463f96af05ff96cf6888b9e50ebf0313a75d30b9794089c64e2982ae591b3f586e0a1a12956f630edff9e99eeecc14185ffde315ddf1bed7a7505d98397eef6ccf2ffa35f886c35045dd291b5223c2ed6399878f962e72cc04bae69036b935", 0x84}, {&(0x7f0000000f80)="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", 0x1000}], 0x7, &(0x7f00000021c0)=[@cred={{0x1c, 0x1, 0x2, {r6}}}, @cred={{0x1c}}], 0x40, 0x400c8c0}}, {{&(0x7f0000002200)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f00000028c0)=[{&(0x7f0000002280)="6f68cfd75646dd514250c4580d246b8a966a9552980ef5eb5b1860db43a88dd838d1db3c5ab3dd2f3c19a6d1178d2bdf64227932153f23c6259db568fa8a27c081db82ad6c2b746def787a39f6db0e5a8b2c418792778e6f060e4a3f737ba35012165378ac3632f0a81a4d6ab72d9894fea312872a8647953253190716a6446fd19ef097fb189d05bb1561e13dd93a0049203f1310c5590004423009427732208714d48a034c59e74cc5967158efa78fef38fc6f04ee6604bf2a1a3183d9cf57f4aa5e5a89c839462d6404f311ee203d", 0xd0}, {&(0x7f0000002380)="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", 0xfa}, {&(0x7f0000002480)="9541ea61dfcfe5fafdef87f7e338d7c237a9c1a7e8616048", 0x18}, {&(0x7f00000024c0)="49fb8a9527b49ed597c21a6893ab871a3ace5944444f8bd6fc96a4b08891e95e23d43aeb6e527ec49524d5dfcb71c5db172641102518b45e95c0fbd0b6687f8f08d0e8aad1af23a7b3544ff5fe205f46887578be6d6a4734f7f2131957402ae503878d10b00f14531a5310fcaf8cdfd33ff6b242a49b5f8f601920e691356d37c7f848d05cac08bc91fdafb6a63fe50976534e2b1d62983cf692d03a32942d6cb747bcf6f04cb71b0e0ca5274339fe938a682c7e69d5f3b6a4d6fdef977a4c0bfcccdfb32bed21a31a62ef9bcf37e2a30db3fc1c3fa6f2bc63e9b7c0acd5545f94f04050c44e4b", 0xe7}, {&(0x7f00000025c0)="e8", 0x1}, {&(0x7f0000002600)="c0f26aeeacaeaeb786d9e67a7cd5a00f5fd1c5d01e3821e276bdd16c4162648a965829c02dab1c3b8929d9e3", 0x2c}, {&(0x7f0000002640)="5841f8722976e9347d4cfadbebfca970b3ab1be1fca492df19b1d94d5e5d1b0d3075b8ed05467ed3e9132c57f1593fedc2432b5f39a74aae3dd34875f8f37684f6fe79d47e1e29923447c965a96565ae67165857224c5645cb048ea7100e18c7afe0fd5aa6c3527c41b70f33826db4242453d2ba0da2dfb2f6e86b87669ef42834a509d89569688010602a6fcc645c3e81a90f2039959bc8b1172643e8c13964eaf17935fc9d5f0e21dfc6f93825e298763320e842", 0xb5}, {&(0x7f0000002700)="95e6105de4ad1620fd6a8e6460988dd94043d1af6fdf334747750ff0ab7c6a8dad4718a6e31f", 0x26}, {&(0x7f0000002740)="bb9ef627d6a71fb7ee316367217da873154fa21d70de193d6a611dfd346afac824ceb1f6edbd4a61f23caea9e8d60aaa3505a02eef2122d1d4c79b6575d5505b06f48420dabd27210413b91d435818fdb76c9c25dd08b67cabba14b851a1a53daa8c26eacecfff4d136a0a906086210c1038482ec363781d0b445f0a59eef698c6392c910ebba9c48f9ab37cf0d9898c8bf7239bb7e96b309f4cd02f53231da3b45ca3a3b7738fd69d9bbfd65c9d15877a2e7e5053d7d3c745571c83e5bc9d6967ac97ae4945abdd05317a54e571c544bd3070e83e41fb6eb03fe01a1eb61805adfa183113ee", 0xe6}, {&(0x7f0000002840)="780e0c9b53560507e1e1b28bb5ef717d396480aa12c775b32c57ada26db744c955254b0a62bd6679450623a53f7c126d92086157b8f7f47e121b81d09bcc3ae184c40c9904a2dd6c3281ae132d643d1e56", 0x51}], 0xa, &(0x7f0000002a40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00a55200000000000000000001000000020000009fb4a6e0d57dcce062689bb860a3bcdc418b42441a260ba99ec534077038ea30cd20c05aefe6f17b1beea3ef49b0aee7dd388bc24f659c69d298d861b0d12e7738ca00f4bcaa982f037f0921460b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r5, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x80, 0x4001000}}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f00000037c0)="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", 0x107}, {&(0x7f0000002c00)="6e2b050e9b1f9b3ae73c3d911f8d8e4e23bb71d63abf40", 0x17}, {&(0x7f0000002c40)="7a75ae4d46a4ab403470030b12e85739efcb136c974d35b59cb1ae097d99d50bbf3558b2caeaf67433eb55075b0c0d8fd0894f1c", 0x34}, {&(0x7f0000003240)="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", 0x14e}, {&(0x7f0000002d40)="3083b6391375da39e37dd880bbfcef9ff631dcd8ab33eb3fe9ccc89a0a8825c994922712ff963315450cd39d7e1ab71b845606fee73b362a8a4a77f655f0", 0x3e}, {&(0x7f0000000280)="37f4b3c59937c11ce233ea9e1c32b37f7bc5e8edc73f0a9ef6d23b88e41aa5b475779015f4aedd28fdc24246dec799f83251282373750a081ad8cf9f33a2e8cfa693a59a352b0573396322316dce4aea8a08332ee944846827d17a7d088da3ea34cc535bcb577c20a0bb06d55fa5ee648a931c1be7295a1c9e6f79", 0x7b}], 0x6, &(0x7f0000002f80)=[@rights={{0x20, 0x1, 0x1, [r0, r1, r4, r0]}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r0, r1, r3, r3, r2, r3, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, r3, r0, r3, r4]}}], 0xa0, 0x50}}, {{&(0x7f0000003040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003200)=[{&(0x7f00000030c0)="83421b5900c2e9fc13e1182e8c6aa25551c674af32c2accd7310538002c148749230227c02d9b072e4d63517ce8c1060b0062a95a927f25ba479228ee73a9fcfafa0b4c17f08cd72a13e4df69df08a68d91097d5be1eaf33a53e51f4b16629678a8dd5d36aa6fc499290446ce6a029aab7b3aa3971c1088d658bfd0e03ec6827c067f62565a5d50f302b315d6a47cfca639dfd4fb7d27fd8765925a7c0ce6186a6442678d2b96a0c606999eb28c1957d585d66376a37fb2d68e72aae87fcdf1af954da5d56dd0e6dec22ef2e92ddf3d6af2beaae76bd56c0df41ad318a19a4919462fd66d5cac68e5d9c05d530214e3d68a89374", 0xf4}, {&(0x7f00000031c0)="2fe01e5b9283b1cc11bf469e1e14e8a378ba977eac3928", 0x17}], 0x2, &(0x7f0000003900)=[@rights={{0x24, 0x1, 0x1, [r3, r3, r1, r1, r1]}}, @rights={{0x20, 0x1, 0x1, [r2, r3, r3, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}, @rights={{0x38, 0x1, 0x1, [r4, r0, r1, r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1, r0, r0]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [r2, r2, r10, r3, r4, r4, r7, r0, r10, r4]}}, @rights={{0x2c, 0x1, 0x1, [r2, r0, r0, 0xffffffffffffffff, r3, r10, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r3, r3, r0]}}], 0x160, 0x20000000}}, {{&(0x7f0000003500)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003780)=[{&(0x7f0000003580)="d15da578093bd9b93e7e5ea1354ab7dae12fceae7da985fa1aab93811e6ee2e0892b9b2d46805a0f1a2726deb27c7aa84d2b4baf462635ca5f7d3f54cb8b2c881effbd82c6679ae1301d2b957f3302ffb5916a779d7f2ec99dfe90f0f57ba3b85d071dc1", 0x64}, {&(0x7f0000003600)="8c367fbb4cdcdcfe8a1ae71a865e773ac67ef7581fb9e57cc64e84606e845d077b50eaef3cee1ebc5b9cbc623f74338f27660450a0d1868420770d3da4d4dcf5f1cba42fd7c7", 0x46}, {&(0x7f0000003680)="ccab9026137ffd365ff1431e5667c2af87f3068d25234a97dcf2ee9a0abca59ac4544d9f092a84f43f6094a0f6ba634ecc33963c97132bb0e8a0f2a91bf1a723af92694d33f63f6b2223f429e6dd704ec7c7b03d0df6decd2ae3309cd9971200049dcc68e5b64d752d8aea2a5dc52c385c30653a47e2b5c8cd63499d6a77f61466f49e588dfbcafdea739a51a0f66e0479dfbdc3c662f4afb4d337f4a954d0411e235663706d42b8c6377aaf39fa1c716271763178e9815305efb48b73317047dbad05b0d549e821b0b0edb77412d3b2d15e100c", 0xd4}], 0x3, &(0x7f0000002000)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, r0, r3, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x88, 0x4}}, {{&(0x7f0000003ac0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000003e80), 0x0, &(0x7f0000002980)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r8, r9}}}, @rights={{0x30, 0x1, 0x1, [r7, 0xffffffffffffffff, r2, r3, r3, r1, r10, r4]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}], 0xa0, 0x4000}}], 0x7, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x91d5c78542c436e8, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xca, &(0x7f0000000640)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @local, {[@rr={0x7, 0x3, 0xdd}, @generic={0x0, 0xd, "ee0dd9de36ed4bcc5b4e23"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@private}]}, @ssrr={0x89, 0xf, 0x0, [@private=0x4000, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {}, {@local, 0x400}, {@loopback}, {@private}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x14, 0x26, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) r17 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r17, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x194}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r16, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 801.932927ms ago: executing program 1 (id=4216): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x18c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x84e0}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0xd0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xf8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xebf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa88}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4000050}, 0x880) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001a0001000000000000000000022000000000b8"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) 800.626059ms ago: executing program 0 (id=4217): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000200), &(0x7f0000000140)=@udp6=r4, 0x3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xfff2, 0xb}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x1, 0x1, 0x3, 0x3, 0xe, 0x1, 0xd, 0x5, 0x8, 0x6, {0xfffff800, 0x8, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x400c8a4}, 0x4890) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {}, {0xe}}}, 0x24}}, 0x40004) 772.240352ms ago: executing program 6 (id=4218): r0 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000140)={0xa, 0xa, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@flowinfo={{0x14, 0x29, 0x3b, 0x14}}], 0x18}, 0x922bac8556bda5ce) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000380), r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000b40)={0x2c, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x4}}, {{0x8, 0x1, r3}, {0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796412000000000010000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xd, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x90) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r9, 0x20194, 0x10014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x60, r10, 0x1, 0x70bd27, 0x25dfdc05, {}, [{{0x8, 0x1, r11}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r7}}}]}}]}, 0x60}, 0x1, 0x400000000000000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x10, 0x0, 0x4, 0x3, {{0xf, 0x4, 0x2, 0x7, 0x3c, 0x66, 0x0, 0x1, 0x2f, 0x0, @multicast2, @rand_addr=0x64010101, {[@ssrr={0x89, 0x17, 0x76, [@dev={0xac, 0x14, 0x14, 0x14}, @empty, @multicast1, @broadcast, @empty]}, @timestamp_addr={0x44, 0xc, 0xeb, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0xf}, 0xfffffffd}]}, @ra={0x94, 0x4}]}}}}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000ffff0f000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x20) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000240)={@rand_addr, 0x0}, &(0x7f0000000280)=0x14) r14 = socket(0x10, 0x3, 0x0) r15 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {0x0, 0x8}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xfffffffe, 0x10000, 0x670e, 0x0, 0xffffffff}, 0x0, 0x200000, 0x7, 0x8, 0x0, 0x14, 0x0, 0x1b, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x2, 0x0, 0x1000000}}}}]}, 0x78}}, 0xc090) ioctl$OCFS2_IOC_RESVSP(r1, 0x40305828, &(0x7f00000003c0)={0x1, 0x0, 0x7b, 0x85c, 0x3, 0x4}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x7, 0xe11, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, 0x8000, 0x700, 0x0, 0x2}}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000800)={0x1c4, r2, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x1a8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4045041}, 0x80) 693.548809ms ago: executing program 1 (id=4219): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000e80)=0x57bb, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x62, 0x0}, 0x10) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x7) write$cgroup_int(r1, &(0x7f0000000140), 0xfffffdef) write$cgroup_subtree(r0, 0x0, 0x21) 565.771123ms ago: executing program 1 (id=4220): socket$inet6(0xa, 0x3, 0x8000000003c) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x0, [0x7266da2e, 0xd4, 0x1, 0x9, 0x99, 0x7e26], 0x1, 0x0, 0x0, [{}]}, 0x88) r1 = socket(0x10, 0x80002, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xe9, 0x0, 0xfffd, 0x0, 0x9, 0x7}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x0, 0x4, 0x0, 0x5}, 0x48) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {0x0, 0x6}, {0xffe0, 0xa}, {0x1, 0x8}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r5, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000001380)="7201cc576a0c42dc9734b695f6b360bb", 0x10}], 0x1) 533.860855ms ago: executing program 0 (id=4221): socket$nl_rdma(0x10, 0x3, 0x14) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0xb8, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x4, 0x400, 0x0, 0x1, 0x9, 0x2, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x6, 0x5e, 0x2, 0xb, 0x0, 0x9, 0xfffff89c, 0x2}}, {0x8, 0x2, [0x0, 0x30f]}}, {{0x1c, 0x1, {0x6, 0x9, 0x6, 0x4e, 0x1, 0x6, 0xc, 0x9}}, {0x16, 0x2, [0x7, 0x5, 0xfff6, 0x3, 0x8, 0x3, 0x6, 0x3, 0x9]}}]}, @qdisc_kind_options=@q_ingress={0xc}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) (async) writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03000001"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0xfffffffffffffc8f, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff3}, {0xa, 0xfff3}, {0xd, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="40000000000901020000007b0f0000000000000a080005400000001f0800034080000000080006400000000108000640000000000900010073797a3100000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x50) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000640)="b4", &(0x7f0000000180)=@udp=r0}, 0x20) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r3) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6d26884d", @ANYRES16=r5, @ANYBLOB="000228bd7000fddbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x80) (async) close(0xffffffffffffffff) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r6) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x411f, 0x4) (async) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) setsockopt$inet_int(r7, 0x0, 0x14, &(0x7f0000000080)=0xcd, 0x4) (async) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) (async) setsockopt$inet_int(r7, 0x0, 0x7, &(0x7f00000003c0)=0xc5, 0x4) (async) recvmmsg(r7, &(0x7f0000007080)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x45833af92e4b39ff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x10, &(0x7f0000001280), 0x4) (async) r9 = getpid() sendmsg$unix(r6, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)='CJ]', 0x3}], 0x1, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r9, 0xee01, 0xee01}}}], 0x20, 0x10}, 0x80) 472.948032ms ago: executing program 1 (id=4222): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) (async) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 406.54329ms ago: executing program 6 (id=4223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x54, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x4}]}, 0x54}}, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa000000000000791008000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000bf03000000000000850000000c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x54, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x4}]}, 0x54}}, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa000000000000791008000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000bf03000000000000850000000c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async) 328.387278ms ago: executing program 0 (id=4224): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f00000018c0), &(0x7f00000079c0)=0x4) r1 = socket(0x2d, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000300)={0x2d, 0x0, 0x4001}, 0xc) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000001000)={&(0x7f0000000000)=""/4096, 0x4000, 0x800, 0x6, 0x3}, 0x20) 310.857003ms ago: executing program 6 (id=4225): r0 = socket(0x2d, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f00000006c0)={{r0}, "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"}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000000100010000000000ffdbdf25037c0000080001800400100014000280100001800c00e1000600000000000000"], 0x30}, 0x1, 0x0, 0x0, 0xc044}, 0xc050) (async) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000005c0)={0xb, {{0xa, 0x4e24, 0x200, @loopback, 0xfffffffc}}}, 0x90) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x240, 0x7, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r4, 0x0, 0xa0028000}, 0x38) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r6 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r7) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, 0x0) (async) sendmsg$NLBL_MGMT_C_LISTALL(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r8, 0xb03, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000c080}, 0x814) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r11, 0x6, 0x100}, 0xc) (async) setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000680)={r11, 0x6, 0x8, 0x2}, 0x10) (async) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x21, 0x3, 0x530, 0x198, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xffffff00], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x170, 0x198, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x6, 0x5b, 0x21, 0x1a1, 0x101}}, @common=@srh1={{0x90}, {0x3b, 0x2, 0x9, 0x0, 0xe, @loopback, @loopback, @loopback, [0xffffff00, 0xff000000, 0xffffffff, 0xff000000], [0x0, 0x0, 0xffffffff], [0xff, 0xffffff00, 0x0, 0xff], 0x2004, 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x5, 0x6}}}, {{@uncond, 0x0, 0x258, 0x2c8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_batadv\x00', {0x0, 0x0, 0x5, 0x0, 0x3, 0x7, 0x83ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg0\x00', {0x3, 0xd, 0x41, 0x1, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x800, 0x2, 0x5, 0x1, 0x0, "ea1fe5d1434d35835e190200001a00000000d6a2fafc10325c6044c3f4a9d8bc2a4046000000d84289cd000000000000000300027f00"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) 230.466121ms ago: executing program 1 (id=4226): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x6}, 0x8) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_buf(r3, 0x1, 0x13, 0x0, &(0x7f0000000100)) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e24, 0x3, 'fo\x00', 0x15, 0x3240, 0x3a}, {@empty, 0x4e20, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) write$nci(r4, &(0x7f00000011c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x2, @a_listen={0x6, 0x3, 