last executing test programs: 2m3.478425101s ago: executing program 4 (id=7125): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000d"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800ee00010641163239489434ff000018110d00", @ANYRES32=r1, @ANYBLOB="0000000000e8ffffb60800a100070000007b8af8ff000000f8ffffffb703000008000000b7040000000000008500000082000000181100"/68, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='tlb_flush\x00', r2}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) close(0x4) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="f57e055e3778bc7dd15f50fa3fb37e"], &(0x7f0000000400)='GPL\x00', 0x40007, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000380), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000240)='rxrpc_rx_icmp\x00'}, 0x18) write(0xffffffffffffffff, &(0x7f0000000500)="cbb7537e0100288b957fe50064f1e611292a89df594317fd81132f53ef3b6a287175ba9edecbe0e220e7d1ce0ec845913ef61a8efb23bbb31b7ae2e3f9c22fcc1ea0c4caeca48aabf6e0212c2c1b8d84a471238b46414c1f0d1edc9ffefbe364957b6b06d3aad9ae49b552597ef36ff815efac32fdc9fb3bdf3d64faf9cc9af79ef879bfa0b354b3096b22ab8fd06e9ec8a4ce32627ff83371efd7002341281bffcefa8522b8e40e5368cb69142a97edfe2160b9413257f46e800b5eb3aa57620d94c31895b2d0b8cf9f773a56adaff7a89be19cf2e6acbdf30ec413759ff23fd6df0e72b698016ad8085bae58cee05000"/252, 0xfc) write(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$l2tp(0x2, 0x2, 0x73) unshare(0x20000400) connect$inet(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) ioctl$F2FS_IOC_DECOMPRESS_FILE(r3, 0xf517, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000fbdb0c9818858cebec5bef0350ec7991df25250000000e0021006e657464657673696d0000000f00"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r8, &(0x7f0000000440)={0xa, 0x5000, 0x0, @mcast1, 0x5}, 0x1c) 2m3.370294077s ago: executing program 4 (id=7127): r0 = socket(0x8, 0x80000, 0x7621) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001a00010000000000000000008100000000004001"], 0x1c}}, 0x0) socket$kcm(0x29, 0x7, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x24}, 0x1, 0x0, 0x0, 0x44001}, 0xc800) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1801000}, 0xc, &(0x7f0000001340)={&(0x7f0000000240)={0x10c8, r1, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8c, 0x11d, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x38, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x33d, 0x7, 0x1, 0x9, 0x0, 0x9109, 0x6, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0x1b27, 0x9, 0x6, 0xfffa, 0x2, 0x88]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4a}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x76c, 0x11d, 0x0, 0x1, [{0x154, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x61}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x124, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x1, 0x7, 0x100, 0x6, 0x23b1, 0xa4ff, 0x4d6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x9, 0x1b, 0x2, 0x18, 0x16]}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4c24, 0x8, 0x9, 0x6, 0xfff7, 0x0, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5b, 0x2, 0x6, 0x4, 0x4, 0xe3bb, 0x81, 0xfff]}}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x9, 0x7, 0x4, 0x7, 0x1, 0xf0c, 0x101]}}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3, 0x60, 0x9, 0x6, 0x12]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x80, 0x4, 0x3da5, 0x5, 0x5, 0x1, 0x3f9e]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8975, 0x7fff, 0x4, 0xfff9, 0xb, 0x0, 0x9]}}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x7, 0x6}, {0x6, 0x5}, {0x0, 0x3}, {0x5, 0x1}, {0x2, 0x8}, {0x7, 0x4}, {0x5, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0xb4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x9c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x1b, 0x36, 0x0]}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x7, 0x1}, {0x5, 0x5}, {0x7, 0x6}, {0x7, 0x9}, {0x0, 0x2}, {0x3, 0x1}, {0x1, 0x7}, {0x0, 0x2}, {0x7, 0x6}, {0x7, 0x9}, {0x0, 0x2}, {0x3, 0x8}, {0x5, 0x1}, {0x0, 0x6}, {0x6, 0x9}, {0x1, 0x8}, {0x7, 0x9}, {0x6, 0x6}, {0x0, 0xa}, {0x3, 0x1}, {0x4, 0x7}, {0x6, 0x7}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x3}, {0x0, 0x2}, {0x1, 0x9}, {0x0, 0x8}, {0x2, 0x8}, {0x6}, {0x4, 0x2}, {0x2, 0x5}, {0x5, 0xa}, {0x6, 0x6}, {0x1, 0x1}, {0x6, 0x5}, {0x0, 0x3}, {0x2, 0x5}, {0x4, 0x4}, {0x0, 0x5}, {0x2, 0x5}, {0x1}, {0x1, 0x4}, {0x1}, {0x7}, {0x5, 0xa}, {0x0, 0x7}, {0x3, 0x7}, {0x7, 0x4}, {0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfffb, 0x100, 0x6d8, 0x4, 0x941, 0x8001, 0x0, 0xfffd]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x7, 0xbb51, 0x7ff, 0x5, 0x2, 0x7ff]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x1, 0x24, 0x24, 0x18, 0x1b, 0x9, 0x36, 0x30, 0x18, 0x58, 0x2, 0x18, 0x3f, 0x60]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000}]}, {0x310, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x38, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x0, 0x6, 0x8000, 0x9, 0x9, 0xa98, 0x7f]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x1, 0xc, 0x16, 0x48, 0xb, 0x30, 0x12, 0xc, 0x2, 0x12, 0x24, 0xb, 0x36, 0x12, 0x2, 0x30, 0x18, 0x12, 0x12, 0x6c, 0x24, 0x18, 0x4]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x63}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xd}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x290, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x0, 0x6}, {0x2}, {0x4, 0x4}, {}, {0x0, 0x1}, {0x7, 0x1}, {0x3, 0x4}, {0x3, 0x6}, {0x6, 0xa}, {0x3, 0x7}, {0x0, 0xa}, {0x0, 0x9}, {0x4, 0x8}, {0x6, 0x4}, {0x3, 0x3}, {0x2}, {0x5, 0x1}, {0x2, 0x9}, {0x6, 0x7}, {0x0, 0x9}, {0x7, 0x1}, {0x2, 0xa}, {0x2, 0x2}, {0x0, 0x7}, {0x3, 0xa}, {0x0, 0xa}, {0x6, 0x6}, {0x3, 0x3}, {0x0, 0x4}, {0x7, 0x2}, {0x1, 0x3}, {0x2, 0x6}, {0x7, 0x6}, {0x2, 0x7}, {0x5, 0xa}, {0x6, 0x5}, {0x3, 0x2}, {0x3, 0x1}, {0x1, 0xa}, {}, {0x3, 0xa}, {0x3, 0x8}, {0x2, 0x8}, {0x4}, {0x0, 0x3}, {0x5, 0x3}, {0x4, 0x9}, {0x1, 0x3}, {0x7, 0x2}, {0x7, 0x8}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0xa}, {0x4, 0x3}, {0x0, 0x7}, {0x4, 0x5}, {0x1, 0x4}, {0x2, 0x6}, {0x4, 0x8}, {0x2, 0x1}, {0x1, 0x9}, {0x2, 0x9}, {0x2, 0x1}, {0x1, 0x5}, {0x6, 0x1}, {0x7, 0x8}, {0x4, 0x8}, {0x2, 0x5}, {0x5, 0x5}, {0x6, 0x1}, {0x1, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0x5, 0x63, 0xdea0, 0x3df, 0x80, 0x2]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x30, 0xb, 0x4, 0x2, 0x3, 0x5, 0x5, 0xc0ecfb81feb2bbf2, 0x60, 0x18, 0x4, 0xc, 0x36, 0x3, 0x30, 0x36, 0xc, 0x6c, 0x36, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x9000, 0x3, 0x7, 0x0, 0x6, 0x3, 0xffff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1, 0x4, 0x4, 0x24, 0x12, 0x5b, 0xc, 0x48, 0x24, 0x5, 0x2, 0x5, 0x4, 0x6c, 0x0, 0x48, 0x12, 0x4, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x6a, 0x10, 0x0, 0x7, 0x2, 0xb, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0x2, 0xb1a5, 0x7ff, 0x4, 0x8, 0x0, 0x6]}}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0x3, 0x7fff, 0x503f, 0x1, 0x4, 0x1]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x18, 0x36, 0x0, 0x0, 0x6, 0xb, 0x6c, 0x1b, 0x6c, 0x6c, 0x18, 0x1, 0x36, 0xb, 0x12, 0xb, 0x18, 0x6c, 0x9, 0x6c, 0x61, 0x6c, 0x6, 0x3, 0x4, 0x0, 0x5, 0x9, 0x9, 0x5, 0x60, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x8, 0x8, 0x1, 0x3, 0x2, 0x100]}}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x44ee, 0x1, 0x6, 0x9, 0xd1f, 0x595, 0xe8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff81, 0x0, 0x2, 0x7ff, 0x4, 0x2, 0x8, 0x17b]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xf6e1, 0x9, 0x1, 0x80, 0x1, 0x2, 0x4]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x54, 0xc, 0x6c, 0xb, 0x18, 0xb, 0x60, 0x3, 0x6, 0x68, 0xb, 0x18, 0x36, 0x4, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x81, 0x8, 0x101, 0x400, 0x401, 0x3e2, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1319, 0x7, 0x5, 0xb5, 0x7ff, 0x9, 0x82d5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0x7ff, 0x44, 0x7f, 0x416, 0xb, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x8, 0x2, 0x100, 0x5, 0x3, 0x8000, 0x7]}}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x3, 0xa}, {0x2, 0x6}, {0x2, 0x1}, {0x1, 0x3}, {0x7, 0x5}, {0x6, 0x7}, {0x3, 0x7}, {0x5, 0x7}, {0x6, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xae, 0x8001, 0x2, 0x4, 0x49, 0xf, 0x200]}}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfc}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}]}, {0x180, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcf}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x70, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x9094, 0x3, 0x6, 0x0, 0x5, 0xf7, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x3, 0x5}, {0x1, 0x2}, {0x5, 0x8}, {0x6, 0x8}, {0x1, 0x2}, {0x5, 0x8}, {0x1, 0xa}, {0x5, 0x7}, {0x5, 0xa}, {0x1, 0x3}, {0x2}, {0x1, 0x8}, {0x0, 0x2}, {0x3, 0x3}, {0x1, 0x3}, {0x0, 0x5}, {0x7, 0x4}, {0x0, 0x6}, {0x5}, {0x2, 0x1}, {0x6, 0x4}, {0x1, 0xa}, {0x0, 0x5}, {0x1, 0x7}, {0x1, 0x3}, {0x7, 0x4}, {0x4, 0xa}, {0x0, 0x3}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x5, 0x2}, {0x3, 0x7}, {0x1, 0x5}, {0x3, 0x6}, {0x4}, {0x5, 0x4}, {0x3, 0x8}, {0x5, 0x7}, {0x0, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x2, 0x1}, {0x0, 0x1}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4b, 0x2, [{0x4, 0x1}, {0x4, 0x3}, {0x3, 0xa}, {0x4, 0x9}, {0x7, 0x5}, {0x1}, {0x4}, {0x2, 0x5}, {0x1, 0xa}, {0x1, 0x6}, {0x7, 0x5}, {0x6, 0x7}, {0x5, 0x9}, {0x1, 0x6}, {0x3, 0x1}, {0x6, 0x8}, {0x5, 0x1}, {0x1, 0x2}, {0x5, 0x4}, {}, {0x4, 0x4}, {0x3, 0xa}, {0x2, 0x3}, {0x1, 0x5}, {0x2, 0x9}, {0x1, 0x5}, {0x5, 0x6}, {0x6, 0x5}, {0x6, 0x8}, {0x0, 0x5}, {0x3, 0x2}, {0x5, 0x2}, {0x1}, {0x4, 0x2}, {0x7, 0x7}, {0x6, 0x3}, {0x6, 0x8}, {0x0, 0x5}, {0x6, 0x7}, {0x4, 0x4}, {0x6, 0x8}, {0x5, 0x6}, {0x7, 0x7}, {0x2, 0x2}, {0x1, 0x6}, {0x1, 0x11}, {0x4, 0x2}, {0x6, 0x9}, {0x1, 0x2}, {0x3, 0x9}, {0x0, 0x9}, {0x6, 0x7}, {0x7, 0x9}, {0x0, 0x9}, {0x0, 0x5}, {0x0, 0x8}, {0x0, 0x2}, {0x7, 0x2}, {}, {0x1, 0x1}, {0x5}, {0x7, 0x7}, {0x1, 0x7}, {0x1, 0x3}, {0x2, 0x1}, {0x1, 0x7}, {0x7, 0x7}, {0x2, 0x1}, {0x0, 0xa}, {0x4}, {0x6, 0x7}]}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x3, 0x7}, {0x1}, {0x6, 0x2}, {0x6, 0x8}, {0x2, 0x5}, {0x4, 0x3}, {0x4, 0x2}, {0x0, 0xa}, {0x2, 0x5}, {0x6, 0x1}, {0x0, 0x13}, {0x4, 0x2}, {0x4, 0x9}, {0x3, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6, 0x0, 0xb, 0x9, 0x9, 0xa, 0x55be]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x60, 0x12, 0x60, 0x16, 0x16, 0x12, 0x2]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x6, 0x3}, {0x7, 0x6}, {0x2, 0x5}, {0x1, 0x4}, {}, {0x5, 0x8}, {0x1, 0x5}, {0x5, 0x4}, {0x2, 0x4}, {0x7, 0x9}, {0x7, 0x7}, {0x1, 0xa}, {0x1, 0x8}, {0x6, 0x1}, {0x3, 0x2}, {0x0, 0x8}, {0x2, 0x1}, {0x1, 0x1}, {0x7, 0x3}, {0x6, 0x9}, {0x0, 0x5}, {0x1, 0x9}, {0x5, 0x2}, {0x1, 0x3}, {0x1, 0x6}, {0x1, 0x7}, {0x3, 0x3}, {0x1, 0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x7, 0x7}, {0x7, 0x8}, {0x3, 0x4}, {0x4, 0x5}, {0x1, 0x4}, {0x2, 0x4}, {0x2, 0x3}, {0x1, 0x5}, {0x3, 0x9}, {0x6, 0x8}, {0x0, 0x2}, {0x3, 0x7}, {0x6, 0x6}, {0x7}, {0x4, 0x5}, {0x6, 0x6}, {0x6, 0x2}, {0x3, 0x3}, {0x3, 0x8}, {0x1}, {0x1, 0x2}, {0x4, 0x1}, {0x7, 0x1d}, {0x7, 0x8}, {0x5, 0x8}, {0x4, 0x4}, {0x3, 0x3}, {0x5, 0x8}, {0x0, 0x9}, {0x7, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb3}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xa36, 0x1, 0x9c74, 0x5, 0xe34, 0x8000, 0x0, 0x2]}}]}]}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1ac13630}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6ea2dfcf}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffffffff}]}]}, @NL80211_ATTR_TID_CONFIG={0x228, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x128, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x11c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3ff, 0x7, 0xfff, 0xfeff, 0xfffe, 0xfffd, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x3, 0x9}, {0x2, 0x7}, {0x2, 0x6}, {0x6, 0x1}, {0x5, 0x6}, {0x0, 0x2}, {0x2, 0x1}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x3}, {0x2}, {0x5, 0xa}, {0x2, 0x2}, {0x1, 0xa}, {0x2, 0x3}, {0x4, 0x7}, {0x5, 0x3}, {0x3, 0xa}, {0x4, 0x6}, {0x4, 0x2}, {0x1, 0x1}, {0x1, 0x7}, {0x5, 0x9}, {0x3, 0x8}, {0x0, 0x9}, {0x2, 0x4}, {0x0, 0x1}, {0x1}, {0x6, 0x9}, {0x0, 0x3}, {0x1, 0x4}, {0x4, 0x3}, {0x3, 0x8}, {0x1, 0x2}, {0x1, 0x8}, {0x6, 0x8}, {0x3, 0x1}, {0x5, 0x5}, {0x5, 0x8}, {0x1, 0x4}, {0x0, 0x8}, {0x3, 0x4}, {0x1, 0x3}, {0x0, 0x9}, {0x5}, {0x1, 0xa}, {0x4, 0x5}, {0x6, 0x2}, {0x0, 0x4}, {0x2, 0x7}, {0x4, 0x8}, {0x4, 0x8}, {0x5, 0x5}, {0x0, 0x7}, {0x6, 0x6}, {0x2, 0x8}, {0x6, 0x1}, {0x1, 0x3}, {0x7, 0x8}, {0x1}, {0x1, 0x1}, {0x0, 0xa}, {0x6}, {0x2, 0x3}, {0x6, 0x1}, {0x1, 0x6}, {0x1, 0x3}]}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x7, 0x0, 0x42, 0x9, 0x7, 0x4, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc6, 0x3, 0x9760, 0x4, 0x16, 0xff00, 0x0, 0xc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x3, 0x7, 0xa, 0x3, 0x4, 0x8, 0xc]}}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x3, 0x16, 0x5, 0x60, 0x34, 0x3, 0x18, 0x12, 0x12, 0x60, 0x24, 0x6, 0x1, 0xc, 0x1, 0x16, 0x24, 0x6c, 0xb, 0x4, 0xc, 0x4, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc93f, 0xff44, 0x4a9, 0x8001, 0x0, 0xbe57, 0x3]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0xf0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xb4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x4, 0x2f2, 0x7e, 0x531, 0xb5, 0x6, 0x1]}}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x6, 0x9, 0x8c0, 0x1a0, 0x6, 0x50]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0x7, 0x200, 0x4, 0x9, 0xfffd, 0x80]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x2}, {0x0, 0x2}, {0x1, 0xa}, {0x7, 0x4}, {0x5, 0x8}, {0x7, 0x8}, {0x3, 0x3}, {0x4, 0x5}, {0x1, 0xa}, {0x4, 0x4}, {0x0, 0x4}, {0x4, 0x4}, {0x0, 0x9}, {0x3, 0x9}, {0x1, 0xa}, {0x4, 0x9}, {0x3, 0xa}, {0x1, 0x5}, {0x1, 0x3}, {0x3, 0x1}, {0x3, 0xa}, {0x0, 0x6}, {0x5, 0x6}, {0x3, 0x6}, {0x5, 0x4}, {0x5, 0x6}, {0x0, 0x5}, {0x3, 0x7}, {0x0, 0x5}, {0x1, 0x2}, {0x4, 0x2}, {0x4, 0x2}, {0x5, 0x9}, {0x0, 0x5}, {0x0, 0x4}, {0x3, 0x3}, {0x2, 0x1}, {0x3, 0x3}, {0x1, 0x6}, {0x6, 0x7}, {0x5}, {0x7, 0x5}, {0x7, 0x5}, {0x2, 0x8}, {0x0, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x3, 0x4}, {0x4, 0x3}, {0x5, 0x3}, {0x0, 0x3}, {0x2, 0x2}, {0x5, 0x5}, {}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x11}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x80}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}, {0x17c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe7}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x64, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1b, 0x16, 0x16, 0x30, 0x48, 0x48, 0x2, 0x4, 0x36, 0xb, 0x4, 0x6c, 0x16, 0x16, 0x48, 0x16, 0x6, 0x1b, 0x3, 0x3, 0x36]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x58, 0x6, 0x6c, 0x6c, 0x6, 0x1, 0x22, 0x1b, 0x9, 0x9, 0x16, 0x5, 0xb, 0x5, 0x36, 0x24, 0x9, 0x60, 0x6c, 0x3e, 0x2, 0x24, 0xb, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x2, 0x2}, {0x1, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xfc, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x6, 0x18, 0x3, 0x48, 0xb, 0x24, 0x9, 0x2, 0x12, 0x48, 0xb, 0x16, 0x36, 0xb, 0x1, 0x30, 0x16, 0x30, 0x6e, 0x56, 0x5, 0x18, 0x9, 0x36, 0x9, 0x48, 0x2, 0x24, 0x18, 0x1b]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x0, 0xa}, {0x3, 0x4}, {0x4, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x4, 0x5}, {0x6, 0x1}, {0x4, 0xa}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x5}, {0x1, 0x3}, {0x5, 0x7}, {0x6, 0x1}, {0x1, 0xa}, {0x5, 0x6}, {0x4, 0x1}, {0x3, 0x6}, {0x3, 0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x4}, {}, {0x7, 0x3}, {0x7, 0x7}, {0x6, 0x1}, {0x5, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x63d, 0x97d6, 0x0, 0x8, 0x2, 0x3, 0xc]}}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x5, 0x3}, {0x5, 0x6}, {0x3, 0x6}, {0x6, 0x1}, {0x1, 0x2}, {0x5, 0x1}, {0x0, 0x4}, {0x6, 0x2}, {0x4, 0x2}, {0x0, 0x1}, {0x6, 0x3}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x8}, {0x1, 0x6}, {0x0, 0x9}, {0x6, 0xa}, {0x0, 0x2}, {0x6, 0x7}, {0x1, 0x8}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x36, 0x6, 0x48, 0x48, 0x7f, 0x1b, 0x24, 0xc, 0x2, 0xc, 0xc, 0x36, 0xb, 0x2, 0x9, 0x36, 0xc, 0x2, 0x2, 0x5, 0xb, 0xc, 0x24, 0x60, 0x6, 0x30, 0x49, 0x4, 0x5, 0x4]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x4c4, 0x11d, 0x0, 0x1, [{0x4}, {0x174, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x150, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x861, 0xa3af, 0x2, 0x101, 0x5, 0xfff7, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xfff, 0x40, 0x9, 0x101, 0x6, 0x3, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x60, 0x51, 0x18, 0xc, 0x5, 0x48, 0x36, 0x4, 0x6, 0xb, 0xb, 0xb]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x60, 0x7e, 0x0, 0x3, 0x3, 0x1b, 0x30, 0x0, 0x53, 0x6c, 0x2, 0x4, 0x36, 0x6, 0x9, 0xb, 0x16, 0x4, 0x9, 0xc, 0x1, 0x30, 0x6, 0x30, 0x61, 0x1b, 0x16, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xc, 0x40, 0x8, 0x7, 0x101, 0x0, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0x2, 0x5, 0x18, 0xc, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x1, 0x7}, {0x6, 0xa}, {0x1, 0xa}, {0x5, 0x6}, {0x1, 0x1}, {0x2}, {0x0, 0x4}, {0x0, 0x4}, {0x2, 0x8}, {0x0, 0x7}, {0x2, 0x3}, {0x3, 0x2}, {0x1, 0x7}, {0x1, 0x6}, {0x0, 0x2}, {0x1, 0x8}, {0x7, 0x3}, {0x0, 0x9}, {0x0, 0x8}, {0x6, 0x9}, {0x5, 0xa}, {0x5, 0x4}, {0x6, 0x3}, {0x7, 0x4}, {0x7, 0x1}, {0x0, 0x6}, {0x2, 0x1}, {0x0, 0x7}, {0x2, 0x4}, {0x5, 0x3}, {0x5, 0x5}, {0x5, 0x5}, {0x4}, {0x0, 0xa}, {0x7}, {0x2}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x6}, {0x0, 0x6}, {0x0, 0x7}, {0x4}, {0x5}, {0x1, 0x4}, {0x7}, {0x6, 0x7}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x18, 0x36, 0x6, 0x5, 0x4, 0x6, 0x1b, 0x6, 0x18, 0x6c]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x1b, 0x5, 0x5, 0x19, 0x48, 0x1, 0x0, 0x24, 0x16, 0x16, 0x48, 0xa, 0x6, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x9, 0x4, 0x1000, 0x0, 0xa53, 0x1, 0xec]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x6, 0x400, 0x1ff, 0x9, 0x7, 0x4]}}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8e}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x1a8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb0}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x18c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x4, 0x400, 0x3, 0x80, 0x1, 0x3, 0xf04f]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x2, 0x7}, {0x5, 0x4}, {0x2, 0x2}, {0x0, 0x6}, {0x7, 0x1}, {0x2, 0x7}, {0x1, 0x7}, {0x6, 0x8}, {0x0, 0x5}, {0x0, 0x5}, {0x4, 0x1}, {0x2, 0x7}, {0x7, 0xa}, {0x2, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0x8a17, 0x6, 0x4, 0x800, 0x2, 0xbaf0]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x919, 0x1, 0xd, 0x80, 0x8, 0x7fff, 0xfffb, 0x400]}}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x6, 0x4}, {0x3, 0x4}, {0x7, 0x6}, {0x3, 0x5}, {0x2}, {0x5, 0x2}, {0x0, 0x8}, {0x5, 0x7}, {0x7, 0x9}, {0x7, 0x6}, {0x2, 0x2}, {0x7, 0x3}, {0x0, 0x5}, {0x4, 0x9}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x5, 0x5}, {0x3, 0xa}, {0x6, 0x6}, {0x2, 0x5}, {0x5}, {0x1, 0x2}, {0x1, 0x4}, {0x2, 0x1}, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x3}, {0x6, 0x5}, {0x7, 0x3}, {0x0, 0x7}, {0x7, 0x5}, {0x0, 0x1}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0xc, 0x12, 0xc, 0x1, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x48, 0x1b, 0x18, 0xb, 0x4, 0x25, 0x16, 0x12, 0x18]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6a, 0x6, 0x5, 0x34, 0x6, 0x3, 0xc, 0x1, 0x60, 0xaad8807b2a9339fb, 0x6, 0x16]}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x31f3, 0x1, 0x9f2, 0x2, 0xf801, 0x7fff]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x2}, {0x6, 0x1}, {0x3, 0xa}, {0x1, 0x7}, {0x6, 0x6}, {0x6, 0x3}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x3}, {0x5, 0x8}, {0x4, 0x5}, {0x2, 0x9}, {0x6, 0xa}, {0x5}, {0x0, 0x7}, {0x6}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x9}, {0x0, 0x5}, {0x6, 0x9}, {0x2, 0x6}, {0x2, 0x3}, {}, {0x0, 0x2}, {}, {0x1, 0x6}, {0x3, 0x5}, {0x3, 0x6}, {0x7, 0x2}, {0x2, 0xa}, {0x0, 0x4}, {0x3, 0xa}, {0x7, 0x1}, {0x7}, {0x2, 0x3}, {0x7, 0x7}, {0x4, 0x1}, {0x1, 0x7}, {0x3, 0x8}, {0x1, 0x3}, {0x5, 0x4}, {0x0, 0x9}, {0x1, 0x5}, {0x6, 0x5}, {0x0, 0x5}, {0x7, 0x7}, {0x0, 0x5}, {0x1, 0x4}, {0x1, 0x8}, {0x2, 0x9}, {0x0, 0x8}, {0x2, 0x7}, {0x3, 0x1}, {0x4}, {0x7, 0x2}, {0x4}, {0x3, 0x8}, {0x0, 0x3}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6, 0x9, 0x1, 0x16, 0x1, 0x6, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x100, 0x3, 0x8, 0x7, 0xff, 0x4, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x108, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xfc, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x40, 0x2, 0x400, 0x7, 0x5, 0x4, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x1, 0x8, 0x3, 0x9, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x44, 0xc7e3, 0x7, 0x2, 0x4, 0x3, 0x800, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x7, 0x3}, {0x4, 0x5}, {0x2, 0x2}, {0x6, 0xa}, {0x3, 0xa}, {0x1, 0xa}, {0x6, 0x5}, {0x3, 0x9}, {0x4, 0x5}, {0x5, 0x4}, {0x2, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x2, 0x4}, {0x6, 0xa}, {0x4, 0x3}, {0x1, 0x2}, {0x7, 0x8}, {0x2, 0x9}, {0x3, 0x9}, {0x2, 0xa}, {0x6, 0x8}, {0x5, 0x5}, {0x3, 0x7}, {0x6, 0x1}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x5, 0x2}, {0x7, 0xa}, {0x7, 0x3}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x6}, {0x1, 0x4}, {0x5, 0x5}, {0x6, 0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x1}, {0x7, 0x3}, {0x1, 0x6}, {0x0, 0x1}, {0x0, 0x7}, {0x3, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x0, 0x4}, {0x0, 0x9}, {0x3, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x1b, 0x5, 0x24, 0x0, 0x2, 0x6, 0x48, 0x4, 0xc, 0x18, 0x879e2d86dab5257d, 0x6c, 0x36, 0x6d, 0x4, 0x48, 0xb, 0x5, 0x36, 0x5, 0x36, 0xc, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x1, 0x7, 0x4, 0x7, 0xa, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x1, 0x3, 0x7, 0x7, 0x7, 0xc, 0x101]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xbb6c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xbbe1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xb}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x10c8}, 0x1, 0x0, 0x0, 0x4000801}, 0x20000041) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x28, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}}}, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r8, @ANYBLOB="00000000000000001c0012800b000100697036746e6c00000c00028008000100", @ANYRES32=r6], 0x3c}}, 0x4880) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000004600)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0000000020010000300012800b000100697036746e6c00002000028008000100"], 0x50}}, 0x20004010) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, [@null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r9, 0x0, 0x48a, &(0x7f0000000040)={0x9, 0x7, 0xe0000000}, 0xc) 2m3.133033111s ago: executing program 4 (id=7130): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200001604000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000e0000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509020003000000dbaaf8ff50000000bf8200000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70524fe52f4d00c0000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x003\x00', @ANYRES32=0x1], 0x48) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r3, @ANYRES16=r5, @ANYRES64=r2, @ANYRES32=r6, @ANYBLOB="10005a800c0000800400020004000100"], 0x2c}, 0x1, 0x0, 0x0, 0x4810}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f500000200fffffffffffffbfb000067"], 0x1eb) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) unshare(0x20000400) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r11}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r11}, &(0x7f0000000540), &(0x7f0000000580)=r12}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r11, &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x1, 0x10, &(0x7f0000000740)=ANY=[@ANYRES64, @ANYRES32=r9, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m2.877362601s ago: executing program 4 (id=7133): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) socket(0x10, 0x803, 0x8) socket$qrtr(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003a00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80001, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket(0x10, 0x803, 0x0) 2m2.767269166s ago: executing program 4 (id=7136): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a400fe000000007110bc00000000001d300200000000004704000001ed030407030000060000001d440000000000006b"], 0x0}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0x10}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000148c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0x4, 0x10}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x4000000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x5}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x80000001, 0x3, 0x8, 0xb, 0x101, 0xffffcbef, 0x183, 0x5, 0x7, 0x1, 0x14, 0x9, 0x1a, 0x3, 0xd0b, 0x38f4}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r9}], 0x1, 0x0, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_delvlan={0x30, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r11}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x5, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x1, 0x4}}}]}, 0x30}}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r12, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x2, 0x4, 0x8, 0x8800, r9, 0x5, '\x00', r11, r1, 0x2, 0x2, 0x2, 0x4, @value=r0}, 0x50) r13 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000001300)=0xc) 2m2.50940738s ago: executing program 4 (id=7141): r0 = socket(0x10, 0x3, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80800) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000480)={0x0, 0x4}, 0x8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r4, r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb77f68828b00000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0xe, 0x0, &(0x7f0000000000)="007ef820000000000807f4000000", 0x0, 0xd686, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="938568905b313e678a47ef427a6f5adbc1aae858a4969a1027d70ee951473f8a4dbd96d720133c9469d9436ca79bd2dfcdb83de7e1d408713866670f34344e9fc0b1f06c4b9ce01742a78fef077430e2264cb16a63d323a78af06a2f5605009260f38770fe64dce4d1330725cbd92037981010340c99a0e80877cb80ae096815926ed319205338f1a7e5c481482727be984ee50064792fed51d45e49af4a4ce2296ae3bc028cc8744eb74d75543f3e308f86513c6fba8fe089e2dad4f3bb5f05c0034aab268c6c50b072fb84d9b4eed3ab97df5b71a5b7fd5b2798cc4eff2e8bb1d3b6c707738c8e3baf7a759de9d2", @ANYRES8=r4], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x440e0) r6 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @remote}, {0xa, 0x4e1f, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x897, 0x0, 0x2, 0x80000000]}}, 0x5c) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r8, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20000084) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001a00010000000000000000008100000000004001"], 0x1c}}, 0x0) 2m2.232255834s ago: executing program 32 (id=7141): r0 = socket(0x10, 0x3, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80800) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000480)={0x0, 0x4}, 0x8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r4, r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb77f68828b00000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0xe, 0x0, &(0x7f0000000000)="007ef820000000000807f4000000", 0x0, 