last executing test programs:

45.44359834s ago: executing program 0 (id=1223):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="ad73364256", 0x5)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'erspan0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000001c0)=')\x03,\x00'}, 0x30)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0xc8, 0x8, 0x180, 0x5803, 0x2a0, 0x2e8, 0x2e8, 0x2a0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x118, 0x180, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@pkttype={{0x28}, {0x7, 0xddad}}, @common=@dst={{0x48}, {0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x3a, 0x80, 0x6, 0x1, 0x3ff, 0x2018, 0x1008}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)

43.113394561s ago: executing program 2 (id=1849):
r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800)
ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xfffd, @default, @bpq0, 0x1, [@null, @default, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x690303, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x5, 0x4)
sendto$inet6(r0, &(0x7f0000000140)="7ef6c4b53c5a355f2847ed8958d03e08a02e2fb20752c0dffcc9", 0x1a, 0x4000000, &(0x7f0000000180)={0xa, 0x4e23, 0x7, @mcast2, 0x1}, 0x1c)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r3, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3e6, 0x56}}}}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x5}, @NL80211_ATTR_TWT_RESPONDER={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000d00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2001}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000340)={0x964, r3, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x434, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x12}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6e}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6f}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff8}]}, {0x1fc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x68, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x3, 0x7}, {0x0, 0x7}, {0x4}, {0x0, 0x1}, {0x1, 0xa}, {0x5, 0x4}, {0x3, 0x4}, {0x1, 0x8}, {0x2}, {0x7, 0x6}, {0x1, 0x5}, {0x0, 0x9}, {0x1, 0x6}, {0x6, 0x8}, {0x1, 0x9}, {0x7, 0x5}, {0x5, 0x9}, {0x1, 0x2}, {0x2, 0x3}, {0x4, 0x4}, {0x0, 0x9}, {0x4, 0x8}, {0x3, 0x9}, {0x7}, {0x3, 0x3}, {0x4, 0x5}, {0x3, 0x1}, {0x0, 0x5}, {0x1, 0x5}, {0x0, 0xa}, {0x5, 0x4}, {0x7}, {0x4, 0x5}, {0x4, 0x3}, {0x6, 0x4}, {0x7, 0x9}, {0x2}, {0x4, 0xa}, {0x0, 0x2}, {0x3, 0x3}, {0x4}, {0x5, 0x7}, {0x4, 0x4}, {0x7, 0x4}, {0x2}, {0x2}, {0x4, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xfffc, 0xb, 0x2, 0x4, 0x5, 0x8, 0x2]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x7, 0x3, 0x0, 0x100, 0x651, 0x80, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6fd2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x14c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4a, 0x2, [{0x6, 0x8}, {0x1, 0x7}, {0x6}, {0x7, 0x9}, {0x6, 0x8}, {0x2, 0x6}, {0x3, 0x5}, {0x3, 0x4}, {0x0, 0x5}, {0x0, 0x1}, {0x3, 0x7}, {0x7, 0x3}, {0x2, 0x6}, {0x0, 0x5}, {0x2, 0x1}, {}, {0x3, 0x4}, {0x2}, {0x6, 0x6}, {0x3, 0x8}, {0x1, 0x1}, {0x2, 0x3}, {0x2}, {0x4, 0xa}, {0x5, 0x1}, {0x7, 0xa}, {0x6, 0x4}, {0x6, 0x6}, {0x6, 0x6}, {0x3, 0x2}, {0x0, 0x3}, {0x5, 0x3}, {0x3, 0x5}, {0x7, 0x3}, {0x1, 0x1}, {0x4, 0x3}, {0x1, 0x3}, {0x0, 0x3}, {0x1, 0x2}, {0x4}, {0x5, 0x3}, {0x7, 0x4}, {}, {0x2, 0x5}, {0x5, 0x3}, {0x4, 0x3}, {0x1, 0x7}, {0x2, 0x5}, {0x0, 0x5}, {0x5, 0x4}, {0x4, 0x4}, {0x6}, {0x7, 0x2}, {0x0, 0x1}, {0x4}, {0x5, 0x8}, {0x0, 0x9}, {0x1, 0x4}, {0x7, 0x7}, {0x6, 0x6}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x3}, {0x5, 0xa}, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x7}, {0x3, 0x5}, {0x7, 0xa}, {0x4, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x88, 0x7fff, 0x5, 0x98, 0x9b, 0x81, 0x9, 0x7f]}}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x2}, {0x3, 0x1}, {0x2, 0x7}, {0x0, 0x5}, {0x6, 0x2}, {0x4, 0x7}, {0x3, 0x2}, {0x3, 0x7}, {0x0, 0x2}, {0x2, 0x7}, {0x5, 0xa}, {0x2}, {0x0, 0x2}, {0x1, 0x9}, {0x5, 