0x2, 0x80, 0x80, 0x10, 0x7, "", 0x7, 0x10, 0x1, 0x80, 0x7f, "4e4299064908d38d6a5fc9d0fa6814a0ebe03cc202827e487cff6c80fde4fc65eecfa141efd9223b3db5606fe93804f2c58cb045ec2d73e681a414457ee753323ca1bc424314e85b4b376d33a04e5c2bb20718a8374565df87853ae8b4b1d851f0c8c807f92df72f2899bf5fc7a595998277b881402e589f98742aa17dd239"}}, 0x8e) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x40, 0x2}, 0x10) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r6 = accept(r0, &(0x7f0000000140)=@hci, &(0x7f00000001c0)=0x80) setsockopt$inet_udp_int(r6, 0x11, 0xa, &(0x7f0000000200)=0x3, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000100003052abd70000400000000000000", @ANYRES32=0x0, @ANYBLOB="18800300a0010200140012800b0001006d616373656300000400028008000500", @ANYRES32=r5, @ANYBLOB="080003"], 0x44}}, 0x800) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10) 181.314214ms ago: executing program 0 (id=4227): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000007110f8ff0000000060c1bc42f1761cda3c11a4c746ac5c700c59821c440d4bc3af29d8524e36e531726f3974be5402e73a5a4a3e83736326f5f9a129a37f52e48676112ff8914400071263e3dd387522cf20e6ae1351733ab0a1b8c1451cc41da3c9b3abc1a7da8f24fac31e4b89d2b01454ee18d4f015385c58a5927d79e577fec68aa14568c2942f399858fc5b63b02b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) 168.784538ms ago: executing program 2 (id=4228): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x38, r2, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x1c, 0x18, {0x8003, @bearer=@l2={'eth', 0x3a, 'batadv_slave_0\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) listen(r1, 0x5) 49.796388ms ago: executing program 6 (id=4229): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_timeval(r2, 0x1, 0x49, 0x0, &(0x7f00000001c0)) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x184}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000000)=0x4, 0x4) sendmmsg$inet6(r0, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000000c0)="9789b5", 0x7ffd}], 0x1}}], 0x1, 0x84) syz_extract_tcp_res(0x0, 0xffffffff, 0x8) socket$igmp6(0xa, 0x3, 0x2) 49.354671ms ago: executing program 2 (id=4230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000280), 0x4) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000c00f0b133e7c643058005001500050000000500010007000000050005d9cc4509000a00000005000400000000000b00020073797a31000000001100030065ea10e376984942000000a8f800"/106], 0x58}}, 0x0) 0s ago: executing program 0 (id=4231): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280), 0x4) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_TABLE(r1, 0x29, 0xc8, 0x0, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_modinfo={0x42, 0x9, 0x3}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000780)={'ip_vti0\x00', &(0x7f00000006c0)={'ip_vti0\x00', 0x0, 0x10, 0x10, 0x6, 0x7, {{0x1b, 0x4, 0x2, 0x3b, 0x6c, 0x66, 0x0, 0x8e, 0x4, 0x0, @multicast2, @multicast2, {[@ssrr={0x89, 0x17, 0x95, [@private=0xa010100, @local, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @lsrr={0x83, 0x13, 0xc6, [@empty, @rand_addr=0x64010102, @remote, @private=0xa010101]}, @timestamp={0x44, 0x10, 0x83, 0x0, 0xa, [0xe, 0x10000000, 0x7fffffff]}, @noop, @rr={0x7, 0x1b, 0xad, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast2]}]}}}}}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYRES64=r2, @ANYRESOCT=r2], 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb4b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004080) recvmsg$kcm(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2) recvmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x4b8500, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x4c, &(0x7f0000000000)=r5, 0x4) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) recvmsg$unix(r10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) recvmsg$kcm(r7, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x100) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r6, &(0x7f0000000140), &(0x7f0000000200)=@tcp6=r3, 0x2}, 0x20) socket$unix(0x1, 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r12) sendmsg$IEEE802154_LLSEC_SETPARAMS(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB="8a84dffff1b92e3201c207b863fcff69b7ffc9d32e69d87050af0717fc2bc61336e0cc44e188bb1506f9", @ANYRES16=r13, @ANYBLOB="01022bbd7000fddbdf252500000005002b00030000000a0001007770616e3000000005002a0005000000"], 0x30}, 0x1, 0x0, 0x0, 0x48d0}, 0x6000080) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000010003704feffffff0300000000000000", @ANYRES32=0x0, @ANYBLOB="ffffffffffffffff"], 0x20}, 0x1, 0x0, 0x0, 0x4c050}, 0x0) kernel console output (not intermixed with test programs): 5630] total_dirty 0 [ 403.904275][ T5630] total_writeback 0 [ 403.915042][ T5630] total_workingset_refault_anon 0 [ 403.922190][T15024] syz_tun: left promiscuous mode [ 403.934097][ T5630] total_workingset_refault_file 1 [ 403.942396][T15024] syz_tun: left allmulticast mode [ 403.950031][ T5630] total_swap 229376 [ 403.956030][ T5630] total_swapcached 229376 [ 403.964547][T15024] bridge0: left promiscuous mode [ 403.969638][ T5630] total_pgpgin 48985 [ 403.974276][ T5630] total_pgpgout 48985 [ 403.981698][ T5630] total_pgfault 89180 [ 403.987550][T15024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.995086][ T5630] total_pgmajfault 3 [ 403.999782][ T5630] total_inactive_anon 0 [ 404.021419][T15024] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.028617][ T5630] total_active_anon 0 [ 404.032750][ T5630] total_inactive_file 0 [ 404.042668][ T5630] total_active_file 0 [ 404.050891][ T5630] total_unevictable 0 [ 404.064150][T15024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.074851][ T5630] anon_cost 0 [ 404.079902][ T5630] file_cost 0 [ 404.098175][ T5630] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2464,pid=14917,uid=0 [ 404.159184][ T5630] Memory cgroup out of memory: OOM victim 14917 (syz.4.2464) is already exiting. Skip killing the task [ 404.181489][T15024] veth1_to_team: left allmulticast mode [ 404.220692][T15024] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 404.271257][T15024] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 404.313729][T15024] hsr0: left promiscuous mode [ 404.341410][T15024] veth1_virt_wifi: left promiscuous mode [ 404.355765][T15024] veth1_virt_wifi: left allmulticast mode [ 404.374211][T15024] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 404.542660][ T24] syz0: Port: 1 Link ACTIVE [ 404.779307][T15044] syzkaller0: entered promiscuous mode [ 404.833864][T15044] syzkaller0: entered allmulticast mode [ 404.877523][T15048] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 405.836091][T15083] syzkaller0: entered promiscuous mode [ 405.850460][T15083] syzkaller0: entered allmulticast mode [ 408.965807][T15121] validate_nla: 8 callbacks suppressed [ 408.965827][T15121] netlink: 'syz.4.2526': attribute type 20 has an invalid length. [ 409.004059][T15121] __nla_validate_parse: 14 callbacks suppressed [ 409.004083][T15121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2526'. [ 409.059481][T10495] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.068704][T15121] netlink: 'syz.4.2526': attribute type 20 has an invalid length. [ 409.077282][T10495] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.086828][T15121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2526'. [ 409.098274][T10495] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.562863][T15141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2531'. [ 410.127585][T15158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2537'. [ 410.195958][T15157] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2538'. [ 410.205528][T15159] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2539'. [ 410.220174][T15158] openvswitch: netlink: Missing key (keys=40, expected=80) [ 410.281046][T15162] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2539'. [ 410.314506][T15164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2537'. [ 410.364251][T15164] openvswitch: netlink: Missing key (keys=40, expected=80) [ 410.398441][T15169] syzkaller1: entered promiscuous mode [ 410.455292][T15169] syzkaller1: entered allmulticast mode [ 410.810446][T15178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2543'. [ 410.930895][T15178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2543'. [ 411.896366][T15221] netlink: 'syz.0.2553': attribute type 29 has an invalid length. [ 411.969516][T15224] netlink: 'syz.0.2553': attribute type 1 has an invalid length. [ 411.998723][T15225] netlink: 'syz.0.2553': attribute type 1 has an invalid length. [ 412.334500][T15202] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 412.862178][T15236] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.869553][T15236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.877239][T15236] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.884482][T15236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.023569][T10495] batman_adv: batadv1: MLD Querier disappeared - multicast optimizations disabled [ 413.092111][T15236] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 432.790635][T15244] netlink: 'syz.1.2558': attribute type 2 has an invalid length. [ 432.799333][T15244] __nla_validate_parse: 34 callbacks suppressed [ 432.799352][T15244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2558'. [ 432.834893][T15245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2559'. [ 433.277086][T15253] lo: entered promiscuous mode [ 433.297347][T15253] netlink: 'syz.4.2561': attribute type 2 has an invalid length. [ 433.315490][T15253] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 433.481848][T15250] netlink: 'syz.0.2557': attribute type 1 has an invalid length. [ 433.508237][T15250] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2557'. [ 434.535506][T15292] netlink: 'syz.3.2570': attribute type 4 has an invalid length. [ 434.554759][T15292] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2570'. [ 434.949508][T15297] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.957238][T15297] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.305759][T15315] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2575'. [ 435.336349][T15315] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2575'. [ 435.348109][T15305] IPVS: Error connecting to the multicast addr [ 435.364813][T15315] netlink: 'syz.0.2575': attribute type 5 has an invalid length. [ 435.383587][T15299] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 435.413505][T15315] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2575'. [ 435.762920][T15328] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2578'. [ 436.361236][T15347] netlink: 'syz.3.2586': attribute type 21 has an invalid length. [ 436.380604][T15347] IPv6: NLM_F_CREATE should be specified when creating new route [ 436.393132][T15347] netlink: 'syz.3.2586': attribute type 1 has an invalid length. [ 436.508046][T15350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2584'. [ 436.543995][T15350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2584'. [ 436.882337][T15358] Cannot find del_set index 3 as target [ 437.891688][T15386] __nla_validate_parse: 1 callbacks suppressed [ 437.891708][T15386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2599'. [ 438.154718][T15395] sctp: [Deprecated]: syz.4.2600 (pid 15395) Use of int in max_burst socket option. [ 438.154718][T15395] Use struct sctp_assoc_value instead [ 438.649786][T15410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2603'. [ 438.668007][T15410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2603'. [ 438.698032][T15413] netlink: 'syz.4.2604': attribute type 21 has an invalid length. [ 438.726224][T15413] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2604'. [ 439.056134][T15418] syzkaller0: entered promiscuous mode [ 439.069420][T15418] syzkaller0: entered allmulticast mode [ 439.148503][T15339] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 439.318181][T15423] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2607'. [ 439.511213][T15428] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2609'. [ 439.554044][T15431] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2610'. [ 439.934616][T15440] netlink: 'syz.3.2612': attribute type 1 has an invalid length. [ 440.056725][T15446] netlink: 'syz.0.2613': attribute type 4 has an invalid length. [ 440.104789][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.122263][T15446] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2613'. [ 440.195286][T15440] 8021q: adding VLAN 0 to HW filter on device bond6 [ 440.289425][T15446] lo speed is unknown, defaulting to 1000 [ 441.245724][T15478] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 441.253116][T15478] IPv6: NLM_F_CREATE should be set when creating new route [ 441.260452][T15478] IPv6: NLM_F_CREATE should be set when creating new route [ 441.354361][T15486] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2623'. [ 441.390347][T15487] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2625'. [ 441.425242][T15486] ip6erspan0: entered allmulticast mode [ 441.434398][T15478] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 443.044130][T15507] __nla_validate_parse: 2 callbacks suppressed [ 443.044167][T15507] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2631'. [ 443.110409][T15509] gre0: Caught tx_queue_len zero misconfig [ 443.144045][T15507] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2631'. [ 443.426852][T15515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2634'. [ 443.565490][T15515] bond7: Invalid ad_actor_system MAC address. [ 443.571898][T15515] bond7: option ad_actor_system: invalid value (1) [ 443.635594][T15522] openvswitch: netlink: Duplicate or invalid key (type 0). [ 443.667333][T15515] bond7 (unregistering): Released all slaves [ 443.701990][T15522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.786485][T15529] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2638'. [ 443.874518][T15528] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2636'. [ 443.949167][T15528] batman_adv: batadv0: Interface deactivated: dummy0 [ 444.098067][T15528] batman_adv: batadv0: Removing interface: dummy0 [ 444.250792][T15538] ipvlan2: entered promiscuous mode [ 444.711301][T15551] veth1_to_bond: entered allmulticast mode [ 444.746793][T15554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2644'. [ 444.780695][T15556] netlink: 'syz.0.2643': attribute type 10 has an invalid length. [ 444.810894][T15554] veth1_to_bond (unregistering): left allmulticast mode [ 445.011998][T15559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2642'. [ 446.098173][T15584] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 446.386343][T15593] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2653'. [ 446.437897][T15593] 8021q: VLANs not supported on gre0 [ 446.468291][T15595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2655'. [ 446.586735][T15599] xt_CT: You must specify a L4 protocol and not use inversions on it [ 446.641330][T15602] netlink: 'syz.4.2656': attribute type 33 has an invalid length. [ 446.860791][T15602] bond7: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 446.928624][T15602] bond7 (unregistering): Released all slaves [ 447.235712][T15610] syzkaller1: entered promiscuous mode [ 447.248044][T15610] syzkaller1: entered allmulticast mode [ 447.421621][T15624] netlink: 'syz.2.2660': attribute type 10 has an invalid length. [ 447.473655][T15625] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2660'. [ 447.619269][T15624] team0: Port device dummy0 added [ 447.739744][T15625] team0: Port device dummy0 removed [ 467.150438][T15651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2667'. [ 467.185131][T15651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2667'. [ 467.297070][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 467.309936][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 467.321650][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 467.330595][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 467.342097][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 467.405242][T15651] netlink: 'syz.4.2667': attribute type 15 has an invalid length. [ 467.551178][T10483] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 467.612635][T10483] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 467.782715][T10483] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 467.809009][T15668] netlink: 'syz.0.2671': attribute type 13 has an invalid length. [ 467.840588][T15664] nbd2: detected capacity change from 0 to 127 [ 467.855069][T15670] --map-set only usable from mangle table [ 467.884951][ T50] block nbd2: Receive control failed (result -32) [ 467.904139][T15654] block nbd2: Send control failed (result -32) [ 467.924058][T15654] block nbd2: Request send failed, requeueing [ 467.952215][ T1733] block nbd2: Dead connection, failed to find a fallback [ 467.961955][ T1733] block nbd2: shutting down sockets [ 467.968085][ T1733] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 467.981370][ T1733] Buffer I/O error on dev nbd2, logical block 0, async page read [ 467.991646][T15654] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 468.026215][T15654] Buffer I/O error on dev nbd2, logical block 1, async page read [ 468.059935][T15654] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 468.117473][T15654] Buffer I/O error on dev nbd2, logical block 2, async page read [ 468.250838][T15654] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 468.292326][T15654] Buffer I/O error on dev nbd2, logical block 3, async page read [ 468.318702][T15654] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 468.342690][T15681] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2674'. [ 468.362897][T15654] Buffer I/O error on dev nbd2, logical block 0, async page read [ 468.389647][T15654] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 468.409570][T15654] Buffer I/O error on dev nbd2, logical block 1, async page read [ 468.418297][T15654] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 468.432465][T15654] Buffer I/O error on dev nbd2, logical block 2, async page read [ 468.443747][T15654] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 