0xd686, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="938568905b313e678a47ef427a6f5adbc1aae858a4969a1027d70ee951473f8a4dbd96d720133c9469d9436ca79bd2dfcdb83de7e1d408713866670f34344e9fc0b1f06c4b9ce01742a78fef077430e2264cb16a63d323a78af06a2f5605009260f38770fe64dce4d1330725cbd92037981010340c99a0e80877cb80ae096815926ed319205338f1a7e5c481482727be984ee50064792fed51d45e49af4a4ce2296ae3bc028cc8744eb74d75543f3e308f86513c6fba8fe089e2dad4f3bb5f05c0034aab268c6c50b072fb84d9b4eed3ab97df5b71a5b7fd5b2798cc4eff2e8bb1d3b6c707738c8e3baf7a759de9d2", @ANYRES8=r4], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x440e0) r6 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @remote}, {0xa, 0x4e1f, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x897, 0x0, 0x2, 0x80000000]}}, 0x5c) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r8, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20000084) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001a00010000000000000000008100000000004001"], 0x1c}}, 0x0) 3.184112114s ago: executing program 2 (id=8495): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000028000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="c48a570389e85e8182eab41a2f16", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback, 0x0}, &(0x7f0000000040)=0x14) r5 = socket$l2tp(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r6, &(0x7f0000000580), 0x0}, 0x20) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f00000001c0)={0x3, 'ip6tnl0\x00', {0x9}, 0x7}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000140)={r4, 0x1, 0x6, @random="3d6972cfc14a"}, 0x10) 2.84437623s ago: executing program 2 (id=8500): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0a000000060000002a4feb5806fd014d00040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES64, @ANYRES32], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000056c0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x80}], 0x2, 0x2000, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000640), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000200)) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r4, &(0x7f0000000540)=[{&(0x7f00000003c0)="00214717a70700000000030600710a06069d856829c2f5d7a3c3b954c224baf5a405000000143d6ab27e0b6d80aa934dc082", 0x32}], 0x1, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)='%pS \x00'}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r7 = socket(0x40000000015, 0x5, 0x0) getsockname$netrom(r7, 0x0, &(0x7f0000000140)=0xe0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r10 = socket(0x2a, 0x2, 0x0) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r11 = socket(0xa, 0x1, 0x423) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000003c0)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000400)={r3}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) socketpair(0x2c, 0x80000, 0x8000, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fedbdf2501000000000007800000018000000100", @ANYRES32, @ANYBLOB="0000018000000100", @ANYRES32=r7, @ANYBLOB="0000018000000100", @ANYRES32=r7, @ANYBLOB="0000018000000100", @ANYRES32=r17, @ANYBLOB="700007800c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32=r5, @ANYBLOB="76fd018008000100", @ANYRES32=r6, @ANYBLOB="0c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=r8, @ANYBLOB="0c00018008000100", @ANYRES32=r9, @ANYBLOB="0c00018008000100", @ANYRES32=r10, @ANYBLOB="0c00018008000100", @ANYRES32=r11, @ANYBLOB="ca02019d08000100ed53f5386740d15d143a69f7f4970eb166063d0ecee8bb668a5816268e1f4c10608ba00e97ec2ef514cc0b492bf204c04e79e974e77d60a75e50447c79b1cef2630828092c95b0368b905afb1543197f788a469dccb054aff5e2c6efb48842a21f481aa326f8e81cc8e9969eba29045c5aea8806acb0903d6a8b058486a0f62a647da5c815479b0c94624cf030c6e163331db1269bcb32ee5cdbfa6984b3702abf6b55d5732e452fd027b2713fdf39545a853c66fcaf6deb99dc5b2afe995b007931ac5d7663fe1ef6b56f649ade3845", @ANYRES32=r12, @ANYBLOB="4c0007800c00018008000100", @ANYRES32=r13, @ANYBLOB="0c00018008000100", @ANYRES32=r14, @ANYBLOB="0c00018008000100", @ANYRES32=r15, @ANYBLOB="0c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32=r16, @ANYBLOB="0c00018008000100", @ANYRES32=r18, @ANYBLOB="0c000300c80000000000000000000100000000000c00080039000000000000000c000300fefd00000000000008000100000000000c00020008000000000000000c0005002100000000000000"], 0x12c}, 0x1, 0x0, 0x0, 0x400c890}, 0x40) r19 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$FS_IOC_FIEMAP(r19, 0xc020660b, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000000000000700000000000000020000000300000002000000000000001e0f000048ba03138e00000000000000080000000000000000000000006a4d09924e436700000000000000000000000001000000000000000000000000000000000000000000000400000000000000ffffffff00"/144]) 2.590175005s ago: executing program 2 (id=8505): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000100)=""/141, 0x1a, 0x8d, 0x1, 0x7}, 0x28) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000100)=""/141, 0x1a, 0x8d, 0x1, 0x7}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x4a0, 0xffffffff, 0xd0, 0x300, 0x300, 0xfeffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0xff, 0x1}}, @common=@rt={{0x138}, {0x7, [0x7, 0x6], 0x3, 0x8, 0x1, [@loopback, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @dev={0xfe, 0x80, '\x00', 0x3a}, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, @private0, @mcast1, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @remote], 0x9}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x4a0, 0xffffffff, 0xd0, 0x300, 0x300, 0xfeffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0xff, 0x1}}, @common=@rt={{0x138}, {0x7, [0x7, 0x6], 0x3, 0x8, 0x1, [@loopback, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @dev={0xfe, 0x80, '\x00', 0x3a}, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, @private0, @mcast1, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @remote], 0x9}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000040)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c00"], 0x68}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) socket$kcm(0x2, 0xa, 0x2) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa7}}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa7}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 2.546709399s ago: executing program 1 (id=8507): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x80000) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000080), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0xc000) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffed8, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000000010101000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000080008400000ff16080015"], 0x50}, 0x1, 0x0, 0x0, 0xc054}, 0x200048c0) 2.335729471s ago: executing program 2 (id=8510): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r3, &(0x7f0000000140)=[{}], 0x1, 0xffffffff) 2.112130716s ago: executing program 5 (id=8515): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d616376746170000000090001"], 0xf4}}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)='H\x00', 0x2}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000003000"], 0xfc}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x7}}, 0x14}}, 0x0) bind$rxrpc(r1, &(0x7f0000000400)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x40000d0) 2.030942541s ago: executing program 5 (id=8516): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x2, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x7f, 0x5f, 0x6f]}}, 0x0, 0x29, 0x0, 0x1, 0x233}, 0x28) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100da03"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 1.579605319s ago: executing program 1 (id=8518): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x6100204) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000540)="00214797357e0e8d442441e9beae583d48ac340dc69d54af976b6a7c18c4907ed175462f18ec0e16ad9f57abed3bad46320d0d4abf7c3a617f1b2fbe8b338d1fce4490668ce9faadcf6b44b9906eeb59241caa04a1bf2399f37a7f221861e3580bdf025cb470613b79119f1c9fe8b9ee5d1f41b6af7d12a2ba71c7a74727cece06221eadc4d7137811e483a94c1164f4496f0fe1829f55cd2d91b74aeee64bc05e7014dbb599bad1be2d8ced5b1a3131", 0xb0}], 0x1, 0x73a, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x2, 0x90, [0x0, 0x200000000240, 0x1, 0x2000000004cd, 0x7, 0xb], 0x0, 0x0, &(0x7f0000001940)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000e0ffffffffffffff000000000000feffffff0978881e07fffffe0000000000000000000000000000000000000000000000000000e0ffffff000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000"]}, 0x108) getsockname$inet(r2, &(0x7f0000000300)={0x2, 0x0, @local}, &(0x7f00000003c0)=0x10) preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000140)=""/176, 0xb0}, {&(0x7f0000000200)=""/19, 0x13}], 0x2, 0x6, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d0001000000000004086aa42d"], 0x30}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b0400000000000000000200000034000480300001800b000100746172676574000020f701800a0001004155443d5400000005000300ef00000008000240000000000900018073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x88}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x3c, r6, 0x7, 0x1000002, 0x1, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}]}, 0x3c}}, 0x40800) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x6fd52c06, @private0, 0x9}], 0x1c) vmsplice(r4, &(0x7f0000001a40)=[{&(0x7f0000000440)="a7b66e9323aafa5da5437b101b8e6602376125fb5fd530f37e87f0b4e5dab600e7bf01dc1948e9e5acdc1ff8238f71ba93d1d3bbf80ca1c634d96a8d2c5473368fae9315d0569459dac6e951185af0648e1ed1acf0fa79357c1a7769015547ccaf15ab13819e60c49c6fff41ee72a0d1c3d9a89907bd2b55d65abed02b080d0434f49f29a555647df395fdf65050914b5e5b", 0x92}, {&(0x7f0000000600)="f1886cc93d4c62fdabf79fefb41053244acdcf1738fb1abc7e936cd53240a419f071ed6cf2af197cb85b4f5d530e56017c52ee528bd009e4e7e756fc316d3730fb2fdbd136a3a1884fd535a024359e160d9505969f9f7ae0535b28e9bd17c12cbac8c2579e21", 0x66}, {&(0x7f0000000680)="74f350bd2056bb41dceb0e99aae70721b06791d2e45951e038003a052ba10c3a0509ab763598c8210dbbab704276dd4b784be855f5c50681fa65de5b47251f1a1d8a3049a83e93088a09e04960296af46bfeb1e2b77aa9119b792b037f0d5bf7ad96592cb03af1cbac2c40f8e704a3268d408de8ee9dd5c66d21824d964cfd6b5498ad2a2a8f6dec06b67ba574bd31e920753e58ec784b7e7932a759e0ed3562a9f1cdf376268547e7bcd73675de8fda93c30acccf3ead85c589340cb3d3be86fb", 0xc1}, {&(0x7f0000000780)="8bd1609ac27d5b0c2302f097cfc26613010ec254f75a1a12d5c802f3b6a3e3f86c722d9b33e26ebf70818caeeb23fed5e18cd313f687037d7fea332453bb043bde46d39394ce1660f70e0c2106c87c94cb5751c70553c887d0cbc448118199851dfd4897d9aaea806c23e540e19e7e36caeb09116ec84fd45f066e82918771f46eae742c0ccd326a4b2d49617d6b7200f59df67e77972aa08a02297a8712b41f75db25a36f40bda7139a9bc2fae4f87f270f1021be2ab330adcddf5a2674008f", 0xc0}, {&(0x7f0000000840)="beac19fda246b9dc6f26e76a81e5229b0eb23b8fe533a011a520b024d16dbccfe0d753f890abf94726c737109fa06621ff7d63d64ea07733d7a743d8b6e051dd0d4961f9344da2455f58be76595a938f8bf099d719dd4f0bfe9b04b6053ca76326d2ebef17092519943f14ff2a66d363b508fd20ba216e2c844edad70e2906d6a1e20ebfff983c68c79028ed44e0f736458001c0c57a74c76770631b8bebcdd4a3b658de9890b5b2ac9e0eb307bd4ef87873aae08e21f473bb7681c3b4d5e0f99f170568ee4e3f59caab7a4588b59a693def646b53cfc5efbe55ce299256b1ded2698531d4", 0xe5}, {&(0x7f0000000100)="d9e219e49879c6bc5ea4a945e84820d5a1cba55a2d18ef311edd6a9af5a78b1857a50fc9", 0x24}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001ac0)="16cf163ada5ee242bf8126baacede905c552f4851659eac866a7b529a3b0d54c88b07cdd79de1b5634a9c72854f94b934fa9e02d9feeecbd14a46723f6b7c820b38d798cfadfe2b5d1e2a593540ee70bf3c23dc38ba5c4ae3e9e750c203ccd0b023011f0828d7c0964acfa7d63a8b4d6971163948dd8a1246ca143aa248a15ce73378f064f2de497671b25beac3f81e9247c3cfd0b078c4471a4808f61ae03c77f1d8a55f170b292adc6e50a5e562cb22a15466d81891226e1e0bbcb7c15a913619ef608ee9aba6494d94c5c66566e8b78958d6de9ce02a1cb779e41f5e4255747896e73324e", 0xe6}], 0x8, 0xa) 1.495261987s ago: executing program 0 (id=8520): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x9, 0x5, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f0000000700)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @broadcast}}}, 0x108) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}}}, 0x108) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0900000004000000f40000000a000000010100069b830000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000680)="e4867367d4f561a473518a4511c1f4629a2d515bb155de28", &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='GPL\x00', 0x4}, 0x94) sendmsg$inet_sctp(r1, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="aff5", 0x2}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000400000000008400000000000000ffff4841e3ce5ca84714634ae80b6ee7882407580007000400"], 0x18, 0x20000001}, 0x20008000) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x22, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@llu}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @ldst={0x3, 0x0, 0x0, 0x3, 0x1, 0x10, 0x10}, @alu={0x4, 0x1, 0xd, 0x9, 0xb, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf22, 0x0, 0x0, 0x0, 0x172}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7f}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0xfffffff9, 0x61, &(0x7f0000000080)=""/97, 0x41100, 0x4, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x9}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000440)=[{0x2, 0x3, 0x4, 0x1}, {0x1, 0x5, 0xe, 0x4}, {0x4, 0x3, 0xd, 0x4}, {0x4, 0x4, 0x0, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x4, 0x4, 0x7, 0xa}, {0x4, 0x5, 0x1, 0x9}, {0x1, 0x4, 0x5, 0x2}, {0x0, 0x5, 0x0, 0x4}, {0x4, 0x2, 0xf}], 0x10, 0x101}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) 1.419220938s ago: executing program 1 (id=8521): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x7}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_XFRM_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) 1.302014276s ago: executing program 2 (id=8522): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x46014}, 0x2404c880) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) read$alg(r3, &(0x7f0000000080)=""/47, 0x2f) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0xb4, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_SOCKETS={0x58, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40080}, 0x200000a0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, &(0x7f0000000100)=""/205, 0x0, 0xcd, 0x1, 0x726}, 0x28) sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x2) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYRES16=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xa, 0x8, 0x1, 0x40, 0x42}, 0x48) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r9}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000240)={r9, &(0x7f0000000100), &(0x7f0000002240)=""/99}, 0x20) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r8}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1.301777396s ago: executing program 1 (id=8523): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7daa00000000000071101b000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) (async) socket$inet6(0xa, 0x800, 0x9) 1.156068171s ago: executing program 0 (id=8525): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x300, 0x4, 0x20}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000180)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x18) 1.155673704s ago: executing program 5 (id=8526): socket(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x1b, r2, 0x1, 0x8, 0x6, @local}, 0x14) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$packet(r1, 0x0, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000100)=ANY=[], 0x0) 1.034195635s ago: executing program 0 (id=8527): socket$kcm(0x10, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) close(0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="410000000000000001000603000013000300060a0004090300f006e8ffff00000000080007003a3a09f8130002"], 0x44}, 0x1, 0x1000000}, 0x4000044) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x53, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x1e) r7 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) connect$netlink(r7, &(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfc, 0x200000}, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000020000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 986.453035ms ago: executing program 1 (id=8528): bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)=@tcp, 0x2}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 980.961879ms ago: executing program 5 (id=8529): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100)={r4, 0x5}, 0x8) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000280)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000a00000000000a00000609000200737d7a31000000000900010000797a31000000001c000380180000800c00018006364ae3bdcd5ad14b0003400000002314000000110001000000002d09b523000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) listen(r1, 0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00'}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xbc, 0x21, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}}, [@migrate={0x50, 0x11, [{@in=@loopback, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x64010100, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}]}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e23, @in6=@private1}}]}, 0xbc}}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x929002}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r9, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r9, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000440)={0x0, 0x3, 0x0, [0x3, 0x100000000, 0xd146, 0x4, 0x1], [0xf9be, 0x3, 0x8, 0xffffffffffff0000, 0x9, 0x2, 0xffffffffffffff70, 0x9, 0x9, 0x7, 0x2, 0x1ff, 0x5, 0x7fffffffffffffff, 0x3, 0x800, 0x8, 0x6, 0x1, 0x7, 0x401, 0x9, 0x3345675e, 0xffff, 0x5a, 0xbf9, 0x4, 0x2, 0x8a16, 0x1, 0x5, 0x9, 0x9, 0x7, 0xc05, 0x6, 0x8001, 0x1000, 0x0, 0x8001, 0x1000, 0x6, 0x5, 0x6, 0x7fffffff, 0x8, 0x9, 0x8001, 0x10001, 0x6, 0x0, 0x7fffffff, 0x3, 0x5, 0x8001, 0x2, 0x3, 0x5, 0x5, 0x567f671b, 0x1, 0x1, 0xc68, 0x0, 0xd, 0x100000000, 0x1, 0xffffffffffffffff, 0x7, 0x3, 0x1, 0xb, 0x101, 0x2, 0xfff, 0x5, 0x7, 0xfffffffffffffffe, 0xf26, 0x6, 0x4, 0xc, 0x71cf, 0x80000000, 0x8, 0x606c, 0x5, 0x2, 0x9, 0x3ff, 0x0, 0x400, 0x8, 0xfddd, 0x5, 0x7, 0x3, 0x0, 0x7, 0x1, 0x1, 0x80000000, 0x0, 0x5, 0x9, 0x93a, 0x7, 0xcc7, 0x9, 0xffffffff, 0xf26, 0x4, 0x5, 0xb, 0x0, 0x7, 0x0, 0xffffffff, 0x1000000, 0xfffffffffffffffc, 0x1]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000880)={r10, 0x10000, 0x0, [0x100000001, 0x9, 0xffffffffffffffff, 0xffffffffffffffbe, 0x3], [0x0, 0x6, 0x0, 0x10001, 0x0, 0x1000, 0x9, 0x7, 0x3, 0x8, 0x0, 0x2e473956, 0x3, 0x1, 0x6, 0xd, 0x2, 0x3, 0x9, 0x0, 0x87f3, 0x4, 0x8000, 0x0, 0x100, 0x401, 0x7ff, 0x7, 0x1000, 0xd, 0x3, 0x2, 0x7f, 0x8, 0x655, 0x3, 0x7ff, 0x3, 0x5, 0x4, 0xffffffff, 0x401, 0x400, 0x5, 0x9, 0xffffffffffffffb4, 0x7, 0x755, 0xd, 0x2, 0x4, 0x0, 0x3, 0x3ff, 0x4, 0x7, 0x7, 0x7, 0x13, 0x19215c5e, 0x6da, 0x6, 0x22ff910a, 0x6, 0x6, 0x401, 0x8, 0xd, 0x4, 0x10001, 0xfffffffffffffffa, 0x0, 0x0, 0x5, 0x3, 0x3, 0x2, 0x2, 0x3, 0x5, 0x6, 0x5, 0x5f1, 0x4, 0x0, 0x9, 0x2445, 0x0, 0x188, 0x9, 0x9, 0xffffffff, 0x74, 0x2, 0x1, 0x3, 0xb, 0x3, 0x10001, 0x10, 0xe3, 0x1f, 0x80, 0x8000, 0x5, 0x27a, 0x1, 0x40, 0xa, 0x6, 0x2, 0x2, 0x0, 0x49, 0x5, 0x9, 0xc, 0x1, 0x6, 0x400, 0xffffffffffffffff]}) 934.121468ms ago: executing program 3 (id=8530): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$kcm(0x2d, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2d, 0x0, 0x7ffe}, 0xc) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f00000007c0)=0x40000404, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0x6, @loopback, 0xfffffffe}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) recvfrom(r3, &(0x7f0000000340)=""/130, 0x82, 0x2100, &(0x7f0000000580)=@in6={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1a}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 857.200484ms ago: executing program 1 (id=8531): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcd) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x9030}, {r0, 0x2000}], 0x2, 0x3577) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000040)) r1 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/64, 0x40}, {&(0x7f00000000c0)=""/241, 0xf1}], 0x2, &(0x7f0000000200)=""/179, 0xb3}, 0x40000000) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000340)={0x2, 0x8, '\x00', 0x1, &(0x7f0000000300)=[0x0]}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x4e21, 0xa, @empty, 0xff}, @in6={0xa, 0x4e23, 0x4b3d, @loopback, 0x7f}, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}], 0x54) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000480)='GPL\x00', 0xfffff000, 0xbe, &(0x7f00000004c0)=""/190, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0x0, 0x8000}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000600)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000640)=[{0x1, 0x1, 0x6, 0x9}], 0x10, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='fsi_master_aspeed_opb_write\x00', r3, 0x0, 0xc810}, 0x18) ioctl$int_in(r1, 0x5421, &(0x7f0000000780)=0x7ff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x28c00, 0x0) write$tun(r4, &(0x7f0000000800)={@val={0x0, 0x2}, @val={0x0, 0x4, 0x9, 0x1, 0x2, 0x1}, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @val={@val={0x88a8, 0x4, 0x0, 0x2}, {0x8100, 0x6, 0x1, 0x1}}, {@can={0xc, {{0x4, 0x1, 0x1, 0x1}, 0x2, 0x0, 0x0, 0x0, "00353b1900914489"}}}}}, 0x34) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000840)={0x0, 0x3, 0x5, [0x5, 0x0, 0x1, 0x9, 0xfff]}, &(0x7f0000000880)=0x12) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f00000008c0)={r6, 0x8000, 0x3}, 0x8) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000980)={&(0x7f0000000900)=""/127, 0x7f, 0x6, 0xffff}) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, &(0x7f00000009c0), &(0x7f0000000a00)=0x30) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x800, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000a80)={'bond_slave_1\x00', 0x8000}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000b00)={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, r8}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000bc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, r9, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x107}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fffffff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}]}, 0x54}}, 0x20044014) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000d00)={{r4}, 0x7, 0x7, 0x3}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000f00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)=@ipv6_newnexthop={0x74, 0x68, 0x10, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x3, 0x0, 0x18}, [@NHA_FDB={0x4}, @NHA_GATEWAY={0x14, 0x6, @ip4=@multicast2}, @NHA_GATEWAY={0x14, 0x6, @ip4=@broadcast}, @NHA_BLACKHOLE={0x4}, @NHA_ENCAP_TYPE={0x6}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x1}, @NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_OIF={0x8, 0x5, r8}, @NHA_ID={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x400c2}, 0x40) 796.839098ms ago: executing program 3 (id=8532): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYRES16=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xfffffe71, 0x1}}, 0x20) r2 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r2, 0x0, 0x3e8) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet(0x2, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x26, 0x80803, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x2a, 0x80000, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0xfffffe57) sendmmsg(r4, &(0x7f0000000340)=[{{&(0x7f00000003c0)=@xdp={0x2c, 0x0, r6, 0x1f}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x200488c4) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000680), r7) sendmsg$NFC_CMD_START_POLL(r7, &(0x7f0000003080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESOCT=r1, @ANYRES8=r3], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20040804) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040), 0x0, 0x4f255688e7dbc988) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000140)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 650.009143ms ago: executing program 3 (id=8533): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20) (async, rerun: 64) pipe(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) (async) splice(r2, 0x0, r1, 0x0, 0x406f413, 0x0) (async) r3 = socket(0x2, 0x80805, 0x0) (async) r4 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) (async, rerun: 32) bind$inet(r4, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) (async, rerun: 32) listen(r4, 0x3) (async) r5 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r5, &(0x7f0000000180)={0x2, 0xde20, @empty}, 0x10) (async) listen(r5, 0x3) (async) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async) r6 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34044005}, 0x20044151) recvmmsg(r6, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/117, 0x75}], 0x1}, 0x7fb}], 0x1, 0x40000160, 0x0) (async, rerun: 32) r7 = accept$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c) (rerun: 32) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f00000000c0)={0x2e, 0xf, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @hao={0xc9, 0x10, @empty}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @generic={0x5, 0x37, "2d393b581eb95089006e02f6015a03a94ca7b0b31791d8b0fb4cb6c98e2c83ca74a91d9d35cd401f5477f46dfb68fa566b18d1f5938e52"}, @hao={0xc9, 0x10, @remote}]}, 0x88) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xa, &(0x7f0000000300)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000000260880ff00000000180000000000000000000000001000009d632000ffff7fff95000000000000006a0c7cd06433fe1aff5b011b8ce32330d77dd47888fa6e7ee0895c6321a3689391803cce256098d61b0caf9ad6d382d48e998be6cfaae38aafb957fa8c86"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 555.326324ms ago: executing program 3 (id=8534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0xa, 0x0, 0xfffd}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0xb8}}, 0x800) 540.327717ms ago: executing program 0 (id=8535): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x81, 0xfff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000050000000000000080000000850000007b0000001801000020646c2500000000002020207b1af8ff00000000bfa101000100000007010000f8ffffffb702000008000000b703000006000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x51}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="12000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) 462.811645ms ago: executing program 5 (id=8536): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x11}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 460.847912ms ago: executing program 3 (id=8537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (async, rerun: 64) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)={0xe0, 0x10, 0x509, 0x3, 0x0, "", [@typed={0x8, 0xd2, 0x0, 0x0, @u32=0x1}, @typed={0xa5, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b5f44e4ce287128282829289423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336"}, @nested={0x20, 0x0, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0x8, 0x6e, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0xe0}], 0x1, 0x0, 0x0, 0x1}, 0x40040) (async, rerun: 64) r6 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000000f80), 0x4) (async) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @remote}, 0x1c) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x34, r3, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x6, 0x13}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x20, r3, 0x220, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x2000c044) (rerun: 64) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)={0x1990, r3, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x7b}}}}, [@NL80211_ATTR_TID_CONFIG={0x408, 