0x2}, {0x1}, {0x1, 0x6}, {0x3, 0x8}, {0x5, 0x9}, {0x2, 0x4}, {0x7, 0x1}, {0x2, 0x2}, {0x5}, {0x3}, {0x5, 0x1}, {0x7, 0x9}, {0x0, 0x5}, {0x1, 0x4}, {0x6, 0x8}, {0x6, 0x6}, {0x2, 0x8}, {0x3}, {0x7, 0x7}, {0x5, 0x8}, {0x6, 0x4}, {0x1, 0x1}, {}, {0x0, 0xa}, {0x6, 0x1}, {0x5, 0x6}, {0x1, 0x7}, {0x0, 0x4}, {0x4, 0x2}, {0x7}, {0x1, 0x4}, {0x3, 0x8}, {0x1, 0x4}, {0x4, 0x9}, {0x4}, {0x4, 0x2}, {0x0, 0x8}, {0x2, 0x2}, {0x2, 0x7}, {0x5}, {0x0, 0x1}, {}, {0x0, 0x6}, {0x0, 0x4}, {0x2, 0x8}, {0x1, 0x6}, {0x5, 0x5}, {0x5, 0x5}, {0x4, 0x8}, {0x6, 0x2}, {0x0, 0xa}, {0x1, 0x8}, {0x1, 0x7}, {0x4, 0x6}, {0x6}, {0x7}, {0x0, 0x5}, {0x0, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x5, 0x1}, {0x5, 0x3}, {0x2, 0x5}, {0x5, 0x5}, {0x0, 0x6}, {0x1}, {0x4, 0x5}, {0x6, 0x8}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x3}, {0x0, 0x5}, {0x2, 0x8}, {0x6, 0x5}, {0x1, 0x4}, {0x6, 0x4}, {0x2, 0x9}, {0x7, 0x6}, {0x4}, {0x0, 0x4}, {0x7, 0x8}, {0x3, 0x3}, {0x6, 0x3}, {0x6, 0xa}, {0x3, 0x9}, {0x5, 0x3}, {0x6, 0x2}, {0x4}, {0x4, 0x7}, {0x6, 0x17}]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x37, 0x2, [{0x2, 0x4}, {0x3}, {0x2, 0x7}, {0x1, 0x2}, {0x3, 0x5}, {0x6, 0x5}, {0x1, 0x4}, {0x1}, {0x6, 0x4}, {0x0, 0x9}, {0x3, 0x9}, {0x4, 0x8}, {0x0, 0x9}, {0x1, 0x4}, {0x0, 0x1}, {0x4, 0x5}, {0x6, 0xa}, {0x6, 0x3}, {0x3, 0x2}, {0x5, 0x7}, {0x1, 0x1}, {0x5}, {0x4, 0x5}, {}, {0x4, 0x3}, {0x5, 0x3}, {0x1, 0x4}, {0x3, 0x1}, {0x5, 0x4}, {0x7, 0x8}, {0x7, 0x8}, {0x5, 0xa}, {0x0, 0x1}, {0x0, 0x2}, {0x6, 0x4}, {0x2, 0x9}, {0x4, 0x4}, {0x6}, {0x0, 0xa}, {0x3, 0x4}, {0x7, 0x9}, {0x3, 0x1}, {0x5, 0x8}, {0x5, 0x5}, {0x4, 0x8}, {0x2, 0xa}, {0x1}, {0x6, 0x1}, {0x1}, {0x0, 0x1}, {0x7, 0x7}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x1, 0x1b, 0x6c, 0x16, 0x7b, 0x60, 0x30, 0x16, 0x1, 0x3, 0x2, 0x2, 0x30, 0x1, 0x18, 0x1b, 0x36, 0xc, 0x12, 0x6c, 0x4, 0x9, 0x36, 0x6, 0x48, 0x36, 0xb, 0x48, 0x4, 0x24]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}]}, {0x168, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xee, 0x4f, 0x80, 0x3, 0x3, 0xbb, 0xb2, 0x9]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x0, 0x3]}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7cf, 0x9, 0x6, 0x3, 0x2, 0x3, 0x3, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x7}, {0x0, 0x6}, {}, {0x3, 0x5}, {0x4, 0x7}, {0x1, 0x5}, {0x1, 0x7}, {0x0, 0x1}, {0x6, 0x7}, {0x3, 0x1}, {0x3, 0x7}, {0x3}, {0x2, 0x3}, {0x3, 0x6}, {0x0, 0x5}, {0x2, 0x7}, {0x5, 0x5}, {0x1, 0x3}, {0x0, 0x4}, {}, {0x4, 0x8}, {0x3}, {0x2, 0x3}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x4}, {0x4, 0x8}, {0x4, 0x1d}, {0x6, 0x3}, {0x1, 0x5}, {0x4, 0x2}, {0x1, 0x3}, {0x5, 0x2}, {0x7, 0x7}, {0x6, 0x2}, {0x7, 0x5}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x24, 0x30, 0xc, 0x36, 0x9, 0x9, 0x1, 0x754fb99b0e0b0239, 0x36, 0x5, 0x6c, 0x12, 0x3, 0x36, 0x48, 0x60, 0x6, 0x5, 0x30, 0x4, 0xc, 0x2, 0x1, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xff, 0x2, 0xd, 0x6, 0xff81, 0x0, 0x4]}}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1a5, 0x2, 0xffc0, 0xcc3f, 0x6, 0x81, 0xdd4, 0x6]}}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x2, 0x6}, {0x5, 0x7}, {0x2, 0x4}, {0x5}, {0x0, 0x3}, {0x7, 0xa}, {0x3}, {0x4, 0x8}, {0x7, 0x6}, {0x3, 0x6}, {0x1, 0x7}, {0x0, 0x8}, {0x0, 0xe}, {0x5, 0x9}, {0x5, 0x9}, {0x1}, {0x4, 0x1}, {0x1, 0x9}, {0x3, 0x8}, {0x5, 0x2}, {}, {0x2, 0x7}, {0x3, 0x3}, {}, {0x0, 0x2}, {0x1, 0xa}, {0x6, 0x9}, {0x0, 0x4}, {0x0, 0x2}, {0x6, 0x8}, {0x0, 0x4}, {0x4, 0x8}, {0x2, 0x1}, {0x1, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x1, 0x3}, {0x7}, {0x3, 0x9}, {0x2, 0x5}, {0x2, 0x5}, {0x3, 0x5}, {0x6, 0x7}, {0x3, 0x9}, {0x1}, {0x2, 0x9}, {0x6, 0x6}, {0x4, 0x2}, {0x2, 0x1}, {0x0, 0x8}, {0x7, 0x1}, {0x0, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1b, 0x16, 0xc, 0x6, 0x3, 0x30, 0x2, 0x16, 0x0, 0x9, 0x12, 0x12, 0x2, 0x3, 0x0, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x74, 0x2, 0x5, 0x7, 0x2, 0x100, 0xfff]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x0, 0x3, 0x6c, 0x1c, 0x4, 0x1b, 0x16, 0x6c, 0x6, 0x9, 0x5, 0xb, 0x6, 