468.459533][T15654] Buffer I/O error on dev nbd2, logical block 3, async page read [ 468.472034][T15654] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 468.493100][T15654] Buffer I/O error on dev nbd2, logical block 0, async page read [ 468.501904][T15654] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 468.528065][T15671] mac80211_hwsim hwsim11 wlan1: Caught tx_queue_len zero misconfig [ 468.543827][T15683] netlink: 'syz.1.2674': attribute type 1 has an invalid length. [ 468.568756][T15654] Buffer I/O error on dev nbd2, logical block 1, async page read [ 468.666090][T15654] ldm_validate_partition_table(): Disk read failed. [ 468.761955][T15654] Dev nbd2: unable to read RDB block 0 [ 468.819220][T15654] nbd2: unable to read partition table [ 469.021155][T15654] ldm_validate_partition_table(): Disk read failed. [ 469.109182][T15654] Dev nbd2: unable to read RDB block 0 [ 469.169032][T15688] xt_l2tp: wrong L2TP version: 0 [ 469.179354][T15654] nbd2: unable to read partition table [ 469.455322][ T50] Bluetooth: hci5: command tx timeout [ 470.272794][T15718] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2683'. [ 470.311528][T15720] tunl0: entered promiscuous mode [ 470.408114][T15720] netlink: 'syz.0.2684': attribute type 3 has an invalid length. [ 470.464981][T15720] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2684'. [ 470.822066][T15648] lo speed is unknown, defaulting to 1000 [ 471.392275][T15747] netlink: 'syz.0.2691': attribute type 4 has an invalid length. [ 471.524402][ T50] Bluetooth: hci5: command tx timeout [ 471.748341][T15755] netlink: 'syz.4.2692': attribute type 83 has an invalid length. [ 472.536797][T15774] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2693'. [ 472.635183][T15778] netlink: 'syz.1.2698': attribute type 1 has an invalid length. [ 473.098146][T15778] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 473.332493][T15786] geneve0: entered allmulticast mode [ 473.435940][T15805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2700'. [ 473.604450][ T50] Bluetooth: hci5: command tx timeout [ 474.296997][T15824] nbd: couldn't find device at index -1251241447 [ 474.751475][T15834] xt_hashlimit: size too large, truncated to 1048576 [ 474.820116][T15839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2712'. [ 475.148947][T15842] bridge_slave_0 (unregistering): left promiscuous mode [ 475.216424][T15842] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.433538][T15856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2716'. [ 475.686793][ T50] Bluetooth: hci5: command tx timeout [ 476.280678][T15874] netlink: 'syz.0.2719': attribute type 39 has an invalid length. [ 476.488304][T15648] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.534581][T15648] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.582942][T15648] bridge_slave_0: entered allmulticast mode [ 476.645703][T15648] bridge_slave_0: entered promiscuous mode [ 477.088526][T15648] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.102826][T15648] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.128226][T15648] bridge_slave_1: entered allmulticast mode [ 477.171493][T15648] bridge_slave_1: entered promiscuous mode [ 477.476489][T15648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.537743][T15900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2723'. [ 477.564854][T15648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.949030][T15648] team0: Port device team_slave_0 added [ 478.021651][T15648] team0: Port device team_slave_1 added [ 478.084545][T15910] vcan0: entered allmulticast mode [ 478.466871][T15648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.501180][T15648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.663487][T15648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.756254][T15648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.764210][T15926] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2733'. [ 478.805456][T15648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.848222][T15648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.211259][T15648] hsr_slave_0: entered promiscuous mode [ 479.260890][T15648] hsr_slave_1: entered promiscuous mode [ 479.297377][T15648] debugfs: 'hsr0' already exists in 'hsr' [ 479.346399][T15648] Cannot create hsr debugfs directory [ 479.399245][T15943] syzkaller0: entered promiscuous mode [ 479.415025][T15943] syzkaller0: entered allmulticast mode [ 480.078636][T15962] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2740'. [ 480.103617][T15962] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2740'. [ 480.491014][T15977] netlink: 'syz.1.2745': attribute type 1 has an invalid length. [ 480.527933][T15977] netlink: 'syz.1.2745': attribute type 3 has an invalid length. [ 480.576640][T15977] netlink: 'syz.1.2745': attribute type 7 has an invalid length. [ 480.612635][T15977] netlink: 'syz.1.2745': attribute type 8 has an invalid length. [ 480.637342][T15977] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2745'. [ 480.674874][T15984] netlink: 'syz.0.2747': attribute type 1 has an invalid length. [ 480.691603][T15977] NCSI netlink: No device for ifindex 131092 [ 480.728444][T15982] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 480.802245][T15986] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 481.184469][T15994] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2748'. [ 481.545124][T15996] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 481.695353][T16010] netlink: 448 bytes leftover after parsing attributes in process `syz.0.2753'. [ 481.760588][T15648] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 482.042656][T15648] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 482.070809][T15648] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 482.129968][T15648] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 482.192892][T15648] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 482.255290][T15648] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 482.297941][T15648] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 482.388414][T15648] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 482.627343][T16037] netlink: 'syz.1.2760': attribute type 21 has an invalid length. [ 482.662953][T16037] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2760'. [ 482.719016][T16037] netlink: 'syz.1.2760': attribute type 4 has an invalid length. [ 482.759652][T16037] netlink: 'syz.1.2760': attribute type 5 has an invalid length. [ 482.786639][T16037] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2760'. [ 483.022599][T15648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.131997][T15648] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.203317][T10469] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.210567][T10469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.300638][ T6992] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.307917][ T6992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.879540][T16061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.896475][T16061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.001824][T16061] hsr0: left allmulticast mode [ 484.007668][T16061] hsr_slave_0: left allmulticast mode [ 484.016954][T16061] hsr_slave_1: left allmulticast mode [ 484.038996][T16061] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 484.162141][T16074] syzkaller1: entered promiscuous mode [ 484.174784][T16074] syzkaller1: entered allmulticast mode [ 484.287332][T10469] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.312034][T10469] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.333306][T10469] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.350817][T10469] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.363032][T16092] openvswitch: netlink: IPv4 tunnel dst address is zero [ 484.387850][T16092] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.2773'. [ 484.406422][T10469] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.436942][T10469] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.500952][T10469] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.548202][T10469] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.654973][T16101] netlink: 'syz.1.2775': attribute type 1 has an invalid length. [ 484.671591][T16103] team_slave_1: Caught tx_queue_len zero misconfig [ 484.744669][T16106] bond9: (slave geneve2): making interface the new active one [ 484.757475][T16106] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 484.778548][T10498] netdevsim netdevsim1 : set [1, 0] type 2 family 0 port 20004 - 0 [ 484.786900][T10498] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 484.804700][T16107] syzkaller0: entered promiscuous mode [ 484.810904][T16107] syzkaller0: entered allmulticast mode [ 484.818556][T10498] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 484.849585][T10498] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 484.922653][T16113] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 485.534368][T16146] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2786'. [ 485.604353][T16146] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2786'. [ 485.627641][T16145] netlink: 'syz.4.2787': attribute type 1 has an invalid length. [ 485.657522][T16145] netlink: 'syz.4.2787': attribute type 1 has an invalid length. [ 486.092611][T15648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.389700][T16189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2799'. [ 486.407044][T16190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2798'. [ 486.455638][T16196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2800'. [ 486.515409][T16191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2798'. [ 487.059658][T16228] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2805'. [ 487.168023][T16230] xt_policy: output policy not valid in PREROUTING and INPUT [ 487.190448][T15648] veth0_vlan: entered promiscuous mode [ 487.235230][T15648] veth1_vlan: entered promiscuous mode [ 487.327110][T15648] veth0_macvtap: entered promiscuous mode [ 487.355414][T15648] veth1_macvtap: entered promiscuous mode [ 487.432791][T15648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.464833][T15648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.505327][T10478] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.536213][T10478] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.577724][T10478] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.618562][T10478] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.988827][T10478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.024974][T10478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.108976][T16261] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2812'. [ 488.130109][T16261] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2812'. [ 488.149022][T10478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.165794][T10478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.170303][T16261] netlink: 'syz.4.2812': attribute type 2 has an invalid length. [ 488.386667][T16270] netlink: 'syz.4.2814': attribute type 1 has an invalid length. [ 488.505665][T16270] 8021q: adding VLAN 0 to HW filter on device bond7 [ 488.886628][T16303] 8021q: VLANs not supported on gre0 [ 489.575935][T16342] netlink: 'syz.0.2834': attribute type 1 has an invalid length. [ 489.803684][T16357] netlink: 'syz.0.2840': attribute type 1 has an invalid length. [ 489.811717][T16357] __nla_validate_parse: 6 callbacks suppressed [ 489.811734][T16357] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2840'. [ 489.856924][T16356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 490.137456][T16370] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2845'. [ 490.155458][T16372] tipc: Enabling of bearer rejected, failed to enable media [ 490.198116][T16377] netlink: 'syz.2.2847': attribute type 8 has an invalid length. [ 490.238203][T16372] bond7: entered promiscuous mode [ 490.257817][T16372] bond7: entered allmulticast mode [ 490.263734][T16372] 8021q: adding VLAN 0 to HW filter on device bond7 [ 490.496215][T16395] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2851'. [ 490.685708][T16410] xt_TCPMSS: Only works on TCP SYN packets [ 490.702875][T16410] xt_TCPMSS: Only works on TCP SYN packets [ 490.822400][T16414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.840795][T16414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.851157][T16414] batman_adv: batadv0: Removing interface: ipvlan2 [ 491.677987][T16461] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2864'. [ 491.727934][T16463] lo: entered promiscuous mode [ 491.748271][T16463] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 491.780644][T16463] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2865'. [ 491.852378][ T5746] hid-generic 0005:0007:0007.0001: item fetching failed at offset 0/1 [ 491.876317][ T5746] hid-generic 0005:0007:0007.0001: probe with driver hid-generic failed with error -22 [ 492.276061][T16485] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 492.327225][T16485] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2871'. [ 492.344787][T16492] netlink: 'syz.0.2873': attribute type 3 has an invalid length. [ 492.353428][T16492] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2873'. [ 492.451731][T16488] x_tables: duplicate underflow at hook 1 [ 492.578046][T16500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2875'. [ 492.742361][T16509] netlink: 'syz.2.2876': attribute type 29 has an invalid length. [ 492.914857][T16505] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.924635][T16505] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.084520][T16524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2879'. [ 493.132149][T16505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.150493][T16505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.171114][T16529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2879'. [ 493.351968][T16530] netlink: 'syz.2.2876': attribute type 29 has an invalid length. [ 493.363039][T16514] syzkaller0: entered allmulticast mode [ 493.371408][T10498] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.386816][T10498] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.415834][T10498] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.437362][T10498] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.682739][T16549] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 494.228053][T16579] netlink: 'syz.1.2894': attribute type 1 has an invalid length. [ 494.666643][T16598] tipc: Enabled bearer , priority 0 [ 494.784911][T16595] tipc: Disabling bearer [ 494.824469][T16610] __nla_validate_parse: 4 callbacks suppressed [ 494.824485][T16610] netlink: 4240 bytes leftover after parsing attributes in process `syz.0.2902'. [ 495.000306][T16615] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2904'. [ 495.142893][T16625] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 495.171093][T16625] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 495.412655][T16652] IPv6: NLM_F_REPLACE set, but no existing node found! [ 495.426525][T16652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2912'. [ 495.436614][T16652] IPVS: Error connecting to the multicast addr [ 495.450782][T16652] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2912'. [ 495.820311][T16664] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 496.125298][T16682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2921'. [ 496.239700][T16682] 8021q: adding VLAN 0 to HW filter on device bond8 [ 496.509140][T16696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2927'. [ 496.552804][ T5638] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 496.584040][ T5638] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 496.593890][ T5638] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 496.619902][ T5638] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 496.628125][ T5638] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 497.056051][ T5634] bond0: (slave syz_tun): Releasing backup interface [ 497.079547][ T5634] syz_tun (unregistering): left allmulticast mode [ 497.185251][T16719] tipc: Enabling of bearer rejected, failed to enable media [ 497.298449][T16724] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2933'. [ 497.391923][T16732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2934'. [ 497.511958][T16700] lo speed is unknown, defaulting to 1000 [ 497.891203][T16747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2936'. [ 497.938965][T16750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2938'. [ 497.949038][T16750] block nbd0: reconnected socket [ 497.960920][T16750] nbd: socks must be embedded in a SOCK_ITEM attr [ 497.986323][ T50] block nbd0: Receive control failed (result -32) [ 498.255492][T16752] 8021q: adding VLAN 0 to HW filter on device bond9 [ 498.345972][T16758] netlink: 'syz.0.2941': attribute type 29 has an invalid length. [ 498.388247][T16758] netlink: 'syz.0.2941': attribute type 29 has an invalid length. [ 498.724138][ T50] Bluetooth: hci6: command tx timeout [ 498.786629][T16700] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.794210][T16700] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.801859][T16700] bridge_slave_0: entered allmulticast mode [ 498.811199][T16700] bridge_slave_0: entered promiscuous mode [ 498.821020][T16700] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.828791][T16700] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.837151][T16700] bridge_slave_1: entered allmulticast mode [ 498.845913][T16700] bridge_slave_1: entered promiscuous mode [ 498.962320][T16700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.011974][T16700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.168433][T16781] syzkaller1: entered promiscuous mode [ 499.188052][T16781] syzkaller1: entered allmulticast mode [ 499.265375][T16700] team0: Port device team_slave_0 added [ 499.331475][T16700] team0: Port device team_slave_1 added [ 499.347841][T16789] netlink: 'syz.0.2946': attribute type 7 has an invalid length. [ 