0x11d, 0x0, 0x1, [{0x404, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x178, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x935d, 0x98, 0x4, 0x6, 0x4, 0x1ff, 0x5, 0x9]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xf9, 0x1, 0x80, 0x1142, 0x4, 0x3ff, 0x40, 0x200]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1, 0x2f, 0x1b, 0x6f, 0x36, 0x23, 0x1]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x0, 0x36, 0x6, 0x9, 0x12, 0x48, 0x2, 0x0, 0x3, 0x9, 0x3, 0x16, 0x0, 0x9, 0x9, 0x2, 0xb, 0x3, 0x2, 0x3, 0x9, 0xc, 0x16, 0x4, 0xb, 0x1b, 0x16, 0x3, 0x48, 0x1b, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x644, 0x7, 0x85, 0x9, 0x32be, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xea8, 0x1, 0xb7c8, 0x3ff, 0x7, 0x2, 0xff90, 0x100]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xd, 0x7, 0x5, 0x81, 0x4, 0x3ff, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x6c, 0x60, 0x30, 0x36, 0x12, 0x16, 0x6, 0x1b]}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4000, 0x0, 0x6, 0x4, 0x5, 0x5, 0x5]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0xcc, 0xe, 0x6, 0x3f, 0x2, 0x819]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x3, 0x1b, 0x1b, 0x6c, 0x3, 0x3, 0xc, 0x18, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x5, 0x9}, {0x0, 0xa}, {0x5, 0x5}, {0x7, 0x8}, {0x5, 0x4}, {0x0, 0x2}, {0x1, 0x8}, {0x0, 0x8}, {0x4, 0x5}, {}, {0x1, 0x4}, {0x1}, {0x2, 0x2}, {0x0, 0x4}, {0x2, 0x6}, {0x7, 0x4}, {0x4, 0x3}, {0x3, 0x3}, {0x7, 0xa}, {0x7, 0x8}, {0x1, 0x7}, {0x4, 0x8}, {0x6, 0xa}, {0x3, 0x9}, {0x5, 0x5}, {0x1, 0x1}, {0x1, 0x6}, {0x1, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x26c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x7fff, 0xfffd, 0x0, 0xf596, 0x8, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x6, 0x6, 0xb, 0x2, 0x2, 0x81, 0x6]}}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x1, 0x9}, {0x1}, {0x6}, {0x2, 0x2}, {0x2, 0x6}, {0x4, 0x9}, {0x7, 0x7}, {0x1, 0x4}, {0x0, 0x9}, {0x3, 0x2}, {0x3, 0x7}, {0x3, 0x1}, {0x0, 0xa}, {0x6, 0x7}, {0x5}, {0x0, 0x8}, {0x0, 0x6}, {0x5, 0x8}, {0x1, 0x2}, {0x1, 0x5}, {0x3, 0x6}, {0x6}, {0x2, 0x3}, {0x1, 0x7}, {0x0, 0x9}, {0x1, 0xa}, {0x6, 0x5}, {0x5, 0x1}, {0x5, 0x8}, {0x6, 0x4}, {0x7, 0x2}, {0x1, 0xa}, {0x6, 0x1}, {0x6, 0x2}, {0x0, 0xa}, {0x3, 0xa}, {}, {0x4, 0xa}, {0x2, 0x3}, {0x0, 0x3}, {0x3, 0x9}, {0x2, 0x5}, {0x0, 0x6}, {0x2, 0x5}]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x2, 0x36, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf52, 0x3, 0xff, 0x0, 0x7c, 0x400, 0x5, 0x7]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6c, 0x48]}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x3, 0xf571, 0x1, 0x2, 0x3, 0x3, 0x4]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x2, 0x9}, {0x0, 0x6}, {0x4, 0x5}, {0x0, 0x2}, {0x5, 0x5}, {0x7, 0x2}, {0x4, 0x2}, {0x7, 0x6}, {0x7, 0x8}, {0x1, 0x8}, {0x6, 0x3}, {0x7, 0x2}, {0x1, 0x1}, {0x5, 0x8}, {0x0, 0x2}, {0x6, 0x3}, {0x1, 0x1}, {0x4, 0x9}, {0x6, 0xa}, {0x2, 0x1}, {0x4, 0x4}, {0x2, 0x2}, {0x3}, {0x7, 0x9}, {0x0, 0x2}, {0x2, 0x1}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x7, 0x5}, {0x7, 0x3}, {0x5, 0xa}, {0x2, 0x1}, {0x3, 0x8}, {0x4, 0x1}, {0x6, 0xa}, {0x7, 0x3}, {0x0, 0x7}, {0x1, 0x4}, {0x4, 0xa}, {0x1, 0x3}, {0x1, 0x5}, {0x3, 0x5}, {0x6, 0xa}, {0x5, 0x6}, {0x2, 0xa}, {0x7, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0x8, 0x5, 0x1, 0x0, 0x3, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x4, 0x8, 0x2, 0x40, 0x57, 0x8000, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x9, 0x1b, 0x16, 0x16, 0x1b, 0x60, 0x1, 0x6c, 0x2, 0xb, 0x2, 0x6c, 0x18, 0x1, 0x16, 0x3e, 0x16, 0x18, 0xc, 0x9, 0x1, 0x60, 0x16, 0xb, 0x3, 0x16, 0xc, 0x48, 0x1b, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb6ad, 0x7, 0x9, 0xfff9, 0x7, 0x1, 0x0, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x5, 0x9, 0x5, 0x6, 0x9, 0x3]}}]}, @NL80211_BAND_6GHZ={0xdc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x8b77, 0x3, 0x3, 0x40, 0x7, 0x1, 0xc0]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x45, 0x0, 0xffff, 0x5, 0x3ff, 0x0, 0xe]}}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x1, 0x3}, {0x0, 0x4}, {0x2, 0xa}, {0x4, 0x2}, {0x7, 0x3}, {0x2, 0x5}, {0x0, 0x2}, {0x5, 0x4}, {0x1, 0x4}, {0x1, 0x6}, {0x5, 0x8}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x7}, {0x1, 0x8}, {0x6, 0x6}, {0x4, 0xa}, {0x4, 0x9}, {0x2, 0x3}, {0x2, 0xa}, {0x5}, {0x4, 0x1}, {0x7, 0x9}, {0x0, 0x1}, {0x7, 0x7}, {0x3, 0x3}, {0x6, 0x6}, {0x3, 0x5}, {0x3, 0x7}, {0x6, 0x3}, {0x3}, {0x1, 0x5}, {0x3}, {0x7, 0x3}, {0x0, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8c1e, 0x7, 0x0, 0xb, 0x5, 0xfff, 0x128, 0x4f10]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x3ff, 0x9898, 0x4, 0x9, 0x6, 0x2, 0x5]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x4}, {0x4, 0x2}, {0x7, 0xa}, {0x4, 0x8}, {0x1, 0x8}, {0x6, 0x5}, {0x0, 0x4}, {0x6, 0x1}, {0x3, 0x9}, {0x4, 0x7}, {0x6, 0x6}, {0x5, 0x9}, {0x3}, {0x0, 0x9}, {0x7, 0x1}, {0x6, 0x4}, {0x2, 0x3}, {0x3, 0xa}, {0x5, 0x4}, {0x5, 0x2}, {0x5, 0x3}, {0x1, 0x7}, {0x1, 0x7}, {0x1, 0x7}, {0x4, 0xa}, {0x1, 0x4}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0x3}, {0x6, 0x2}, {0x0, 0x2}, {0x3, 0x2}, {0x7, 0x5}, {0x0, 0x5}, {0x7, 0x5}, {0x2, 0x2}, {0x7}, {0x3, 0x6}, {0x1}, {0x7, 0x7}, {0x1, 0x1}, {0x5, 0x5}, {0x1, 0x4}, {0x4, 0xa}, {0x0, 0x5}, {0x0, 0x9}, {0x3, 0x6}, {0x1, 0xa}, {0x0, 0x4}, {0x7, 0x7}, {0x3, 0x3}, {0x7}, {0x1, 0x1}, {0x4, 0x8}, {0x7, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x7, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {}, {0x1, 0x6}, {0x1, 0xa}, {0x4, 0x8}, {0x4, 0x7}, {0x1, 0x9}, {0x0, 0x4}, {0x5, 0x8}, {0x1, 0x2}, {0x0, 0x8}, {0x7}, {}, {0x1, 0x7}, {0x3, 0x6}, {0x6, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x52c, 0x11d, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x10, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x344, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6e}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x61}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x314, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3, 0x7, 0x5, 0xbd3, 0x6, 0x7, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x400, 0x2, 0x0, 0x0, 0x6, 0x7, 0xd0ea]}}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x2, 0x9}, {0x1, 0x5}, {0x2, 0x6}, {0x4}, {0x5, 0x7}, {0x6, 0x6}, {0x6, 0x1}, {0x5, 0x2}, {0x5, 0x6}, {0x5, 0x9}, {0x2, 0x7}, {0x6, 0x9}, {0x4, 0x5}, {0x4, 0x7}, {0x2, 0xa}, {0x0, 0x3}, {0x5, 0x7}, {0x1, 0x4}, {0x2}, {0x7, 0x6}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x5}, {0x2}, {0x3, 0x8}, {0x6, 0x7}, {0x6, 0x4}, {0x1, 0x4}, {0x0, 0x6}, {0x1, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x5, 0x5}, {0x0, 0x4}, {0x0, 0x2}, {0x4, 0x8}, {0x1, 0x4}, {0x0, 0x2}, {0x7, 0xa}, {}, {0x3, 0xa}, {0x7, 0x4}, {0x3, 0x8}, {0x3, 0xa}, {0x4, 0x8}, {0x2, 0x9}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x9}, {0x5, 0x6}, {0x0, 0x4}, {0x1, 0xa}, {0x2, 0x3}, {0x6}, {0x0, 0x1}, {0x4, 0x5}, {0x0, 0xa}, {0x0, 0x8}, {0x7, 0x6}, {0x2, 0x2}, {0x1, 0x5}, {0x4}, {0x4, 0x4}, {0x7, 0x7}, {0x6, 0x5}, {0x2, 0x4}, {0x1, 0x3}, {0x4, 0x5}, {0x3, 0x7}, {0x7, 0x9}, {0x7, 0x2}, {0x0, 0x9}, {0x0, 0x5}, {0x0, 0x5}, {0x1, 0x7}, {0x3, 0x8}, {0x7, 0x4}, {0x5, 0x9}, {0x5, 0x4}, {0x2}, {0x4}, {0x5, 0x1}, {0x6, 0x9}, {0x7, 0x1}, {0x6, 0x6}, {0x5, 0x3}]}]}, @NL80211_BAND_2GHZ={0xd4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x0, 0x0, 0x7, 0x0, 0x7b, 0x8]}}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x2, 0x3}, {0x3, 0x6}, {0x6, 0x1}, {0x5}, {0x0, 0x8}, {0x0, 0x5}, {0x2, 0x6}, {0x3}, {0x6, 0x5}, {0x1}, {0x0, 0x5}, {0x6, 0xa}, {0x1, 0x8}, {0x4, 0x3}, {0x7, 0x7}, {}, {0x2, 0x4}, {0x5, 0xa}, {0x4, 0x4}, {0x1, 0x4}, {0x0, 0xa}, {0x5, 0x1}, {0x4, 0x4}, {}, {0x2, 0x8}, {0x0, 0x6}, {0x7}, {0x1, 0x3}, {0x1, 0x3}, {0x0, 0xa}, {0x3, 0x7}, {0x5, 0x6}, {0x4, 0xa}, {0x6, 0x8}, {0x0, 0x9}, {0x3, 0x6}, {0x7, 0xa}, {0x4, 0x1}, {0x4, 0x2}, {0x6, 0x5}, {0x7, 0xa}, {0x2, 0x2}, {0x0, 0x5}, {0x2, 0x7}, {0x1, 0x4}, {0x7, 0x3}, {0x0, 0x3}, {0x6, 0x9}, {0x2, 0x1}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0x8}, {0x0, 0x8}, {0x2, 0x6}, {0x0, 0x7}, {0x1, 0x2}, {0x2, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x7, 0xa}, {0x7, 0x8}, {0x6, 0x6}, {0x0, 0x6}, {0x3, 0xa}, {0x5, 0x7}, {0x0, 0x7}, {0x7, 0x4}, {0x0, 0x8}, {0x7}, {0x7, 0x9}, {0x6, 0x9}, {0x4, 0x7}, {0x2, 0x5}, {0x2, 0x6}, {0x4, 0x2}, {0x4, 0x3}, {0x4, 0x2}, {0x4, 0x6}, {0x0, 0x8}, {0x3, 0x5}, {0x6, 0x4}, {0x2, 0x2}, {0x7, 0x8}, {0x3, 0x5}, {0x5, 0x2}, {0x4, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x2, 0x9}, {0x0, 0x7}, {0x7, 0x9}, {0x4, 0x2}, {0x6, 0x4}, {0x7, 0x1}, {0x0, 0x6}, {0x7, 0x9}, {0x2, 0x4}, {0x7, 0x4}, {0x4, 0x5}, {0x1, 0xa}, {0x3, 0x1}, {0x3, 0x7}, {0x5, 0x2}, {0x3, 0x8}, {0x6, 0x9}, {0x5, 0x1}, {0x3, 0x8}, {0x5, 0x9}, {0x3, 0x5}, {0x6, 0x2}, {0x4, 0x9}, {0x5, 0x3}, {0x5, 0x7}, {0x2, 0xa}, {0x0, 0xa}, {0x2, 0x9}, {0x1}, {0x5, 0x2}, {0x7, 0x7}, {0x3, 0x7}, {0x4, 0x8}, {0x5}, {0x4, 0x9}, {0x7, 0x9}, {0x6, 0x7}, {0x2, 0x9}, {0x0, 0x9}, {0x1, 0x4}, {0x3, 0x4}, {0x1, 0xa}, {0x2, 0x5}, {0x4, 0x2}, {0x3, 0x4}, {0x4, 0x6}, {0x0, 0x9}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6a, 0x54]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x3, 0x30, 0x9, 0x30, 0x6, 0x5, 0x18, 0x9, 0xc, 0x60, 0x30, 0x1, 0x5, 0xb, 0x9, 0x1]}]}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xd55, 0x77, 0x100, 0x5, 0x5, 0x7, 0x13bc]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x0, 0x81, 0x3, 0x2, 0x4, 0xf]}}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x5}, {0x6, 0x4}, {0x0, 0x7}, {0x1, 0x7}, {0x1}, {0x5, 0x1}, {0x6, 0x1}, {0x2, 0x4}, {0x7, 0x2}, {0x7, 0x8}, {0x1, 0x2}, {0x1, 0x3}, {0x6, 0x7}, {0x1, 0x2}, {0x1, 0x2}, {0x6, 0x4}, {0x3}, {0x0, 0x8}, {0x2, 0x4}, {0x6, 0x7}, {0x0, 0x8}, {0x5, 0x3}, {0x4, 0x6}, {0x4}, {0x4, 0x6}, {0x5, 0x6}, {0x0, 0x7}, {0x5, 0xa}, {0x1, 0x8}, {0x7}, {0x4, 0x2}, {0x1, 0x5}, {0x1, 0x7}, {0x4, 0x5}, {}, {0x2, 0x6}, {0x0, 0x4}, {0x1, 0xa}, {0x2}, {0x0, 0xa}, {0x3, 0x7}, {0x2, 0x1}, {0x3, 0x4}, {0x7, 0x2}, {0x1, 0x2}, {0x1, 0x1}, {0x3, 0x9}, {0x7, 0x4}, {0x4, 0xa}, {0x3}, {0x2, 0x3}, {0x1, 0x2}, {0x0, 0x8}, {0x5, 0xa}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x8}, {0x4, 0x9}, {0x1, 0x9}, {0x3, 0x5}, {0x4, 0x5}, {0x0, 0x7}]}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x3, 0x3, 0x6, 0xc, 0x0, 0x36, 0x6, 0x4, 0x9, 0x24, 0x48, 0x2, 0x48, 0x18, 0x36, 0x6c, 0x4]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x3, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x0, 0x1}, {0x2, 0x1}, {0x7, 0x9}, {0x5, 0x4}, {0x7, 0x5}, {0x2, 0x6}, {0x4, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x6, 0x2}, {0x7, 0x2}, {0x1, 0x9}, {0x7, 0x1d}, {0x3, 0x7}, {0x1, 0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x3}, {0x3, 0x7}, {0x0, 0x9}, {0x4, 0x3}, {0x6, 0x3}, {0x4, 0x9}, {0x5}, {0x2, 0x2}, {0x4, 0x2}, {0x6, 0x9}]}]}, @NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x25, 0x16, 0x24, 0x30, 0x48, 0x60, 0x18, 0x3, 0x24, 0x9, 0x16, 0x6, 0x24, 0x4, 0x36, 0x9, 0x2, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x8001, 0x6a, 0x7, 0x0, 0xf, 0x4, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x6, 0x10, 0x8, 0xa, 0x1ec, 0x6]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x7}, {0x0, 0x5}, {0x4, 0x5}, {0x5, 0x3}, {0x7, 0x9}, {0x6, 0x9}, {0x3, 0xa}, {0x1, 0x8}, {0x0, 0x6}, {0x4, 0x3}, {0x7, 0x5}, {0x4, 0x2}, {0x0, 0x5}, {0x3, 0x3}, {0x6, 0x8}, {0x1, 0x6}, {0x4, 0x7}, {0x0, 0x1}, {0x2, 0xa}, {0x4, 0x6}, {0x0, 0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x7}, {0x3, 0x4}, {0x6, 0x1}, {0x2, 0xa}, {0x2, 0xa}, {0x6, 0xa}, {0x7, 0x7}, {0x1, 0x1}, {0x7, 0x7}, {0x4, 0x8}, {0x2, 0x5}, {0x4, 0x3}, {0x0, 0x5}, {0x3, 0x8}, {0x6, 0x4}, {0x6, 0x6}, {0x1, 0x8}, {0x4, 0x6}, {0x1, 0x2}, {0x7}, {0x7, 0x8}, {0x4, 0x9}, {0x1, 0x5}, {0x7}, {0x7, 0x7}, {0x0, 0x8}, {0x7, 0x7}, {0x2, 0x4}, {0x7}, {0x4, 0x6}, {0x4, 0x8}, {0x0, 0xa}, {0x6, 0x6}, {0x0, 0x8}, {0x4, 0x4}, {0x2, 0x8}, {0x1, 0x2}, {0x7, 0x7}, {0x4, 0x3}, {}, {0x1, 0x6}, {0x7}, {0x4, 0x2}, {0x6, 0x4}, {0x2, 0x1}, {0x2, 0x2}, {0x6, 0x8}, {0x5, 0x7}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x3}, {0x0, 0x5}, {0x4, 0x2}, {0x7, 0x1}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xec}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x170, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x13c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xa, 0x19, 0x0, 0x1, 0x7, 0x2dc, 0x3ff]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x7, 0x2}]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x9, 0x9b5, 0x400, 0x5, 0xaa0, 0x1000, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5a9c, 0x3d, 0x9, 0xf870, 0xf, 0x3ff, 0xa, 0x3ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2, 0x1, 0x6, 0xb1b, 0xb365, 0x2, 0x4]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x12, 0xb, 0x30, 0x18, 0xc, 0x36, 0x16, 0x18, 0xc, 0x16, 0xc, 0x30, 0x4, 0x24, 0xb, 0x48, 0x4, 0x24, 0x36, 0x1b, 0x36, 0xc, 0x60, 0x5e, 0x5, 0x60, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x1ff, 0x1, 0x8001, 0x7f, 0x9, 0xa64]}}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x16, 0x36, 0x60, 0xb, 0x0, 0x6c, 0x6c, 0x3, 0x12, 0x6c, 0x16, 0x60, 0x6c, 0x5, 0x9, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6, 0x4, 0x2, 0x2000, 0x1, 0x7, 0x2]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x3, 0x30, 0xd]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2ca8, 0x43, 0x2, 0xffff, 0x6, 0x3, 0x1a6, 0x8]}}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x18, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x0, 0x5}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x9}, {0x7, 0x7}, {0x4, 0x2}, {0x5}, {0x5, 0x8}, {0x3, 0x9}, {0x7, 0x6}, {0x1}, {0x0, 0x7}, {0x2, 0xa}, {0x4, 0x2}, {0x3, 0x4}, {0x6, 0x9}, {0x6, 0x5}, {0x1, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x80}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x23c, 0x11d, 0x0, 0x1, [{0x20c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x124, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x2, 0x3, 0x10, 0x1, 0x1, 0x8, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1b, 0xc, 0x60, 0x3, 0x5, 0x12, 0x16, 0x24, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x3, 0x6}, {0x2, 0x9}, {0x6, 0x7}, {0x0, 0x2}, {0x5, 0x5}, {0x4, 0x1}, {0x1, 0xa}, {0x7}, {0x0, 0x7}, {0x3, 0x8}, {0x6, 0x7}, {0x7, 0x1}, {0x6, 0x7}, {0x1, 0xa}, {0x3, 0x7}, {0x3, 0xa}, {0x1, 0x8}, {0x3, 0x5}, {0x1, 0x1}, {0x5, 0xa}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x8}, {0x4, 0x7}, {0x1, 0x4}, {0x1, 0x4}, {0x4, 0x4}, {0x1, 0x8}, {}, {0x1, 0xa}, {0x2, 0x8}, {0x1, 0x5}, {0x7, 0x7}, {0x4, 0x5}, {0x5, 0x1}, {0x5, 0xa}, {0x0, 0x4}, {0x2, 0x9}, {0x7, 0x7}, {0x0, 0x8}, {0x7, 0x1}, {0x6, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x7, 0x8}, {0x1, 0x1}, {0x2, 0x7}, {0x3, 0x4}, {0x1, 0x8}, {0x6, 0x8}, {0x4, 0x3}, {0x0, 0x7}, {0x0, 0x1}, {0x4, 0x9}, {0x6, 0x1}, {0x0, 0x8}, {0x7, 0x3}, {0x1, 0x2}, {0x7, 0x2}, {0x5, 0x5}, {0x5, 0x5}, {0x0, 0x9}, {0x0, 0x2}, {0x6, 0x5}, {0x0, 0xa}, {0x0, 0x5}, {0x0, 0x5}, {0x5, 0x9}, {0x7, 0xa}, {0x0, 0x5}, {0x3, 0x5}, {0x0, 0x3}, {0x5, 0x1}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x1b, 0xc, 0x18, 0x6, 0x9, 0x4, 0x18, 0x0, 0x48, 0x1, 0x48, 0xb, 0xb, 0x18, 0x48, 0x4, 0x9, 0x18, 0x4, 0x12, 0x9, 0x1, 0x1, 0x9, 0x6c, 0x3, 0x0, 0x1, 0x12, 0xb, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x2, 0x8}, {0x7, 0x6}, {0x5, 0x4}, {0x1, 0x7}, {0x0, 0xa}, {0x6, 0xa}, {0x3, 0x9}, {0x3, 0xa}, {0x5, 0x6}, {0x4, 0x3}, {0x7, 0x9}, {0x7, 0x3}, {0x2, 0x1}, {0x2, 0x3}, {0x5, 0xa}, {0x2, 0xa}, {0x4, 0xa}, {0x3, 0x2}, {0x7, 0x6}, {}, {0x4, 0x9}, {0x3, 0x4}, {0x1, 0x5}, {0x7, 0x1}, {0x0, 0xa}, {0x4, 0x8}, {0x5, 0x7}, {0x6, 0xa}, {0x6, 0x8}, {0x1, 0x6}, {0x7, 0x9}, {0x3, 0x9}, {0x0, 0x9}]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xaa}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xc4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x4, 0x16f, 0x2, 0x2, 0x52a, 0x4, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8, 0x5, 0x3, 0x101, 0x3, 0x401, 0x6]}}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x7, 0x5}, {0x1, 0x8}, {0x4, 0x8}, {0x4}, {0x1, 0x1}, {0x5, 0x9}, {0x5, 0x9}, {0x2, 0x6}, {0x2, 0x3}, {0x6}, {0x4}, {0x6, 0x7}, {0x1, 0x8}, {0x4, 0x3}, {0x7, 0x1}, {0x7, 0x9}, {0x4, 0x8}, {0x2, 0x3}, {0x0, 0x8}, {0x0, 0x4}, {0x1, 0x3}, {0x6, 0x2}, {0x2, 0x2}, {0x2, 0x3}, {0x6, 0x1}, {0x2, 0x5}, {0x1, 0xa}, {0x0, 0x7}, {0x6, 0xa}, {0x2, 0x7}, {0x1, 0x4}, {0x2, 0x9}, {0x1, 0x3}, {0x2, 0x4}, {0x0, 0x1}, {0x5, 0x7}, {0x6, 0x3}, {0x2, 0x2}, {0x4, 0xa}, {0x2, 0x5}, {0x0, 0x6}, {0x5, 0x3}, {0x1, 0x6}, {0x7, 0x1}, {0x0, 0x9}, {0x4, 0x9}, {0x5, 0xa}, {0x1, 0x5}, {0x0, 0x1}, {0x2, 0x7}, {0x1, 0x5}, {0x3, 0x2}, {0x0, 0x5}, {0x2, 0xa}, {0x2, 0x2}, {0x6, 0xa}, {0x5, 0x3}, {0x4, 0x5}, {0x2, 0x1}, {0x4, 0xa}, {0x0, 0x5}, {0x0, 0x5}, {0x5, 0x9}, {0x1, 0x3}, {0x2, 0x8}, {0x2, 0x7}, {0x2, 0x6}, {0x5, 0x2}, {0x0, 0x5}, {0x4, 0x2}, {0x3}, {0x7, 0x7}, {0x1, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0x123, 0x7, 0x5, 0xb, 0x1, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xef, 0x8, 0x6, 0x4, 0x1, 0x8001, 0x7]}}, @NL80211_TXRATE_LEGACY={0x4}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x43}]}]}, @NL80211_ATTR_TID_CONFIG={0xe00, 0x11d, 0x0, 0x1, [{0x364, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x334, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xe815, 0xfff0, 0x8, 0x4, 0xf0ae, 0x101, 0x0, 0x2]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x9, 0x18, 0x1b, 0xc, 0x16, 0x2, 0x24, 0x2e, 0x12, 0xb, 0x70, 0x48, 0x1b]}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x2, 0x8}, {}, {0x1, 0x2}, {0x6, 0x7}, {0x6}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x60, 0xb, 0x36, 0x60, 0x5, 0x16, 0x60, 0x3, 0x6f, 0x36, 0x6, 0x6, 0x6c, 0x18, 0x2, 0x24, 0x0, 0x5, 0x30, 0x36e2edcf9dc8f4d7]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x30, 0x18, 0xb, 0x24, 0x16, 0x48, 0x12, 0x24, 0x4, 0x48, 0x24, 0x36, 0x2, 0x16, 0x2, 0x60, 0x0, 0x3, 0x4, 0x12, 0x9, 0x3, 0x1b, 0x2, 0x36, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x5}, {0x5, 0x8}, {0x0, 0x1}, {0x6, 0x2}, {0x5}, {0x3, 0x3}, {0x6, 0x3}, {0x3, 0x9}]}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x4}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x4, 0x60, 0xb, 0x3, 0x924b4d6bfefdd5a8]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x475, 0x0, 0x8, 0x7ff, 0x40e9, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x18, 0x60, 0x5, 0xb, 0x5, 0x30, 0x48, 0x20, 0xb, 0x0, 0x2, 0x30, 0x60]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x1, 0x8}, {0x2, 0xa}, {0x6, 0x1}, {0x1, 0x3}, {0x3, 0x8}, {0x4, 0x8}, {0x1, 0x4}, {0x5, 0x5}, {0x7, 0x8}, {0x3, 0x5}, {0x4, 0x2}, {0x5, 0x5}, {0x2, 0x8}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x7}, {0x0, 0x7}, {0x1, 0x2}, {0x2, 0x5}, {0x5, 0x9}, {0x5, 0x6}]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x6, 0x4}, {0x1, 0x4}, {0x7, 0x2}, {0x0, 0x4}, {0x0, 0x2}, {0x1, 0x3}, {0x5, 0x3}, {0x2, 0x7}, {0x1, 0x8}, {0x2, 0x7}, {0x1, 0x4}, {0x3, 0x9}, {0x0, 0x2}, {0x0, 0x3}, {0x5, 0x4}, {0x7, 0x9}, {0x1, 0x7}, {0x6, 0x2}, {0x6, 0x6}, {0x5, 0x6}, {0x3, 0x7}, {0x5, 0x8}, {0x0, 0xa}, {0x4, 0x3}, {0x0, 0x9}, {0x5, 0x2}, {0x4, 0x8}, {0x0, 0x6}, {0x5}, {0x1, 0x1}, {0x6}, {0x4, 0xa}, {0x1, 0x9}, {0x6, 0x1}, {0x1, 0x3}, {0x3, 0x6}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0xfff, 0x8, 0x5, 0xfff7, 0x0, 0x7]}}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x401, 0x3, 0xfc61, 0x7, 0x2, 0x6, 0x20]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x52, 0x9, 0x30]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x3, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x6, 0x6, 0x5, 0x5, 0x6, 0xb, 0xb, 0x6, 0x32, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xbf2, 0x0, 0xcc65, 0x5, 0x567, 0x5, 0x9, 0x800]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x200, 0xfffb, 0x1ff, 0x7, 0xf, 0xf, 0xea]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x16, 0x60, 0xb, 0x4, 0x12, 0x3, 0x6c, 0x12, 0x12, 0x24, 0x3, 0xb, 0x9, 0x60, 0x6c, 0x48, 0x6, 0x2, 0x9, 0x16, 0xc, 0x12, 0x2, 0x9, 0x3, 0x6c, 0x9, 0x48, 0x6c, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0x3, 0x5, 0xfff, 0x5, 0x7, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf8e2, 0x4a7, 0x3ff, 0x3, 0x800, 0x2, 0x2, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3, 0x9c, 0xf5ae, 0x7, 0x9, 0x1, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5, 0x9, 0x2, 0x4, 0x9eea]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x42, 0x1, 0x1, 0xc36, 0x9, 0x33b, 0x5, 0x2]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x96a0, 0x1, 0x9, 0xfffc, 0x1000, 0x101, 0xb]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x48, 0x6c, 0x6, 0x3, 0x20, 0x60, 0x2, 0x2, 0x36, 0x6, 0x3, 0x1b, 0x9, 0x6c, 0x2, 0x16, 0x12, 0xb, 0x24, 0x6, 0x60, 0x3, 0x12, 0x3, 0x0, 0xc, 0x48, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x4}, {0x178, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xce}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7f}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x13c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x59db, 0x5, 0x0, 0x2, 0x5, 0x6, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x10, 0x6b9b, 0x6, 0x6, 0xffff, 0x1, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x4, 0x4, 0x5, 0x2, 0x3, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x5, 0x5}, {0x1, 0x1}, {0x1, 0x5}, {0x0, 0x6}, {0x3}, {0x4, 0x3}, {0x1, 0xa}, {0x4, 0x8}, {0x7, 0x5}, {0x1, 0x8}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0x1}, {0x7, 0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x3, 0x4}, {0x3, 0x6}, {0x0, 0x3}, {0x6, 0x9}, {0x4, 0x7}, {0x3, 0x6}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x7}, {0x5, 0x4}, {0x2, 0x5}, {0x7, 0x9}, {0x1, 0x4}, {0x1, 0x8}, {0x7, 0x4}, {0x1, 0x3}, {0x3, 0x7}, {0x4, 0x3}, {0x3, 0x8}, {0x0, 0x2}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x4, 0x16, 0x60, 0x24, 0x3, 0xb, 0x23, 0x18, 0x6, 0x4e, 0x5, 0x6d, 0x2, 0x9]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x3, 0x7}, {0x4, 0x9}, {0x3, 0x7}, {0x1, 0xa}, {0x7, 0x9}, {0x5, 0x8}, {0x2, 0x3}, {0x2, 0x8}, {0x1, 0x4}, {0x1, 0x7}, {0x4, 0x5}, {0x4, 0x1}, {0x6, 0x9}, {0x7, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfe00, 0xe, 0x6, 0x7, 0x7, 0x7, 0xa95, 0x3]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x100, 0x6, 0x9, 0x2, 0xfff, 0x8, 0x4]}}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x400, 0x40, 0x7, 0x3, 0x32, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x9, 0x7, 0x6b5c, 0xf3, 0x8, 0xb, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x2, 0x6, 0x7fff, 0x0, 0x4, 0x1, 0x8001]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x57}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x420, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1dc, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xdc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x2, 0xa}, {0x6, 0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x4}, {0x0, 0x6}, {0x0, 0x4}, {0x5, 0x8}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xa}, {0x7, 0x1}, {0x1}, {0x1, 0x3}, {0x4, 0xa}, {0x2, 0xa}, {0x0, 0x6}, {0x7, 0x9}, {0x1, 0x9}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0x8}, {0x3, 0x9}, {0x3, 0xa}, {0x0, 0x4}, {0x4}, {0x6, 0x4}, {0x6, 0x7}, {0x1, 0x4}, {0x4, 0x1}, {0x7, 0x4}, {0x7, 0x8}, {0x7, 0x9}, {0x3, 0x4}, {0x1, 0x2}, {0x2, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x1ff, 0x9, 0x1, 0x6, 0x10, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x5, 0x2}, {0x0, 0x9}, {0x7, 0x2}, {0x6, 0x6}, {}, {0x4, 0x5}, {0x6, 0x5}, {0x6, 0x8}, {0x4, 0x6}, {0x1, 0x7}, {0x0, 0x9}, {0x3, 0x7}, {0x6, 0x8}, {0x7, 0x1}, {0x5}, {0x2, 0xa}, {0x1, 0x8}, {0x5, 0x3}, {0x0, 0x3}, {0x1, 0x4}, {0x5}, {0x0, 0x9}, {0x3, 0x7}, {0x1, 0x4}, {0x1}, {0x0, 0x2}, {0x5, 0x8}, {0x4, 0x4}, {0x0, 0x8}, {0x7, 0x9}, {0x0, 0x9}, {0x3, 0x6}, {0x3, 0x9}, {0x1, 0x8}, {0x3, 0x1}, {0x6, 0x9}, {0x0, 0x8}, {0x5, 0x5}, {0x1}, {0x2, 0x8}, {0x3}, {0x2, 0x1}, {0x1, 0xa}, {0x6, 0x3}, {0x0, 0x2}, {0x1, 0x7}, {0x3, 0x5}, {0x1, 0x6}, {0x7, 0x7}, {0x3, 0x7}, {0x3, 0x7}, {0x1, 0x8}, {0x0, 0xa}, {0x0, 0x9}, {0x2, 0x2}, {0x0, 0x4}, {0x2, 0x4}, {0x4}, {0x0, 0x4}, {0x3, 0x6}, {0x5, 0x7}, {0x6, 0x6}, {0x3, 0x9}, {0x4, 0xa}, {0x5, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x5, 0x1}, {0x7, 0x5}, {0x5, 0xa}, {0x3, 0x7}, {0x7, 0x6}, {0x4, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x3, 0x9}, {0x0, 0x4}, {0x6, 0x9}, {0x5, 0x9}, {0x4, 0x1}, {0x7, 0x3}, {0x3}, {0x2, 0x8}, {0x3, 0x9}, {0x2, 0x1}, {0x1, 0x4}, {0x6, 0x3}, {0x6, 0x2}, {0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x7fff, 0x1, 0x1ff, 0x87, 0x7, 0xb93, 0xddb]}}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xffc0, 0x271, 0x456c, 0x10, 0x3, 0x3, 0x3]}}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x4, 0x1}, {0x3, 0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x6, 0x2}, {0x3, 0x3}, {0x2, 0x2}, {0x3, 0x3}, {0x3, 0x7}, {0x0, 0x9}, {0x1, 0x3}, {0x6, 0x4}, {0x2, 0x3}, {0x7, 0xa}, {0x2, 0x1}, {0x3, 0x2}, {0x1, 0x7}, {0x1, 0x1}, {0x0, 0x3}, {0x5, 0x9}, {0x1, 0x6}, {0x7, 0x19}, {0x4, 0xa}, {0x3, 0x7}, {0x0, 0x2}, {0x0, 0x7}, {0x7, 0x9}, {0x7, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x6}, {0x3, 0x3}, {0x4}, {0x1, 0x7}, {0x0, 0x2}, {0x5, 0x8}, {0x0, 0x1}, {0x2}, {0x6, 0x3}, {0x3, 0x5}, {0x4, 0x6}, {0x7, 0xa}, {0x5, 0x9}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xb, 0x6, 0x36, 0x1, 0x24, 0x6c, 0xb, 0x60, 0x12, 0x36, 0x60, 0x4, 0xb, 0x9, 0x4, 0x2, 0x24, 0x24, 0x48, 0xc, 0x60, 0xb, 0x4, 0x36, 0xadc3f5b2926175c9, 0xb]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x24, 0x2, 0x1, 0x1, 0x60, 0x30, 0x4, 0x36, 0xb, 0x6, 0x5e, 0x16, 0x48]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb08, 0x6a3f, 0x0, 0xf, 0x9, 0x9, 0x9, 0x2]}}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x5, 0xf7, 0x2, 0x3366, 0x0, 0x9, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x230, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xcd, 0x7, 0xf, 0x0, 0x200, 0x8, 0xf, 0x3]}}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x9, 0x1, 0x101, 0xfff7, 0x7, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0xa1e, 0xafcd, 0x7ff, 0x6, 0x41, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x4, 0x6}, {0x3, 0x6}, {0x1, 0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x6, 0x6}, {0x3, 0x2}, {0x2, 0xa}, {0x2, 0x8}, {0x5, 0xa}, {0x2}, {}, {0x5, 0x7}, {0x0, 0x4}, {0x2, 0x2}, {0x5, 0x1}, {0x6, 0xa}, {0x0, 0x8}, {0x4, 0xa}, {0x5, 0x6}, {0x6, 0x2}, {0x3, 0x9}, {0x1, 0x3}, {0x6, 0x1}, {0x1, 0x6}, {0x4, 0x3}, {0x5, 0x4}, {0x7, 0x6}, {0x2, 0x6}, {0x5, 0xa}, {0x6}, {0x0, 0x5}, {0x0, 0x9}, {0x7}, {0x6, 0x6}, {0x0, 0x3}, {0x3, 0xa}, {0x5, 0x9}, {0x3, 0x1}, {0x6, 0x3}, {0x0, 0x8}, {0x5}, {0x3, 0x5}, {0x7, 0x8}, {0x0, 0x8}, {0x3, 0x7}]}]}, @NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0x9, 0x1, 0xffb0, 0x7, 0x3ff, 0xf8f2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x100, 0x1, 0x1, 0xfffe, 0x7, 0xffff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x9, 0xc, 0x12, 0x30, 0x5, 0x1, 0x6c, 0x5, 0x5, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd9, 0x3af, 0x9, 0x6, 0x5, 0x4, 0x2, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0x1, 0x9a, 0x7, 0xff9b, 0x0, 0x2]}}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x4}, {0x0, 0x1}, {0x7, 0x1}, {0x5, 0x2}, {0x7, 0x1}, {0x2, 0x3}, {0x0, 0x2}, {0x3, 0x3}, {0x2, 0x6}, {0x3, 0x8}, {0x5, 0xa}, {0x0, 0x8}, {0x0, 0x3}, {0x6, 0x8}, {0x2, 0xa}, {0x7, 0x3}, {0x3}, {0x1, 0x6}, {0x7, 0x9}, {0x1, 0x4}, {0x3, 0x3}]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x14, 0x2, [{0x3, 0x6}, {0x1, 0x4}, {0x4, 0x4}, {0x5, 0x1}, {0x1, 0x9}, {0x3, 0x4}, {0x3}, {0x6, 0x1}, {0x4, 0x7}, {0x3}, {0x4, 0x4}, {0x5, 0x7}, {0x3, 0x6}, {0x0, 0x8}, {0x0, 