0x48, 0x5, 0x30, 0xc, 0x18, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x19}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcd}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000000000000000}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1c}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xf}]}]}, @NL80211_ATTR_TID_CONFIG={0x51c, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x62}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xde}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x1d4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x400}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1ac, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x642, 0x6, 0x0, 0xfc, 0x5, 0xfff, 0x4, 0xb]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1b, 0x2, 0x60, 0x6, 0x9, 0x4, 0xc, 0x3, 0x60, 0x6c, 0xc, 0x48, 0x18, 0x0, 0x24, 0x6c, 0x9, 0x1b, 0x36, 0xc, 0x2, 0x8aa429871800c742, 0xb, 0x13, 0x0, 0x60, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xde8, 0x3a41, 0x0, 0x6, 0x10, 0x9, 0x3, 0x6]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x2, 0x6, 0x1, 0x7, 0x1b, 0x9, 0x1b, 0x24, 0x0, 0x11, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7, 0x5, 0x2, 0x1000, 0x1, 0x9, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5f, 0x8, 0x0, 0x3, 0x8, 0xd, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8, 0xe, 0x4ef2, 0x9, 0x8001, 0x6, 0x660]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6b, 0xb, 0x1b, 0x4, 0x3, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbad2, 0x1, 0xb5cc, 0x1000, 0x401, 0x9, 0x7, 0x1d]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x97c, 0x3015, 0x1000, 0x8, 0x3, 0x2, 0x8b]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x1, 0x7}, {0x6, 0x7}, {0x3, 0x1d}, {0x2, 0x7}, {0x4, 0x5}, {0x1, 0x9}, {0x5, 0x6}, {0x0, 0x4}, {0x1, 0x5}, {0x6, 0x3}, {0x1, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x6, 0x4}, {0x1, 0x4}, {0x7, 0x6}, {0x5, 0x9}, {0x7, 0x2}, {0x6}, {0x2}, {0x7, 0x1}, {0x6, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6000, 0x40, 0x1, 0x44, 0x8, 0xf, 0x81]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x108, 0x6, 0x7f, 0x3e, 0x3, 0x10, 0x7]}}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x8bb3, 0x5, 0x138, 0x7, 0xd7, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0x3, 0xfffd, 0x4, 0x8, 0x9, 0xc]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcf}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x2e8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2a8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xd0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0xf, 0x9, 0x9, 0x7f, 0x2, 0x7fff, 0x1000]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xb, 0x1, 0x16, 0x5, 0xc, 0x21, 0x18, 0xc, 0x60, 0x5, 0x16, 0x0, 0xc, 0x6c, 0x4, 0x24, 0x6, 0x0]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x33a, 0x8, 0x7, 0xb, 0xfffc, 0xceb, 0x9, 0x7fff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0x3, 0xc, 0x0, 0xfffc, 0x6, 0x9]}}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x1, 0x6}, {0x3, 0x5}, {0x6, 0x5}, {0x4, 0x8}, {0x7, 0x8}, {0x4, 0x4}, {0x3, 0x3}, {0x0, 0x7}, {0x2}, {0x2, 0x4}, {0x5, 0x1}, {0x1, 0x5}, {0x6}, {0x0, 0xa}, {0x0, 0x2}, {0x0, 0x6}, {0x6, 0x8}, {0x4, 0x5}, {0x0, 0x4}, {0x1, 0xa}, {0x1}, {0x2, 0x6}, {0x1, 0x1}, {0x0, 0x5}, {0x5, 0x3}, {0x2, 0x8}, {0x3, 0x8}, {0x0, 0xa}, {0x5, 0x7}, {0x2, 0x3}, {0x2}, {0x2, 0xa}, {0x1, 0xa}, {0x0, 0x4}, {0x1, 0x7}]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x1}, {0x7, 0xa}, {0x3, 0x4}, {0x0, 0x5}, {0x2, 0x6}, {0x1, 0x3}, {}, {0x2, 0x9}, {0x1, 0x2}, {0x3}, {0x5, 0x3}, {0x5, 0x1}, {0x7, 0x3}, {0x3}, {0x1, 0xa}, {0x6, 0x5}, {0x5, 0x7}, {0x2, 0x5}, {}, {0x0, 0x1}, {0x7, 0xa}, {0x0, 0x8}, {0x5, 0x7}, {0x0, 0x7}, {0x6, 0x7}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x4}, {0x6, 0x1}, {0x6, 0x1}, {0x4, 0x2}, {0x0, 0x7}, {0x4, 0x5}, {0x2, 0x8}, {0x0, 0x1}, {0x3, 0x8}, {0x0, 0x3}, {0x3, 0x9}, {0x1, 0x9}, {0x0, 0x5}, {0x7, 0x2}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x9}, {0x5, 