499.388140][T16700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.395366][T16700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.422109][T16700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.437639][T16700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.463040][T16700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.491857][T16700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.534412][T16792] xt_NFQUEUE: number of total queues is 0 [ 499.617502][T16700] hsr_slave_0: entered promiscuous mode [ 499.638326][T16700] hsr_slave_1: entered promiscuous mode [ 499.646602][T16700] debugfs: 'hsr0' already exists in 'hsr' [ 499.652504][T16700] Cannot create hsr debugfs directory [ 499.995248][T16700] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.006935][T16700] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 500.039312][T16798] veth0: entered promiscuous mode [ 500.047082][T16797] veth0: left promiscuous mode [ 500.225335][T16700] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.267108][T16700] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 500.487549][T16700] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.509713][T16700] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 500.650422][T16700] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.669709][T16700] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 500.704248][T16823] __nla_validate_parse: 5 callbacks suppressed [ 500.704269][T16823] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2957'. [ 500.728558][T16825] netlink: 'syz.1.2958': attribute type 10 has an invalid length. [ 500.740878][T16823] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.803358][ T50] Bluetooth: hci6: command tx timeout [ 501.073977][T16833] bridge_slave_1: left allmulticast mode [ 501.091425][T16833] bridge_slave_1: left promiscuous mode [ 501.101480][T16833] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.130928][T16833] bond0: (slave bond_slave_0): Releasing backup interface [ 501.168782][T16833] bond0: (slave bond_slave_1): Releasing backup interface [ 501.185318][T16833] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 501.289371][T16700] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 501.322978][T16700] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 501.352196][T16700] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 501.375207][T16700] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 501.389864][T16848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2964'. [ 501.400507][T16700] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 501.407472][T16848] netlink: 'syz.0.2964': attribute type 18 has an invalid length. [ 501.421901][T16700] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 501.429691][T16848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2964'. [ 501.443754][T16851] syzkaller0: entered promiscuous mode [ 501.449459][T16851] syzkaller0: entered allmulticast mode [ 501.457445][T16700] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 501.476843][T16700] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 501.485880][T16848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2964'. [ 501.496672][T16848] netlink: 'syz.0.2964': attribute type 18 has an invalid length. [ 501.505527][T16848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2964'. [ 501.534932][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.574127][T16853] syzkaller0: entered promiscuous mode [ 501.580380][T16853] syzkaller0: entered allmulticast mode [ 501.847611][T16700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.903395][T16700] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.932954][T10485] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.940193][T10485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.972814][T10485] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.980085][T10485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.092787][T16882] team_slave_1: Caught tx_queue_len zero misconfig [ 502.637511][T16904] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2977'. [ 502.666084][T16904] xt_hashlimit: size too large, truncated to 1048576 [ 502.840879][T16700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.886807][ T50] Bluetooth: hci6: command tx timeout [ 503.075333][T16700] veth0_vlan: entered promiscuous mode [ 503.099948][T16700] veth1_vlan: entered promiscuous mode [ 503.233993][T16700] veth0_macvtap: entered promiscuous mode [ 503.273070][T16700] veth1_macvtap: entered promiscuous mode [ 503.380348][T16700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.421673][T16700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.441206][T10469] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.454171][T10469] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.480979][T10469] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.491209][T10469] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.507112][T16932] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2982'. [ 503.601191][T16936] netlink: 'syz.1.2983': attribute type 1 has an invalid length. [ 503.698240][T10498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.719240][T10498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.837376][T10469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.871214][T10469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.960172][T16950] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 503.969279][T16950] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 503.978533][T16950] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 504.150140][T16958] ip6_vti0: entered promiscuous mode [ 504.177405][T16958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2990'. [ 504.259125][T16967] netlink: 284 bytes leftover after parsing attributes in process `syz.2.2922'. [ 504.395859][ T5638] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 504.408673][ T5638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 504.419713][ T5638] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 504.432196][ T5638] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 504.440910][ T5638] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 504.628951][T16982] vcan1: entered promiscuous mode [ 504.637941][T16982] vcan1: entered allmulticast mode [ 504.925915][T16971] lo speed is unknown, defaulting to 1000 [ 504.963853][ T5638] Bluetooth: hci6: command tx timeout [ 505.391817][T16971] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.399328][T16971] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.407613][T16971] bridge_slave_0: entered allmulticast mode [ 505.415659][T16971] bridge_slave_0: entered promiscuous mode [ 505.424281][T16971] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.431472][T16971] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.439192][T16971] bridge_slave_1: entered allmulticast mode [ 505.448434][T16971] bridge_slave_1: entered promiscuous mode [ 505.486965][T16971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.499626][T16971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.539490][T16971] team0: Port device team_slave_0 added [ 505.547980][T16971] team0: Port device team_slave_1 added [ 505.577464][T16971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.584596][T16971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.611342][T16971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.624952][T16971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.631962][T16971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.658530][T16971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.707215][T16971] hsr_slave_0: entered promiscuous mode [ 505.714274][T16971] hsr_slave_1: entered promiscuous mode [ 505.720575][T16971] debugfs: 'hsr0' already exists in 'hsr' [ 505.726449][T16971] Cannot create hsr debugfs directory [ 506.483539][ T5638] Bluetooth: hci1: command tx timeout [ 506.873866][T16945] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 506.898217][T16979] netlink: 'syz.2.2993': attribute type 3 has an invalid length. [ 506.915838][T16979] netlink: 'syz.2.2993': attribute type 1 has an invalid length. [ 506.930868][T16979] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2993'. [ 506.949629][T16971] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 507.016154][T16971] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 507.062540][T16971] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 507.110387][T16971] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 507.123075][T16971] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 507.145581][T16971] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 507.189784][T16971] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 507.225793][T16971] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 507.329580][T17025] netlink: 'syz.1.3001': attribute type 10 has an invalid length. [ 507.376763][T17025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3001'. [ 507.403834][T17025] netlink: 'syz.1.3001': attribute type 3 has an invalid length. [ 507.599273][T16971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.633106][T17044] netlink: 'syz.0.3005': attribute type 1 has an invalid length. [ 507.662825][T16971] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.788278][T17049] bond10: (slave bridge9): making interface the new active one [ 507.798611][T17049] bond10: (slave bridge9): Enslaving as an active interface with an up link [ 507.830331][T17057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3005'. [ 507.928509][T17044] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 507.949735][T10509] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.956993][T10509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.975838][T10509] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.983088][T10509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.080488][T17064] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3010'. [ 508.379630][T17077] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3013'. [ 508.398492][T17080] syzkaller0: entered promiscuous mode [ 508.407492][T17080] syzkaller0: entered allmulticast mode [ 508.521898][T17080] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3014'. [ 508.566810][ T5638] Bluetooth: hci1: command tx timeout [ 508.634396][T17087] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3016'. [ 508.692059][T17090] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3016'. [ 508.912087][T17093] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 509.102629][T17118] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 509.162866][T17117] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 509.361983][T16971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.461522][T17129] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:ac14:14aa [ 509.761931][T17146] lo: Caught tx_queue_len zero misconfig [ 509.952655][T17159] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3032'. [ 510.150396][T16971] veth0_vlan: entered promiscuous mode [ 510.259240][T16971] veth1_vlan: entered promiscuous mode [ 510.278842][T17169] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3036'. [ 510.357991][T17176] netlink: 'syz.0.3038': attribute type 1 has an invalid length. [ 510.643834][ T5638] Bluetooth: hci1: command tx timeout [ 510.938023][T17197] sctp: [Deprecated]: syz.0.3043 (pid 17197) Use of int in max_burst socket option. [ 510.938023][T17197] Use struct sctp_assoc_value instead [ 510.958512][T17197] netlink: 'syz.0.3043': attribute type 1 has an invalid length. [ 512.726654][ T5638] Bluetooth: hci1: command tx timeout [ 513.134698][T16971] veth0_macvtap: entered promiscuous mode [ 513.170979][T16971] veth1_macvtap: entered promiscuous mode [ 513.257170][T16971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.301325][T16971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.318495][T17213] tipc: Trying to set illegal importance in message [ 513.329404][T17213] __nla_validate_parse: 2 callbacks suppressed [ 513.329426][T17213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3049'. [ 513.349362][T17210] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3048'. [ 513.374496][T10483] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.387584][T17210] ip6tnl0: Caught tx_queue_len zero misconfig [ 513.401170][T10483] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.430826][T10483] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.547590][T17213] team1: entered promiscuous mode [ 513.555428][T17213] team1: entered allmulticast mode [ 513.572057][T10483] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.761514][T17227] sit0: Caught tx_queue_len zero misconfig [ 513.821283][ T29] audit: type=1804 audit(1780849096.161:7): pid=17229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3053" name="/newroot/10/cgroup.controllers" dev="tmpfs" ino=68 res=1 errno=0 [ 513.865914][T17233] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3055'. [ 513.879483][ T29] audit: type=1800 audit(1780849096.191:8): pid=17229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3053" name="cgroup.controllers" dev="tmpfs" ino=68 res=0 errno=0 [ 513.918403][T17233] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3055'. [ 513.938301][T17233] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3055'. [ 513.965030][T10498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.973157][T10498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.076748][T10498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.086790][T10498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.180098][T17247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3058'. [ 514.194742][T17247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3058'. [ 514.369708][T17252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3060'. [ 514.398144][T17252] sit0: entered promiscuous mode [ 514.420316][T17252] netlink: 'syz.2.3060': attribute type 1 has an invalid length. [ 514.441022][T17252] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3060'. [ 514.501377][T17252] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3060'. [ 514.561012][ T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 514.586382][ T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 514.600848][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 514.614501][ T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 514.626069][ T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 515.051271][T17268] veth3: entered allmulticast mode [ 515.062871][T17275] openvswitch: netlink: Flow key attr not present in new flow. [ 515.325450][T17275] syzkaller0: entered promiscuous mode [ 515.349953][T17275] syzkaller0: entered allmulticast mode [ 515.570230][T17298] IPv6: NLM_F_CREATE should be specified when creating new route [ 515.758510][T17254] lo speed is unknown, defaulting to 1000 [ 515.948749][T17316] bond10: (slave 26±ÿ): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 516.020300][T17316] bond10: (slave 26±ÿ): Enslaving as an active interface with an up link [ 516.063045][T17316] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 516.108470][T17318] xt_bpf: check failed: parse error [ 516.734118][ T50] Bluetooth: hci7: command tx timeout [ 516.741312][T17347] veth1_to_bond: entered allmulticast mode [ 516.857879][T17349] gtp0: entered promiscuous mode [ 516.900362][T17349] gtp0: entered allmulticast mode [ 516.997384][T17346] veth1_to_bond: left allmulticast mode [ 517.039102][T17353] xt_hashlimit: size too large, truncated to 1048576 [ 517.097596][T17360] –: renamed from vxcan1 (while UP) [ 517.662905][T17254] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.688393][T17254] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.709039][T17254] bridge_slave_0: entered allmulticast mode [ 517.735872][T17254] bridge_slave_0: entered promiscuous mode [ 517.763080][T17254] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.792861][T17254] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.819047][T17254] bridge_slave_1: entered allmulticast mode [ 517.846832][T17254] bridge_slave_1: entered promiscuous mode [ 517.969079][T17254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.026301][T17254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.122282][T17254] team0: Port device team_slave_0 added [ 518.154119][T17254] team0: Port device team_slave_1 added [ 518.275593][T17254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.300000][T17254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.351494][T17254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.374235][T17254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.392955][T17254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.437508][T17254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.682708][T17254] hsr_slave_0: entered promiscuous mode [ 518.712625][T17254] hsr_slave_1: entered promiscuous mode [ 518.731744][T17254] debugfs: 'hsr0' already exists in 'hsr' [ 518.742410][T17254] Cannot create hsr debugfs directory [ 518.809773][ T50] Bluetooth: hci7: command tx timeout [ 518.848139][T17432] netlink: 'syz.1.3109': attribute type 1 has an invalid length. [ 518.896683][T17433] __nla_validate_parse: 15 callbacks suppressed [ 518.896705][T17433] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3108'. [ 519.021235][T17440] sctp: [Deprecated]: syz.5.3108 (pid 17440) Use of int in max_burst socket option deprecated. [ 519.021235][T17440] Use struct sctp_assoc_value instead [ 519.779121][T17460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.300739][T17479] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3118'. [ 520.884429][ T50] Bluetooth: hci7: command tx timeout [ 521.012722][T17486] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3119'. [ 522.511303][T17479] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 522.876104][T17502] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3122'. [ 522.924046][T17502] netlink: 'syz.5.3122': attribute type 7 has an invalid length. [ 522.950402][T17502] netlink: 'syz.5.3122': attribute type 8 has an invalid length. [ 522.963530][ T50] Bluetooth: hci7: command tx timeout [ 522.979893][T17502] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3122'. [ 