0xa}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7a3, 0x9, 0x5, 0x6, 0xff, 0x76, 0x5, 0x8]}}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1, 0x0, 0x4, 0xa5d, 0x8000, 0x3, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xde07, 0x1000, 0xc2, 0x77, 0xfffb, 0x5, 0x2000, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x1, 0x2}, {0x0, 0x2}, {0x0, 0x3}, {0x6, 0x2}, {0x5, 0x9}, {0x1, 0xa}, {0x3}, {0x7, 0x7}, {0x3, 0x1}, {0x7, 0x7}, {0x4, 0x7}, {0x0, 0x7}, {0x3, 0x4}, {0x5, 0x3}, {0x4, 0x8}, {0x7, 0x8}, {0x4, 0xa}, {0x2, 0x4}, {0x2, 0x2}, {0x0, 0x6}, {0x5, 0x7}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x18, 0x30, 0x4, 0x36, 0x3, 0x9, 0x2, 0x24, 0x4, 0x18, 0x16, 0x1, 0x6c, 0x9, 0xb, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x5, 0x0, 0xa, 0x59cd, 0x5, 0xd, 0x1000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x2, 0xcbb, 0x0, 0x6, 0x12, 0x4000]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x1, 0x5, 0x1, 0x9, 0x6, 0x200]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x3, 0x1b, 0x9, 0x30, 0x24, 0x2, 0xb]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffffd}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3f}]}, {0x2f0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2b0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x483, 0x9, 0x6, 0x9, 0x401, 0x9, 0x2c, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x5, 0x6}, {0x0, 0x1}, {0x3, 0x7}, {0x7, 0x4}, {0x1, 0x9}, {0x1, 0x2}, {0x2, 0x9}, {0x1, 0x2}, {0x0, 0x4}, {0x1, 0x9}, {0x0, 0x7}, {0x4, 0x4}, {0x7}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x2}, {0x7, 0x7}, {0x7, 0x3}, {0x4, 0x9}, {0x7, 0xa}, {0x1, 0x8}, {0x4, 0xa}, {0x0, 0x2}, {0x2, 0x4}, {0x3, 0x9}, {0x1}, {0x3, 0x8}, {0x2, 0x2}, {0x3, 0x9}, {0x0, 0xe}, {0x5, 0x3}, {0x0, 0x4}, {0x6, 0x2}, {0x7, 0xa}, {0x0, 0x6}, {0x6, 0x7}, {0x5, 0x9}, {0x0, 0x5}, {0x5, 0xa}, {0x3, 0xa}, {0x6}, {0x4, 0x8}, {0x4, 0x3}, {0x1, 0x6}, {0x0, 0x9}, {0x3, 0x9}, {0x1, 0x4}, {0x4, 0x3}, {0x0, 0x8}, {0x7, 0xa}, {0x0, 0x4}, {0x3, 0xa}, {0x5}, {0x3, 0x8}, {0x1, 0x2}, {0x2, 0x3}, {0x3, 0x5}, {0x2}, {0x1, 0x9}, {0x5}, {0x3}, {0x6, 0x5}, {0x7, 0x8}, {0x2, 0x9}, {0x4, 0x4}, {0x5, 0x2}, {0x7, 0x3}, {0x2, 0x9}, {0x7, 0x8}, {0x1, 0x9}, {0x1, 0x2}, {0x2, 0x5}, {0x6, 0x1}, {0x0, 0x8}, {0x3, 0x4}, {0x5, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xff, 0x8, 0xff81, 0x5, 0x1, 0xfffb, 0x4]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x4, 0x8}, {}, {0x6}, {0x5, 0x2}, {0x1}, {0x5, 0x3}, {0x1, 0x2}, {0x0, 0x7}, {0x5, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x38, 0xfffb, 0x200, 0x1, 0x4a9, 0x3, 0x0, 0xfff8]}}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x5, 0x5}, {0x1, 0x7}]}]}, @NL80211_BAND_60GHZ={0x10, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x36, 0x6, 0x60, 0xb, 0xc, 0x1b, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x94, 0x3, 0xf, 0x9, 0xaa35, 0x200, 0x3]}}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x93, 0x3, 0xff00, 0x0, 0x1, 0x4, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x5, 0xf800, 0x8, 0x7fff, 0x8f, 0x1c0]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0xb]}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x3, 0x8}, {0x4}, {0x6, 0x8}, {0x7, 0x1}, {0x5, 0xa}, {0x0, 0x3}, {0x4, 0x8}, {0x0, 0x4}, {0x5}, {0x0, 0x4}, {0x4, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x6, 0xa}, {0x6, 0xa}, {0x0, 0x4}, {0x6, 0x9}, {0x1}, {0x0, 0x3}, {0x3, 0x5}, {0x5, 0x7}, {0x2, 0xa}, {0x0, 0x8}, {0x4}, {0x0, 0x2}, {0x3, 0x6}, {0x7, 0x7}, {0x5, 0x9}, {0x1}, {0x4, 0x7}, {0x0, 0x3}, {0x3}, {0x7, 0x9}, {0x0, 0x5}, {0x2, 0x3}, {0x3, 0x9}, {0x2, 0x1}, {0x3, 0x4}, {0x4, 0x3}, {0x1}, {0x6, 0x8}, {0x3, 0x2}, {0x1, 0x6}, {0x7, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x7}, {0x5, 0xa}, {0x6, 0x1}, {0x6}, {0x5, 0x2}, {0x5}, {0x7, 0x8}, {0x1, 0x8}, {0x7, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x5}, {0x1, 0x5}, {0x1, 0x8}, {0x0, 0x7}, {0x5, 0x3}, {0x4, 0x1}, {0x6, 0x9}, {0x4, 0x4}, {0x1, 0x6}, {0x1, 0x7}, {0x1, 0x4}, {0x1, 0x3}, {0x4, 0x5}, {0x7, 0x9}, {0x4, 0x2}]}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0xff0f, 0x9, 0x1, 0x4, 0x2e2, 0xa1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x6, 0x7}, {0x7, 0x5}, {0x7, 0x5}, {0x7, 0xa}, {0x2, 0x2}, {0x5, 0x6}, {0x0, 0x8}, {0x0, 0x8}, {0x6, 0x6}, {0x1, 0x9}, {0x4, 0x3}, {0x7}, {0x0, 0x7}, {0x4, 0x7}, {0x3, 0x2}, {0x3, 0xa}, {0x1, 0xa}, {0x7, 0x6}, {0x1, 0x3}, {0x4, 0x5}, {0x1, 0x8}, {}, {0x5, 0x3}, {0x6, 0x7}, {0x1, 0x4}, {0x2, 0x6}, {0x0, 0x2}, {0x0, 0x4}, {0x1, 0x1}, {0x1, 0x7}, {0x0, 0x9}, {0x5, 0xa}, {0x2, 0x8}, {0x0, 0x1}, {0x6, 0x5}, {0x6, 0x4}, {0x2, 0x9}, {0x5, 0x4}, {0x3, 0x6}, {0x6, 0x6}, {0x2}, {0x7, 0x8}, {0x6, 0xa}, {0x3, 0x1}, {0x0, 0x3}, {0x0, 0x7}, {0x0, 0x7}, {0x6, 0x1}, {0x4, 0xa}, {0x3, 0x7}, {0x0, 0xa}, {0x4, 0x6}, {0x1, 0x5}, {0x3}, {0x1, 0x3}, {0x6, 0x4}, {0x0, 0x3}, {0x0, 0x7}, {0x7, 0x3}, {0x0, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x73ac, 0x7, 0x4, 0x1, 0x0, 0x7, 0x9, 0x4a6e]}}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x2, 0xc, 0xc, 0x20, 0x36, 0x3c, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0x100, 0x1, 0x9, 0xfff4, 0xb, 0x40]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x27, 0x6c, 0x50, 0x60, 0x0, 0x30, 0x18, 0x48, 0x4, 0x4, 0x1, 0xb, 0x0, 0x16, 0x16]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x5, 0x3}, {0x1, 0x9}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x4}, {0x6, 0x2}, {0x6, 0x9}, {0x6, 0x7}, {0x0, 0xa}, {}, {0x4, 0x8}, {0x2, 0x5}, {0x5, 0x4}, {0x3}, {0x4, 0x7}, {0x2, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0xf}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x1a0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xf}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x170, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8, 0x20b, 0x9, 0x8, 0x7fff, 0x9, 0xfffd]}}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7, 0x1000, 0x1, 0x8, 0x2, 0x5, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x9, 0x9, 0x24, 0x4, 0x12, 0x9, 0x16, 0xb, 0x6c, 0xc, 0x5, 0x1, 0x4, 0x4, 0x16, 0x48, 0x5, 0x36, 0x24, 0x7a, 0x5, 0x30, 0x60, 0x9, 0x5, 0x30, 0x9, 0x2, 0x6ee3ed9aeb9e7159, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x6, 0x0, 0xfe00, 0xfffb, 0xff00, 0x8, 0x1]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x4, 0xb, 0xb, 0x12, 0x60]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x48, 0x30, 0x12, 0x6, 0x18, 0x6, 0x2, 0x4, 0x36, 0x6c, 0x36, 0x1, 0x4, 0x3, 0x5, 0xc, 0x12, 0x5, 0x48, 0x4, 0x18, 0x1b, 0x4, 0xc]}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x6, 0x7}, {0x6, 0x3}, {0x4, 0x2}, {0x3}, {0x0, 0x3}, {0x0, 0x8}, {0x6, 0x6}, {0x3, 0x9}, {0x1, 0x8}, {0x3, 0x3}, {0x1, 0x8}, {0x2, 0x7}, {0x6, 0x2}, {0x2}, {0x6, 0x8}, {0x1, 0x3}, {0x3, 0x2}, {0x2, 0xa}, {0x6}, {0x5, 0x9}, {0x0, 0x9}, {0x7, 0x5}, {0x1, 0x8}, {0x0, 0x6}, {0x6, 0x1}, {0x3}, {0x4, 0x8}, {0x2, 0x2}, {0x1, 0x2}, {0x5, 0x1}, {0x3, 0x8}, {0x3, 0x1}, {0x6, 0xa}, {0x3, 0x7}, {0x7, 0x6}, {0x3, 0x1}, {0x3, 0x6}, {0x5, 0x9}, {0x7, 0x6}, {0x1, 0x9}, {0x0, 0x2}, {0x0, 0x1}, {0x6, 0x9}, {0x4, 0x6}, {0x2, 0xa}, {0x3, 0x9}]}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xfffa, 0x7fff, 0x6, 0xf, 0x2, 0x4, 0x6]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x1, 0x9}, {0x3, 0x1}, {0x6, 0x6}, {0x4, 0x8}, {0x0, 0x7}, {0x1, 0x4}, {0x4, 0x4}, {0x2, 0x8}, {0x6, 0x5}, {0x5, 0x8}, {0x5, 0xa}, {0x5, 0x8}, {0x5, 0x3}, {0x4, 0xa}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x3}, {0x0, 0x5}, {0x0, 0x8}, {0x2, 0x8}, {0x6, 0x3}, {0x5, 0x2}, {0x5, 0x8}, {0x2, 0x7}, {0x2, 0x4}, {0x0, 0xa}, {0x0, 0x9}, {0x0, 0x5}, {0x2, 0x6}, {}, {0x5, 0x7}, {0x5, 0x3}, {0x6}, {0x4, 0x2}, {0x4}, {0x3, 0x8}, {0x6, 0x5}, {0x6, 0x1}, {0x7, 0xa}, {0x6, 0x2}, {0x1, 0x7}, {0x6, 0x2}, {0x3, 0x3}, {0x6, 0x3}, {0x7, 0x8}, {0x4}, {0x6, 0x1}, {0x7, 0x7}, {0x7, 0x5}, {0x1, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0xfffd, 0xb3, 0x4, 0xffff, 0xffff, 0x5]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x9, 0x48, 0x9, 0x1, 0x24, 0x5, 0x6, 0x8, 0x12, 0x9, 0x6c, 0x1b, 0x6c, 0x60, 0x60, 0x30, 0x6c, 0x12, 0x60, 0x1, 0x1]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3e}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x70}]}]}]}, 0x1990}, 0x1, 0x0, 0x0, 0x4048850}, 0x40800) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c00024000000000000000030c00014000976935640001010800044000000001"], 0x100}}, 0x0) 411.194712ms ago: executing program 5 (id=8538): socket$inet(0x2b, 0x801, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000068000100000000000000"], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socket(0xa, 0x3, 0x3a) socket$alg(0x26, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x0, 0x0, 0x0, {0x9}}, 0x14}}, 0x20040000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000000101040000000000000000020000002400018014000180080001007f00000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000030000080008400000000a0400164008001540000000030400170058000d"], 0xd4}}, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) 403.154348ms ago: executing program 0 (id=8539): socket(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x1b, r2, 0x1, 0x8, 0x6, @local}, 0x14) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$packet(r1, 0x0, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000100)=ANY=[], 0x0) 274.337133ms ago: executing program 2 (id=8540): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="4300000002"], 0x8) socket$inet6(0xa, 0x2, 0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010019"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x10000}, 0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000010f80)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a14000000000a030000002291340000000700000014000000090a0104000000000000000007000000600000000c0a01010000000020000000070000000900020073797a31000000000900010073797a30000000003400038030000080080003400000000224000b80100001800c000100636f756e74657200100001800c000100636f750200657200090000001000010000000000000000000084000a"], 0xb0}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140100002f0001"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0x0) recvfrom(r3, 0x0, 0x700, 0x42, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000000)={r4, 0x5}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0x6, 0x8002, 0x12, 0x401, r4}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000600)={@val, @void, @eth={@multicast, @multicast, @val={@void, {0x6558, 0x6, 0x0, 0x6}}, {@generic={0x892f}}}}, 0x16) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYRES8=r3], 0x1c}}, 0x40000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01031400e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a4c000000060a010400000000000000000200000018000480140001030b000100736f636b657400000490d2769900010073797a30000000000900020073797a320000000005000740d3000000140000001100010000000000000000000000000a"], 0x74}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000003e58000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000000850002408355090100008000009500000000000000bf91000000000000b7020000000000008500000085000000bf00000000000000950000475d82ce493c779261f2c38e"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1b, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, r9, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r8, 0x4) 142.446791ms ago: executing program 3 (id=8541): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x288, 0x0, 0x0, 0x148, 0x108, 0x148, 0x1f0, 0x240, 0x240, 0x1f0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@inet=@set4={{0x50}, {{0x0, 0x3, 0x2}, {{0xffffffff}, 0x2}, {{0x1}, 0x40}, 0x1}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@TRACE={0x20}}, {{@ip={@local, @loopback, 0x0, 0xffffffff, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc8, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@addrtype={{0x30}, {0x40b, 0x102, 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac0000001000ffdf250000000000000000100000", @ANYRES32=0x0, @ANYBLOB="00000000201100008400128009000100766c616e00000000740002800600010000000000100003800c0039000405000047030000580004800c000100010000000e0000000c00010001800000112400000c0001000000ffff008000000c00010005000000410000000c000100f8000000060000000c00010006000000870000000c000100090000000000000008000500", @ANYRESOCT=r0], 0xac}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000082) 0s ago: executing program 0 (id=8542): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$kcm(0x2d, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2d, 0x0, 0x7ffe}, 0xc) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f00000007c0)=0x40000404, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0x6, @loopback, 0xfffffffe}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) recvfrom(r3, &(0x7f0000000340)=""/130, 0x82, 0x2100, &(0x7f0000000580)=@in6={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1a}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) kernel console output (not intermixed with test programs): locate VQ 0x0 after dequeue, screwing up backlog [ 733.780704][T32658] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.787186][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.809385][T32658] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.818825][T32658] bridge_slave_0: entered allmulticast mode [ 733.828423][T32658] bridge_slave_0: entered promiscuous mode [ 733.839132][T32658] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.849103][T32658] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.856532][T32658] bridge_slave_1: entered allmulticast mode [ 733.865368][T32658] bridge_slave_1: entered promiscuous mode [ 734.060335][T32658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.090402][T32658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 734.149456][T32739] lo speed is unknown, defaulting to 1000 [ 734.167820][ T6562] IPVS: stop unused estimator thread 0... [ 734.212828][T32739] wg1 speed is unknown, defaulting to 1000 [ 734.236506][T32658] team0: Port device team_slave_0 added [ 734.245376][T32658] team0: Port device team_slave_1 added [ 734.419348][T32658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.431930][T32658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.465215][T32765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.466075][T32658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 734.502085][T32753] ip6tnl0: Caught tx_queue_len zero misconfig [ 734.590664][T32658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 734.606928][T32658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.633807][T32658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 734.983939][T32658] hsr_slave_0: entered promiscuous mode [ 735.014567][T32658] hsr_slave_1: entered promiscuous mode [ 735.027012][T32658] debugfs: 'hsr0' already exists in 'hsr' [ 735.042637][T32658] Cannot create hsr debugfs directory [ 735.150224][ T309] sit1: left promiscuous mode [ 735.155528][ T309] vlan2: left promiscuous mode [ 735.160639][ T309] bond0: left promiscuous mode [ 735.168021][ T309] dummy0: left promiscuous mode [ 735.173737][ T309] ip6gretap1: left allmulticast mode [ 735.208510][ T309] ip6tnl1: left promiscuous mode [ 735.269394][ T309] geneve2: left promiscuous mode [ 735.282903][ T309] batman_adv: batadv0: Interface deactivated: gretap1 [ 735.310018][ T309] bond6: left promiscuous mode [ 735.314935][ T309] bond6: left allmulticast mode [ 735.321439][ T309] macsec1: left promiscuous mode [ 735.327128][ T309] macsec1: left allmulticast mode [ 735.341804][ T328] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7178'. [ 735.345855][ T6562] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.368763][ T6562] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.379996][ T6562] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.388715][ T6562] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.425047][ T328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7178'. [ 735.443283][ T6562] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.463797][ T6562] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.473297][ T6562] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.482206][ T6562] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.508595][ T332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7180'. [ 735.564853][ T330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7179'. [ 735.846753][ T52] Bluetooth: hci2: command tx timeout [ 735.871375][ T355] tipc: New replicast peer: 0.0.0.0 [ 735.877253][ T355] tipc: Enabled bearer , priority 10 [ 735.885050][ T355] tipc: New replicast peer: 172.30.1.3 [ 735.939319][T32658] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 735.958772][T32658] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 735.977292][T32658] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 736.005651][T32658] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 736.008391][ T357] netlink: 312 bytes leftover after parsing attributes in process `syz.3.7186'. [ 736.057568][ T363] netlink: 'syz.1.7187': attribute type 21 has an invalid length. [ 736.077567][ T363] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7187'. [ 736.096631][ T363] netlink: 'syz.1.7187': attribute type 5 has an invalid length. [ 736.104393][ T363] netlink: 'syz.1.7187': attribute type 6 has an invalid length. [ 736.116323][ T363] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7187'. [ 736.310143][T32658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 736.341716][ T381] netlink: 'syz.1.7190': attribute type 10 has an invalid length. [ 736.350635][ T380] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7191'. [ 736.355009][T32658] 8021q: adding VLAN 0 to HW filter on device team0 [ 736.374267][ T381] 8021q: adding VLAN 0 to HW filter on device ` [ 736.381355][ T380] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7191'. [ 736.392583][ T381] bond0: (slave `): Enslaving as an active interface with an up link [ 736.412658][ T383] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 736.430919][ T6553] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.438165][ T6553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 736.529483][ T6553] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.536703][ T6553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 736.592673][ T389] lo: Caught tx_queue_len zero misconfig [ 736.651136][ T391] netlink: 'syz.0.7194': attribute type 2 has an invalid length. [ 736.659497][ T391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7194'. [ 736.951229][ T410] tipc: Enabled bearer , priority 0 [ 736.960091][ T410] syzkaller0: entered promiscuous mode [ 736.965594][ T410] syzkaller0: entered allmulticast mode [ 736.991638][ T414] netlink: 'syz.1.7201': attribute type 13 has an invalid length. [ 737.009248][ T414] netlink: 'syz.1.7201': attribute type 17 has an invalid length. [ 737.204760][ T414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 737.228603][ T414] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 737.360631][ T415] lo speed is unknown, defaulting to 1000 [ 737.441084][ T415] wg1 speed is unknown, defaulting to 1000 [ 737.763691][ T439] netlink: 'syz.0.7207': attribute type 3 has an invalid length. [ 737.810272][T32658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 737.916218][ T52] Bluetooth: hci2: command tx timeout [ 738.029146][ T442] IPv6: addrconf: prefix option has invalid lifetime [ 738.223703][ T463] geneve2: entered promiscuous mode [ 738.233666][T14014] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 738.260681][T14014] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 738.325022][T14014] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 738.408789][ T471] netlink: 'syz.2.7215': attribute type 1 has an invalid length. [ 738.500280][ T44] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 738.545046][ T471] 8021q: adding VLAN 0 to HW filter on device bond3 [ 738.625580][ T474] 8021q: adding VLAN 0 to HW filter on device bond3 [ 738.661457][ T474] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 738.673848][ T474] bond3: (slave vxcan5): Error -95 calling set_mac_address [ 738.762272][ T471] gretap1: entered promiscuous mode [ 738.948408][T32658] veth0_vlan: entered promiscuous mode [ 738.981921][T32658] veth1_vlan: entered promiscuous mode [ 739.073329][T32658] veth0_macvtap: entered promiscuous mode [ 739.092603][T32658] veth1_macvtap: entered promiscuous mode [ 739.158161][T32658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 739.214771][T32658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 739.219938][ T498] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 739.287149][T14014] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.310516][T14014] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.399012][T14014] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.435019][T14014] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.683345][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.702287][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.837053][ T6559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.865955][ T6559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.091849][ T533] bond_slave_1: entered promiscuous mode [ 740.112334][ T533] bond_slave_1: entered allmulticast mode [ 740.142084][ T539] syzkaller1: entered promiscuous mode [ 740.154529][ T539] syzkaller1: entered allmulticast mode [ 740.268356][ T548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.277542][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.299305][ T550] netlink: 'syz.3.7235': attribute type 4 has an invalid length. [ 740.310911][ T548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.325602][ T551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.338681][ T551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.396326][ T553] veth0_to_bridge: entered promiscuous mode [ 740.410439][ T553] veth0_to_bridge: left promiscuous mode [ 740.422607][ T536] lo speed is unknown, defaulting to 1000 [ 740.423835][ T556] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 740.428887][ T548] xfrm0: entered promiscuous mode [ 740.468676][ T548] xfrm0: entered allmulticast mode [ 740.482693][ T536] wg1 speed is unknown, defaulting to 1000 [ 740.684078][ T572] __nla_validate_parse: 13 callbacks suppressed [ 740.684125][ T572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7242'. [ 740.846922][ T584] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7244'. [ 740.928165][ T572] bridge_slave_1: left allmulticast mode [ 740.940293][ T572] bridge_slave_1: left promiscuous mode [ 740.947967][ T572] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.961047][ T572] bridge_slave_0: left allmulticast mode [ 740.967544][ T572] bridge_slave_0: left promiscuous mode [ 740.973549][ T572] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.081137][ T566] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.088729][ T566] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.181299][ T593] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7246'. [ 741.224752][ T566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 741.244146][ T566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 741.379249][ T566] tipc: Resetting bearer [ 741.526585][ T6559] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.546268][ T6559] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 741.654091][ T6559] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.670692][ T6559] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 741.682198][ T604] tipc: Enabling of bearer rejected, failed to enable media [ 741.693016][ T6559] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.705586][ T6559] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 741.717648][ T6559] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.727104][ T6559] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 741.778091][ T608] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7251'. [ 741.867240][ T618] netlink: 'syz.2.7252': attribute type 1 has an invalid length. [ 741.961795][ T618] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7252'. [ 741.993198][ T625] sctp: [Deprecated]: syz.3.7254 (pid 625) Use of int in maxseg socket option. [ 741.993198][ T625] Use struct sctp_assoc_value instead [ 742.362298][ T6559] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 742.373407][ T6559] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 742.408872][ T642] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7260'. [ 742.412571][ T6559] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 742.434931][ T642] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7260'. [ 742.455060][ T6559] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 742.593017][ T650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.630984][ T650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.687462][ T650] 8021q: VLANs not supported on ip6_vti0 [ 742.739197][ T659] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7266'. [ 742.804344][ T664] xt_CT: You must specify a L4 protocol and not use inversions on it [ 742.827220][ T664] netlink: 'syz.5.7266': attribute type 1 has an invalid length. [ 743.315381][ T698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7276'. [ 743.455177][ T706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.466542][ T706] netlink: 'syz.1.7278': attribute type 33 has an invalid length. [ 743.474804][ T706] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7278'. [ 743.486966][ T709] netlink: 'syz.1.7278': attribute type 33 has an invalid length. [ 743.742589][ T719] xfrm1: entered allmulticast mode [ 744.113295][ T731] lo speed is unknown, defaulting to 1000 [ 744.130177][ T731] wg1 speed is unknown, defaulting to 1000 [ 744.535014][ T745] netlink: 'syz.5.7288': attribute type 10 has an invalid length. [ 744.543575][ T745] macvlan1: entered allmulticast mode [ 744.552565][ T745] veth1_vlan: entered allmulticast mode [ 744.592732][ T745] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 744.632051][ T748] vlan3: entered promiscuous mode [ 744.639968][ T748] geneve1: entered promiscuous mode [ 744.646661][ T748] vlan3: entered allmulticast mode [ 744.892257][ T761] netlink: 'syz.3.7293': attribute type 322 has an invalid length. [ 744.991818][ T762] delete_channel: no stack [ 744.998141][ T30] audit: type=1107 audit(1763781329.697:11): pid=762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 745.119513][ T772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.165810][ T772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.205244][ T772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.220257][ T776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.239583][ T776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.258681][ T772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.267274][ T772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.352807][ T778] siw: device registration error -23 [ 745.730571][ T782] veth5: entered promiscuous mode [ 745.951989][ T805] 8021q: VLANs not supported on wg0 [ 745.974764][ T808] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 746.213586][ T825] tipc: Enabled bearer , priority 0 [ 746.232083][ T825] syzkaller0: entered promiscuous mode [ 746.237977][ T825] syzkaller0: entered allmulticast mode [ 746.292769][ T832] netlink: 'syz.3.7315': attribute type 12 has an invalid length. [ 746.324428][ T832] tipc: Enabled bearer , priority 0 [ 746.347907][ T832] syzkaller0: entered promiscuous mode [ 746.357916][ T832] syzkaller0: entered allmulticast mode [ 746.406056][ T832] tipc: Resetting bearer [ 746.422143][ T835] netlink: 'syz.0.7316': attribute type 9 has an invalid length. [ 746.430337][ T835] netlink: 'syz.0.7316': attribute type 6 has an invalid length. [ 746.440460][ T835] netlink: 'syz.0.7316': attribute type 7 has an invalid length. [ 746.449814][ T832] xt_TPROXY: Can be used only with -p tcp or -p udp [ 746.481605][ T832] tipc: Resetting bearer [ 746.512889][ T832] tipc: Disabling bearer [ 746.548976][ T842] lo speed is unknown, defaulting to 1000 [ 746.563641][ T842] wg1 speed is unknown, defaulting to 1000 [ 746.626569][ T850] xt_hashlimit: max too large, truncated to 1048576 [ 746.629885][ T843] lo speed is unknown, defaulting to 1000 [ 746.659317][ T843] wg1 speed is unknown, defaulting to 1000 [ 746.859614][ T854] lo speed is unknown, defaulting to 1000 [ 746.870457][ T854] wg1 speed is unknown, defaulting to 1000 [ 747.217642][T15341] tipc: Node number set to 4278255617 [ 747.348838][ T878] __nla_validate_parse: 7 callbacks suppressed [ 747.348857][ T878] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7327'. [ 747.560190][ T880] lo speed is unknown, defaulting to 1000 [ 747.584464][ T880] wg1 speed is unknown, defaulting to 1000 [ 747.687671][ T888] net_ratelimit: 25 callbacks suppressed [ 747.687692][ T888] openvswitch: netlink: Key type 774 is out of range max 32 [ 747.717606][ T884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7325'. [ 747.770469][ T884] validate_nla: 1 callbacks suppressed [ 747.770489][ T884] netlink: 'syz.3.7325': attribute type 5 has an invalid length. [ 747.819936][ T884] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7325'. [ 747.947033][ T884] geneve2: entered promiscuous mode [ 747.959874][ T884] geneve2: entered allmulticast mode [ 748.068741][ T44] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 748.097883][ T44] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 748.130796][ T44] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 748.231092][ T44] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 748.978300][ T883] lo speed is unknown, defaulting to 1000 [ 749.017044][ T883] wg1 speed is unknown, defaulting to 1000 [ 749.231111][ T946] FAULT_INJECTION: forcing a failure. [ 749.231111][ T946] name failslab, interval 1, probability 0, space 0, times 0 [ 749.243807][ T946] CPU: 0 UID: 0 PID: 946 Comm: syz.0.7339 Not tainted syzkaller #0 PREEMPT(full) [ 749.243836][ T946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 749.243849][ T946] Call Trace: [ 749.243858][ T946] [ 749.243868][ T946] dump_stack_lvl+0x189/0x250 [ 749.243901][ T946] ? __pfx____ratelimit+0x10/0x10 [ 749.243922][ T946] ? __pfx_dump_stack_lvl+0x10/0x10 [ 749.243948][ T946] ? __pfx__printk+0x10/0x10 [ 749.243994][ T946] ? __lock_acquire+0xab9/0xd20 [ 749.244025][ T946] should_fail_ex+0x414/0x560 [ 749.244062][ T946] should_failslab+0xa8/0x100 [ 749.244085][ T946] kmem_cache_alloc_bulk_noprof+0x72/0x620 [ 749.244118][ T946] ? pfn_valid+0x125/0x4d0 [ 749.244139][ T946] ? pfn_valid+0x440/0x4d0 [ 749.244164][ T946] bpf_test_run_xdp_live+0x15f6/0x1b10 [ 749.244196][ T946] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 749.244221][ T946] ? bpf_test_run_xdp_live+0x393/0x1b10 [ 749.244257][ T946] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 749.244283][ T946] ? bpf_dispatcher_xdp+0x800/0x1000 [ 749.244323][ T946] ? 