0x2}, {0x3, 0x2}, {0x1, 0x9}, {0x3, 0x3}, {0x0, 0xa}, {0x5, 0x1}, {0x0, 0x2}, {0x7, 0x7}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0x6, 0xffff, 0x101, 0xf8, 0xf841, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x2f1, 0x3, 0xd, 0x2e98, 0xbe, 0xd, 0x3ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x4, 0xfff, 0x292e, 0x8, 0x101, 0x3]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x4, 0x4}, {0x1, 0x6}, {0x5, 0xa}, {0x6, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x2, 0xa}, {0x1, 0x7}, {0x5, 0x6}, {0x0, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x0, 0xa}, {}, {0x7}, {0x5, 0x4}, {0x5, 0x5}, {0x5, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x4, 0x4}, {0x0, 0x4}, {0x1, 0x6}, {0x6, 0x7}, {0x4, 0x5}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x6}, {0x5, 0xa}, {0x4, 0x2}, {0x2, 0x5}, {0x7, 0x4}, {0x7, 0x5}, {0x0, 0x4}, {0x3, 0x7}, {0x0, 0x6}, {0x0, 0x8}, {0x0, 0x9}, {0x7}, {0x0, 0x6}, {0x0, 0x7}, {0x5, 0x1}, {0x4, 0x6}, {0x4}, {0x6, 0x4}, {0x1, 0x7}, {0x0, 0x4}, {0x6, 0x1}, {0x0, 0x6}, {0x7, 0x3}]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x14, 0x2, [{0x7}, {0x5}, {0x7, 0x1}, {0x0, 0x2}, {0x2, 0x2}, {0x6, 0x9}, {0x3, 0x8}, {}, {0x0, 0x2}, {0x3, 0xa}, {0x1, 0x3}, {0x4, 0x8}, {0x1, 0x1}, {0x4, 0x7}, {0x3, 0x5}, {0x7}]}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x6, 0x1ff, 0x7, 0x4, 0x7d2, 0xffe0, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x370, 0x5, 0x7, 0x6f0, 0x6, 0xffee, 0xe]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x7, 0x8}, {0x4, 0x3}, {0x1, 0x9}, {0x4, 0x3}, {0x6, 0x4}, {0x1, 0x5}, {0x7, 0x7}, {0x3, 0x2}, {0x7, 0x3}, {0x1, 0x1}, {0x6, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xb, 0x4b, 0x9, 0x6, 0xc, 0x3, 0x3, 0x12, 0xc, 0x6c, 0x2, 0x48, 0x2, 0x1, 0x1b, 0x36, 0x3, 0x54, 0x4, 0x30, 0x36, 0x2, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x2, 0x8}, {0x0, 0xa}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x7}, {0x2, 0x3}, {0x7, 0x2}, {0x1, 0x8}, {0x6, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x6, 0x0, 0x5fe9, 0x6, 0xf, 0x6, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0x280, 0xfffb, 0x1, 0x4, 0x7, 0x5]}}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xb, 0x3, 0x30, 0x4d, 0x16, 0x36, 0xb, 0x4, 0x2, 0x60, 0xb, 0x60, 0x4, 0x48, 0x48, 0xc, 0xb, 0x2, 0x6c, 0xc, 0x30, 0x30, 0x24, 0x36, 0x5, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x28c, 0x5, 0x4, 0x2, 0x6, 0xf84e, 0xa, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1ff, 0xfffb, 0x5, 0x0, 0x6, 0x6, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7d}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9562}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}]}]}]}, 0x964}, 0x1, 0x0, 0x0, 0x4}, 0x8010)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), r1)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0xb8, r4, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc0000000}}}}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x494}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x224}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x840)
r5 = openat$cgroup(r0, &(0x7f0000000f00)='syz1\x00', 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000f40)='cgroup.stat\x00', 0x0, 0x0)
write(r2, &(0x7f0000000f80)="a1b5b077cd12350fb1a9fe3386df37ae2eb8258cab3a8efab6eaf2396655ae280894132df21f37f552d4a845700e90bc4150ad718c705621f21dcc47dbf18bf44c2a0fd34b13541903b803c07641fd080e95402f811dcb59edb6bf501d04effb95e4a41cc9691b5b94", 0x69)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001000)={'veth0_macvtap\x00', 0x1000})
r7 = openat$cgroup_ro(r5, &(0x7f0000001040)='blkio.bfq.io_merged\x00', 0x0, 0x0)
setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000001080)=@gcm_128={{0x303}, "e20a26fa97af386c", "75150bb65797913373aabbb1949b60b0", "5faec56e", "7ee57ef7b2e7d2ac"}, 0x28)