523.492479][T17529] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3132'. [ 523.510895][T17534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3133'. [ 523.676366][T17541] pim6reg: entered allmulticast mode [ 523.898342][T17547] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3138'. [ 524.234699][T17254] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 524.247318][T17567] netlink: 376 bytes leftover after parsing attributes in process `syz.2.3144'. [ 524.266907][T17254] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 524.290652][T17254] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 524.311917][T17254] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 524.331124][T17254] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 524.372502][T17254] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 524.399921][T17254] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 524.427330][T17254] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 524.582269][T17254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.606887][T17583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 524.642635][T17254] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.671342][T10498] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.678636][T10498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.717092][T10498] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.724398][T10498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.196663][T17603] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3152'. [ 525.258229][T17606] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3153'. [ 525.451260][T17612] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 525.541749][T17619] syzkaller0: entered promiscuous mode [ 525.562725][T17619] syzkaller0: entered allmulticast mode [ 525.706907][T17254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.870244][T17635] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3159'. [ 526.009224][T17254] veth0_vlan: entered promiscuous mode [ 526.159455][T17254] veth1_vlan: entered promiscuous mode [ 526.200799][T17644] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 526.307431][T17254] veth0_macvtap: entered promiscuous mode [ 526.322720][T17254] veth1_macvtap: entered promiscuous mode [ 526.388197][T17254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.470377][T17254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.516352][T10469] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.534916][T10469] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.584448][T10469] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.613329][T10469] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.661403][T17658] netlink: 'syz.5.3168': attribute type 1 has an invalid length. [ 526.755104][T17658] netlink: 284 bytes leftover after parsing attributes in process `syz.5.3168'. [ 526.786124][T17664] netlink: 'syz.6.3169': attribute type 1 has an invalid length. [ 526.885014][T17661] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 526.899260][T17663] netlink: 'syz.6.3169': attribute type 1 has an invalid length. [ 526.920632][T17661] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 526.954853][T17661] bond1: (slave ip6gre1): making interface the new active one [ 526.976236][T17661] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 527.310276][T10495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.350327][T10495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.506362][T10485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.526300][T10485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.541777][T17688] bridge0: port 3(wlan0) entered blocking state [ 527.565942][T17688] bridge0: port 3(wlan0) entered disabled state [ 527.590137][T17688] mac80211_hwsim hwsim30 wlan0: entered allmulticast mode [ 527.623569][T17688] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 527.646605][T17690] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3175'. [ 527.664592][T17690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3175'. [ 527.696778][T17690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3175'. [ 527.900610][T17703] netlink: 'syz.0.3059': attribute type 1 has an invalid length. [ 527.917369][T17703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3059'. [ 527.930859][T17703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3059'. [ 527.941174][T17703] netlink: 'syz.0.3059': attribute type 2 has an invalid length. [ 527.949668][T17703] netlink: 'syz.0.3059': attribute type 2 has an invalid length. [ 527.959790][T17703] netlink: 'syz.0.3059': attribute type 2 has an invalid length. [ 528.021673][T17693] syzkaller1: entered promiscuous mode [ 528.038163][T17693] syzkaller1: entered allmulticast mode [ 528.256508][T17711] netlink: 'syz.0.3179': attribute type 5 has an invalid length. [ 528.359473][T17719] netlink: 'syz.2.3183': attribute type 7 has an invalid length. [ 528.417746][T17722] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 528.434892][T17722] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 528.444917][T17722] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 528.457900][T17722] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 528.473650][T17722] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 528.478033][T17719] netlink: 'syz.2.3183': attribute type 7 has an invalid length. [ 528.491759][T10485] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.502593][T10485] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.514828][T10485] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.523880][T10485] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.843928][T17733] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 529.422910][T17754] __nla_validate_parse: 3 callbacks suppressed [ 529.422961][T17754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3192'. [ 529.455996][T17754] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3192'. [ 529.531868][T17721] lo speed is unknown, defaulting to 1000 [ 529.637851][T17760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3195'. [ 529.666297][T17760] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 529.707936][T17760] openvswitch: netlink: IP tunnel dst address not specified [ 529.922511][T17767] tipc: Failed to remove unknown binding: 66,1,1/0:1630707385/1630707387 [ 529.944592][T17769] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3197'. [ 529.987132][T17767] tipc: Failed to remove unknown binding: 66,1,1/0:1630707385/1630707387 [ 530.193804][T17783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3202'. [ 530.212553][T17784] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3199'. [ 530.253773][T17787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3202'. [ 530.280374][T17787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3202'. [ 530.424227][T17787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3202'. [ 530.448875][T17787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3202'. [ 530.477451][T10495] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.497271][T10495] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.565318][ T50] Bluetooth: hci4: command tx timeout [ 530.613205][T17801] xt_socket: unknown flags 0x50 [ 530.660274][T17789] 8021q: adding VLAN 0 to HW filter on device bond1 [ 530.680793][T17794] bond1: (slave batadv1): Opening slave failed [ 530.720223][T10495] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.737482][T10495] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.779170][T17804] mac80211_hwsim hwsim33 ÿ: renamed from wlan1 [ 531.255960][T17825] tipc: Enabling of bearer rejected, failed to enable media [ 531.267916][T17825] ipvlan0: entered allmulticast mode [ 531.273889][T17825] veth0_vlan: entered allmulticast mode [ 531.283014][T17825] team0: Device ipvlan0 failed to register rx_handler [ 531.404531][T17827] netlink: 'syz.6.3214': attribute type 11 has an invalid length. [ 531.793735][T17721] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.809771][T17721] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.821632][T17721] bridge_slave_0: entered allmulticast mode [ 531.831035][T17721] bridge_slave_0: entered promiscuous mode [ 531.851972][T17721] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.868938][T17721] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.876747][T17721] bridge_slave_1: entered allmulticast mode [ 531.886258][T17721] bridge_slave_1: entered promiscuous mode [ 532.020170][T17721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.644783][ T50] Bluetooth: hci4: command tx timeout [ 534.266854][T17721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.292729][T17852] veth0: entered promiscuous mode [ 534.305573][T17853] veth0: left promiscuous mode [ 534.370921][T17721] team0: Port device team_slave_0 added [ 534.396987][T17721] team0: Port device team_slave_1 added [ 534.482725][T17721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.490203][T17721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.519158][T17721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.532194][T17869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.541295][T17869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.556584][T17721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.564526][T17721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.591309][T17721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.658048][T17875] __nla_validate_parse: 7 callbacks suppressed [ 534.658064][T17875] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3225'. [ 534.680447][T17721] hsr_slave_0: entered promiscuous mode [ 534.687366][T17721] hsr_slave_1: entered promiscuous mode [ 534.694023][T17721] debugfs: 'hsr0' already exists in 'hsr' [ 534.699832][T17721] Cannot create hsr debugfs directory [ 534.727095][ T50] Bluetooth: hci4: command tx timeout [ 534.809111][T17845] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 535.191079][T17889] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3231'. [ 535.225643][T17889] netlink: ct family unspecified [ 535.345561][T17721] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 535.414593][T17897] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3232'. [ 535.617581][T17721] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 535.908151][T17721] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 535.945490][T17929] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3243'. [ 536.267359][T17949] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3249'. [ 536.329310][T17950] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3249'. [ 536.803403][ T50] Bluetooth: hci4: command tx timeout [ 538.756168][T17721] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 538.991582][T17970] netlink: 'syz.0.3253': attribute type 11 has an invalid length. [ 539.020820][T17970] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3253'. [ 539.181191][T17982] validate_nla: 5 callbacks suppressed [ 539.181211][T17982] netlink: 'syz.6.3257': attribute type 1 has an invalid length. [ 539.209259][T17982] netlink: 'syz.6.3257': attribute type 2 has an invalid length. [ 539.392937][T17721] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 539.420942][T17721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 539.436922][T17721] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 539.497794][T17721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 539.522716][T17721] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 539.550095][T17721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 539.572643][T17721] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 539.619902][T17721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 539.698520][T17999] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3262'. [ 539.777194][T17721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.823078][T17721] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.849230][T10478] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.856410][T10478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.923151][T10478] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.930399][T10478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.005348][T18019] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3266'. [ 540.326129][T18036] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3270'. [ 540.361383][T18036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3270'. [ 540.488821][T18038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.853891][T18053] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3273'. [ 540.878336][T18058] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3274'. [ 541.589183][T17721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.777901][T17721] veth0_vlan: entered promiscuous mode [ 541.802387][T17721] veth1_vlan: entered promiscuous mode [ 541.882124][T17721] veth0_macvtap: entered promiscuous mode [ 541.920662][T17721] veth1_macvtap: entered promiscuous mode [ 541.995754][T17721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 542.051426][T17721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.075491][T18101] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3282'. [ 542.087375][T18103] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3284'. [ 542.112113][T18103] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3284'. [ 542.128867][T10485] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.148839][T18103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3284'. [ 542.186958][T10485] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.215157][T10485] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.345184][T18103] netlink: 'syz.0.3284': attribute type 1 has an invalid length. [ 542.373833][T18103] netlink: 'syz.0.3284': attribute type 1 has an invalid length. [ 542.419901][T10485] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.747658][T10485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.805192][T10485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.839082][T18142] netlink: 'syz.2.3289': attribute type 1 has an invalid length. [ 542.860842][T18145] netlink: 'syz.0.3291': attribute type 13 has an invalid length. [ 542.900695][T18145] netlink: 'syz.0.3291': attribute type 58 has an invalid length. [ 543.054208][T18142] 8021q: adding VLAN 0 to HW filter on device bond2 [ 543.095883][T18152] ip_vti0: entered promiscuous mode [ 543.166869][T10469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.202280][T10469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.792277][T18189] netlink: 'syz.5.3302': attribute type 1 has an invalid length. [ 544.643094][T18223] syzkaller0: entered promiscuous mode [ 544.651168][T18223] syzkaller0: entered allmulticast mode [ 544.832860][T18248] __nla_validate_parse: 5 callbacks suppressed [ 544.832880][T18248] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3319'. [ 544.958398][T18256] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3321'. [ 545.729888][T18267] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 547.586961][T18274] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3323'. [ 547.652507][T18279] xt_hashlimit: overflow, try lower: 3/0 [ 547.854663][T18290] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3330'. [ 547.882135][T18294] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3329'. [ 547.934947][T18301] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3331'. [ 548.001631][T18305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3332'. [ 548.075670][T18305] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3332'. [ 548.105483][T18305] netlink: Conntrack attr has 4 unknown bytes [ 548.322113][T18318] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3336'. [ 548.689884][T18345] netlink: 'syz.6.3345': attribute type 1 has an invalid length. [ 548.823757][T18353] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.3349'. [ 549.256003][T18374] netlink: 'syz.2.3354': attribute type 1 has an invalid length. [ 549.727232][T18397] netlink: 'syz.6.3358': attribute type 1 has an invalid length. [ 549.828844][T18401] netlink: 'syz.1.3359': attribute type 1 has an invalid length. [ 549.908317][T18397] bond2: entered promiscuous mode [ 549.914731][T18397] 8021q: adding VLAN 0 to HW filter on device bond2 [ 549.989186][T18401] vlan2: entered allmulticast mode [ 550.017416][T18401] veth1_to_team: entered allmulticast mode [ 550.159553][T18416] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 550.251995][T18429] __nla_validate_parse: 4 callbacks suppressed [ 550.252012][T18429] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3364'. [ 550.379861][T18440] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3366'. [ 550.887708][T18453] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3367'. [ 551.154249][T10509] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.262856][T18481] tipc: Started in network mode [ 551.285111][T18481] tipc: Node identity 5e334ff51fcc, cluster identity 4711 [ 551.334243][T18481] tipc: Enabled bearer , priority 0 [ 551.397747][T18492] syzkaller0: entered promiscuous mode [ 551.433875][T18492] syzkaller0: entered allmulticast mode [ 551.471556][T18481] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 551.515461][T18481] tipc: Resetting bearer [ 551.530151][T18478] tipc: Resetting bearer [ 551.552056][T18478] tipc: Disabling bearer [ 551.582756][T18493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 551.590131][T18493] IPv6: NLM_F_CREATE should be set when creating new route [ 551.597451][T18493] IPv6: NLM_F_CREATE should be set when creating new route [ 551.625779][T18499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3376'. [ 551.653643][T18499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3376'. [ 551.674574][T18493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 551.691841][T18493] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3374'. [ 551.766791][T18504] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.3378'. [ 551.910309][T18511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3381'. [ 551.936637][T18512] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3381'. [ 