0xffffffffa0201650 [ 749.244339][ T946] ? 0xffffffffa0201688 [ 749.244353][ T946] ? 0xffffffffa0201750 [ 749.244367][ T946] ? 0xffffffffa0201790 [ 749.244411][ T946] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 749.244447][ T946] ? _copy_from_user+0x94/0xb0 [ 749.244474][ T946] ? bpf_test_init+0x113/0x150 [ 749.244493][ T946] ? xdp_convert_md_to_buff+0x5b/0x330 [ 749.244518][ T946] bpf_prog_test_run_xdp+0x7c0/0x10e0 [ 749.244557][ T946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 749.244586][ T946] ? __fget_files+0x2a/0x420 [ 749.244613][ T946] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 749.244637][ T946] bpf_prog_test_run+0x2c7/0x340 [ 749.244663][ T946] __sys_bpf+0x562/0x860 [ 749.244686][ T946] ? __pfx___sys_bpf+0x10/0x10 [ 749.244724][ T946] ? ksys_write+0x22a/0x250 [ 749.244754][ T946] ? __pfx_ksys_write+0x10/0x10 [ 749.244788][ T946] __x64_sys_bpf+0x7c/0x90 [ 749.244818][ T946] do_syscall_64+0xfa/0xfa0 [ 749.244839][ T946] ? lockdep_hardirqs_on+0x9c/0x150 [ 749.244860][ T946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.244880][ T946] ? clear_bhb_loop+0x60/0xb0 [ 749.244905][ T946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.244925][ T946] RIP: 0033:0x7f316ab8f749 [ 749.244943][ T946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 749.244961][ T946] RSP: 002b:00007f316ba75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 749.244998][ T946] RAX: ffffffffffffffda RBX: 00007f316ade5fa0 RCX: 00007f316ab8f749 [ 749.245014][ T946] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 749.245027][ T946] RBP: 00007f316ba75090 R08: 0000000000000000 R09: 0000000000000000 [ 749.245041][ T946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 749.245053][ T946] R13: 00007f316ade6038 R14: 00007f316ade5fa0 R15: 00007ffcff644a58 [ 749.245089][ T946] [ 750.013796][ T959] lo speed is unknown, defaulting to 1000 [ 750.031044][ T959] wg1 speed is unknown, defaulting to 1000 [ 750.665349][ T974] lo speed is unknown, defaulting to 1000 [ 750.692615][ T974] wg1 speed is unknown, defaulting to 1000 [ 750.966835][ T997] netlink: 1076 bytes leftover after parsing attributes in process `syz.1.7352'. [ 751.013842][ T999] FAULT_INJECTION: forcing a failure. [ 751.013842][ T999] name failslab, interval 1, probability 0, space 0, times 0 [ 751.020846][ T997] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 751.026521][ T999] CPU: 1 UID: 0 PID: 999 Comm: syz.0.7351 Not tainted syzkaller #0 PREEMPT(full) [ 751.026545][ T999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 751.026557][ T999] Call Trace: [ 751.026565][ T999] [ 751.026572][ T999] dump_stack_lvl+0x189/0x250 [ 751.026604][ T999] ? __pfx____ratelimit+0x10/0x10 [ 751.026624][ T999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 751.026650][ T999] ? __pfx__printk+0x10/0x10 [ 751.026673][ T999] ? __lock_acquire+0xab9/0xd20 [ 751.026702][ T999] should_fail_ex+0x414/0x560 [ 751.026738][ T999] should_failslab+0xa8/0x100 [ 751.026760][ T999] kmem_cache_alloc_bulk_noprof+0x72/0x620 [ 751.026793][ T999] ? pfn_valid+0x125/0x4d0 [ 751.026815][ T999] ? pfn_valid+0x440/0x4d0 [ 751.026839][ T999] bpf_test_run_xdp_live+0x15f6/0x1b10 [ 751.026870][ T999] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 751.026893][ T999] ? bpf_test_run_xdp_live+0x393/0x1b10 [ 751.026928][ T999] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 751.026953][ T999] ? bpf_dispatcher_xdp+0x800/0x1000 [ 751.026990][ T999] ? 0xffffffffa0201650 [ 751.027005][ T999] ? 0xffffffffa020168c [ 751.027019][ T999] ? 0xffffffffa0201750 [ 751.027035][ T999] ? 0xffffffffa0201790 [ 751.027083][ T999] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 751.027118][ T999] ? _copy_from_user+0x94/0xb0 [ 751.027144][ T999] ? bpf_test_init+0x113/0x150 [ 751.027163][ T999] ? xdp_convert_md_to_buff+0x5b/0x330 [ 751.027187][ T999] bpf_prog_test_run_xdp+0x7c0/0x10e0 [ 751.027226][ T999] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 751.027254][ T999] ? __fget_files+0x2a/0x420 [ 751.027279][ T999] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 751.027301][ T999] bpf_prog_test_run+0x2c7/0x340 [ 751.027327][ T999] __sys_bpf+0x562/0x860 [ 751.027348][ T999] ? __pfx___sys_bpf+0x10/0x10 [ 751.027384][ T999] ? ksys_write+0x22a/0x250 [ 751.027414][ T999] ? __pfx_ksys_write+0x10/0x10 [ 751.027446][ T999] __x64_sys_bpf+0x7c/0x90 [ 751.027476][ T999] do_syscall_64+0xfa/0xfa0 [ 751.027494][ T999] ? lockdep_hardirqs_on+0x9c/0x150 [ 751.027514][ T999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.027534][ T999] ? clear_bhb_loop+0x60/0xb0 [ 751.027558][ T999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.027577][ T999] RIP: 0033:0x7f316ab8f749 [ 751.027593][ T999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 751.027611][ T999] RSP: 002b:00007f316ba75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 751.027632][ T999] RAX: ffffffffffffffda RBX: 00007f316ade5fa0 RCX: 00007f316ab8f749 [ 751.027647][ T999] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 751.027660][ T999] RBP: 00007f316ba75090 R08: 0000000000000000 R09: 0000000000000000 [ 751.027673][ T999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 751.027685][ T999] R13: 00007f316ade6038 R14: 00007f316ade5fa0 R15: 00007ffcff644a58 [ 751.027719][ T999] [ 751.334453][ T1013] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 751.828715][ T1036] lo speed is unknown, defaulting to 1000 [ 751.842114][ T1036] wg1 speed is unknown, defaulting to 1000 [ 751.889810][ T1039] syzkaller0: entered promiscuous mode [ 751.895527][ T1039] syzkaller0: entered allmulticast mode [ 751.919506][ T1041] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7363'. [ 751.931702][ T1041] netlink: 'syz.2.7363': attribute type 10 has an invalid length. [ 751.940187][ T1041] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7363'. [ 751.964187][ T1041] team0: Port device geneve0 added [ 751.970205][ T44] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.990055][ T44] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.013310][ T44] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.026321][ T44] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.059091][ T1045] Unsupported ieee802154 address type: 0 [ 752.272391][ T1060] FAULT_INJECTION: forcing a failure. [ 752.272391][ T1060] name failslab, interval 1, probability 0, space 0, times 0 [ 752.285139][ T1060] CPU: 1 UID: 0 PID: 1060 Comm: syz.2.7367 Not tainted syzkaller #0 PREEMPT(full) [ 752.285167][ T1060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 752.285181][ T1060] Call Trace: [ 752.285190][ T1060] [ 752.285199][ T1060] dump_stack_lvl+0x189/0x250 [ 752.285232][ T1060] ? __pfx____ratelimit+0x10/0x10 [ 752.285253][ T1060] ? __pfx_dump_stack_lvl+0x10/0x10 [ 752.285281][ T1060] ? __pfx__printk+0x10/0x10 [ 752.285305][ T1060] ? __lock_acquire+0xab9/0xd20 [ 752.285336][ T1060] should_fail_ex+0x414/0x560 [ 752.285372][ T1060] should_failslab+0xa8/0x100 [ 752.285395][ T1060] kmem_cache_alloc_bulk_noprof+0x72/0x620 [ 752.285431][ T1060] ? pfn_valid+0x125/0x4d0 [ 752.285454][ T1060] ? pfn_valid+0x440/0x4d0 [ 752.285479][ T1060] bpf_test_run_xdp_live+0x15f6/0x1b10 [ 752.285511][ T1060] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 752.285537][ T1060] ? bpf_test_run_xdp_live+0x393/0x1b10 [ 752.285573][ T1060] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 752.285599][ T1060] ? bpf_dispatcher_xdp+0x800/0x1000 [ 752.285638][ T1060] ? 0xffffffffa0201650 [ 752.285654][ T1060] ? 0xffffffffa0201694 [ 752.285669][ T1060] ? 0xffffffffa0201750 [ 752.285685][ T1060] ? 0xffffffffa0201790 [ 752.285730][ T1060] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 752.285762][ T1060] ? _copy_from_user+0x94/0xb0 [ 752.285787][ T1060] ? bpf_test_init+0x113/0x150 [ 752.285805][ T1060] ? xdp_convert_md_to_buff+0x5b/0x330 [ 752.285830][ T1060] bpf_prog_test_run_xdp+0x7c0/0x10e0 [ 752.285869][ T1060] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 752.285896][ T1060] ? __fget_files+0x2a/0x420 [ 752.285919][ T1060] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 752.285942][ T1060] bpf_prog_test_run+0x2c7/0x340 [ 752.285967][ T1060] __sys_bpf+0x562/0x860 [ 752.285995][ T1060] ? __pfx___sys_bpf+0x10/0x10 [ 752.286030][ T1060] ? ksys_write+0x22a/0x250 [ 752.286060][ T1060] ? __pfx_ksys_write+0x10/0x10 [ 752.286093][ T1060] __x64_sys_bpf+0x7c/0x90 [ 752.286121][ T1060] do_syscall_64+0xfa/0xfa0 [ 752.286141][ T1060] ? lockdep_hardirqs_on+0x9c/0x150 [ 752.286162][ T1060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.286181][ T1060] ? clear_bhb_loop+0x60/0xb0 [ 752.286206][ T1060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.286226][ T1060] RIP: 0033:0x7fa35c58f749 [ 752.286243][ T1060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 752.286261][ T1060] RSP: 002b:00007fa35d37a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 752.286284][ T1060] RAX: ffffffffffffffda RBX: 00007fa35c7e5fa0 RCX: 00007fa35c58f749 [ 752.286299][ T1060] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 752.286313][ T1060] RBP: 00007fa35d37a090 R08: 0000000000000000 R09: 0000000000000000 [ 752.286326][ T1060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 752.286338][ T1060] R13: 00007fa35c7e6038 R14: 00007fa35c7e5fa0 R15: 00007fff7891bba8 [ 752.286374][ T1060] [ 752.312183][ T1053] syzkaller0: entered promiscuous mode [ 752.588095][ T1053] syzkaller0: entered allmulticast mode [ 752.687678][ T1069] dvmrp0: entered allmulticast mode [ 752.847552][ T1081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7373'. [ 752.867152][ T1081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7373'. [ 754.930032][ T1106] syzkaller0: entered promiscuous mode [ 754.946319][ T1106] syzkaller0: entered allmulticast mode [ 754.971280][ T1103] lo speed is unknown, defaulting to 1000 [ 755.059146][ T1103] wg1 speed is unknown, defaulting to 1000 [ 755.229595][ T1125] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 755.270530][ T1129] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7383'. [ 755.318821][ T1129] syz.3.7383: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 755.337428][ T1129] CPU: 0 UID: 0 PID: 1129 Comm: syz.3.7383 Not tainted syzkaller #0 PREEMPT(full) [ 755.337456][ T1129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 755.337468][ T1129] Call Trace: [ 755.337476][ T1129] [ 755.337485][ T1129] dump_stack_lvl+0x189/0x250 [ 755.337520][ T1129] ? __pfx_dump_stack_lvl+0x10/0x10 [ 755.337547][ T1129] ? __pfx__printk+0x10/0x10 [ 755.337567][ T1129] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 755.337595][ T1129] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 755.337624][ T1129] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 755.337651][ T1129] warn_alloc+0x214/0x310 [ 755.337686][ T1129] ? __pfx_warn_alloc+0x10/0x10 [ 755.337726][ T1129] ? __get_vm_area_node+0x28f/0x300 [ 755.337753][ T1129] ? xskq_create+0xbf/0x170 [ 755.337776][ T1129] __vmalloc_node_range_noprof+0x690/0x12d0 [ 755.337837][ T1129] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 755.337871][ T1129] ? __kasan_kmalloc+0x93/0xb0 [ 755.337906][ T1129] vmalloc_user_noprof+0xad/0xf0 [ 755.337935][ T1129] ? xskq_create+0xbf/0x170 [ 755.337952][ T1129] xskq_create+0xbf/0x170 [ 755.337974][ T1129] xsk_init_queue+0xb0/0x110 [ 755.338006][ T1129] xsk_setsockopt+0x57b/0x8d0 [ 755.338039][ T1129] ? __pfx_xsk_setsockopt+0x10/0x10 [ 755.338071][ T1129] ? __pfx_aa_sk_perm+0x10/0x10 [ 755.338106][ T1129] ? aa_sock_opt_perm+0xff/0x1b0 [ 755.338137][ T1129] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 755.338156][ T1129] ? __pfx_xsk_setsockopt+0x10/0x10 [ 755.338185][ T1129] do_sock_setsockopt+0x17c/0x1b0 [ 755.338214][ T1129] __x64_sys_setsockopt+0x13f/0x1b0 [ 755.338239][ T1129] do_syscall_64+0xfa/0xfa0 [ 755.338258][ T1129] ? lockdep_hardirqs_on+0x9c/0x150 [ 755.338278][ T1129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.338296][ T1129] ? clear_bhb_loop+0x60/0xb0 [ 755.338320][ T1129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.338339][ T1129] RIP: 0033:0x7f308c98f749 [ 755.338358][ T1129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 755.338375][ T1129] RSP: 002b:00007f308d7f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 755.338394][ T1129] RAX: ffffffffffffffda RBX: 00007f308cbe5fa0 RCX: 00007f308c98f749 [ 755.338409][ T1129] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000008 [ 755.338428][ T1129] RBP: 00007f308ca13f91 R08: 0000000000000004 R09: 0000000000000000 [ 755.338441][ T1129] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 755.338454][ T1129] R13: 00007f308cbe6038 R14: 00007f308cbe5fa0 R15: 00007ffc89b53978 [ 755.338490][ T1129] [ 755.338561][ T1129] Mem-Info: [ 755.341504][ T1136] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7384'. [ 755.350562][ T1129] active_anon:9898 inactive_anon:0 isolated_anon:0 [ 755.350562][ T1129] active_file:3741 inactive_file:40179 isolated_file:0 [ 755.350562][ T1129] unevictable:768 dirty:133 writeback:7 [ 755.350562][ T1129] slab_reclaimable:14097 slab_unreclaimable:276139 [ 755.350562][ T1129] mapped:30597 shmem:1359 pagetables:1022 [ 755.350562][ T1129] sec_pagetables:0 bounce:0 [ 755.350562][ T1129] kernel_misc_reclaimable:0 [ 755.350562][ T1129] free:1142988 free_pcp:11463 free_cma:0 [ 755.486048][ T1136] netlink: 43 bytes leftover after parsing attributes in process `syz.5.7384'. [ 755.496248][ T1129] Node 0 active_anon:39692kB inactive_anon:0kB active_file:14964kB inactive_file:160516kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122388kB dirty:532kB writeback:28kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17680kB pagetables:4188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 755.505485][ T1136] netlink: 'syz.5.7384': attribute type 6 has an invalid length. [ 755.525979][ T1129] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 755.585594][ T1136] netlink: 'syz.5.7384': attribute type 5 has an invalid length. [ 755.589871][ T1129] Node 0 [ 755.604604][ T1136] netlink: 43 bytes leftover after parsing attributes in process `syz.5.7384'. [ 755.613114][ T1129] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 755.795266][ T1129] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 755.801218][ T1129] Node 0 DMA32 free:651332kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39692kB inactive_anon:0kB active_file:14964kB inactive_file:160516kB unevictable:1536kB writepending:560kB zspages:0kB present:3129332kB managed:2565100kB mlocked:0kB bounce:0kB free_pcp:40828kB local_pcp:17508kB free_cma:0kB [ 755.834894][ T1129] lowmem_reserve[]: 0 0 0 0 0 [ 755.903799][ T1129] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 755.936882][ T1129] lowmem_reserve[]: 0 0 0 0 0 [ 755.941775][ T1129] Node 1 Normal free:3904932kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:5344kB local_pcp:5344kB free_cma:0kB [ 755.984717][ T1129] lowmem_reserve[]: 0 0 0 0 0 [ 755.990285][ T1129] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 756.013718][ T1142] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7386'. [ 756.024849][ T1129] Node 0 DMA32: 949*4kB (UME) 754*8kB (UME) 339*16kB (UME) 1098*32kB (UME) 241*64kB (UM) 297*128kB (UM) 90*256kB (UME) 89*512kB (UM) 70*1024kB (UM) 16*2048kB (UM) 92*4096kB (UM) = 653716kB [ 756.055113][ T1129] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 756.069137][ T1129] Node 1 Normal: 183*4kB (UME) 51*8kB (UME) 45*16kB (UME) 237*32kB (UME) 107*64kB (UME) 22*128kB (UME) 9*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3904932kB [ 756.091744][ T1129] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 756.101354][ T1150] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7389'. [ 756.111068][ T1145] netlink: 'syz.1.7388': attribute type 8 has an invalid length. [ 756.115798][ T1129] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 756.129550][ T1145] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 756.130567][ T1129] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 756.155145][ T1129] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 756.169535][ T1129] 45278 total pagecache pages [ 756.174371][ T1129] 0 pages in swap cache [ 756.180623][ T1151] netlink: 'syz.2.7389': attribute type 6 has an invalid length. [ 756.190135][ T1150] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7389'. [ 756.207455][ T1129] Free swap = 124996kB [ 756.215525][ T1129] Total swap = 124996kB [ 756.220126][ T1129] 2097051 pages RAM [ 756.224182][ T1129] 0 pages HighMem/MovableOnly [ 756.296017][ T1129] 424134 pages reserved [ 756.300381][ T1129] 0 pages cma reserved [ 756.527555][ T1166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7392'. [ 756.528001][ T1162] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 756.557745][ T1164] netlink: 'syz.1.7393': attribute type 21 has an invalid length. [ 756.562795][ T1166] ip6tnl1: entered allmulticast mode [ 756.565676][ T1164] IPv6: NLM_F_CREATE should be specified when creating new route [ 756.579522][ T1164] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 756.586767][ T1164] IPv6: NLM_F_CREATE should be set when creating new route [ 756.594185][ T1164] IPv6: NLM_F_CREATE should be set when creating new route [ 756.601487][ T1164] IPv6: NLM_F_CREATE should be set when creating new route [ 756.716858][ T1172] 8021q: adding VLAN 0 to HW filter on device bond4 [ 756.762212][ T1172] bond5: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 756.790695][ T1172] bond5 (unregistering): Released all slaves [ 757.120779][ T1187] veth1_to_bond: entered allmulticast mode [ 757.162824][ T1187] syzkaller1: entered promiscuous mode [ 757.177266][ T1187] syzkaller1: entered allmulticast mode [ 757.313363][ T1187] bond0: (slave bond_slave_1): Releasing backup interface [ 757.414268][ T1205] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 757.458430][ T1187] veth1_to_bond (unregistering): left allmulticast mode [ 757.556254][ T1205] vlan2: entered promiscuous mode [ 757.574723][ T1205] bond0: entered promiscuous mode [ 757.603627][ T1205] bond_slave_0: entered promiscuous mode [ 757.620440][ T1205] bond_slave_1: entered promiscuous mode [ 757.666885][ T1207] lo speed is unknown, defaulting to 1000 [ 757.674771][ T1207] wg1 speed is unknown, defaulting to 1000 [ 757.903226][ T1219] netlink: 'syz.2.7410': attribute type 63 has an invalid length. [ 757.935474][ T1223] netlink: 'syz.3.7409': attribute type 13 has an invalid length. [ 757.954725][ T1224] netlink: 'syz.2.7410': attribute type 63 has an invalid length. [ 758.141052][ T1226] openvswitch: netlink: Message has 8 unknown bytes. [ 758.559279][ T6553] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 758.591965][ T6553] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 758.722380][ T6553] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 758.801283][ T6553] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 758.834782][ T1263] __nla_validate_parse: 3 callbacks suppressed [ 758.834802][ T1263] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7418'. [ 758.862585][ T1263] netlink: 'syz.1.7418': attribute type 13 has an invalid length. [ 758.867478][ T1259] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7416'. [ 758.881565][ T1259] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7416'. [ 758.910306][ T1259] netlink: 26 bytes leftover after parsing attributes in process `syz.5.7416'. [ 759.010756][ T1275] netlink: 92 bytes leftover after parsing attributes in process `syz.3.7421'. [ 759.046829][ T1270] netlink: 92 bytes leftover after parsing attributes in process `syz.3.7421'. [ 759.092698][ T1274] lo speed is unknown, defaulting to 1000 [ 759.120645][ T1275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7421'. [ 759.138794][ T1274] wg1 speed is unknown, defaulting to 1000 [ 759.148100][ T1275] netlink: 'syz.3.7421': attribute type 1 has an invalid length. [ 759.264690][ T1281] 8021q: adding VLAN 0 to HW filter on device bond1 [ 759.386174][ T1290] 8021q: adding VLAN 0 to HW filter on device bond1 [ 759.418383][ T1300] openvswitch: netlink: Message has 244 unknown bytes. [ 759.457542][ T1290] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 759.487563][ T1290] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 759.518309][ T5833] Bluetooth: hci2: command 0x0405 tx timeout [ 759.586871][ T1296] mac80211_hwsim hwsim103 wlan0: entered promiscuous mode [ 759.603410][ T1296] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 759.865298][ T1317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7435'. [ 759.896632][ T1313] syzkaller0: entered promiscuous mode [ 759.902144][ T1313] syzkaller0: entered allmulticast mode [ 759.960853][ T1315] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7434'. [ 759.999411][ T1315] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7434'. [ 760.247905][ T1324] vlan4: entered promiscuous mode [ 760.252992][ T1324] hsr0: entered promiscuous mode [ 760.475317][ T1346] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 760.542648][ T1351] validate_nla: 3 callbacks suppressed [ 760.542673][ T1351] netlink: 'syz.5.7440': attribute type 4 has an invalid length. [ 761.939257][ T1379] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 761.956831][ T1379] bond0 (unregistering): (slave `): Releasing backup interface [ 761.973953][ T1379] bond0 (unregistering): Released all slaves [ 762.189212][ T1391] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 764.145491][ T1464] __nla_validate_parse: 15 callbacks suppressed [ 764.145505][ T1464] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7472'. [ 764.364782][ T1479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7474'. [ 764.510719][ T1478] vlan2: entered allmulticast mode [ 764.517732][ T1478] bridge0: entered allmulticast mode [ 764.528756][ T1478] bridge0: port 1(vlan2) entered blocking state [ 764.548421][ T1478] bridge0: port 1(vlan2) entered disabled state [ 764.629824][ T1483] lo speed is unknown, defaulting to 1000 [ 764.663034][ T1483] wg1 speed is unknown, defaulting to 1000 [ 764.716460][ T5833] Bluetooth: hci5: command 0x0405 tx timeout [ 765.025941][ T1516] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7486'. [ 765.041629][ T1511] netdevsim netdevsim2 ’’’’’’: renamed from netdevsim0 [ 765.084450][ T1516] ip6tnl1: entered allmulticast mode [ 765.190008][ T1520] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 765.470657][ T1531] lo speed is unknown, defaulting to 1000 [ 765.478600][ T1531] wg1 speed is unknown, defaulting to 1000 [ 765.558706][ T1546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7490'. [ 765.884826][ T1543] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7493'. [ 765.894453][ T1543] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7493'. [ 766.267446][ T1572] lo speed is unknown, defaulting to 1000 [ 766.285154][ T1572] wg1 speed is unknown, defaulting to 1000 [ 766.529549][ T1586] lo speed is unknown, defaulting to 1000 [ 766.592434][ T1586] wg1 speed is unknown, defaulting to 1000 [ 766.594107][ T1593] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7503'. [ 766.614104][ T1588] lo speed is unknown, defaulting to 1000 [ 766.622329][ T1588] wg1 speed is unknown, defaulting to 1000 [ 766.687577][ T1596] tipc: Resetting bearer [ 766.819817][ T1598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7504'. [ 767.896912][ T1653] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7514'. [ 767.984711][ T1659] netlink: 'syz.5.7515': attribute type 12 has an invalid length. [ 768.234661][ T1670] lo speed is unknown, defaulting to 1000 [ 768.247176][ T1670] wg1 speed is unknown, defaulting to 1000 [ 768.593879][ T1676] bridge4: entered allmulticast mode [ 768.812053][ T1690] bond2: option mode: invalid value (254) [ 768.828822][ T1690] bond2 (unregistering): Released all slaves [ 768.943095][ T1688] lo speed is unknown, defaulting to 1000 [ 768.950859][ T1688] wg1 speed is unknown, defaulting to 1000 [ 769.022542][ T1690] netlink: 'syz.5.7524': attribute type 10 has an invalid length. [ 769.095338][ T1690] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7524'. [ 769.532611][ T1690] team0: Port device geneve0 added [ 769.681120][ T1725] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7530'. [ 769.862387][ T1738] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7534'. [ 770.015992][ T1745] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7531'. [ 770.092714][ T1754] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 770.238448][ T1758] lo speed is unknown, defaulting to 1000 [ 770.263659][ T1758] wg1 speed is unknown, defaulting to 1000 [ 770.625578][ T1776] syz.1.7540: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 770.680048][ T1776] CPU: 1 UID: 0 PID: 1776 Comm: syz.1.7540 Not tainted syzkaller #0 PREEMPT(full) [ 770.680085][ T1776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 770.680098][ T1776] Call Trace: [ 770.680106][ T1776] [ 770.680115][ T1776] dump_stack_lvl+0x189/0x250 [ 770.680151][ T1776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 770.680178][ T1776] ? __pfx__printk+0x10/0x10 [ 770.680198][ T1776] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 770.680226][ T1776] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 770.680256][ T1776] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 770.680286][ T1776] warn_alloc+0x214/0x310 [ 770.680321][ T1776] ? __pfx_warn_alloc+0x10/0x10 [ 770.680361][ T1776] ? __get_vm_area_node+0x28f/0x300 [ 770.680391][ T1776] ? xskq_create+0xbf/0x170 [ 770.680414][ T1776] __vmalloc_node_range_noprof+0x690/0x12d0 [ 770.680471][ T1776] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 770.680502][ T1776] ? __kasan_kmalloc+0x93/0xb0 [ 770.680536][ T1776] vmalloc_user_noprof+0xad/0xf0 [ 770.680562][ T1776] ? xskq_create+0xbf/0x170 [ 770.680580][ T1776] xskq_create+0xbf/0x170 [ 770.680601][ T1776] xsk_init_queue+0xb0/0x110 [ 770.680633][ T1776] xsk_setsockopt+0x57b/0x8d0 [ 770.680662][ T1776] ? __pfx_xsk_setsockopt+0x10/0x10 [ 770.680694][ T1776] ? __pfx_aa_sk_perm+0x10/0x10 [ 770.680724][ T1776] ? aa_sock_opt_perm+0xff/0x1b0 [ 770.680757][ T1776] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 770.680777][ T1776] ? __pfx_xsk_setsockopt+0x10/0x10 [ 770.680809][ T1776] do_sock_setsockopt+0x17c/0x1b0 [ 770.680839][ T1776] __x64_sys_setsockopt+0x13f/0x1b0 [ 770.680869][ T1776] do_syscall_64+0xfa/0xfa0 [ 770.680890][ T1776] ? lockdep_hardirqs_on+0x9c/0x150 [ 770.680912][ T1776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.680932][ T1776] ? clear_bhb_loop+0x60/0xb0 [ 770.680957][ T1776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.680976][ T1776] RIP: 0033:0x7f53f818f749 [ 770.680993][ T1776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 770.681010][ T1776] RSP: 002b:00007f53f910d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 770.681031][ T1776] RAX: ffffffffffffffda RBX: 00007f53f83e5fa0 RCX: 00007f53f818f749 [ 770.681045][ T1776] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004 [ 770.681062][ T1776] RBP: 00007f53f8213f91 R08: 0000000000000004 R09: 0000000000000000 [ 770.681074][ T1776] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 770.681084][ T1776] R13: 00007f53f83e6038 R14: 00007f53f83e5fa0 R15: 00007fff45e94758 [ 770.681115][ T1776] [ 770.681122][ T1776] Mem-Info: [ 770.728971][ T1783] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7541'. [ 770.842888][ T1776] active_anon:9892 inactive_anon:0 isolated_anon:0 [ 770.842888][ T1776] active_file:3741 inactive_file:40185 isolated_file:0 [ 770.842888][ T1776] unevictable:768 dirty:150 writeback:0 [ 770.842888][ T1776] slab_reclaimable:14042 slab_unreclaimable:277970 [ 770.842888][ T1776] mapped:29529 shmem:1359 pagetables:1111 [ 770.842888][ T1776] sec_pagetables:0 bounce:0 [ 770.842888][ T1776] kernel_misc_reclaimable:0 [ 770.842888][ T1776] free:1135478 free_pcp:17088 free_cma:0 [ 771.013154][ T1776] Node 0 active_anon:42812kB inactive_anon:0kB active_file:14964kB inactive_file:160548kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118116kB dirty:560kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17584kB pagetables:4448kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 771.074790][ T1776] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 771.156792][ T1787] batadv_slave_0: mtu less than device minimum [ 771.166349][ T1776] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 771.233373][ T1776] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 771.258438][ T1776] Node 0 DMA32 free:623936kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41512kB inactive_anon:0kB active_file:14964kB inactive_file:160548kB unevictable:1536kB writepending:560kB zspages:0kB present:3129332kB managed:2565100kB mlocked:0kB bounce:0kB free_pcp:60272kB local_pcp:31516kB free_cma:0kB [ 771.337592][ T1776] lowmem_reserve[]: 0 0 0 0 0 [ 771.342400][ T1776] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 771.436429][ T1776] lowmem_reserve[]: 0 0 0 0 0 [ 771.441195][ T1776] Node 1 Normal free:3904932kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:5344kB local_pcp:0kB free_cma:0kB [ 771.499374][ T1776] lowmem_reserve[]: 0 0 0 0 0 [ 771.506902][ T1776] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 771.520582][ T1776] Node 0 DMA32: 397*4kB (UME) 86*8kB (UME) 342*16kB (UME) 731*32kB (UME) 274*64kB (UM) 313*128kB (UME) 91*256kB (UME) 93*512kB (UM) 70*1024kB (UE) 11*2048kB (UME) 91*4096kB (UM) = 626596kB [ 771.542198][ T1776] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 771.555264][ T1776] Node 1 Normal: 183*4kB (UME) 51*8kB (UME) 45*16kB (UME) 237*32kB (UME) 107*64kB (UME) 22*128kB (UME) 9*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3904932kB [ 771.577681][ T1776] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 771.587675][ T1776] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 771.608905][ T1776] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 771.618754][ T1776] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 771.629040][ T1776] 45284 total pagecache pages [ 771.633735][ T1776] 0 pages in swap cache [ 771.656085][ T1776] Free swap = 124996kB [ 771.660273][ T1776] Total swap = 124996kB [ 771.664432][ T1776] 2097051 pages RAM [ 771.676016][ T1776] 0 pages HighMem/MovableOnly [ 771.681981][ T1776] 424134 pages reserved [ 771.691028][ T1776] 0 pages cma reserved [ 771.922989][ T1818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7557'. [ 772.102692][ T1832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7560'. [ 772.136612][ T1830] syzkaller0: entered promiscuous mode [ 772.142228][ T1830] syzkaller0: entered allmulticast mode [ 774.202787][ T1853] lo speed is unknown, defaulting to 1000 [ 774.211261][ T1853] wg1 speed is unknown, defaulting to 1000 [ 774.355484][ T1866] tipc: Enabling of bearer rejected, already enabled [ 774.419217][ T1866] sch_tbf: burst 0 is lower than device syzkaller0 mtu (313) ! [ 774.651569][ T1888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7573'. [ 774.729610][ T1891] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7573'. [ 774.762176][ T1866] lo speed is unknown, defaulting to 1000 [ 774.799111][ T1866] wg1 speed is unknown, defaulting to 1000 [ 774.956021][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 775.132642][ T1906] IPVS: set_ctl: invalid protocol: 98 224.0.0.2:20004 [ 775.332397][ T1911] ip6gre0: entered promiscuous mode [ 775.447916][ T1924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7580'. [ 775.495090][ T1929] lo speed is unknown, defaulting to 1000 [ 775.526616][ T1924] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7580'. [ 775.546877][ T1929] wg1 speed is unknown, defaulting to 1000 [ 775.721026][ T1933] ip6tnl1: entered promiscuous mode [ 775.743294][ T1933] ip6tnl1: entered allmulticast mode [ 776.036593][ T1954] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7587'. [ 776.051918][ T1954] netlink: 'syz.5.7587': attribute type 30 has an invalid length. [ 776.065986][ T1942] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7585'. [ 776.085861][ T1954] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7587'. [ 776.112682][ T1946] tipc: Enabling of bearer rejected, failed to enable media [ 776.597206][ T1973] lo speed is unknown, defaulting to 1000 [ 776.610820][ T1973] wg1 speed is unknown, defaulting to 1000 [ 776.626483][ T1966] syz_tun: entered promiscuous mode [ 776.631727][ T1966] syz_tun: entered allmulticast mode [ 777.106859][ T1998] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7596'. [ 777.138231][ T1998] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7596'. [ 777.199057][ T1998] netlink: zone id is out of range [ 777.225992][ T1998] netlink: zone id is out of range [ 777.231151][ T1998] netlink: zone id is out of range [ 777.240195][ T1998] netlink: zone id is out of range [ 777.267444][ T1998] netlink: zone id is out of range [ 777.289686][ T1998] netlink: zone id is out of range [ 777.298252][ T1998] netlink: zone id is out of range [ 777.303478][ T1998] netlink: zone id is out of range [ 777.384706][ T2002] lo speed is unknown, defaulting to 1000 [ 777.422659][ T2002] wg1 speed is unknown, defaulting to 1000 [ 777.859577][ T2025] tipc: Enabled bearer , priority 0 [ 777.895037][ T2025] syzkaller0: entered promiscuous mode [ 777.911851][ T2025] syzkaller0: entered allmulticast mode [ 777.976929][ T2025] tipc: Resetting bearer [ 778.001090][ T2037] netlink: 'syz.2.7610': attribute type 1 has an invalid length. [ 778.009860][ T2039] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 778.015268][ T2033] lo speed is unknown, defaulting to 1000 [ 778.037427][ T2040] netlink: 'syz.1.7607': attribute type 4 has an invalid length. [ 778.045585][ T2037] bond5: entered promiscuous mode [ 778.051760][ T2037] 8021q: adding VLAN 0 to HW filter on device bond5 [ 778.055410][ T2040] netlink: 17 bytes leftover after parsing attributes in process `syz.1.7607'. [ 778.082392][ T2024] tipc: Resetting bearer [ 778.110480][ T2024] tipc: Disabling bearer [ 778.119944][ T2033] wg1 speed is unknown, defaulting to 1000 [ 778.143334][ T2038] netlink: 'syz.2.7610': attribute type 7 has an invalid length. [ 778.152560][ T2038] netlink: 'syz.2.7610': attribute type 8 has an invalid length. [ 778.258073][ T2050] macvlan3: entered promiscuous mode [ 778.272381][ T2044] lo speed is unknown, defaulting to 1000 [ 778.329098][ T2044] wg1 speed is unknown, defaulting to 1000 [ 778.416329][ T2037] lo speed is unknown, defaulting to 1000 [ 778.452277][ T2037] wg1 speed is unknown, defaulting to 1000 [ 778.630415][ T2062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7614'. [ 778.829248][ T2062] lo speed is unknown, defaulting to 1000 [ 778.868818][ T2062] wg1 speed is unknown, defaulting to 1000 [ 779.018037][ T2077] nbd: device at index 64 is going down [ 779.288964][ T2092] sctp: [Deprecated]: syz.3.7621 (pid 2092) Use of struct sctp_assoc_value in delayed_ack socket option. [ 779.288964][ T2092] Use struct sctp_sack_info instead [ 779.576751][ T2111] Unsupported ieee802154 address type: 0 [ 780.086295][ T5833] Bluetooth: hci2: command 0x0405 tx timeout [ 780.120895][ T2138] lo speed is unknown, defaulting to 1000 [ 780.128974][ T2137] lo speed is unknown, defaulting to 1000 [ 780.136666][ T2137] wg1 speed is unknown, defaulting to 1000 [ 780.158008][ T2138] wg1 speed is unknown, defaulting to 1000 [ 780.271954][ T2149] batadv1: entered allmulticast mode [ 780.283762][ T2149] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 780.330306][ T2147] __nla_validate_parse: 3 callbacks suppressed [ 780.330325][ T2147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7639'. [ 780.600333][ T2167] netlink: 'syz.2.7645': attribute type 13 has an invalid length. [ 780.609304][ T2167] netlink: 'syz.2.7645': attribute type 17 has an invalid length. [ 780.807877][ T2167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 780.821521][ T2167] 8021q: adding VLAN 0 to HW filter on device team0 [ 780.841743][ T2167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 781.054557][ T2180] lo speed is unknown, defaulting to 1000 [ 781.079568][ T2180] wg1 speed is unknown, defaulting to 1000 [ 781.209658][ T2192] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7652'. [ 781.254540][ T2192] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7652'. [ 781.288037][ T2192] netlink: 'syz.0.7652': attribute type 5 has an invalid length. [ 781.297361][ T2190] C: renamed from team_slave_0 [ 781.317946][ T2190] netlink: 'syz.1.7651': attribute type 1 has an invalid length. [ 781.344217][ T2190] netlink: 116 bytes leftover after parsing attributes in process `syz.1.7651'. [ 781.381158][ T2190] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 781.450878][ T2192] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7652'. [ 781.475898][ T2192] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7652'. [ 781.508982][ T2192] netlink: 'syz.0.7652': attribute type 5 has an invalid length. [ 781.529383][ T2192] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7652'. [ 781.553616][ T2192] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7652'. [ 781.563042][ T2192] netlink: 'syz.0.7652': attribute type 5 has an invalid length. [ 781.597621][ T52] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 781.635178][ T2223] netlink: 'syz.3.7657': attribute type 10 has an invalid length. [ 781.664233][ T2223] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7657'. [ 781.673265][ T2192] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7652'. [ 781.673318][ T2192] netlink: 'syz.0.7652': attribute type 5 has an invalid length. [ 781.673502][ T2192] netlink: 'syz.0.7652': attribute type 5 has an invalid length. [ 781.712466][ T2192] netlink: 'syz.0.7652': attribute type 5 has an invalid length. [ 781.763233][ T2223] team0: Port device geneve0 added [ 781.776936][ T2192] netlink: 'syz.0.7652': attribute type 5 has an invalid length. [ 781.795565][T14018] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.815503][T14018] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.845369][ T2226] netlink: 'syz.1.7658': attribute type 83 has an invalid length. [ 781.898004][ T6577] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.910159][ T6577] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.924994][ T2228] lo speed is unknown, defaulting to 1000 [ 781.950459][ T2228] wg1 speed is unknown, defaulting to 1000 [ 782.504715][ T2267] netlink: 'syz.0.7668': attribute type 11 has an invalid length. [ 782.808383][ T2273] lo speed is unknown, defaulting to 1000 [ 782.830707][ T2273] wg1 speed is unknown, defaulting to 1000 [ 782.971793][ T2287] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 783.161723][ T2295] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 783.752027][ T2316] infiniband syś2: RDMA CMA: cma_listen_on_dev, error -98 [ 783.787127][ T2317] tipc: Enabling of bearer rejected, already enabled [ 784.347082][ T2354] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20001 [ 784.666245][T15014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.685039][T15014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.833635][ T2361] team0: Port device geneve0 removed [ 784.851043][ T2362] lo speed is unknown, defaulting to 1000 [ 784.860971][ T2362] wg1 speed is unknown, defaulting to 1000 [ 784.910071][T15017] netdevsim netdevsim2 ’’’’’’: unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.919361][T15017] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.023709][T15017] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.056194][T15017] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.423017][ T2404] SET target dimension over the limit! [ 785.598311][ T2419] lo speed is unknown, defaulting to 1000 [ 785.619929][ T2411] lo speed is unknown, defaulting to 1000 [ 785.628985][ T2419] wg1 speed is unknown, defaulting to 1000 [ 785.647630][ T2411] wg1 speed is unknown, defaulting to 1000 [ 785.822379][ T2423] __nla_validate_parse: 132 callbacks suppressed [ 785.822398][ T2423] netlink: 220 bytes leftover after parsing attributes in process `syz.1.7712'. [ 785.828272][ T2416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7709'. [ 785.990064][ T2428] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7713'. [ 786.292523][ T2438] bond2: (slave veth0_to_batadv): Device is not bonding slave [ 786.300444][ T2438] bond2: option active_slave: invalid value (veth0_to_batadv) [ 786.326602][ T2438] bond2 (unregistering): Released all slaves [ 786.505283][ T52] Bluetooth: hci2: link tx timeout [ 786.512381][ T52] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 786.568080][ T2456] validate_nla: 62 callbacks suppressed [ 786.568094][ T2456] netlink: 'syz.2.7719': attribute type 2 has an invalid length. [ 786.582930][ T2456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7719'. [ 786.592678][ T2457] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7720'. [ 788.488514][ T2468] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7724'. [ 788.558913][ T5833] Bluetooth: hci2: command 0x0405 tx timeout [ 788.690139][ T2482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7727'. [ 788.768149][ T2487] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7728'. [ 789.032764][ T2502] IPVS: Error connecting to the multicast addr [ 789.077088][ T2505] x_tables: duplicate underflow at hook 3 [ 789.189336][ T2508] lo speed is unknown, defaulting to 1000 [ 789.198123][ T2508] wg1 speed is unknown, defaulting to 1000 [ 789.400100][ T2514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7734'. [ 789.473579][ T2517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7736'. [ 790.598336][ T2565] netlink: 'syz.2.7745': attribute type 9 has an invalid length. [ 790.616999][ T2565] netlink: 'syz.2.7745': attribute type 6 has an invalid length. [ 790.642127][ T2565] netlink: 'syz.2.7745': attribute type 7 has an invalid length. [ 790.665984][ T2565] netlink: 'syz.2.7745': attribute type 8 has an invalid length. [ 790.698546][ T2567] netlink: 'syz.0.7746': attribute type 2 has an invalid length. [ 790.789762][ T2569] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 790.850134][ T2576] netlink: 'syz.1.7748': attribute type 11 has an invalid length. [ 791.067653][ T2586] __nla_validate_parse: 5 callbacks suppressed [ 791.067674][ T2586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7753'. [ 791.157639][ T2600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7756'. [ 791.167030][ T2600] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7756'. [ 791.179586][ T2593] lo speed is unknown, defaulting to 1000 [ 791.217325][ T2593] wg1 speed is unknown, defaulting to 1000 [ 791.227465][ T2598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 791.240405][ T2602] netlink: 10 bytes leftover after parsing attributes in process `syz.5.7757'. [ 791.276903][ T2604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7758'. [ 791.313949][ T2598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 791.519417][ T2617] sctp: [Deprecated]: syz.1.7761 (pid 2617) Use of int in max_burst socket option deprecated. [ 791.519417][ T2617] Use struct sctp_assoc_value instead [ 791.567016][ T2617] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7761'. [ 791.589392][ T2632] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7763'. [ 791.591267][ T2617] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 791.721488][ T2646] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7765'. [ 791.791033][ T2649] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.7766'. [ 791.823884][ T2649] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 791.843944][ T2651] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7768'. [ 791.879529][ T2651] syzkaller0: entered promiscuous mode [ 791.885124][ T2651] syzkaller0: entered allmulticast mode [ 792.079353][ T2676] netlink: 'syz.5.7771': attribute type 1 has an invalid length. [ 792.088161][ T2676] netlink: 'syz.5.7771': attribute type 2 has an invalid length. [ 792.098235][ T2676] netlink: 'syz.5.7771': attribute type 1 has an invalid length. [ 792.116860][ T2676] netlink: 'syz.5.7771': attribute type 2 has an invalid length. [ 792.335133][ T2691] lo speed is unknown, defaulting to 1000 [ 792.427907][ T2691] wg1 speed is unknown, defaulting to 1000 [ 792.438774][ T2696] tipc: Enabling of bearer rejected, already enabled [ 792.534608][ T2706] netlink: 'syz.0.7773': attribute type 6 has an invalid length. [ 793.052794][ T2745] netlink: 'syz.0.7782': attribute type 1 has an invalid length. [ 794.128447][ T2800] lo speed is unknown, defaulting to 1000 [ 794.161088][ T2800] wg1 speed is unknown, defaulting to 1000 [ 794.698942][ T2833] netlink: 'syz.1.7797': attribute type 10 has an invalid length. [ 795.298037][ T2890] syzkaller0: entered promiscuous mode [ 795.310577][ T2890] syzkaller0: entered allmulticast mode [ 795.370698][ T2890] 6žī: renamed from team_slave_1 [ 796.147875][ T2924] __nla_validate_parse: 7 callbacks suppressed [ 796.147895][ T2924] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7817'. [ 796.208118][ T2924] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7817'. [ 796.285295][ T2928] netlink: 'syz.3.7817': attribute type 33 has an invalid length. [ 796.297702][ T2928] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7817'. [ 796.338105][ T2924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7817'. [ 796.418029][ T2928] `: renamed from team0 [ 796.970054][ T2936] tipc: Resetting bearer [ 797.157194][ T2944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 797.174697][ T1545] syś2: Port: 1 Link DOWN [ 797.174743][T15014] netdevsim netdevsim2 ’’’’’’: unset [0, 0] type 1 family 0 port 8472 - 0 [ 797.231455][T15014] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 797.366605][T15014] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 797.403589][T15014] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 797.434591][ T2945] lo speed is unknown, defaulting to 1000 [ 797.490474][ T30] audit: type=1804 audit(1763781382.197:12): pid=2971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.7825" name="/newroot/356/cgroup.controllers" dev="tmpfs" ino=1843 res=1 errno=0 [ 797.519303][ T2959] lo speed is unknown, defaulting to 1000 [ 797.526734][ T2945] wg1 speed is unknown, defaulting to 1000 [ 797.550949][ T30] audit: type=1800 audit(1763781382.217:13): pid=2971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7825" name="cgroup.controllers" dev="tmpfs" ino=1843 res=0 errno=0 [ 797.597005][ T2959] wg1 speed is unknown, defaulting to 1000 [ 797.739393][ T2980] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7827'. [ 797.833364][ T2982] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7830'. [ 797.875222][ T2987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7831'. [ 797.881791][ T2986] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 797.993507][ T4500] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.028283][ T4500] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.163964][ T4500] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.196295][ T4500] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.243381][ T3005] bond3: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 798.256345][ T3005] bond3 (unregistering): Released all slaves [ 798.343020][ T940] syś2: Port: 1 Link ACTIVE [ 798.424486][ T3000] lo speed is unknown, defaulting to 1000 [ 798.459059][ T3000] wg1 speed is unknown, defaulting to 1000 [ 798.724623][ T3027] lo speed is unknown, defaulting to 1000 [ 798.757708][ T3027] wg1 speed is unknown, defaulting to 1000 [ 798.889704][ T3039] Bluetooth: MGMT ver 1.23 [ 798.968996][ T3039] geneve0: entered promiscuous mode [ 799.047652][T14018] netdevsim netdevsim2 ’’’’’’: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.079135][T14018] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.088166][T14018] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.097005][T14018] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.491988][ T3063] bond3: invalid ARP target 0.0.0.0 specified for addition [ 799.502818][ T3063] bond3: option arp_ip_target: invalid value (0) [ 799.521477][ T3063] bond3 (unregistering): Released all slaves [ 799.754125][ T3075] lo speed is unknown, defaulting to 1000 [ 799.765645][ T3075] wg1 speed is unknown, defaulting to 1000 [ 800.013572][ T3081] lo speed is unknown, defaulting to 1000 [ 800.022546][ T3081] wg1 speed is unknown, defaulting to 1000 [ 800.069769][ T3087] netlink: 'syz.5.7856': attribute type 2 has an invalid length. [ 800.096687][ T3087] netlink: 'syz.5.7856': attribute type 1 has an invalid length. [ 800.146647][ T3087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7856'. [ 800.342853][ T3095] lo speed is unknown, defaulting to 1000 [ 800.377619][ T3095] wg1 speed is unknown, defaulting to 1000 [ 800.810296][ T3115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7866'. [ 800.819674][ T3115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7866'. [ 800.881903][ T3115] nbd: socks must be embedded in a SOCK_ITEM attr [ 801.169881][ T3129] syz_tun: left promiscuous mode [ 801.174978][ T3129] syz_tun: left allmulticast mode [ 801.201385][ T3129] 8021q: adding VLAN 0 to HW filter on device ` [ 801.277708][ T3129] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 801.295698][ T3133] netlink: 'syz.5.7870': attribute type 6 has an invalid length. [ 801.378571][ T3129] tipc: Enabling of bearer rejected, already enabled [ 802.015638][ T3153] IPVS: length: 35 != 24 [ 803.117429][ T3188] tipc: Enabled bearer , priority 0 [ 803.124948][ T3188] syzkaller0: entered promiscuous mode [ 803.159192][ T3188] syzkaller0: entered allmulticast mode [ 803.196771][ T3195] syzkaller0: entered promiscuous mode [ 803.202279][ T3195] syzkaller0: entered allmulticast mode [ 803.261222][ T3188] tipc: Resetting bearer [ 803.305597][ T3188] tipc: Disabling bearer [ 803.322957][ T3200] __nla_validate_parse: 1 callbacks suppressed [ 803.322985][ T3200] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7890'. [ 803.340187][ T3195] netlink: 140 bytes leftover after parsing attributes in process `syz.5.7886'. [ 803.716899][ T3213] netlink: 'syz.0.7896': attribute type 322 has an invalid length. [ 803.757403][ T3218] netlink: 'syz.5.7897': attribute type 1 has an invalid length. [ 803.762166][ T3221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7898'. [ 804.137126][ T3236] syzkaller0: entered promiscuous mode [ 804.143302][ T3236] syzkaller0: entered allmulticast mode [ 804.318481][ T3248] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7905'. [ 804.395196][ T3254] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7906'. [ 804.599578][ T3258] lo speed is unknown, defaulting to 1000 [ 804.607354][ T3258] wg1 speed is unknown, defaulting to 1000 [ 804.623514][ T3256] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7907'. [ 804.815136][ T3266] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7910'. [ 805.639530][ T3293] vxcan3: entered allmulticast mode [ 805.846232][ T5833] Bluetooth: hci2: command 0x0405 tx timeout [ 806.086917][ T3322] IPVS: set_ctl: invalid protocol: 0 172.30.0.3:20002 [ 806.690386][ T3342] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7932'. [ 806.897523][ T3350] netlink: 'syz.2.7936': attribute type 17 has an invalid length. [ 807.000623][ T3350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.022034][ T3350] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.048361][ T3350] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 807.228741][ T3358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 807.241176][ T3350] lo speed is unknown, defaulting to 1000 [ 807.249139][ T3350] wg1 speed is unknown, defaulting to 1000 [ 807.311635][ T3358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 807.351299][ T3370] veth0: Caught tx_queue_len zero misconfig [ 807.550899][ T3400] netlink: 'syz.1.7946': attribute type 32 has an invalid length. [ 807.821736][ T3426] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7950'. [ 807.943387][ T3431] netlink: 'syz.5.7951': attribute type 2 has an invalid length. [ 807.954665][ T3431] netlink: 'syz.5.7951': attribute type 2 has an invalid length. [ 808.078671][ T3433] netlink: 'syz.3.7952': attribute type 61 has an invalid length. [ 808.338691][ T3454] FAULT_INJECTION: forcing a failure. [ 808.338691][ T3454] name failslab, interval 1, probability 0, space 0, times 0 [ 808.369111][ T3454] CPU: 0 UID: 0 PID: 3454 Comm: syz.0.7958 Not tainted syzkaller #0 PREEMPT(full) [ 808.369138][ T3454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 808.369149][ T3454] Call Trace: [ 808.369157][ T3454] [ 808.369165][ T3454] dump_stack_lvl+0x189/0x250 [ 808.369195][ T3454] ? __pfx____ratelimit+0x10/0x10 [ 808.369213][ T3454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 808.369237][ T3454] ? __pfx__printk+0x10/0x10 [ 808.369262][ T3454] ? __pfx___might_resched+0x10/0x10 [ 808.369286][ T3454] should_fail_ex+0x414/0x560 [ 808.369319][ T3454] should_failslab+0xa8/0x100 [ 808.369339][ T3454] __kmalloc_noprof+0xcb/0x7f0 [ 808.369362][ T3454] ? kfree+0x4d/0x6d0 [ 808.369382][ T3454] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 808.369416][ T3454] tomoyo_realpath_from_path+0xe3/0x5d0 [ 808.369445][ T3454] ? tomoyo_domain+0xd9/0x130 [ 808.369469][ T3454] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 808.369491][ T3454] tomoyo_path_number_perm+0x1e8/0x5a0 [ 808.369517][ T3454] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 808.369582][ T3454] ? __fget_files+0x2a/0x420 [ 808.369606][ T3454] ? __fget_files+0x3a0/0x420 [ 808.369622][ T3454] ? __fget_files+0x2a/0x420 [ 808.369643][ T3454] security_file_ioctl+0xcb/0x2d0 [ 808.369668][ T3454] __se_sys_ioctl+0x47/0x170 [ 808.369695][ T3454] do_syscall_64+0xfa/0xfa0 [ 808.369713][ T3454] ? lockdep_hardirqs_on+0x9c/0x150 [ 808.369732][ T3454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.369750][ T3454] ? clear_bhb_loop+0x60/0xb0 [ 808.369773][ T3454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.369790][ T3454] RIP: 0033:0x7f316ab8f749 [ 808.369807][ T3454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 808.369824][ T3454] RSP: 002b:00007f316ba75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 808.369851][ T3454] RAX: ffffffffffffffda RBX: 00007f316ade5fa0 RCX: 00007f316ab8f749 [ 808.369865][ T3454] RDX: 0000200000002380 RSI: 0000000000008946 RDI: 0000000000000003 [ 808.369877][ T3454] RBP: 00007f316ba75090 R08: 0000000000000000 R09: 0000000000000000 [ 808.369888][ T3454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 808.369899][ T3454] R13: 00007f316ade6038 R14: 00007f316ade5fa0 R15: 00007ffcff644a58 [ 808.369932][ T3454] [ 808.369954][ T3454] ERROR: Out of memory at tomoyo_realpath_from_path. [ 808.726767][ T1299] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 808.974931][ T3483] bond3: option xmit_hash_policy: invalid value (34) [ 808.984270][ T3483] bond3 (unregistering): Released all slaves [ 808.986266][ T3492] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7968'. [ 809.076778][ T3490] bond3: option xmit_hash_policy: invalid value (34) [ 809.088132][ T3490] bond3 (unregistering): Released all slaves [ 809.307730][ T3510] FAULT_INJECTION: forcing a failure. [ 809.307730][ T3510] name failslab, interval 1, probability 0, space 0, times 0 [ 809.384383][ T3510] CPU: 1 UID: 0 PID: 3510 Comm: syz.5.7972 Not tainted syzkaller #0 PREEMPT(full) [ 809.384413][ T3510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 809.384425][ T3510] Call Trace: [ 809.384434][ T3510] [ 809.384444][ T3510] dump_stack_lvl+0x189/0x250 [ 809.384476][ T3510] ? __pfx____ratelimit+0x10/0x10 [ 809.384497][ T3510] ? __pfx_dump_stack_lvl+0x10/0x10 [ 809.384532][ T3510] ? __pfx__printk+0x10/0x10 [ 809.384559][ T3510] ? __pfx___might_resched+0x10/0x10 [ 809.384578][ T3510] ? fs_reclaim_acquire+0x7d/0x100 [ 809.384605][ T3510] should_fail_ex+0x414/0x560 [ 809.384641][ T3510] should_failslab+0xa8/0x100 [ 809.384663][ T3510] __kmalloc_noprof+0xcb/0x7f0 [ 809.384690][ T3510] ? tomoyo_encode+0x28b/0x550 [ 809.384727][ T3510] tomoyo_encode+0x28b/0x550 [ 809.384761][ T3510] tomoyo_realpath_from_path+0x58d/0x5d0 [ 809.384794][ T3510] ? tomoyo_domain+0xd9/0x130 [ 809.384819][ T3510] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 809.384845][ T3510] tomoyo_path_number_perm+0x1e8/0x5a0 [ 809.384874][ T3510] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 809.384944][ T3510] ? __fget_files+0x2a/0x420 [ 809.384969][ T3510] ? __fget_files+0x3a0/0x420 [ 809.384987][ T3510] ? __fget_files+0x2a/0x420 [ 809.385012][ T3510] security_file_ioctl+0xcb/0x2d0 [ 809.385040][ T3510] __se_sys_ioctl+0x47/0x170 [ 809.385069][ T3510] do_syscall_64+0xfa/0xfa0 [ 809.385089][ T3510] ? lockdep_hardirqs_on+0x9c/0x150 [ 809.385110][ T3510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.385130][ T3510] ? clear_bhb_loop+0x60/0xb0 [ 809.385155][ T3510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.385176][ T3510] RIP: 0033:0x7f358898f749 [ 809.385193][ T3510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 809.385213][ T3510] RSP: 002b:00007f35898f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 809.385235][ T3510] RAX: ffffffffffffffda RBX: 00007f3588be5fa0 RCX: 00007f358898f749 [ 809.385251][ T3510] RDX: 0000200000002380 RSI: 0000000000008946 RDI: 0000000000000003 [ 809.385265][ T3510] RBP: 00007f35898f5090 R08: 0000000000000000 R09: 0000000000000000 [ 809.385278][ T3510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.385309][ T3510] R13: 00007f3588be6038 R14: 00007f3588be5fa0 R15: 00007ffcf246d3f8 [ 809.385345][ T3510] [ 809.385469][ T3510] ERROR: Out of memory at tomoyo_realpath_from_path. [ 809.473315][ T3523] netlink: 'syz.0.7976': attribute type 1 has an invalid length. [ 809.641528][ T3523] netlink: 'syz.0.7976': attribute type 6 has an invalid length. [ 809.650373][ T3523] netlink: 'syz.0.7976': attribute type 3 has an invalid length. [ 809.662831][ T3525] syz_tun: entered allmulticast mode [ 809.846262][ T3531] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7977'. [ 809.874596][ T3531] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 809.912191][T15017] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d [ 809.918549][ T3542] lo speed is unknown, defaulting to 1000 [ 809.928348][ T3542] wg1 speed is unknown, defaulting to 1000 [ 809.986323][ T3533] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 810.576852][ T3579] FAULT_INJECTION: forcing a failure. [ 810.576852][ T3579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 810.635951][ T3579] CPU: 0 UID: 0 PID: 3579 Comm: syz.5.7990 Not tainted syzkaller #0 PREEMPT(full) [ 810.635976][ T3579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 810.635990][ T3579] Call Trace: [ 810.635998][ T3579] [ 810.636006][ T3579] dump_stack_lvl+0x189/0x250 [ 810.636038][ T3579] ? __pfx____ratelimit+0x10/0x10 [ 810.636057][ T3579] ? __pfx_dump_stack_lvl+0x10/0x10 [ 810.636082][ T3579] ? __pfx__printk+0x10/0x10 [ 810.636101][ T3579] ? __might_fault+0xb0/0x130 [ 810.636139][ T3579] should_fail_ex+0x414/0x560 [ 810.636172][ T3579] _copy_from_user+0x2d/0xb0 [ 810.636196][ T3579] sock_do_ioctl+0x182/0x300 [ 810.636228][ T3579] ? __pfx_sock_do_ioctl+0x10/0x10 [ 810.636271][ T3579] sock_ioctl+0x576/0x790 [ 810.636301][ T3579] ? __pfx_sock_ioctl+0x10/0x10 [ 810.636331][ T3579] ? __fget_files+0x3a0/0x420 [ 810.636347][ T3579] ? __fget_files+0x2a/0x420 [ 810.636367][ T3579] ? bpf_lsm_file_ioctl+0x9/0x20 [ 810.636399][ T3579] ? __pfx_sock_ioctl+0x10/0x10 [ 810.636426][ T3579] __se_sys_ioctl+0xfc/0x170 [ 810.636455][ T3579] do_syscall_64+0xfa/0xfa0 [ 810.636474][ T3579] ? lockdep_hardirqs_on+0x9c/0x150 [ 810.636495][ T3579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.636515][ T3579] ? clear_bhb_loop+0x60/0xb0 [ 810.636538][ T3579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.636557][ T3579] RIP: 0033:0x7f358898f749 [ 810.636574][ T3579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 810.636592][ T3579] RSP: 002b:00007f35898f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 810.636614][ T3579] RAX: ffffffffffffffda RBX: 00007f3588be5fa0 RCX: 00007f358898f749 [ 810.636628][ T3579] RDX: 0000200000002380 RSI: 0000000000008946 RDI: 0000000000000003 [ 810.636640][ T3579] RBP: 00007f35898f5090 R08: 0000000000000000 R09: 0000000000000000 [ 810.636653][ T3579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.636664][ T3579] R13: 00007f3588be6038 R14: 00007f3588be5fa0 R15: 00007ffcf246d3f8 [ 810.636697][ T3579] [ 810.946802][ T3593] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7994'. [ 810.958585][ T3593] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7994'. [ 811.078979][ T3595] netlink: 'syz.2.7995': attribute type 7 has an invalid length. [ 811.117138][ T3595] netlink: 'syz.2.7995': attribute type 8 has an invalid length. [ 811.258341][ T3618] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8000'. [ 811.417250][ T3625] FAULT_INJECTION: forcing a failure. [ 811.417250][ T3625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 811.446021][ T3625] CPU: 0 UID: 0 PID: 3625 Comm: syz.3.8004 Not tainted syzkaller #0 PREEMPT(full) [ 811.446051][ T3625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 811.446063][ T3625] Call Trace: [ 811.446071][ T3625] [ 811.446080][ T3625] dump_stack_lvl+0x189/0x250 [ 811.446111][ T3625] ? __pfx____ratelimit+0x10/0x10 [ 811.446130][ T3625] ? __pfx_dump_stack_lvl+0x10/0x10 [ 811.446154][ T3625] ? __pfx__printk+0x10/0x10 [ 811.446175][ T3625] ? __might_fault+0xb0/0x130 [ 811.446212][ T3625] should_fail_ex+0x414/0x560 [ 811.446245][ T3625] _copy_from_user+0x2d/0xb0 [ 811.446272][ T3625] dev_ethtool+0xd0/0x19c0 [ 811.446301][ T3625] ? __lock_acquire+0xab9/0xd20 [ 811.446328][ T3625] ? __pfx_dev_ethtool+0x10/0x10 [ 811.446365][ T3625] ? dev_load+0x21/0x1f0 [ 811.446388][ T3625] ? dev_load+0x21/0x1f0 [ 811.446409][ T3625] dev_ioctl+0x392/0x1150 [ 811.446433][ T3625] sock_do_ioctl+0x22c/0x300 [ 811.446464][ T3625] ? __pfx_sock_do_ioctl+0x10/0x10 [ 811.446506][ T3625] sock_ioctl+0x576/0x790 [ 811.446541][ T3625] ? __pfx_sock_ioctl+0x10/0x10 [ 811.446570][ T3625] ? __fget_files+0x3a0/0x420 [ 811.446586][ T3625] ? __fget_files+0x2a/0x420 [ 811.446610][ T3625] ? bpf_lsm_file_ioctl+0x9/0x20 [ 811.446634][ T3625] ? __pfx_sock_ioctl+0x10/0x10 [ 811.446661][ T3625] __se_sys_ioctl+0xfc/0x170 [ 811.446690][ T3625] do_syscall_64+0xfa/0xfa0 [ 811.446711][ T3625] ? lockdep_hardirqs_on+0x9c/0x150 [ 811.446732][ T3625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.446753][ T3625] ? clear_bhb_loop+0x60/0xb0 [ 811.446778][ T3625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.446798][ T3625] RIP: 0033:0x7f308c98f749 [ 811.446816][ T3625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 811.446835][ T3625] RSP: 002b:00007f308d7f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 811.446857][ T3625] RAX: ffffffffffffffda RBX: 00007f308cbe5fa0 RCX: 00007f308c98f749 [ 811.446873][ T3625] RDX: 0000200000002380 RSI: 0000000000008946 RDI: 0000000000000003 [ 811.446887][ T3625] RBP: 00007f308d7f8090 R08: 0000000000000000 R09: 0000000000000000 [ 811.446901][ T3625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 811.446914][ T3625] R13: 00007f308cbe6038 R14: 00007f308cbe5fa0 R15: 00007ffc89b53978 [ 811.446950][ T3625] [ 811.452723][ T3627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8003'. [ 811.686444][ T3640] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8006'. [ 811.771687][ T3638] syzkaller1: entered promiscuous mode [ 811.786544][ T3638] syzkaller1: entered allmulticast mode [ 811.843367][ T3643] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 811.967798][ T3647] syzkaller0: left promiscuous mode [ 811.973128][ T3647] syzkaller0: left allmulticast mode [ 812.140578][ T3654] validate_nla: 1 callbacks suppressed [ 812.140599][ T3654] netlink: 'syz.1.8012': attribute type 21 has an invalid length. [ 812.156695][ T3654] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8012'. [ 812.166486][ T3654] netlink: 'syz.1.8012': attribute type 5 has an invalid length. [ 812.174799][ T3654] netlink: 'syz.1.8012': attribute type 6 has an invalid length. [ 812.184626][ T3654] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8012'. [ 812.321917][ T3661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8015'. [ 812.573494][ T3667] netlink: 'syz.3.8018': attribute type 3 has an invalid length. [ 812.581831][ T3668] sctp: [Deprecated]: syz.5.8016 (pid 3668) Use of struct sctp_assoc_value in delayed_ack socket option. [ 812.581831][ T3668] Use struct sctp_sack_info instead [ 812.615993][ T3667] netlink: 'syz.3.8018': attribute type 3 has an invalid length. [ 812.667761][ T3668] xt_TPROXY: Can be used only with -p tcp or -p udp [ 812.778358][ T3671] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.803900][ T3674] wg1: Caught tx_queue_len zero misconfig [ 812.925414][ T3671] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.961919][ T3681] netlink: 'syz.0.8023': attribute type 1 has an invalid length. [ 813.013408][ T3681] 8021q: adding VLAN 0 to HW filter on device bond3 [ 813.053769][ T3671] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.103807][ T3688] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 813.114705][ T3688] bond0 (unregistering): Released all slaves [ 813.138111][ T3681] netlink: 'syz.0.8023': attribute type 298 has an invalid length. [ 813.177795][ T3686] veth9: entered promiscuous mode [ 813.222495][ T3671] netdevsim netdevsim2 ’’’’’’ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.342241][ T3701] netlink: 'syz.3.8026': attribute type 4 has an invalid length. [ 813.455884][T15021] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.523230][ T6556] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.535966][ T6556] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.567670][ T6556] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.614884][ T3709] lo speed is unknown, defaulting to 1000 [ 813.623119][ T3709] wg1 speed is unknown, defaulting to 1000 [ 814.031913][ T3737] __nla_validate_parse: 2 callbacks suppressed [ 814.031931][ T3737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8037'. [ 814.068847][ T3727] lo speed is unknown, defaulting to 1000 [ 814.082038][ T3727] wg1 speed is unknown, defaulting to 1000 [ 814.203330][ T3748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8040'. [ 814.203330][ T3750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8040'. [ 814.262399][ T3752] netlink: 'syz.3.8042': attribute type 3 has an invalid length. [ 814.403882][ T3757] lo speed is unknown, defaulting to 1000 [ 814.411951][ T3757] wg1 speed is unknown, defaulting to 1000 [ 814.448806][ T3760] netlink: 'syz.2.8044': attribute type 12 has an invalid length. [ 814.573401][ T3767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8045'. [ 814.604768][ T3767] macvtap0: entered promiscuous mode [ 814.613725][ T3767] batadv0: entered promiscuous mode [ 814.626191][ T3767] macvtap0: entered allmulticast mode [ 814.631847][ T3767] batadv0: entered allmulticast mode [ 814.646636][ T3767] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 815.124422][ T3797] netlink: 88 bytes leftover after parsing attributes in process `syz.3.8051'. [ 815.134519][ T3797] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8051'. [ 815.531285][ T3778] tipc: Resetting bearer [ 815.592009][ T3788] tipc: Enabling of bearer rejected, failed to enable media [ 815.623349][ T3814] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8055'. [ 815.650241][ T1545] syś2: Port: 1 Link DOWN [ 815.651872][ T6556] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.688406][ T6556] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.725299][ T6556] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.747754][ T6556] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.887015][ T3824] lo speed is unknown, defaulting to 1000 [ 815.903147][ T3820] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8057'. [ 815.913404][ T3824] wg1 speed is unknown, defaulting to 1000 [ 815.969536][ T3828] tipc: Enabling of bearer rejected, failed to enable media [ 816.003463][ T3828] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8058'. [ 816.075654][ T3828] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8058'. [ 816.383806][ T3828] macvlan0: entered allmulticast mode [ 816.391594][ T3828] veth1_vlan: entered allmulticast mode [ 816.612006][ T3864] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 816.791536][ T3871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 816.802445][ T3871] 8021q: adding VLAN 0 to HW filter on device team0 [ 816.818284][ T3871] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 816.946927][ T3868] lo speed is unknown, defaulting to 1000 [ 816.963562][ T3868] wg1 speed is unknown, defaulting to 1000 [ 817.100954][ T3887] lo speed is unknown, defaulting to 1000 [ 817.110090][ T3887] wg1 speed is unknown, defaulting to 1000 [ 817.577983][ T3907] ipip1: entered promiscuous mode [ 818.111726][ T3946] netlink: 'syz.0.8089': attribute type 1 has an invalid length. [ 818.332117][ T3956] netlink: 'syz.3.8092': attribute type 4 has an invalid length. [ 818.648954][ T3980] bridge_slave_0: left allmulticast mode [ 818.654714][ T3980] bridge_slave_0: left promiscuous mode [ 818.663849][ T3980] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.693631][ T3980] bridge_slave_1: left allmulticast mode [ 818.707534][ T3980] bridge_slave_1: left promiscuous mode [ 818.713557][ T3980] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.814385][ T3980] bond0: (slave bond_slave_0): Releasing backup interface [ 818.882242][ T3988] xt_CT: No such helper "snmp_trap" [ 818.891383][ T3992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 818.917117][ T3980] team0: Port device team_slave_0 removed [ 818.935547][ T3980] team0: Port device team_slave_1 removed [ 818.949752][ T3980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 818.958204][ T3980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 818.979696][ T3980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 818.987606][ T3980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 818.998341][ T3980] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 819.145551][ T3998] __nla_validate_parse: 13 callbacks suppressed [ 819.145572][ T3998] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8105'. [ 819.251726][ T4004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8105'. [ 819.256357][ T4003] netlink: 'syz.5.8107': attribute type 3 has an invalid length. [ 819.269301][ T4003] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8107'. [ 819.335499][ T3995] tipc: Resetting bearer [ 819.364644][ T4007] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8105'. [ 819.603481][ T4014] netlink: 7 bytes leftover after parsing attributes in process `syz.5.8109'. [ 819.645250][ T4017] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 819.657394][ T4014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 819.767406][ T4011] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8109'. [ 819.923114][ T4035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8113'. [ 819.938441][ T4011] bond3 (unregistering): Released all slaves [ 819.950904][ T4035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8113'. [ 820.005290][ T4031] bridge6: entered allmulticast mode [ 820.029122][ T4037] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8114'. [ 820.041443][ T4037] netlink: 'syz.0.8114': attribute type 1 has an invalid length. [ 820.042591][ T4043] netlink: 'syz.1.8113': attribute type 1 has an invalid length. [ 820.090498][ T4037] 8021q: adding VLAN 0 to HW filter on device bond4 [ 820.125627][ T4042] bond4: (slave geneve3): making interface the new active one [ 820.137350][ T4042] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 820.146457][T15014] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.159494][ T4037] bond4: entered promiscuous mode [ 820.164907][ T4037] geneve3: entered promiscuous mode [ 820.186983][T15014] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.195219][T15014] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.213265][T15014] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.351608][ T4057] lo speed is unknown, defaulting to 1000 [ 820.359882][ T4057] wg1 speed is unknown, defaulting to 1000 [ 820.433832][ T4059] netlink: 'syz.0.8119': attribute type 12 has an invalid length. [ 820.869048][ T4088] netlink: 'syz.0.8126': attribute type 17 has an invalid length. [ 820.894424][ T4085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8125'. [ 820.905263][ T4088] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 821.203606][ T4101] sctp: [Deprecated]: syz.0.8130 (pid 4101) Use of struct sctp_assoc_value in delayed_ack socket option. [ 821.203606][ T4101] Use struct sctp_sack_info instead [ 821.660355][T15355] syś2: Port: 1 Link ACTIVE [ 821.776585][ T4146] SET target dimension over the limit! [ 822.432588][ T4189] xt_socket: unknown flags 0xfc [ 822.648699][T15344] page_pool_release_retry() stalled pool shutdown: id 221, 1 inflight 60 sec [ 822.673643][ T4196] netlink: 'syz.5.8158': attribute type 13 has an invalid length. [ 822.690965][ T4196] netlink: 'syz.5.8158': attribute type 17 has an invalid length. [ 822.699920][ T4196] netlink: 'syz.5.8158': attribute type 27 has an invalid length. [ 822.964704][ T4214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 823.241844][ T4229] lo speed is unknown, defaulting to 1000 [ 823.263839][ T4229] wg1 speed is unknown, defaulting to 1000 [ 823.944866][ T4279] 8021q: adding VLAN 0 to HW filter on device bond5 [ 824.137964][ T4298] macvlan2: entered promiscuous mode [ 824.154110][ T4298] macvlan2: entered allmulticast mode [ 824.173742][ T4298] bond5: entered promiscuous mode [ 824.202573][ T4298] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 824.243460][ T4298] team0: Port device macvlan2 added [ 824.421814][ T4316] !: renamed from dummy0 [ 824.561918][ T4326] IPVS: ip_vs_add_dest(): server weight less than zero [ 824.575325][ T4328] __nla_validate_parse: 13 callbacks suppressed [ 824.575344][ T4328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8192'. [ 824.658328][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 824.946491][ T4340] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8195'. [ 825.167893][ T4328] bond0 (unregistering): Released all slaves [ 825.198617][ T4348] netlink: 56 bytes leftover after parsing attributes in process `syz.5.8197'. [ 825.212175][ T4348] netlink: 19 bytes leftover after parsing attributes in process `syz.5.8197'. [ 825.224164][ T4348] netlink: 19 bytes leftover after parsing attributes in process `syz.5.8197'. [ 825.411648][ T4366] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8203'. [ 825.714780][ T4382] lo speed is unknown, defaulting to 1000 [ 825.722789][ T4382] wg1 speed is unknown, defaulting to 1000 [ 826.140260][ T4401] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8214'. [ 826.297925][ T4408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8217'. [ 826.328777][ T30] audit: type=1800 audit(1763781411.037:14): pid=4408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8217" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2212 res=0 errno=0 [ 826.379175][ T4411] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8216'. [ 826.389282][ T4411] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8216'. [ 826.403059][ T4411] tipc: Enabled bearer , priority 0 [ 826.445391][ T4415] C: renamed from lo [ 826.457045][ T4415] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 826.876426][ C1] 0: reclassify loop, rule prio 0, protocol 800 [ 827.134613][ T4448] validate_nla: 2 callbacks suppressed [ 827.134633][ T4448] netlink: 'syz.5.8229': attribute type 1 has an invalid length. [ 827.170966][ T4448] netlink: 'syz.5.8229': attribute type 1 has an invalid length. [ 827.747731][ T4477] lo speed is unknown, defaulting to 1000 [ 827.760102][ T4477] wg1 speed is unknown, defaulting to 1000 [ 827.835953][ C1] 0: reclassify loop, rule prio 0, protocol 800 [ 828.040534][ T4486] nbd: nbd1 already in use [ 828.051595][ T4486] block nbd1: NBD_DISCONNECT [ 828.072487][ T4486] block nbd1: Send disconnect failed -32 [ 828.085652][ T4486] block nbd1: shutting down sockets [ 828.130968][ T4485] lo speed is unknown, defaulting to 1000 [ 828.147950][ T4485] wg1 speed is unknown, defaulting to 1000 [ 828.829929][ T4522] lo speed is unknown, defaulting to 1000 [ 828.891580][ T4522] wg1 speed is unknown, defaulting to 1000 [ 828.967385][ T4532] lo speed is unknown, defaulting to 1000 [ 828.999585][ T4528] siw: device registration error -23 [ 829.002529][ T4532] wg1 speed is unknown, defaulting to 1000 [ 829.272096][ T4552] tipc: Enabling of bearer rejected, already enabled [ 829.440805][ T4559] netlink: 'syz.0.8264': attribute type 4 has an invalid length. [ 829.469022][ T4561] netlink: 'syz.0.8264': attribute type 4 has an invalid length. [ 829.588693][ T4563] netlink: 'syz.3.8265': attribute type 1 has an invalid length. [ 829.631813][ T4569] __nla_validate_parse: 6 callbacks suppressed [ 829.631832][ T4569] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8267'. [ 829.644080][ T4567] netlink: 76 bytes leftover after parsing attributes in process `syz.5.8266'. [ 829.797199][ T4581] netlink: 'syz.2.8269': attribute type 6 has an invalid length. [ 829.964839][ T4591] netlink: 'syz.0.8273': attribute type 15 has an invalid length. [ 829.983930][ T4591] netlink: 666 bytes leftover after parsing attributes in process `syz.0.8273'. [ 830.156491][ T5833] Bluetooth: hci2: command 0x0405 tx timeout [ 830.237567][ T4599] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8275'. [ 830.519724][ T4616] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 830.582207][ T4624] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8283'. [ 830.649926][ T4627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8284'. [ 830.678266][ T4627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8284'. [ 830.763453][ T4627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8284'. [ 830.828086][ T4627] syzkaller1: entered promiscuous mode [ 830.853913][ T4627] syzkaller1: entered allmulticast mode [ 830.919155][ T4645] openvswitch: netlink: ufid size 4235 bytes exceeds the range (1, 16) [ 830.948266][ T4645] openvswitch: netlink: Message has 8 unknown bytes. [ 831.200791][ T4655] veth3: entered promiscuous mode [ 831.265279][ T4662] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8292'. [ 831.303059][ T4662] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8292'. [ 831.529880][ T4669] lo speed is unknown, defaulting to 1000 [ 831.568260][ T4669] wg1 speed is unknown, defaulting to 1000 [ 831.693160][ T4685] lo speed is unknown, defaulting to 1000 [ 831.728668][ T4685] wg1 speed is unknown, defaulting to 1000 [ 831.812981][ T4691] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 831.823711][ T4691] syzkaller1: linktype set to 778 [ 831.967500][ T4694] netlink: 'syz.2.8300': attribute type 1 has an invalid length. [ 832.090110][ T4705] netlink: 'syz.1.8302': attribute type 13 has an invalid length. [ 832.115673][ T4705] netlink: 'syz.1.8302': attribute type 17 has an invalid length. [ 832.131417][ T4699] bond7: entered promiscuous mode [ 832.139369][ T4699] bond7: entered allmulticast mode [ 832.144928][ T4699] 8021q: adding VLAN 0 to HW filter on device bond7 [ 832.287277][ T4703] lo speed is unknown, defaulting to 1000 [ 832.398270][ T4703] wg1 speed is unknown, defaulting to 1000 [ 832.466323][ T4724] 8021q: VLANs not supported on dvmrp0 [ 832.740048][ T4738] vlan3: entered promiscuous mode [ 832.904167][ T4737] syzkaller1: entered promiscuous mode [ 832.910003][ T4737] syzkaller1: entered allmulticast mode [ 832.944052][ T4738] vlan3: entered promiscuous mode [ 833.054585][ T4738] vlan3: entered promiscuous mode [ 833.074829][ T4731] lo speed is unknown, defaulting to 1000 [ 833.097944][ T4731] wg1 speed is unknown, defaulting to 1000 [ 833.228185][ T4738] vlan3: entered promiscuous mode [ 833.388962][ T4738] vlan3: entered promiscuous mode [ 833.649083][ T4777] SET target dimension over