r8 = accept4(r6, &(0x7f00000010c0)=@l2, &(0x7f0000001140)=0x80, 0x80000)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000011c0), r8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x28, r9, 0x205, 0x70bd28, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001300)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x3c, r3, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000001)
sendto$inet6(r0, &(0x7f0000001400)="6e89de6b0d991a74632eaa577fa02fc3fb2670a83bf37d4459e4a5007f93e7811e1e2b85554275882069799c0c68ca3fb6e8f244e4aece0c2952122683f0d9346d682b18465be06fcd4f40bc22c23b489d2d50341524d3513ff2722402df00a6e41af7e5743c84aa2db225f5095962b1a9e3a85264", 0x75, 0x8000, &(0x7f0000001480)={0xa, 0x4e20, 0xa, @rand_addr=' \x01\x00', 0x4}, 0x1c)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000014c0)={'veth1_to_bridge\x00', 0x400})
connect$inet6(r0, &(0x7f0000001500)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x7}, 0x1c)
sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x30, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x1, @bearer=@udp='udp:syz2\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x48c0}, 0x4000050)

37.861168506s ago: executing program 0 (id=1223):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="ad73364256", 0x5)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'erspan0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000001c0)=')\x03,\x00'}, 0x30)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0xc8, 0x8, 0x180, 0x5803, 0x2a0, 0x2e8, 0x2e8, 0x2a0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x118, 0x180, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@pkttype={{0x28}, {0x7, 0xddad}}, @common=@dst={{0x48}, {0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x3a, 0x80, 0x6, 0x1, 0x3ff, 0x2018, 0x1008}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)

36.18704034s ago: executing program 2 (id=1849):
r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800)
ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xfffd, @default, @bpq0, 0x1, [@null, @default, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x690303, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x5, 0x4)
sendto$inet6(r0, &(0x7f0000000140)="7ef6c4b53c5a355f2847ed8958d03e08a02e2fb20752c0dffcc9", 0x1a, 0x4000000, &(0x7f0000000180)={0xa, 0x4e23, 0x7, @mcast2, 0x1}, 0x1c)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r3, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3e6, 0x56}}}}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x5}, @NL80211_ATTR_TWT_RESPONDER={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000d00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2001}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000340)={0x964, r3, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x434, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x12}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6e}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6f}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff8}]}, {0x1fc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x68, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x3, 0x7}, {0x0, 0x7}, {0x4}, {0x0, 0x1}, {0x1, 0xa}, {0x5, 0x4}, {0x3, 0x4}, {0x1, 0x8}, {0x2}, {0x7, 0x6}, {0x1, 0x5}, {0x0, 0x9}, {0x1, 0x6}, {0x6, 0x8}, {0x1, 0x9}, {0x7, 0x5}, {0x5, 0x9}, {0x1, 0x2}, {0x2, 0x3}, {0x4, 0x4}, {0x0, 0x9}, {0x4, 0x8}, {0x3, 0x9}, {0x7}, {0x3, 0x3}, {0x4, 0x5}, {0x3, 0x1}, {0x0, 0x5}, {0x1, 0x5}, {0x0, 0xa}, {0x5, 0x4}, {0x7}, {0x4, 0x5}, {0x4, 0x3}, {0x6, 0x4}, {0x7, 0x9}, {0x2}, {0x4, 0xa}, {0x0, 0x2}, {0x3, 0x3}, {0x4}, {0x5, 0x7}, {0x4, 0x4}, {0x7, 0x4}, {0x2}, {0x2}, {0x4, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xfffc, 0xb, 0x2, 0x4, 0x5, 0x8, 0x2]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x7, 0x3, 0x0, 0x100, 0x651, 0x80, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6fd2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x14c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4a, 0x2, [{0x6, 0x8}, {0x1, 0x7}, {0x6}, {0x7, 0x9}, {0x6, 0x8}, {0x2, 0x6}, {0x3, 0x5}, {0x3, 0x4}, {0x0, 0x5}, {0x0, 0x1}, {0x3, 0x7}, {0x7, 0x3}, {0x2, 0x6}, {0x0, 0x5}, {0x2, 0x1}, {}, {0x3, 0x4}, {0x2}, {0x6, 0x6}, {0x3, 