551.961183][T18517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 552.018509][T18511] 8021q: adding VLAN 0 to HW filter on device bond7 [ 552.213369][T18531] netlink: 'syz.2.3385': attribute type 4 has an invalid length. [ 552.223725][T18532] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.3385'. [ 553.040750][T18570] 8021q: adding VLAN 0 to HW filter on device bond3 [ 553.105927][T18578] bond3 (unregistering): Released all slaves [ 553.289004][T18587] dvmrp0: entered allmulticast mode [ 553.900950][T18616] veth0_macvtap: left promiscuous mode [ 554.197190][T18607] syzkaller0: entered promiscuous mode [ 554.213357][T18607] syzkaller0: entered allmulticast mode [ 554.667775][T18657] netlink: 'syz.5.3413': attribute type 1 has an invalid length. [ 554.707486][T18657] netlink: 'syz.5.3413': attribute type 1 has an invalid length. [ 554.742673][T18663] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20004 [ 554.942434][T18673] netlink: 'syz.6.3418': attribute type 1 has an invalid length. [ 555.051456][T18676] syzkaller0: entered promiscuous mode [ 555.081828][T18676] syzkaller0: entered allmulticast mode [ 555.180777][T18676] tipc: Started in network mode [ 555.198516][T18676] tipc: Node identity 62e188b570e4, cluster identity 4711 [ 555.231674][T18676] tipc: Enabled bearer , priority 0 [ 555.277588][T18690] bridge_slave_0: left allmulticast mode [ 555.296998][T18690] bridge_slave_0: left promiscuous mode [ 555.305711][T18690] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.329966][T18695] __nla_validate_parse: 9 callbacks suppressed [ 555.329987][T18695] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3421'. [ 555.352742][T18690] bridge_slave_1: left allmulticast mode [ 555.361584][T18690] bridge_slave_1: left promiscuous mode [ 555.370339][T18690] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.401429][T18690] bond0: (slave bond_slave_0): Releasing backup interface [ 555.411184][T18701] netlink: 'syz.1.3421': attribute type 10 has an invalid length. [ 555.422139][T18701] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3421'. [ 555.445650][T18690] bond0: (slave bond_slave_1): Releasing backup interface [ 555.496448][T18690] team0: Port device team_slave_0 removed [ 555.518795][T18690] team0: Port device team_slave_1 removed [ 555.527844][T18690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 555.537758][T18690] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.549192][T18690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.558033][T18690] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.570793][T18690] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 555.593011][T18705] x_tables: duplicate underflow at hook 1 [ 555.601869][T18675] tipc: Resetting bearer [ 555.638161][T18675] tipc: Disabling bearer [ 555.857758][T18709] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3426'. [ 555.888264][T18714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3427'. [ 556.293007][T18736] syzkaller0: entered promiscuous mode [ 556.310859][T18736] syzkaller0: entered allmulticast mode [ 556.489566][T18753] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3436'. [ 556.588879][T18746] lo: entered promiscuous mode [ 556.600973][T18746] tunl0: entered promiscuous mode [ 556.666799][T18746] gre0: entered promiscuous mode [ 556.732030][T18746] gretap0: entered promiscuous mode [ 556.771378][T18746] erspan0: entered promiscuous mode [ 556.818358][T18746] ip_vti0: entered promiscuous mode [ 557.150406][T18773] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 557.158014][T18773] IPv6: NLM_F_CREATE should be set when creating new route [ 557.165496][T18773] IPv6: NLM_F_CREATE should be set when creating new route [ 557.172782][T18773] IPv6: NLM_F_CREATE should be set when creating new route [ 557.201568][T18774] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 557.507845][T18795] blkio.reset_stats is deprecated [ 557.545410][T18795] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.3449'. [ 557.818097][T18802] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3450'. [ 557.992653][T18827] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3457'. [ 558.368671][T18838] syzkaller0: entered promiscuous mode [ 558.384907][T18838] syzkaller0: entered allmulticast mode [ 558.861594][T18868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 560.921538][T18866] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 560.948587][T18868] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3468'. [ 560.973881][T18868] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3468'. [ 561.200748][T18881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3475'. [ 561.339417][T18891] ip6gre1: entered allmulticast mode [ 561.660328][T18913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3482'. [ 561.717385][T18913] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3482'. [ 561.770909][T18909] : entered promiscuous mode [ 561.829690][T18918] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3484'. [ 561.840620][T18918] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3484'. [ 562.149227][T18936] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3490'. [ 562.209127][T18945] netlink: 'syz.2.3491': attribute type 6 has an invalid length. [ 562.241988][T18945] netlink: 'syz.2.3491': attribute type 21 has an invalid length. [ 562.256525][T18945] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3491'. [ 562.330546][T18949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 562.439638][T18954] x_tables: duplicate underflow at hook 1 [ 562.457155][T18956] netlink: 'syz.1.3494': attribute type 10 has an invalid length. [ 562.501736][T18957] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3496'. [ 562.617658][ T50] block nbd3: Receive control failed (result -1) [ 562.856787][T18966] lo speed is unknown, defaulting to 1000 [ 562.875749][T18967] openvswitch: netlink: Message has 60 unknown bytes. [ 562.971243][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.978809][ T1317] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 563.608049][T18974] 8021q: VLANs not supported on ipvlan1 [ 563.758048][T18999] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20001 [ 564.270201][T19016] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 564.389088][T19021] netlink: 'syz.1.3514': attribute type 1 has an invalid length. [ 564.882176][T19052] xt_TPROXY: Can be used only with -p tcp or -p udp [ 565.350446][T19073] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 565.408921][T19073] bond8: (slave lo): Enslaving as an active interface with an up link [ 565.430580][T19073] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 565.641140][T19091] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 565.744360][T19079] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 565.791241][T19098] netlink: 'syz.6.3530': attribute type 39 has an invalid length. [ 566.050976][T19107] __nla_validate_parse: 7 callbacks suppressed [ 566.050995][T19107] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3534'. [ 566.407517][T19122] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 566.619856][T19137] openvswitch: netlink: IPv4 tun info is not correct [ 566.702494][T19147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3547'. [ 566.720798][T19149] netlink: 'syz.5.3544': attribute type 62 has an invalid length. [ 566.756031][T19133] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 566.778857][T19133] bond3 (unregistering): Released all slaves [ 566.861897][T19147] erspan0: entered promiscuous mode [ 567.109258][T19165] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3552'. [ 567.153080][T19168] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3551'. [ 567.188417][T19177] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3554'. [ 567.271048][T19177] bond3: (slave gre0): Device is not bonding slave [ 567.297743][T19177] bond3: option active_slave: invalid value (gre0) [ 567.317170][T19177] bond3 (unregistering): Released all slaves [ 567.401339][T19183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3553'. [ 567.458203][T19178] gretap1: entered promiscuous mode [ 567.659278][T19203] netlink: 'syz.2.3556': attribute type 1 has an invalid length. [ 568.874401][T19265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3569'. [ 570.230784][T19181] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 570.513879][T19279] netlink: 'syz.2.3574': attribute type 21 has an invalid length. [ 570.543383][T19279] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3574'. [ 570.558729][T19290] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 570.668581][T19291] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 570.684903][T19297] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 570.881956][T19306] netlink: 38823 bytes leftover after parsing attributes in process `syz.0.3580'. [ 570.922627][T19308] nbd: socks must be embedded in a SOCK_ITEM attr [ 571.330168][T19328] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3587'. [ 571.428045][T19325] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3586'. [ 571.479822][T19330] veth3: entered promiscuous mode [ 571.626876][T19329] syzkaller0: entered promiscuous mode [ 571.632519][T19329] syzkaller0: entered allmulticast mode [ 571.809095][T19352] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 574.584833][T19373] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3599'. [ 574.688820][T19386] openvswitch: netlink: Duplicate or invalid key (type 0). [ 574.709335][T19386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 574.758868][T19395] netlink: 'syz.1.3602': attribute type 1 has an invalid length. [ 574.947300][T19396] bond1: (slave veth3): Enslaving as an active interface with a down link [ 574.959905][T19398] 8021q: adding VLAN 0 to HW filter on device bond1 [ 575.775728][T19452] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3617'. [ 575.791334][T19452] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3617'. [ 575.809915][T19455] xt_hashlimit: size too large, truncated to 1048576 [ 576.091403][T19470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3621'. [ 576.208534][T19473] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3623'. [ 576.740167][T19502] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3632'. [ 577.272773][T19529] netlink: 'syz.5.3640': attribute type 4 has an invalid length. [ 577.294564][T19530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3639'. [ 577.643329][T19523] netlink: 1236 bytes leftover after parsing attributes in process `syz.6.3636'. [ 577.682263][T19543] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.3644'. [ 577.692936][T19543] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.3644'. [ 577.815698][T19549] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3646'. [ 578.082729][T19557] bond2: entered promiscuous mode [ 578.087935][T19557] bond2: entered allmulticast mode [ 578.109852][T19557] openvswitch: netlink: Message has 1 unknown bytes. [ 578.117534][T19557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 578.249373][T19566] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 578.323063][ T24] IPVS: starting estimator thread 0... [ 578.433259][T19571] IPVS: using max 28 ests per chain, 67200 per kthread [ 578.465391][T19577] IPVS: sh: FWM 3 0x00000003 - no destination available [ 578.801280][T19570] tc_dump_action: action bad kind [ 578.826899][T19590] syzkaller0: entered promiscuous mode [ 578.851927][T19590] syzkaller0: entered allmulticast mode [ 578.887645][T19595] netlink: 'syz.5.3656': attribute type 11 has an invalid length. [ 579.140024][T19600] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 579.174350][T19600] netlink: 'syz.5.3658': attribute type 5 has an invalid length. [ 579.184422][T19602] veth0: entered promiscuous mode [ 579.195702][T19603] netlink: 'syz.1.3659': attribute type 11 has an invalid length. [ 579.210194][T19602] xt_hashlimit: size too large, truncated to 1048576 [ 579.770521][T19601] veth0: left promiscuous mode [ 580.170619][T19633] block nbd0: Unsupported socket: should be TCP or UNIX. [ 580.345143][T19654] netlink: 'syz.1.3674': attribute type 3 has an invalid length. [ 580.363885][T19654] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3674'. [ 580.545200][T19666] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 580.582415][T19666] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3678'. [ 580.658447][T19672] openvswitch: netlink: IP tunnel dst address not specified [ 580.681534][T19666] geneve2: entered promiscuous mode [ 580.838779][T19675] netlink: 'syz.5.3680': attribute type 1 has an invalid length. [ 580.881108][T19675] 8021q: adding VLAN 0 to HW filter on device bond2 [ 580.897227][T19675] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3680'. [ 581.006787][T19678] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 581.304619][T19698] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3685'. [ 581.790848][T19701] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 581.810904][T19701] 8021q: adding VLAN 0 to HW filter on device bond1 [ 581.825527][T19701] 8021q: adding VLAN 0 to HW filter on device bond2 [ 581.851072][T19701] 8021q: adding VLAN 0 to HW filter on device bond3 [ 581.881624][T19701] 8021q: adding VLAN 0 to HW filter on device bond4 [ 581.914047][T19701] 8021q: adding VLAN 0 to HW filter on device bond5 [ 581.947259][T19701] 8021q: adding VLAN 0 to HW filter on device bond6 [ 581.968963][T19701] veth0_macvtap: entered promiscuous mode [ 582.007730][T19701] 8021q: adding VLAN 0 to HW filter on device bond8 [ 582.034181][T19730] netlink: 'syz.2.3697': attribute type 1 has an invalid length. [ 582.051900][T19730] netlink: 'syz.2.3697': attribute type 3 has an invalid length. [ 582.063371][T19730] __nla_validate_parse: 1 callbacks suppressed [ 582.063392][T19730] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3697'. [ 582.094177][T19730] NCSI netlink: No device for ifindex 813332851 [ 582.309191][T19744] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3701'. [ 582.341638][T19746] netlink: 'syz.5.3702': attribute type 17 has an invalid length. [ 582.360002][T19748] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3701'. [ 582.369591][T19746] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3702'. [ 582.369633][T19746] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3702'. [ 582.390341][T19746] gretap0: entered promiscuous mode [ 582.400652][T19746] gretap0: left promiscuous mode [ 582.447722][T19752] netlink: 'syz.0.3703': attribute type 2 has an invalid length. [ 582.518628][T19756] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3705'. [ 582.742915][T19768] netlink: 'syz.1.3709': attribute type 10 has an invalid length. [ 582.818716][T19768] veth1_macvtap: left promiscuous mode [ 582.852970][T19768] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 582.877156][T19773] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3710'. [ 582.895930][T19775] syzkaller0: entered promiscuous mode [ 582.909984][T19775] syzkaller0: entered allmulticast mode [ 582.953710][T19775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3711'. [ 583.044931][T19777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3712'. [ 583.139157][T19775] macvtap1: entered promiscuous mode [ 583.149502][T19782] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3714'. [ 583.157702][T19775] vlan0: entered promiscuous mode [ 583.180170][T19775] macvtap1: entered allmulticast mode [ 583.198521][T19782] openvswitch: netlink: Flow actions attr not present in new flow. [ 583.205873][T19775] vlan0: entered allmulticast mode [ 583.231241][T19775] veth0_vlan: entered allmulticast mode [ 583.667421][T19800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 583.724246][T19800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 583.822522][T19805] netlink: 'syz.2.3718': attribute type 1 has an invalid length. [ 584.015044][T19805] 8021q: adding VLAN 0 to HW filter on device bond3 [ 584.085319][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.098727][T19809] bond3: (slave veth5): Enslaving as an active interface with a down link [ 584.402388][T19835] netlink: 'syz.2.3726': attribute type 1 has an invalid length. [ 584.485972][T19835] netlink: 'syz.2.3726': attribute type 2 has an invalid length. [ 584.729222][ T6992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.743570][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.754471][ T8514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.536920][T19873] netlink: 'syz.2.3737': attribute type 1 has an invalid length. [ 585.797379][T19877] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 587.364474][T19935] netlink: 'syz.1.3755': attribute type 83 has an invalid length. [ 587.771725][T19953] netlink: 'syz.6.3758': attribute type 1 has an invalid length. [ 587.829997][T19958] __nla_validate_parse: 17 callbacks suppressed [ 587.830019][T19958] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3758'. [ 587.849992][T19958] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3758'. [ 587.909229][T19950] 8021q: VLANs not supported on ip_vti0 [ 587.961680][T19954] can: request_module (can-proto-3) failed. [ 588.258587][T19964] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3761'. [ 588.279165][T19970] bond0: Error: Cannot enslave bond to itself. [ 588.297979][T19971] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3762'. [ 588.560310][T19978] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3765'. [ 588.569853][T19979] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3765'. [ 588.647412][T19986] netlink: 'syz.6.3768': attribute type 1 has an invalid length. [ 588.867217][T19986] 8021q: adding VLAN 0 to HW filter on device bond3 [ 588.977094][T19991] bond3: (slave geneve2): making interface the new active one [ 589.010957][T19991] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 589.254180][ T24] IPv4: Oversized IP packet from 127.0.0.1 [ 589.266871][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 589.274025][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 589.691366][T20025] IPVS: length: 4096 != 8 [ 