the limit! [ 834.374459][ T4833] validate_nla: 1 callbacks suppressed [ 834.374478][ T4833] netlink: 'syz.0.8336': attribute type 1 has an invalid length. [ 834.470437][ T4833] bond6: (slave gretap1): making interface the new active one [ 834.481344][ T4833] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 834.501671][ T4833] vlan2: entered allmulticast mode [ 834.507815][ T4833] bond6: entered allmulticast mode [ 834.513388][ T4833] gretap1: entered allmulticast mode [ 834.520558][ T4833] bond6: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 834.655342][ T4848] __nla_validate_parse: 10 callbacks suppressed [ 834.655364][ T4848] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8341'. [ 834.787589][ T4854] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8344'. [ 834.813311][ T4854] netlink: 245 bytes leftover after parsing attributes in process `syz.1.8344'. [ 834.848703][ T4853] netlink: 'syz.3.8343': attribute type 1 has an invalid length. [ 834.866008][ T4853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8343'. [ 835.122616][ T4875] netlink: 'syz.5.8351': attribute type 2 has an invalid length. [ 835.154404][ T4875] : entered promiscuous mode [ 835.174033][ T4875] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8351'. [ 835.438663][ T4890] netlink: 'syz.0.8354': attribute type 21 has an invalid length. [ 835.441151][ T4892] netlink: 'syz.2.8353': attribute type 1 has an invalid length. [ 835.455965][ T4890] netlink: 'syz.0.8354': attribute type 1 has an invalid length. [ 835.463825][ T4890] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8354'. [ 835.572448][ T4894] bond9: (slave veth5): Enslaving as an active interface with a down link [ 835.588370][ T4888] lo speed is unknown, defaulting to 1000 [ 835.607616][ T4888] wg1 speed is unknown, defaulting to 1000 [ 835.614835][ T4894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8353'. [ 835.712904][ T4894] bond9 (unregistering): (slave veth5): Releasing active interface [ 835.737038][ T4894] bond9 (unregistering): Released all slaves [ 835.801766][ T4900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8356'. [ 836.006250][ T4910] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8358'. [ 836.076504][ T4912] netlink: 'syz.2.8360': attribute type 3 has an invalid length. [ 836.084408][ T4909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8359'. [ 836.084414][ T4912] netlink: 'syz.2.8360': attribute type 3 has an invalid length. [ 836.622682][ T4929] team0: entered promiscuous mode [ 836.630771][ T4936] netlink: 'syz.3.8365': attribute type 2 has an invalid length. [ 836.642581][ T4936] netlink: 'syz.3.8365': attribute type 2 has an invalid length. [ 836.651645][ T4929] team_slave_0: entered promiscuous mode [ 836.658152][ T4929] team_slave_1: entered promiscuous mode [ 836.680988][ T4929] syz_tun: entered promiscuous mode [ 836.710471][ T4929] debugfs: 'hsr1' already exists in 'hsr' [ 836.719056][ T4929] Cannot create hsr debugfs directory [ 836.725116][ T4929] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 836.744583][ T4929] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 836.761792][ T4939] lo speed is unknown, defaulting to 1000 [ 836.778102][ T4939] wg1 speed is unknown, defaulting to 1000 [ 837.439452][ T4990] netlink: 'syz.0.8378': attribute type 11 has an invalid length. [ 837.738341][ T5004] bridge6: entered allmulticast mode [ 837.815180][ T5006] lo speed is unknown, defaulting to 1000 [ 837.955070][ T5006] wg1 speed is unknown, defaulting to 1000 [ 838.016437][ T5027] xt_TPROXY: Can be used only with -p tcp or -p udp [ 838.239886][ T5044] tipc: Enabling of bearer rejected, failed to enable media [ 839.649859][ T5109] validate_nla: 7 callbacks suppressed [ 839.649879][ T5109] netlink: 'syz.1.8411': attribute type 23 has an invalid length. [ 840.126029][ T5133] __nla_validate_parse: 12 callbacks suppressed [ 840.126051][ T5133] netlink: 9 bytes leftover after parsing attributes in process `syz.5.8417'. [ 840.152813][ T5133] netlink: 9 bytes leftover after parsing attributes in process `syz.5.8417'. [ 840.208426][ T5118] team0 (unregistering): left promiscuous mode [ 840.214688][ T5118] team_slave_0: left promiscuous mode [ 840.220672][ T5118] team_slave_1: left promiscuous mode [ 840.228990][ T5118] team0 (unregistering): Port device team_slave_0 removed [ 840.245582][ T5118] team0 (unregistering): Port device team_slave_1 removed [ 840.532674][ T5136] bridge0: port 1(hsr0) entered blocking state [ 840.540098][ T5136] bridge0: port 1(hsr0) entered disabled state [ 840.547206][ T5136] hsr0: entered allmulticast mode [ 840.552423][ T5136] hsr_slave_0: entered allmulticast mode [ 840.576140][ T5136] hsr_slave_1: entered allmulticast mode [ 840.642681][ T5136] hsr0: entered promiscuous mode [ 840.670333][ T5136] bridge0: port 1(hsr0) entered blocking state [ 840.676685][ T5136] bridge0: port 1(hsr0) entered forwarding state [ 841.083460][ T5131] lo speed is unknown, defaulting to 1000 [ 841.128650][ T5131] wg1 speed is unknown, defaulting to 1000 [ 841.399258][ T5180] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8423'. [ 841.622967][ T5183] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 841.659996][ T5187] netlink: 'syz.0.8425': attribute type 2 has an invalid length. [ 841.681848][ T5187] netlink: 'syz.0.8425': attribute type 1 has an invalid length. [ 841.690093][ T5187] netlink: 'syz.0.8425': attribute type 1 has an invalid length. [ 841.824522][ T5196] netlink: 244 bytes leftover after parsing attributes in process `syz.0.8428'. [ 841.861876][ T5199] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 842.113966][ T1545] hid-generic 0005:0002:5508.0003: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 842.125625][ T5210] netlink: 'syz.5.8430': attribute type 21 has an invalid length. [ 842.138937][ T5210] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8430'. [ 842.386273][ T5220] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8432'. [ 842.548165][ T5230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8436'. [ 842.632468][ T5228] netlink: 'syz.1.8435': attribute type 15 has an invalid length. [ 842.666591][ T5228] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8435'. [ 842.876910][ T5253] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8443'. [ 842.896700][ T5241] lo speed is unknown, defaulting to 1000 [ 842.907395][ T5241] wg1 speed is unknown, defaulting to 1000 [ 843.030866][ T5255] 8021q: adding VLAN 0 to HW filter on device ` [ 843.053037][ T5255] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 843.351471][ T5261] lo speed is unknown, defaulting to 1000 [ 843.375067][ T5261] wg1 speed is unknown, defaulting to 1000 [ 843.968404][ T5277] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8448'. [ 844.423774][ T5299] IPv6: Can't replace route, no match found [ 845.015830][ T5324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 845.437792][ T5336] netlink: 'syz.2.8467': attribute type 15 has an invalid length. [ 845.506258][ T5335] netlink: 'syz.2.8467': attribute type 1 has an invalid length. [ 845.683657][ T5335] bond9: entered promiscuous mode [ 845.736844][ T5335] 8021q: adding VLAN 0 to HW filter on device bond9 [ 845.891722][ T5336] 8021q: adding VLAN 0 to HW filter on device bond9 [ 845.901032][ T5359] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8470'. [ 845.913286][ T5336] bond9: (slave gre1): The slave device specified does not support setting the MAC address [ 845.925176][ T5336] bond9: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 845.938358][ T5361] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8471'. [ 845.943687][ T5336] bond9: (slave gre1): making interface the new active one [ 845.955071][ T5336] gre1: entered promiscuous mode [ 845.963222][ T5336] bond9: (slave gre1): Enslaving as an active interface with an up link [ 846.280257][ T5382] FAULT_INJECTION: forcing a failure. [ 846.280257][ T5382] name failslab, interval 1, probability 0, space 0, times 0 [ 846.293502][ T5382] CPU: 0 UID: 0 PID: 5382 Comm: syz.3.8478 Not tainted syzkaller #0 PREEMPT(full) [ 846.293528][ T5382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 846.293542][ T5382] Call Trace: [ 846.293551][ T5382] [ 846.293560][ T5382] dump_stack_lvl+0x189/0x250 [ 846.293592][ T5382] ? __pfx____ratelimit+0x10/0x10 [ 846.293612][ T5382] ? __pfx_dump_stack_lvl+0x10/0x10 [ 846.293639][ T5382] ? __pfx__printk+0x10/0x10 [ 846.293670][ T5382] ? __lock_acquire+0xab9/0xd20 [ 846.293695][ T5382] should_fail_ex+0x414/0x560 [ 846.293731][ T5382] should_failslab+0xa8/0x100 [ 846.293754][ T5382] kmem_cache_alloc_noprof+0x74/0x6e0 [ 846.293783][ T5382] ? skb_clone+0x212/0x3a0 [ 846.293807][ T5382] ? run_filter+0x23/0x270 [ 846.293834][ T5382] skb_clone+0x212/0x3a0 [ 846.293858][ T5382] ? packet_rcv+0x567/0x1730 [ 846.293881][ T5382] packet_rcv+0x65b/0x1730 [ 846.293915][ T5382] __netif_receive_skb_core+0x26b1/0x3060 [ 846.293946][ T5382] ? __skb_flow_dissect+0x408/0x68b0 [ 846.293983][ T5382] ? __pfx___skb_flow_dissect+0x10/0x10 [ 846.294019][ T5382] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 846.294056][ T5382] ? stack_depot_save_flags+0x40/0x860 [ 846.294087][ T5382] ? udp6_lib_lookup2+0x69/0x4d0 [ 846.294125][ T5382] ? __pfx___skb_flow_dissect+0x10/0x10 [ 846.294163][ T5382] ? __udp6_lib_lookup+0x8b5/0xa30 [ 846.294206][ T5382] __netif_receive_skb_list_core+0x23f/0x800 [ 846.294253][ T5382] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 846.294286][ T5382] ? __pfx_udp6_gro_receive+0x10/0x10 [ 846.294317][ T5382] netif_receive_skb_list_internal+0x96f/0xcb0 [ 846.294353][ T5382] ? netif_receive_skb_list_internal+0x4fd/0xcb0 [ 846.294385][ T5382] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 846.294412][ T5382] ? dev_gro_receive+0x1108/0x23c0 [ 846.294434][ T5382] ? dev_gro_receive+0x1030/0x23c0 [ 846.294455][ T5382] ? eth_type_trans+0x3a8/0x760 [ 846.294500][ T5382] napi_complete_done+0x2aa/0x790 [ 846.294536][ T5382] ? __pfx_napi_complete_done+0x10/0x10 [ 846.294564][ T5382] ? rcu_is_watching+0x15/0xb0 [ 846.294587][ T5382] ? napi_gro_frags+0x975/0x1030 [ 846.294630][ T5382] ? tun_get_user+0x272f/0x3e90 [ 846.294654][ T5382] tun_get_user+0x2998/0x3e90 [ 846.294695][ T5382] ? tun_get_user+0x272f/0x3e90 [ 846.294725][ T5382] ? aa_file_perm+0x44d/0x1550 [ 846.294744][ T5382] ? __pfx_tun_get_user+0x10/0x10 [ 846.294783][ T5382] ? __lock_acquire+0xab9/0xd20 [ 846.294809][ T5382] ? ref_tracker_alloc+0x318/0x460 [ 846.294827][ T5382] ? __lock_acquire+0xab9/0xd20 [ 846.294849][ T5382] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 846.294876][ T5382] ? tun_get+0x1c/0x2f0 [ 846.294907][ T5382] ? tun_get+0x1c/0x2f0 [ 846.294930][ T5382] ? tun_get+0x1c/0x2f0 [ 846.294960][ T5382] tun_chr_write_iter+0x113/0x200 [ 846.294989][ T5382] vfs_write+0x5c9/0xb30 [ 846.295023][ T5382] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 846.295056][ T5382] ? __pfx_vfs_write+0x10/0x10 [ 846.295096][ T5382] ? __fget_files+0x2a/0x420 [ 846.295126][ T5382] ksys_write+0x145/0x250 [ 846.295157][ T5382] ? __pfx_ksys_write+0x10/0x10 [ 846.295189][ T5382] ? do_syscall_64+0xbe/0xfa0 [ 846.295215][ T5382] do_syscall_64+0xfa/0xfa0 [ 846.295235][ T5382] ? lockdep_hardirqs_on+0x9c/0x150 [ 846.295257][ T5382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.295277][ T5382] ? clear_bhb_loop+0x60/0xb0 [ 846.295302][ T5382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.295321][ T5382] RIP: 0033:0x7f308c98f749 [ 846.295340][ T5382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 846.295358][ T5382] RSP: 002b:00007f308d7f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 846.295379][ T5382] RAX: ffffffffffffffda RBX: 00007f308cbe5fa0 RCX: 00007f308c98f749 [ 846.295394][ T5382] RDX: 0000000000000042 RSI: 0000200000002240 RDI: 0000000000000006 [ 846.295407][ T5382] RBP: 00007f308d7f8090 R08: 0000000000000000 R09: 0000000000000000 [ 846.295421][ T5382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 846.295433][ T5382] R13: 00007f308cbe6038 R14: 00007f308cbe5fa0 R15: 00007ffc89b53978 [ 846.295469][ T5382] [ 846.738066][ T5381] syzkaller1: entered promiscuous mode [ 846.743960][ T5381] syzkaller1: entered allmulticast mode [ 846.954282][ T5393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8483'. [ 847.020647][ T5393] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 847.032320][ T5393] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 847.195524][ T5403] IPv6: Can't replace route, no match found [ 847.311494][ T5416] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8490'. [ 848.120584][ T5413] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 848.139194][ T5413] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 848.169872][ T5413] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 848.179661][ T5413] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 848.192255][ T5413] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 848.198390][ T5413] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 848.218691][ T5413] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 848.226919][ T5413] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 848.733215][ T5475] syzkaller1: entered allmulticast mode [ 848.790454][ T5482] netlink: 25 bytes leftover after parsing attributes in process `syz.0.8506'. [ 848.842613][ T5484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8507'. [ 848.976246][ T5490] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8511'. [ 849.007446][ T5490] netlink: 'syz.5.8511': attribute type 2 has an invalid length. [ 849.015420][ T5490] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8511'. [ 849.224637][ T5509] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 849.248338][ T5509] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8516'. [ 849.258331][ T5509] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8516'. [ 849.988229][ T5525] netlink: 'syz.2.8522': attribute type 1 has an invalid length. [ 850.052163][ T5525] bond10: entered promiscuous mode [ 850.059605][ T5525] 8021q: adding VLAN 0 to HW filter on device bond10 [ 850.162531][ T5534] bond10: entered allmulticast mode [ 850.277102][ T5541] bond0: (slave bond_slave_0): Releasing backup interface [ 850.303310][ T5541] bond0: (slave bond_slave_1): Releasing backup interface [ 850.340028][ T5541] team0: Port device team_slave_0 removed [ 850.347862][ T5541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 850.477230][ T5541] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 850.486825][ T5541] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 850.542500][ T5551] bond10: (slave bridge13): making interface the new active one [ 850.556887][ T5551] bridge13: entered promiscuous mode [ 850.562606][ T5551] bridge13: entered allmulticast mode [ 850.578391][ T5551] bond10: (slave bridge13): Enslaving as an active interface with an up link [ 850.980637][ T5588] __nla_validate_parse: 6 callbacks suppressed [ 850.980657][ T5588] netlink: 84 bytes leftover after parsing attributes in process `syz.5.8538'. [ 851.039258][ T5578] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8538'. [ 851.082710][ T5578] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8538'. [ 851.118295][ T5593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8540'. [ 851.132842][ T5593] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8540'. [ 851.168024][ T5578] team0: entered promiscuous mode [ 851.179931][ T5578] geneve0: entered promiscuous mode [ 851.190328][ T5578] bridge0: entered promiscuous mode [ 851.200790][ T5578] debugfs: 'hsr1' already exists in 'hsr' [ 851.228055][ T5578] Cannot create hsr debugfs directory [ 851.346305][ C0] [ 851.348670][ C0] ============================================ [ 851.354809][ C0] WARNING: possible recursive locking detected [ 851.360965][ C0] syzkaller #0 Not tainted [ 851.365373][ C0] -------------------------------------------- [ 851.371518][ C0] modprobe/5600 is trying to acquire lock: [ 851.377317][ C0] ffff8880476aaf30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 851.386367][ C0] [ 851.386367][ C0] but task is already holding lock: [ 851.393718][ C0] ffff8880777e8f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 851.403977][ C0] [ 851.403977][ C0] other info that might help us debug this: [ 851.412024][ C0] Possible unsafe locking scenario: [ 851.412024][ C0] [ 851.419464][ C0] CPU0 [ 851.422731][ C0] ---- [ 851.425996][ C0] lock(&hsr->seqnr_lock); [ 851.430490][ C0] lock(&hsr->seqnr_lock); [ 851.434980][ C0] [ 851.434980][ C0] *** DEADLOCK *** [ 851.434980][ C0] [ 851.443107][ C0] May be due to missing lock nesting notation [ 851.443107][ C0] [ 851.451406][ C0] 10 locks held by modprobe/5600: [ 851.456412][ C0] #0: ffff888079969760 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x211/0x4d0 [ 851.465833][ C0] #1: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x2390 [ 851.475500][ C0] #2: ffffc90000007be0 ((&hsr->announce_timer)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x5f0 [ 851.485498][ C0] #3: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: hsr_announce+0x83/0x360 [ 851.494635][ C0] #4: ffff8880777e8f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 851.505337][ C0] #5: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0x9e/0x2860 [ 851.514817][ C0] #6: ffffffff8df3d740 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x284/0x3740 [ 851.524737][ C0] #7: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x185/0x1840 [ 851.533955][ C0] #8: ffffffff8df3d740 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x284/0x3740 [ 851.543870][ C0] #9: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 851.553003][ C0] [ 851.553003][ C0] stack backtrace: [ 851.558891][ C0] CPU: 0 UID: 0 PID: 5600 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) [ 851.558913][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 851.558923][ C0] Call Trace: [ 851.558933][ C0] [ 851.558942][ C0] dump_stack_lvl+0x189/0x250 [ 851.558967][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 851.558988][ C0] ? __pfx__printk+0x10/0x10 [ 851.559009][ C0] print_deadlock_bug+0x28b/0x2a0 [ 851.559030][ C0] validate_chain+0x1a3f/0x2140 [ 851.559052][ C0] ? __pfx_skb_network_protocol+0x10/0x10 [ 851.559073][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 851.559102][ C0] __lock_acquire+0xab9/0xd20 [ 851.559121][ C0] ? hsr_dev_xmit+0x237/0x360 [ 851.559141][ C0] lock_acquire+0x120/0x360 [ 851.559156][ C0] ? hsr_dev_xmit+0x237/0x360 [ 851.559181][ C0] ? hsr_dev_xmit+0x237/0x360 [ 851.559200][ C0] _raw_spin_lock_bh+0x36/0x50 [ 851.559223][ C0] ? hsr_dev_xmit+0x237/0x360 [ 851.559243][ C0] hsr_dev_xmit+0x237/0x360 [ 851.559262][ C0] ? hsr_dev_xmit+0x2d/0x360 [ 851.559283][ C0] dev_hard_start_xmit+0x2d7/0x830 [ 851.559309][ C0] __dev_queue_xmit+0x172a/0x3740 [ 851.559330][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 851.559357][ C0] ? __dev_queue_xmit+0x284/0x3740 [ 851.559379][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 851.559396][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 851.559412][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 851.559431][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 851.559448][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 851.559467][ C0] ? do_raw_read_unlock+0x3d/0x80 [ 851.559489][ C0] ? ebt_do_table+0x265b/0x2820 [ 851.559506][ C0] ? __lock_acquire+0xab9/0xd20 [ 851.559533][ C0] br_dev_queue_push_xmit+0x6c5/0x890 [ 851.559559][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 851.559583][ C0] ? NF_HOOK+0x9e/0x3c0 [ 851.559604][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 851.559624][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 851.559646][ C0] NF_HOOK+0x320/0x3c0 [ 851.559668][ C0] ? NF_HOOK+0x9e/0x3c0 [ 851.559688][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 851.559709][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 851.559735][ C0] br_forward_finish+0xd3/0x130 [ 851.559756][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 851.559777][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 851.559799][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 851.559823][ C0] NF_HOOK+0x320/0x3c0 [ 851.559846][ C0] ? NF_HOOK+0x9e/0x3c0 [ 851.559865][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 851.559884][ C0] ? br_multicast_count+0xf2/0xdc0 [ 851.559908][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 851.559933][ C0] __br_forward+0x41e/0x600 [ 851.559953][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 851.559973][ C0] ? maybe_deliver+0xfe/0x160 [ 851.559995][ C0] ? __pfx___br_forward+0x10/0x10 [ 851.560020][ C0] ? br_dev_xmit+0x185/0x1840 [ 851.560035][ C0] br_dev_xmit+0x11b3/0x1840 [ 851.560052][ C0] ? br_dev_xmit+0x185/0x1840 [ 851.560070][ C0] ? __pfx_br_dev_xmit+0x10/0x10 [ 851.560086][ C0] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 851.560102][ C0] ? __pfx_netif_skb_features+0x10/0x10 [ 851.560121][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 851.560138][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 851.560158][ C0] ? validate_xmit_skb+0xd78/0x1500 [ 851.560181][ C0] dev_hard_start_xmit+0x2d7/0x830 [ 851.560207][ C0] __dev_queue_xmit+0x172a/0x3740 [ 851.560229][ C0] ? kasan_save_track+0x3e/0x80 [ 851.560254][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 851.560271][ C0] ? __dev_queue_xmit+0x284/0x3740 [ 851.560290][ C0] ? stack_trace_save+0x9c/0xe0 [ 851.560309][ C0] ? kasan_save_track+0x3e/0x80 [ 851.560329][ C0] ? kmem_cache_alloc_noprof+0x367/0x6e0 [ 851.560349][ C0] ? vm_area_alloc+0x24/0x140 [ 851.560363][ C0] ? mmap_region+0xdcd/0x2110 [ 851.560380][ C0] ? do_mmap+0xc45/0x10d0 [ 851.560398][ C0] ? vm_mmap_pgoff+0x2a6/0x4d0 [ 851.560416][ C0] ? ksys_mmap_pgoff+0x51f/0x760 [ 851.560434][ C0] ? do_syscall_64+0xfa/0xfa0 [ 851.560450][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.560466][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 851.560493][ C0] ? __copy_skb_header+0xa7/0x550 [ 851.560513][ C0] ? __asan_memcpy+0x40/0x70 [ 851.560537][ C0] ? hsr_addr_subst_dest+0x307/0xac0 [ 851.560560][ C0] ? skb_clone+0x246/0x3a0 [ 851.560580][ C0] hsr_forward_skb+0x158b/0x2860 [ 851.560599][ C0] ? hsr_forward_skb+0x9e/0x2860 [ 851.560614][ C0] ? __pfx_hsr_forward_skb+0x10/0x10 [ 851.560628][ C0] ? do_raw_spin_lock+0x121/0x290 [ 851.560651][ C0] ? __asan_memset+0x22/0x50 [ 851.560670][ C0] ? __skb_pad+0x405/0x610 [ 851.560692][ C0] send_hsr_supervision_frame+0x731/0xcb0 [ 851.560719][ C0] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 851.560742][ C0] hsr_announce+0x1d5/0x360 [ 851.560763][ C0] ? hsr_announce+0x83/0x360 [ 851.560783][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 851.560813][ C0] call_timer_fn+0x17e/0x5f0 [ 851.560829][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 851.560849][ C0] ? call_timer_fn+0xbe/0x5f0 [ 851.560864][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 851.560883][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 851.560906][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 851.560922][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 851.560944][ C0] __run_timer_base+0x61a/0x860 [ 851.560973][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 851.560994][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 851.561022][ C0] run_timer_softirq+0xb7/0x180 [ 851.561046][ C0] handle_softirqs+0x286/0x870 [ 851.561064][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 851.561083][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 851.561104][ C0] __irq_exit_rcu+0xca/0x1f0 [ 851.561120][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 851.561141][ C0] irq_exit_rcu+0x9/0x30 [ 851.561156][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 851.561173][ C0] [ 851.561179][ C0] [ 851.561185][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 851.561201][ C0] RIP: 0010:unwind_next_frame+0xc4e/0x2390 [ 851.561222][ C0] Code: 4c 39 e0 0f 96 c0 20 c8 3c 01 0f 85 df 0c 00 00 48 89 df e8 84 23 00 00 48 89 c3 48 bd 00 00 00 00 00 fc ff df 48 8b 44 24 30 <80> 3c 28 00 4c 8b 7c 24 18 74 08 4c 89 ff e8 3f 2e b2 00 49 89 1f [ 851.561237][ C0] RSP: 0018:ffffc90003f7f238 EFLAGS: 00000202 [ 851.561253][ C0] RAX: 1ffff920007efe6a RBX: ffffffff820f986f RCX: 1ffff920007efe01 [ 851.561266][ C0] RDX: ffffffff9015ddd4 RSI: 0000000000000002 RDI: ffffc90003f7fe78 [ 851.561277][ C0] RBP: dffffc0000000000 R08: 0000000000000001 R09: ffffffff81738c45 [ 851.561289][ C0] R10: ffffc90003f7f358 R11: ffffffff81ac2e10 R12: ffffc90003f80000 [ 851.561301][ C0] R13: 1ffff920007efe63 R14: ffffc90003f7f308 R15: ffffc90003f78000 [ 851.561315][ C0] ? ksys_mmap_pgoff+0x51f/0x760 [ 851.561335][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 851.561355][ C0] ? unwind_next_frame+0xa5/0x2390 [ 851.561378][ C0] ? unwind_next_frame+0xc3c/0x2390 [ 851.561398][ C0] ? unwind_next_frame+0xa5/0x2390 [ 851.561432][ C0] ? vm_mmap_pgoff+0x2a6/0x4d0 [ 851.561452][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 851.561473][ C0] arch_stack_walk+0x11c/0x150 [ 851.561495][ C0] ? vm_mmap_pgoff+0x2a6/0x4d0 [ 851.561515][ C0] stack_trace_save+0x9c/0xe0 [ 851.561535][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 851.561560][ C0] kasan_save_track+0x3e/0x80 [ 851.561581][ C0] ? kasan_save_track+0x3e/0x80 [ 851.561602][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 851.561625][ C0] ? kmem_cache_alloc_noprof+0x367/0x6e0 [ 851.561645][ C0] ? vm_area_alloc+0x24/0x140 [ 851.561659][ C0] ? mmap_region+0xdcd/0x2110 [ 851.561676][ C0] ? do_mmap+0xc45/0x10d0 [ 851.561693][ C0] ? vm_mmap_pgoff+0x2a6/0x4d0 [ 851.561731][ C0] __kasan_slab_alloc+0x6c/0x80 [ 851.561756][ C0] kmem_cache_alloc_noprof+0x367/0x6e0 [ 851.561777][ C0] ? vm_area_alloc+0x24/0x140 [ 851.561791][ C0] ? kmem_cache_alloc_noprof+0x210/0x6e0 [ 851.561818][ C0] vm_area_alloc+0x24/0x140 [ 851.561833][ C0] mmap_region+0xdcd/0x2110 [ 851.561860][ C0] ? __pfx_mmap_region+0x10/0x10 [ 851.561886][ C0] ? rcu_is_watching+0x15/0xb0 [ 851.561904][ C0] ? process_measurement+0x15c3/0x1a40 [ 851.561940][ C0] ? mm_get_unmapped_area_vmflags+0xb3/0xe0 [ 851.561967][ C0] ? bpf_lsm_mmap_addr+0x9/0x20 [ 851.561985][ C0] ? security_mmap_addr+0x71/0x270 [ 851.562005][ C0] ? shmem_mapping+0xd/0x50 [ 851.562022][ C0] ? memfd_check_seals_mmap+0xc5/0x200 [ 851.562042][ C0] do_mmap+0xc45/0x10d0 [ 851.562066][ C0] ? __pfx_do_mmap+0x10/0x10 [ 851.562084][ C0] ? down_write_killable+0x178/0x230 [ 851.562106][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 851.562124][ C0] ? common_file_perm+0x1b5/0x230 [ 851.562150][ C0] vm_mmap_pgoff+0x2a6/0x4d0 [ 851.562172][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 851.562191][ C0] ? __fget_files+0x2a/0x420 [ 851.562208][ C0] ? __fget_files+0x2a/0x420 [ 851.562223][ C0] ? __fget_files+0x2a/0x420 [ 851.562239][ C0] ksys_mmap_pgoff+0x51f/0x760 [ 851.562262][ C0] do_syscall_64+0xfa/0xfa0 [ 851.562278][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 851.562295][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.562310][ C0] ? clear_bhb_loop+0x60/0xb0 [ 851.562327][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.562342][ C0] RIP: 0033:0x7ff049cee242 [ 851.562357][ C0] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 851.562371][ C0] RSP: 002b:00007ffcc1980208 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 851.562386][ C0] RAX: ffffffffffffffda RBX: 00007ff049a04000 RCX: 00007ff049cee242 [ 851.562398][ C0] RDX: 0000000000000003 RSI: 0000000000002000 RDI: 00007ff049a04000 [ 851.562408][ C0] RBP: 0000000000000812 R08: 0000000000000000 R09: 000000000000d000 [ 851.562418][ C0] R10: 0000000000000812 R11: 0000000000000206 R12: 00007ffcc19802c8 [ 851.562429][ C0] R13: 00007ff049cc3580 R14: 00007ffcc1980680 R15: 00000fff98330044 [ 851.562448][ C0]