0x8}, {0x1, 0x1}, {0x2, 0x3}, {0x2}, {0x4, 0xa}, {0x5, 0x1}, {0x7, 0xa}, {0x6, 0x4}, {0x6, 0x6}, {0x6, 0x6}, {0x3, 0x2}, {0x0, 0x3}, {0x5, 0x3}, {0x3, 0x5}, {0x7, 0x3}, {0x1, 0x1}, {0x4, 0x3}, {0x1, 0x3}, {0x0, 0x3}, {0x1, 0x2}, {0x4}, {0x5, 0x3}, {0x7, 0x4}, {}, {0x2, 0x5}, {0x5, 0x3}, {0x4, 0x3}, {0x1, 0x7}, {0x2, 0x5}, {0x0, 0x5}, {0x5, 0x4}, {0x4, 0x4}, {0x6}, {0x7, 0x2}, {0x0, 0x1}, {0x4}, {0x5, 0x8}, {0x0, 0x9}, {0x1, 0x4}, {0x7, 0x7}, {0x6, 0x6}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x3}, {0x5, 0xa}, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x7}, {0x3, 0x5}, {0x7, 0xa}, {0x4, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x88, 0x7fff, 0x5, 0x98, 0x9b, 0x81, 0x9, 0x7f]}}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x2}, {0x3, 0x1}, {0x2, 0x7}, {0x0, 0x5}, {0x6, 0x2}, {0x4, 0x7}, {0x3, 0x2}, {0x3, 0x7}, {0x0, 0x2}, {0x2, 0x7}, {0x5, 0xa}, {0x2}, {0x0, 0x2}, {0x1, 0x9}, {0x5, 0x2}, {0x1}, {0x1, 0x6}, {0x3, 0x8}, {0x5, 0x9}, {0x2, 0x4}, {0x7, 0x1}, {0x2, 0x2}, {0x5}, {0x3}, {0x5, 0x1}, {0x7, 0x9}, {0x0, 0x5}, {0x1, 0x4}, {0x6, 0x8}, {0x6, 0x6}, {0x2, 0x8}, {0x3}, {0x7, 0x7}, {0x5, 0x8}, {0x6, 0x4}, {0x1, 0x1}, {}, {0x0, 0xa}, {0x6, 0x1}, {0x5, 0x6}, {0x1, 0x7}, {0x0, 0x4}, {0x4, 0x2}, {0x7}, {0x1, 0x4}, {0x3, 0x8}, {0x1, 0x4}, {0x4, 0x9}, {0x4}, {0x4, 0x2}, {0x0, 0x8}, {0x2, 0x2}, {0x2, 0x7}, {0x5}, {0x0, 0x1}, {}, {0x0, 0x6}, {0x0, 0x4}, {0x2, 0x8}, {0x1, 0x6}, {0x5, 0x5}, {0x5, 0x5}, {0x4, 0x8}, {0x6, 0x2}, {0x0, 0xa}, {0x1, 0x8}, {0x1, 0x7}, {0x4, 0x6}, {0x6}, {0x7}, {0x0, 0x5}, {0x0, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x5, 0x1}, {0x5, 0x3}, {0x2, 0x5}, {0x5, 0x5}, {0x0, 0x6}, {0x1}, {0x4, 0x5}, {0x6, 0x8}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x3}, {0x0, 0x5}, {0x2, 0x8}, {0x6, 0x5}, {0x1, 0x4}, {0x6, 0x4}, {0x2, 0x9}, {0x7, 0x6}, {0x4}, {0x0, 0x4}, {0x7, 0x8}, {0x3, 0x3}, {0x6, 0x3}, {0x6, 0xa}, {0x3, 0x9}, {0x5, 0x3}, {0x6, 0x2}, {0x4}, {0x4, 0x7}, {0x6, 0x17}]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x37, 0x2, [{0x2, 0x4}, {0x3}, {0x2, 0x7}, {0x1, 0x2}, {0x3, 0x5}, {0x6, 0x5}, {0x1, 0x4}, {0x1}, {0x6, 0x4}, {0x0, 0x9}, {0x3, 0x9}, {0x4, 0x8}, {0x0, 0x9}, {0x1, 0x4}, {0x0, 0x1}, {0x4, 0x5}, {0x6, 0xa}, {0x6, 0x3}, {0x3, 0x2}, {0x5, 0x7}, {0x1, 0x1}, {0x5}, {0x4, 0x5}, {}, {0x4, 0x3}, {0x5, 0x3}, {0x1, 0x4}, {0x3, 0x1}, {0x5, 0x4}, {0x7, 0x8}, {0x7, 0x8}, {0x5, 0xa}, {0x0, 0x1}, {0x0, 0x2}, {0x6, 0x4}, {0x2, 0x9}, {0x4, 0x4}, {0x6}, {0x0, 0xa}, {0x3, 0x4}, {0x7, 0x9}, {0x3, 0x1}, {0x5, 0x8}, {0x5, 0x5}, {0x4, 0x8}, {0x2, 0xa}, {0x1}, {0x6, 0x1}, {0x1}, {0x0, 0x1}, {0x7, 0x7}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x1, 0x1b, 0x6c, 0x16, 0x7b, 0x60, 0x30, 0x16, 0x1, 0x3, 0x2, 0x2, 0x30, 0x1, 0x18, 0x1b, 0x36, 0xc, 0x12, 0x6c, 0x4, 0x9, 0x36, 0x6, 0x48, 0x36, 0xb, 0x48, 0x4, 0x24]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}]}, {0x168, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xee, 0x4f, 0x80, 0x3, 0x3, 0xbb, 0xb2, 0x9]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x0, 0x3]}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7cf, 0x9, 0x6, 0x3, 0x2, 0x3, 0x3, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x7}, {0x0, 0x6}, {}, {0x3, 0x5}, {0x4, 0x7}, {0x1, 0x5}, {0x1, 0x7}, {0x0, 0x1}, {0x6, 0x7}, {0x3, 0x1}, {0x3, 0x7}, {0x3}, {0x2, 0x3}, {0x3, 0x6}, {0x0, 0x5}, {0x2, 0x7}, {0x5, 0x5}, {0x1, 0x3}, {0x0, 0x4}, {}, {0x4, 0x8}, {0x3}, {0x2, 0x3}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x4}, {0x4, 0x8}, {0x4, 0x1d}, {0x6, 0x3}, {0x1, 0x5}, {0x4, 0x2}, {0x1, 0x3}, {0x5, 0x2}, {0x7, 0x7}, {0x6, 0x2}, {0x7, 0x5}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x24, 0x30, 0xc, 0x36, 0x9, 0x9, 0x1, 0x754fb99b0e0b0239, 0x36, 0x5, 0x6c, 0x12, 0x3, 0x36, 0x48, 0x60, 0x6, 0x5, 0x30, 0x4, 0xc, 0x2, 0x1, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xff, 0x2, 0xd, 0x6, 0xff81, 0x0, 0x4]}}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1a5, 0x2, 0xffc0, 0xcc3f, 0x6, 0x81, 0xdd4, 0x6]}}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x2, 