589.704464][T20021] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3779'. [ 589.910537][T20030] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3778'. [ 589.937985][T20039] netlink: 'syz.1.3781': attribute type 1 has an invalid length. [ 590.063696][T20045] netlink: 'syz.6.3783': attribute type 4 has an invalid length. [ 590.086592][T20045] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3783'. [ 590.204917][T20050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3784'. [ 590.490984][T10469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.506148][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.522367][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.799642][T20050] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 590.901236][T20070] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 591.079890][T20077] netlink: 'syz.2.3791': attribute type 1 has an invalid length. [ 591.175866][T20077] 8021q: adding VLAN 0 to HW filter on device bond4 [ 591.262053][T20083] bond4: (slave veth7): Enslaving as an active interface with a down link [ 591.599929][T20094] syzkaller1: entered promiscuous mode [ 591.615522][T20094] syzkaller1: entered allmulticast mode [ 591.944570][T20119] vlan2: entered allmulticast mode [ 591.949854][T20119] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 592.055314][ T8514] IPVS: starting estimator thread 0... [ 592.102037][T20139] x_tables: duplicate underflow at hook 2 [ 592.143278][T20137] IPVS: using max 24 ests per chain, 57600 per kthread [ 593.341023][T20150] __nla_validate_parse: 11 callbacks suppressed [ 593.341039][T20150] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3811'. [ 594.858913][T20117] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 594.870372][T20128] kthread_run failed with err -4 [ 595.130727][T20163] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.3814'. [ 595.366893][T20178] netlink: 'syz.6.3821': attribute type 1 has an invalid length. [ 595.404960][T20178] netlink: 'syz.6.3821': attribute type 1 has an invalid length. [ 595.429528][T20178] netlink: 'syz.6.3821': attribute type 1 has an invalid length. [ 595.464286][T20178] netlink: 'syz.6.3821': attribute type 2 has an invalid length. [ 595.593038][T10478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.634664][T10478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.039498][T20212] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 596.071192][T20212] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3833'. [ 596.341764][T20229] lo: left promiscuous mode [ 596.360312][T20229] tunl0: left promiscuous mode [ 596.380774][T20229] gre0: left promiscuous mode [ 596.395768][T20232] Bluetooth: MGMT ver 1.23 [ 596.401485][T20229] gretap0: left promiscuous mode [ 596.411805][T20229] erspan0: left promiscuous mode [ 596.437933][T20229] ip_vti0: left promiscuous mode [ 596.534258][T20229] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 596.562335][T20229] veth3: left promiscuous mode [ 596.584435][T20232] geneve3: entered promiscuous mode [ 596.595544][T20232] geneve3: entered allmulticast mode [ 596.849928][T20250] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 597.224328][T20273] netlink: 'syz.2.3848': attribute type 7 has an invalid length. [ 597.237635][T20275] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3849'. [ 597.462760][T20287] Cannot find map_set index 135 as target [ 597.482215][T20287] Cannot find map_set index 135 as target [ 597.732526][T20300] netlink: 'syz.1.3856': attribute type 1 has an invalid length. [ 597.844236][T20300] 8021q: adding VLAN 0 to HW filter on device bond3 [ 597.892539][T20307] netlink: 'syz.5.3857': attribute type 8 has an invalid length. [ 597.982247][T20304] macvlan2: entered promiscuous mode [ 598.004039][T20304] macvlan2: entered allmulticast mode [ 598.019099][T20304] bond3: entered promiscuous mode [ 598.037635][T20304] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 598.067881][T20304] bond3: left promiscuous mode [ 598.096047][T20319] netlink: 'syz.5.3861': attribute type 2 has an invalid length. [ 598.104121][T20319] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3861'. [ 598.117266][T20319] netlink: 'syz.5.3861': attribute type 13 has an invalid length. [ 598.128312][T20319] gretap0: refused to change device tx_queue_len [ 598.138361][T20319] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 600.131056][T20269] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 600.395687][T20347] syzkaller1: entered promiscuous mode [ 600.417445][T20347] syzkaller1: entered allmulticast mode [ 600.444931][T20348] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 600.456853][T20353] netlink: 'syz.2.3869': attribute type 12 has an invalid length. [ 600.469487][T20356] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3870'. [ 600.556520][T20360] netlink: 'syz.5.3871': attribute type 1 has an invalid length. [ 600.577923][T20360] netlink: 'syz.5.3871': attribute type 1 has an invalid length. [ 601.098122][T20394] syz_tun: entered allmulticast mode [ 601.382328][T20408] netlink: 'syz.1.3885': attribute type 9 has an invalid length. [ 601.442414][T20410] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3886'. [ 601.472302][ T8520] IPVS: starting estimator thread 0... [ 601.481251][T20415] IPVS: set_ctl: invalid protocol: 90 10.1.1.1:20001 [ 601.497926][T20419] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3886'. [ 601.573392][T20417] IPVS: using max 28 ests per chain, 67200 per kthread [ 601.656447][T20421] netlink: 'syz.6.3889': attribute type 1 has an invalid length. [ 601.684039][T20428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3890'. [ 601.705918][T20421] ip_vti0: entered promiscuous mode [ 601.757396][T20428] bond3: option xmit_hash_policy: invalid value (64) [ 601.775216][T20428] bond3 (unregistering): Released all slaves [ 601.865621][T20432] syzkaller0: entered promiscuous mode [ 601.885695][T20432] syzkaller0: entered allmulticast mode [ 602.319064][T20442] bond4: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 602.331176][T20454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3896'. [ 602.354133][T20442] bond4 (unregistering): Released all slaves [ 602.501672][T20452] bond5 (unregistering): Released all slaves [ 602.580584][T20458] geneve3: entered promiscuous mode [ 602.586336][T20458] geneve3: entered allmulticast mode [ 602.702434][T20462] geneve3: entered promiscuous mode [ 602.708601][T20462] geneve3: entered allmulticast mode [ 602.748204][T20467] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3900'. [ 602.790028][T20467] syzkaller0: entered promiscuous mode [ 602.817813][T20473] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3902'. [ 602.833363][T20467] syzkaller0: entered allmulticast mode [ 603.094923][T20483] tipc: Enabling of bearer rejected, failed to enable media [ 603.438230][T20499] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.446186][T20499] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.580536][T20499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 603.599732][T20499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 603.812649][T10478] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.856829][T10478] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.902662][T10478] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.936699][T10478] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.963995][T10478] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.974578][T10478] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.993878][T10478] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 604.003944][T10478] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.151327][T20520] validate_nla: 1 callbacks suppressed [ 604.151348][T20520] netlink: 'syz.1.3914': attribute type 8 has an invalid length. [ 604.219779][T20520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3914'. [ 604.290168][T20520] veth1_to_team: entered promiscuous mode [ 604.327035][T20520] gretap0: entered promiscuous mode [ 604.352865][T20520] ip6gretap0: entered promiscuous mode [ 604.390962][T20520] hsr1: entered promiscuous mode [ 604.662005][T20536] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 604.679186][T20536] syzkaller1: linktype set to 823 [ 604.706234][T20549] netlink: 'syz.5.3921': attribute type 1 has an invalid length. [ 604.912958][T20551] bond3: (slave bridge4): making interface the new active one [ 604.942222][T20551] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 604.959182][T20563] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3925'. [ 604.969488][T20563] netlink: 'syz.1.3925': attribute type 2 has an invalid length. [ 604.979857][T20549] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 605.005973][T20562] macvlan0: entered promiscuous mode [ 605.011336][T20562] macvlan0: entered allmulticast mode [ 605.018064][T20562] bond3: entered promiscuous mode [ 605.024132][T20562] bridge4: entered promiscuous mode [ 605.030273][T20562] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 605.038367][T20562] bond3: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 605.057431][T20562] bond3: left promiscuous mode [ 605.062313][T20562] bridge4: left promiscuous mode [ 605.106098][T20563] netlink: 'syz.1.3925': attribute type 1 has an invalid length. [ 605.334045][T20581] IPv6: NLM_F_CREATE should be specified when creating new route [ 605.401491][T20583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 605.466638][T20590] netlink: 204 bytes leftover after parsing attributes in process `syz.6.3932'. [ 605.607359][T20599] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3934'. [ 605.789267][T20609] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3937'. [ 605.822646][T20609] netlink: 'syz.6.3937': attribute type 1 has an invalid length. [ 605.843368][T20609] netlink: 'syz.6.3937': attribute type 1 has an invalid length. [ 605.870329][T20609] netlink: 'syz.6.3937': attribute type 1 has an invalid length. [ 605.889204][T20609] netlink: 'syz.6.3937': attribute type 2 has an invalid length. [ 605.907761][T20609] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3937'. [ 606.369458][T20633] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3943'. [ 606.386463][T20634] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3944'. [ 606.458173][T20640] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3943'. [ 606.506498][T20638] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3946'. [ 606.527844][T20638] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3946'. [ 606.540182][T20634] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3944'. [ 606.792801][T20653] netlink: 'syz.6.3949': attribute type 4 has an invalid length. [ 606.861234][T20661] netlink: 'syz.6.3949': attribute type 4 has an invalid length. [ 606.976843][T20653] veth0_macvtap: entered allmulticast mode [ 607.012015][T20653] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 607.320889][T20695] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3960'. [ 607.359953][T20699] xt_policy: output policy not valid in PREROUTING and INPUT [ 607.658976][T20710] bond5 (unregistering): Released all slaves [ 607.722007][T20725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 608.112854][T20744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 608.286169][T20756] openvswitch: netlink: Invalid VLAN frame [ 608.640053][T20779] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 608.673687][T20779] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.681257][T20779] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.762972][T20782] 8021q: adding VLAN 0 to HW filter on device bond6 [ 609.344528][T20814] validate_nla: 4 callbacks suppressed [ 609.344549][T20814] netlink: 'syz.5.3997': attribute type 2 has an invalid length. [ 612.192929][T20847] __nla_validate_parse: 9 callbacks suppressed [ 612.192951][T20847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4003'. [ 612.253809][T20847] ipvlan2: entered allmulticast mode [ 612.370332][T20852] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4004'. [ 612.400472][T20850] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4004'. [ 612.418788][T20864] netlink: 'syz.1.4006': attribute type 2 has an invalid length. [ 612.433242][T20864] netlink: 'syz.1.4006': attribute type 11 has an invalid length. [ 612.447958][T20862] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4005'. [ 612.473571][T20864] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4006'. [ 612.614826][T20873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4008'. [ 612.668518][T20873] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 612.707118][T20873] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4008'. [ 612.845761][T20882] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4011'. [ 612.989513][T20896] IPv6: NLM_F_CREATE should be specified when creating new route [ 613.367750][T20912] openvswitch: netlink: Unknown key attributes 2 [ 613.479019][T20918] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4019'. [ 613.534958][T20915] netlink: 'syz.1.4018': attribute type 1 has an invalid length. [ 613.577799][T20927] ip6t_rpfilter: unknown options [ 613.894663][T20938] openvswitch: netlink: Actions may not be safe on all matching packets [ 613.916295][T20942] netlink: 'syz.2.4025': attribute type 1 has an invalid length. [ 613.996018][T10509] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x7 [ 614.026004][T20951] netlink: 'syz.5.4022': attribute type 1 has an invalid length. [ 614.065168][T20953] netlink: 212156 bytes leftover after parsing attributes in process `syz.2.4025'. [ 614.099707][T20951] netlink: 'syz.5.4022': attribute type 2 has an invalid length. [ 614.130925][ T6992] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.140085][ T6992] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.154341][ T6992] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.171931][ T6992] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.755624][T20998] netlink: 'syz.0.4037': attribute type 10 has an invalid length. [ 614.766577][T20998] ipvlan0: entered allmulticast mode [ 614.771973][T20998] veth0_vlan: entered allmulticast mode [ 614.779639][T20998] team0: Device ipvlan0 failed to register rx_handler [ 614.837037][T20999] netlink: 'syz.0.4037': attribute type 29 has an invalid length. [ 614.839308][T20998] netlink: 'syz.0.4037': attribute type 29 has an invalid length. [ 614.931172][T21003] openvswitch: netlink: Duplicate key (type 2). [ 615.148508][T21013] 8021q: VLANs not supported on ipvlan1 [ 615.311268][T21016] bond10: option lp_interval: invalid value (0) [ 615.317468][T21030] netlink: 'syz.2.4047': attribute type 1 has an invalid length. [ 615.362610][T21016] bond10: option lp_interval: allowed values 1 - 2147483647 [ 615.405322][T21016] bond10 (unregistering): Released all slaves [ 615.847338][T21053] netlink: 'syz.5.4056': attribute type 39 has an invalid length. [ 615.939462][T21048] 8021q: adding VLAN 0 to HW filter on device bond5 [ 615.956655][T21053] hsr_slave_0: left promiscuous mode [ 615.982027][T21053] hsr_slave_1: left promiscuous mode [ 616.043819][T21068] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 616.243519][T17722] Bluetooth: hci5: command 0x0406 tx timeout [ 616.264084][T21077] netlink: 'syz.6.4061': attribute type 1 has an invalid length. [ 616.364502][T21086] netlink: 'syz.6.4061': attribute type 6 has an invalid length. [ 616.417673][T21087] pimreg3: entered allmulticast mode [ 616.701728][T21102] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 617.071675][T21123] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 617.126002][T21137] tipc: Enabling of bearer rejected, failed to enable media [ 617.519457][T21153] __nla_validate_parse: 9 callbacks suppressed [ 617.519477][T21153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4081'. [ 617.592153][T21158] netlink: 208240 bytes leftover after parsing attributes in process `syz.5.4083'. [ 618.326212][T21193] Cannot find add_set index 0 as target [ 618.365625][T21195] syzkaller0: entered promiscuous mode [ 618.380653][T21195] syzkaller0: entered allmulticast mode [ 618.875806][T21226] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4100'. [ 618.983893][T21231] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4100'. [ 619.003909][T21226] 8021q: adding VLAN 0 to HW filter on device bond7 [ 619.119414][T21228] 8021q: adding VLAN 0 to HW filter on device bond8 [ 619.142042][T21228] bond7: (slave bond8): Enslaving as an active interface with an up link [ 619.183689][T21231] bond7 (unregistering): (slave bond8): Releasing backup interface [ 619.202840][T21231] bond7 (unregistering): Released all slaves [ 619.250990][T21246] netlink: 294 bytes leftover after parsing attributes in process `syz.0.4103'. [ 619.298962][T21246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 619.331262][T21246] netlink: 'syz.0.4103': attribute type 10 has an invalid length. [ 619.378450][T21248] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4104'. [ 619.412304][T21246] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.454701][T21246] bond0: (slave team0): Enslaving as an active interface with an up link [ 619.576164][T21257] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4108'. [ 619.634992][T21257] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4108'. [ 619.669739][T21262] netlink: 'syz.0.4109': attribute type 1 has an invalid length. [ 619.905874][T21276] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4112'. [ 619.966292][T21281] xt_TCPMSS: Only works on TCP SYN packets [ 620.294933][T21296] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4120'. [ 620.410001][T21298] netlink: 'syz.6.4121': attribute type 6 has an invalid length. [ 620.445181][T21298] netlink: 'syz.6.4121': attribute type 6 has an invalid length. [ 620.991973][T21334] netlink: zone id is out of range [ 620.997409][T21334] netlink: zone id is out of range [ 621.012788][T21334] netlink: zone id is out of range [ 621.033641][T21334] netlink: zone id is out of range [ 621.039177][T21334] netlink: zone id is out of range [ 621.051233][T21334] netlink: zone id is out of range [ 621.068935][T21334] netlink: zone id