0x6}, {0x5, 0x7}, {0x2, 0x4}, {0x5}, {0x0, 0x3}, {0x7, 0xa}, {0x3}, {0x4, 0x8}, {0x7, 0x6}, {0x3, 0x6}, {0x1, 0x7}, {0x0, 0x8}, {0x0, 0xe}, {0x5, 0x9}, {0x5, 0x9}, {0x1}, {0x4, 0x1}, {0x1, 0x9}, {0x3, 0x8}, {0x5, 0x2}, {}, {0x2, 0x7}, {0x3, 0x3}, {}, {0x0, 0x2}, {0x1, 0xa}, {0x6, 0x9}, {0x0, 0x4}, {0x0, 0x2}, {0x6, 0x8}, {0x0, 0x4}, {0x4, 0x8}, {0x2, 0x1}, {0x1, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x1, 0x3}, {0x7}, {0x3, 0x9}, {0x2, 0x5}, {0x2, 0x5}, {0x3, 0x5}, {0x6, 0x7}, {0x3, 0x9}, {0x1}, {0x2, 0x9}, {0x6, 0x6}, {0x4, 0x2}, {0x2, 0x1}, {0x0, 0x8}, {0x7, 0x1}, {0x0, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1b, 0x16, 0xc, 0x6, 0x3, 0x30, 0x2, 0x16, 0x0, 0x9, 0x12, 0x12, 0x2, 0x3, 0x0, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x74, 0x2, 0x5, 0x7, 0x2, 0x100, 0xfff]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x0, 0x3, 0x6c, 0x1c, 0x4, 0x1b, 0x16, 0x6c, 0x6, 0x9, 0x5, 0xb, 0x6, 0x48, 0x5, 0x30, 0xc, 0x18, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x19}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcd}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000000000000000}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1c}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xf}]}]}, @NL80211_ATTR_TID_CONFIG={0x51c, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x62}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xde}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x1d4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x400}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1ac, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x642, 0x6, 0x0, 0xfc, 0x5, 0xfff, 0x4, 0xb]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1b, 0x2, 0x60, 0x6, 0x9, 0x4, 0xc, 0x3, 0x60, 0x6c, 0xc, 0x48, 0x18, 0x0, 0x24, 0x6c, 0x9, 0x1b, 0x36, 0xc, 0x2, 0x8aa429871800c742, 0xb, 0x13, 0x0, 0x60, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xde8, 0x3a41, 0x0, 0x6, 0x10, 0x9, 0x3, 0x6]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x2, 0x6, 0x1, 0x7, 0x1b, 0x9, 0x1b, 0x24, 0x0, 0x11, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7, 0x5, 0x2, 0x1000, 0x1, 0x9, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5f, 0x8, 0x0, 0x3, 0x8, 0xd, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8, 0xe, 0x4ef2, 0x9, 0x8001, 0x6, 0x660]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6b, 0xb, 0x1b, 0x4, 0x3, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbad2, 0x1, 0xb5cc, 0x1000, 0x401, 0x9, 0x7, 0x1d]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x97c, 0x3015, 0x1000, 0x8, 0x3, 0x2, 0x8b]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x1, 0x7}, {0x6, 0x7}, {0x3, 0x1d}, {0x2, 0x7}, {0x4, 0x5}, {0x1, 0x9}, {0x5, 0x6}, {0x0, 0x4}, {0x1, 0x5}, {0x6, 0x3}, {0x1, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x6, 0x4}, {0x1, 0x4}, {0x7, 0x6}, {0x5, 0x9}, {0x7, 0x2}, {0x6}, {0x2}, {0x7, 0x1}, {0x6, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6000, 0x40, 0x1, 0x44, 0x8, 0xf, 0x81]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x108, 0x6, 0x7f, 0x3e, 0x3, 0x10, 0x7]}}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x8bb3, 0x5, 0x138, 0x7, 0xd7, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0x3, 0xfffd, 0x4, 0x8, 0x9, 0xc]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcf}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x2e8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2a8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xd0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0xf, 0x9, 0x9, 0x7f, 0x2, 0x7fff, 0x1000]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xb, 0x1, 0x16, 0x5, 0xc, 0x21, 0x18, 0xc, 0x60, 0x5, 0x16, 0x0, 0xc, 0x6c, 0x4, 0x24, 0x6, 0x0]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x33a, 0x8, 0x7, 0xb, 0xfffc, 0xceb, 0x9, 0x7fff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0x3, 0xc, 0x0, 0xfffc, 0x6, 0x9]}}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x1, 0x6}, {0x3, 0x5}, {0x6, 0x5}, {0x4, 