is out of range [ 621.091187][T21334] netlink: zone id is out of range [ 621.111785][T21334] netlink: zone id is out of range [ 621.179770][T21338] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 621.287920][T21344] netlink: 'syz.0.4136': attribute type 2 has an invalid length. [ 621.297362][T21344] block nbd0: NBD_DISCONNECT [ 621.302212][T21344] block nbd0: Send disconnect failed -32 [ 621.310037][T21344] block nbd0: shutting down sockets [ 621.367988][ T50] Bluetooth: hci6: command 0x0406 tx timeout [ 621.477585][T10478] batadv1: left allmulticast mode [ 621.516527][T10478] batadv1: left promiscuous mode [ 621.527042][T10478] bridge0: port 3(batadv1) entered disabled state [ 621.687638][T10478] pimreg3: left allmulticast mode [ 622.004412][T10478] bond10 (unregistering): (slave gretap1): Releasing active interface [ 622.279241][T10478] bond2 (unregistering): (slave bridge2): Releasing active interface [ 622.419447][T10478] bond3 (unregistering): (slave bridge5): Releasing backup interface [ 622.642133][T10478] bond10 (unregistering): (slave bridge9): Releasing active interface [ 622.689664][T10478] bond0 (unregistering): Released all slaves [ 622.706028][T10478] bond1 (unregistering): Released all slaves [ 622.730177][T10478] bond2 (unregistering): Released all slaves [ 622.750921][T10478] bond3 (unregistering): Released all slaves [ 622.769389][T10478] bond4 (unregistering): (slave bond5): Releasing backup interface [ 622.780186][T10478] bond4 (unregistering): Released all slaves [ 622.800172][T10478] bond5 (unregistering): Released all slaves [ 622.826828][T10478] bond6 (unregistering): Released all slaves [ 622.850469][T10478] bond7 (unregistering): Released all slaves [ 622.867837][T10478] bond8 (unregistering): Released all slaves [ 622.884690][T10478] bond9 (unregistering): Released all slaves [ 622.902475][T10478] bond10 (unregistering): Released all slaves [ 622.946443][T10509] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.964974][T10509] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.988207][T10509] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.028558][T10509] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.217369][T10478] : left promiscuous mode [ 623.305926][T10478] tipc: Disabling bearer [ 623.316088][T10478] tipc: Left network mode [ 624.297255][T10478] vcan0 (unregistering): left allmulticast mode [ 624.408728][ T1317] net_ratelimit: 4 callbacks suppressed [ 624.408749][ T1317] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 624.590241][T10478] IPVS: stop unused estimator thread 0... [ 624.637672][T21363] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 624.652290][T21369] netlink: 'syz.1.4140': attribute type 1 has an invalid length. [ 624.684684][T21369] __nla_validate_parse: 10 callbacks suppressed [ 624.684708][T21369] netlink: 8331 bytes leftover after parsing attributes in process `syz.1.4140'. [ 624.721599][T21381] netlink: 260 bytes leftover after parsing attributes in process `syz.5.4143'. [ 624.762614][T21391] netlink: 408 bytes leftover after parsing attributes in process `syz.6.4145'. [ 624.849899][T21396] TCP: TCP_TX_DELAY enabled [ 624.896971][T21397] netlink: 'syz.0.4146': attribute type 11 has an invalid length. [ 624.944317][T21399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4147'. [ 625.020155][T21404] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4150'. [ 625.050711][T21406] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4151'. [ 625.060071][T21406] netlink: 'syz.6.4151': attribute type 18 has an invalid length. [ 625.061385][T21404] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.070986][T21406] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4151'. [ 625.076089][T21404] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.167893][T21406] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4151'. [ 625.183340][T21406] netlink: 'syz.6.4151': attribute type 18 has an invalid length. [ 625.211278][T21406] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4151'. [ 625.638742][T21442] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 625.657474][T21442] bond0: (slave lo): Error: Device can not be enslaved while up [ 625.721023][T21445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4161'. [ 625.778352][T21450] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 625.914870][T17722] Bluetooth: hci4: link tx timeout [ 625.940978][T17722] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 626.638332][T21490] netlink: 'syz.2.4173': attribute type 21 has an invalid length. [ 626.719844][T21492] 8021q: adding VLAN 0 to HW filter on device bond4 [ 626.963586][T21506] netlink: 'syz.6.4178': attribute type 1 has an invalid length. [ 627.011114][T21504] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 627.074169][T21506] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 627.265730][T21518] veth7: entered promiscuous mode [ 627.285577][T21518] team0: Port device veth7 added [ 627.300880][T21518] 8021q: adding VLAN 0 to HW filter on device bond5 [ 627.320241][T10483] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 627.344432][T21517] veth0: entered promiscuous mode [ 627.494448][T10485] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 627.966704][T21545] netlink: 'syz.6.4189': attribute type 11 has an invalid length. [ 628.003200][T17722] Bluetooth: hci4: command 0x0405 tx timeout [ 628.135568][T21515] veth0: left promiscuous mode [ 628.571105][T21562] bond6 (unregistering): Released all slaves [ 628.750627][T21562] bond6 (unregistering): Released all slaves [ 628.916450][T21562] bond6 (unregistering): Released all slaves [ 629.010373][T21562] bond6 (unregistering): Released all slaves [ 629.101394][T21562] bond6 (unregistering): Released all slaves [ 629.168758][T21562] bond6 (unregistering): Released all slaves [ 629.507335][T21604] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 629.541376][T21604] veth9: entered allmulticast mode [ 631.521379][T21566] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 631.607776][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 631.777968][T21612] __nla_validate_parse: 3 callbacks suppressed [ 631.777990][T21612] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4202'. [ 631.827766][T21611] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 631.880401][T21608] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 632.147815][T21633] netlink: 'syz.5.4207': attribute type 178 has an invalid length. [ 632.336273][T21637] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4209'. [ 632.377198][T21646] netlink: 'syz.5.4213': attribute type 4 has an invalid length. [ 632.429172][T21649] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 632.491200][T21644] can: request_module (can-proto-4) failed. [ 632.623010][T21652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.840755][T21667] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 632.975556][T21672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4221'. [ 633.365127][ T30] INFO: task syz.4.2825:16326 blocked for more than 143 seconds. [ 633.388957][ T30] Not tainted syzkaller #0 [ 633.395269][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 633.406294][ T30] task:syz.4.2825 state:D stack:27032 pid:16326 tgid:16309 ppid:5630 task_flags:0x400140 flags:0x00080002 [ 633.419581][ T30] Call Trace: [ 633.442809][ T30] [ 633.448777][T21703] netlink: 'syz.2.4230': attribute type 5 has an invalid length. [ 633.457810][ T30] __schedule+0x1821/0x5740 [ 633.471763][T21703] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4230'. [ 633.474567][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 633.495446][ T30] ? preempt_schedule_notrace+0x57/0x90 [ 633.501370][ T30] ? __pfx___schedule+0x10/0x10 [ 633.506945][ T30] ? schedule+0x90/0x360 [ 633.511585][ T30] schedule+0x164/0x360 [ 633.533241][ T30] schedule_preempt_disabled+0x13/0x30 [ 633.550836][ T30] __mutex_lock+0x7f7/0x1550 [ 633.561892][ T30] ? __mutex_lock+0x608/0x1550 [ 633.567635][ T30] ? nfsd_nl_version_set_doit+0xcd/0x7a0 [ 633.574387][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 633.579823][ T30] nfsd_nl_version_set_doit+0xcd/0x7a0 [ 633.588432][ T30] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 633.595235][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 633.601831][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 633.621348][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 633.627723][ T30] ? __asan_memcpy+0x40/0x70 [ 633.632579][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 633.640223][ T30] ? bpf_lsm_capable+0x9/0x20 [ 633.645571][ T30] ? security_capable+0x7e/0x2c0 [ 633.651952][ T30] genl_rcv_msg+0x61c/0x7a0 [ 633.659204][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 633.665437][ T30] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 633.671914][ T30] netlink_rcv_skb+0x232/0x4b0 [ 633.677541][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 633.682829][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 633.690346][ T30] ? down_read+0x270/0x2e0 [ 633.698811][ T30] ? genl_rcv+0xd/0x40 [ 633.703727][ T30] genl_rcv+0x28/0x40 [ 633.707954][ T30] netlink_unicast+0x75c/0x8e0 [ 633.712981][ T30] netlink_sendmsg+0x813/0xb40 [ 633.718462][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 633.724886][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 633.730229][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 633.736333][ T30] ____sys_sendmsg+0x972/0x9f0 [ 633.741498][ T30] ? __might_fault+0xaf/0x130 [ 633.747298][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 633.756713][ T30] ? import_iovec+0x73/0xa0 [ 633.767154][ T30] ___sys_sendmsg+0x2a5/0x360 [ 633.772099][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 633.778201][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 633.784376][ T30] ? futex_wait+0x2a2/0x390 [ 633.789320][ T30] ? __fget_files+0x2a/0x420 [ 633.794907][ T30] ? __fget_files+0x3a0/0x420 [ 633.800088][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 633.806582][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 633.812463][ T30] ? rcu_is_watching+0x15/0xb0 [ 633.818208][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.825034][ T30] do_syscall_64+0x174/0x580 [ 633.829911][ T30] ? trace_irq_disable+0x3b/0x140 [ 633.835682][ T30] ? clear_bhb_loop+0x40/0x90 [ 633.840652][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.850501][ T30] RIP: 0033:0x7f004a19ce59 [ 633.856605][ T30] RSP: 002b:00007f0047b8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 633.865969][ T30] RAX: ffffffffffffffda RBX: 00007f004a416360 RCX: 00007f004a19ce59 [ 633.874818][ T30] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 000000000000000a [ 633.885674][ T30] RBP: 00007f004a232d6f R08: 0000000000000000 R09: 0000000000000000 [ 633.894245][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.902422][ T30] R13: 00007f004a4163f8 R14: 00007f004a416360 R15: 00007ffcf642d2c8 [ 633.910860][ T30] [ 633.915872][ T30] [ 633.915872][ T30] Showing all locks held in the system: [ 633.927216][ T30] 1 lock held by ksoftirqd/1/23: [ 633.932490][ T30] #0: ffff8880b873b0e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 633.969203][ T30] 1 lock held by khungtaskd/30: [ 633.974336][ T30] #0: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 633.984697][ T30] 2 locks held by udevd/4999: [ 633.989523][ T30] 2 locks held by getty/5388: [ 633.994564][ T30] #0: ffff88803747f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 634.010192][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 634.021179][ T30] 3 locks held by kworker/u8:11/6992: [ 634.026923][ T30] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 634.039354][ T30] #1: ffffc9001b417c40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 634.052214][ T30] #2: ffffffff8e962f28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 634.064623][ T30] 4 locks held by kworker/u8:31/10498: [ 634.070280][ T30] 2 locks held by syz.3.2624/15491: [ 634.076381][ T30] #0: ffffffff8fe38628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 634.085413][ T30] #1: ffffffff8ec8b280 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 634.095907][ T30] 2 locks held by syz.4.2825/16326: [ 634.101216][ T30] #0: ffffffff8fe38628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 634.110090][ T30] #1: ffffffff8ec8b280 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 634.120588][ T30] 3 locks held by syz.1.4226/21692: [ 634.126021][ T30] #0: ffff8880595efb00 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 634.136468][ T30] #1: ffff888050bbb460 (sk_lock-AF_QIPCRTR){+.+.}-{0:0}, at: qrtr_release+0x52/0x2d0 [ 634.146674][ T30] #2: ffffffff8e962f28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 634.157920][ T30] [ 634.160356][ T30] ============================================= [ 634.160356][ T30] [ 634.177889][ T30] NMI backtrace for cpu 1 [ 634.177917][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 634.177942][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 634.177956][ T30] Call Trace: [ 634.177964][ T30] [ 634.177973][ T30] dump_stack_lvl+0xe8/0x150 [ 634.178005][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 634.178110][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 634.178144][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 634.178177][ T30] sys_info+0x135/0x170 [ 634.178225][ T30] watchdog+0xfd3/0x1030 [ 634.178272][ T30] ? watchdog+0x1c9/0x1030 [ 634.178317][ T30] kthread+0x389/0x470 [ 634.178346][ T30] ? __pfx_watchdog+0x10/0x10 [ 634.178375][ T30] ? __pfx_kthread+0x10/0x10 [ 634.178405][ T30] ret_from_fork+0x514/0xb70 [ 634.178443][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 634.178466][ T30] ? __switch_to+0xc79/0x1410 [ 634.178506][ T30] ? __pfx_kthread+0x10/0x10 [ 634.178535][ T30] ret_from_fork_asm+0x1a/0x30 [ 634.178578][ T30] [ 634.178977][ T30] Sending NMI from CPU 1 to CPUs 0: [ 634.297242][ C0] NMI backtrace for cpu 0 [ 634.297258][ C0] CPU: 0 UID: 0 PID: 4999 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 634.297278][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 634.297290][ C0] RIP: 0010:lock_acquire+0x101/0x350 [ 634.297317][ C0] Code: 4c 89 7c 24 08 41 f7 c7 00 02 00 00 41 0f 94 c1 4c 89 ef 89 de 8b 54 24 04 44 89 e1 45 89 f0 6a 00 6a 00 6a 00 55 ff 74 24 30 da 02 00 00 48 83 c4 28 48 c7 c7 e6 72 21 8e e8 da dd 05 0a b8 [ 634.297333][ C0] RSP: 0018:ffffc900031ef8b8 EFLAGS: 00000006 [ 634.297350][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 634.297361][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888023318f80 [ 634.297372][ C0] RBP: ffffffff84ae1eb8 R08: 0000000000000001 R09: 0000000000000000 [ 634.297384][ C0] R10: ffff88801e6d4e20 R11: ffffffff826fe350 R12: 0000000000000000 [ 634.297396][ C0] R13: ffff888023318f80 R14: 0000000000000001 R15: 0000000000000246 [ 634.297408][ C0] FS: 00007fdfaf694880(0000) GS:ffff8881252a0000(0000) knlGS:0000000000000000 [ 634.297424][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 634.297436][ C0] CR2: 00007f2da43ec4b8 CR3: 0000000037658000 CR4: 00000000003526f0 [ 634.297453][ C0] Call Trace: [ 634.297459][ C0] [ 634.297466][ C0] ? lockref_get_not_dead+0x28/0xc0 [ 634.297569][ C0] ? step_into_slowpath+0x37c/0x7e0 [ 634.297601][ C0] _raw_spin_lock+0x2e/0x40 [ 634.297628][ C0] ? lockref_get_not_dead+0x28/0xc0 [ 634.297648][ C0] lockref_get_not_dead+0x28/0xc0 [ 634.297670][ C0] try_to_unlazy+0x3cb/0xc50 [ 634.297696][ C0] ? inode_permission+0x479/0x5f0 [ 634.297719][ C0] link_path_walk+0xadc/0x18d0 [ 634.297751][ C0] path_lookupat+0xe4/0x8c0 [ 634.297780][ C0] filename_lookup+0x256/0x5d0 [ 634.297811][ C0] ? __pfx_filename_lookup+0x10/0x10 [ 634.297845][ C0] ? strncpy_from_user+0x150/0x2b0 [ 634.297865][ C0] ? do_getname+0x151/0x250 [ 634.297884][ C0] do_readlinkat+0xe3/0x510 [ 634.297908][ C0] ? __pfx_do_readlinkat+0x10/0x10 [ 634.297938][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.297957][ C0] __x64_sys_readlink+0x7f/0x90 [ 634.297979][ C0] do_syscall_64+0x174/0x580 [ 634.297997][ C0] ? clear_bhb_loop+0x40/0x90 [ 634.298017][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.298034][ C0] RIP: 0033:0x7fdfaef153a7 [ 634.298050][ C0] Code: 00 00 90 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 00 31 c9 e8 8a 20 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 59 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 21 ba 0d 00 f7 d8 64 89 02 48 [ 634.298065][ C0] RSP: 002b:00007fff895ceb78 EFLAGS: 00000202 ORIG_RAX: 0000000000000059 [ 634.298083][ C0] RAX: ffffffffffffffda RBX: 00007fff895cf3c0 RCX: 00007fdfaef153a7 [ 634.298096][ C0] RDX: 0000000000000400 RSI: 00007fff895cef80 RDI: 00007fff895ceb80 [ 634.298108][ C0] RBP: 0000000000000200 R08: 000055f03f893c29 R09: 0000000000000000 [ 634.298119][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff895ceb80 [ 634.298131][ C0] R13: 00007fff895cef80 R14: 0000000000000000 R15: 00007fff895cf8d0 [ 634.298152][ C0] [ 634.606691][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 634.613597][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 634.622751][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 634.632840][ T30] Call Trace: [ 634.636149][ T30] [ 634.639094][ T30] vpanic+0x56c/0xa60 [ 634.643098][ T30] ? __pfx___schedule+0x10/0x10 [ 634.647986][ T30] ? __pfx_vpanic+0x10/0x10 [ 634.652502][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 634.658685][ T30] panic+0xc5/0xd0 [ 634.662452][ T30] ? __pfx_panic+0x10/0x10 [ 634.666893][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 634.672324][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 634.678531][ T30] watchdog+0x102c/0x1030 [ 634.682926][ T30] ? watchdog+0x1c9/0x1030 [ 634.687395][ T30] kthread+0x389/0x470 [ 634.691533][ T30] ? __pfx_watchdog+0x10/0x10 [ 634.696237][ T30] ? __pfx_kthread+0x10/0x10 [ 634.700850][ T30] ret_from_fork+0x514/0xb70 [ 634.705458][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 634.710587][ T30] ? __switch_to+0xc79/0x1410 [ 634.715324][ T30] ? __pfx_kthread+0x10/0x10 [ 634.719961][ T30] ret_from_fork_asm+0x1a/0x30 [ 634.724779][ T30] [ 634.728554][ T30] Kernel Offset: disabled [ 634.732926][ T30] Rebooting in 86400 seconds..