0x8}, {0x7, 0x8}, {0x4, 0x4}, {0x3, 0x3}, {0x0, 0x7}, {0x2}, {0x2, 0x4}, {0x5, 0x1}, {0x1, 0x5}, {0x6}, {0x0, 0xa}, {0x0, 0x2}, {0x0, 0x6}, {0x6, 0x8}, {0x4, 0x5}, {0x0, 0x4}, {0x1, 0xa}, {0x1}, {0x2, 0x6}, {0x1, 0x1}, {0x0, 0x5}, {0x5, 0x3}, {0x2, 0x8}, {0x3, 0x8}, {0x0, 0xa}, {0x5, 0x7}, {0x2, 0x3}, {0x2}, {0x2, 0xa}, {0x1, 0xa}, {0x0, 0x4}, {0x1, 0x7}]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x1}, {0x7, 0xa}, {0x3, 0x4}, {0x0, 0x5}, {0x2, 0x6}, {0x1, 0x3}, {}, {0x2, 0x9}, {0x1, 0x2}, {0x3}, {0x5, 0x3}, {0x5, 0x1}, {0x7, 0x3}, {0x3}, {0x1, 0xa}, {0x6, 0x5}, {0x5, 0x7}, {0x2, 0x5}, {}, {0x0, 0x1}, {0x7, 0xa}, {0x0, 0x8}, {0x5, 0x7}, {0x0, 0x7}, {0x6, 0x7}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x4}, {0x6, 0x1}, {0x6, 0x1}, {0x4, 0x2}, {0x0, 0x7}, {0x4, 0x5}, {0x2, 0x8}, {0x0, 0x1}, {0x3, 0x8}, {0x0, 0x3}, {0x3, 0x9}, {0x1, 0x9}, {0x0, 0x5}, {0x7, 0x2}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x9}, {0x5, 0x2}, {0x3, 0x2}, {0x1, 0x9}, {0x3, 0x3}, {0x0, 0xa}, {0x5, 0x1}, {0x0, 0x2}, {0x7, 0x7}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0x6, 0xffff, 0x101, 0xf8, 0xf841, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x2f1, 0x3, 0xd, 0x2e98, 0xbe, 0xd, 0x3ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x4, 0xfff, 0x292e, 0x8, 0x101, 0x3]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x4, 0x4}, {0x1, 0x6}, {0x5, 0xa}, {0x6, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x2, 0xa}, {0x1, 0x7}, {0x5, 0x6}, {0x0, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x0, 0xa}, {}, {0x7}, {0x5, 0x4}, {0x5, 0x5}, {0x5, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x4, 0x4}, {0x0, 0x4}, {0x1, 0x6}, {0x6, 0x7}, {0x4, 0x5}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x6}, {0x5, 0xa}, {0x4, 0x2}, {0x2, 0x5}, {0x7, 0x4}, {0x7, 0x5}, {0x0, 0x4}, {0x3, 0x7}, {0x0, 0x6}, {0x0, 0x8}, {0x0, 0x9}, {0x7}, {0x0, 0x6}, {0x0, 0x7}, {0x5, 0x1}, {0x4, 0x6}, {0x4}, {0x6, 0x4}, {0x1, 0x7}, {0x0, 0x4}, {0x6, 0x1}, {0x0, 0x6}, {0x7, 0x3}]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x14, 0x2, [{0x7}, {0x5}, {0x7, 0x1}, {0x0, 0x2}, {0x2, 0x2}, {0x6, 0x9}, {0x3, 0x8}, {}, {0x0, 0x2}, {0x3, 0xa}, {0x1, 0x3}, {0x4, 0x8}, {0x1, 0x1}, {0x4, 0x7}, {0x3, 0x5}, {0x7}]}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x6, 0x1ff, 0x7, 0x4, 0x7d2, 0xffe0, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x370, 0x5, 0x7, 0x6f0, 0x6, 0xffee, 0xe]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x7, 0x8}, {0x4, 0x3}, {0x1, 0x9}, {0x4, 0x3}, {0x6, 0x4}, {0x1, 0x5}, {0x7, 0x7}, {0x3, 0x2}, {0x7, 0x3}, {0x1, 0x1}, {0x6, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xb, 0x4b, 0x9, 0x6, 0xc, 0x3, 0x3, 0x12, 0xc, 0x6c, 0x2, 0x48, 0x2, 0x1, 0x1b, 0x36, 0x3, 0x54, 0x4, 0x30, 0x36, 0x2, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x2, 0x8}, {0x0, 0xa}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x7}, {0x2, 0x3}, {0x7, 0x2}, {0x1, 0x8}, {0x6, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x6, 0x0, 0x5fe9, 0x6, 0xf, 0x6, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0x280, 0xfffb, 0x1, 0x4, 0x7, 0x5]}}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xb, 0x3, 0x30, 0x4d, 0x16, 0x36, 0xb, 0x4, 0x2, 0x60, 0xb, 0x60, 0x4, 0x48, 0x48, 0xc, 0xb, 0x2, 0x6c, 0xc, 0x30, 0x30, 0x24, 0x36, 0x5, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x28c, 0x5, 0x4, 0x2, 0x6, 0xf84e, 0xa, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1ff, 0xfffb, 0x5, 0x0, 0x6, 0x6, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7d}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9562}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}]}]}]}, 0x964}, 0x1, 0x0, 0x0, 0x4}, 0x8010)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), r1)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0xb8, r4, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc0000000}}}}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x494}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x224}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x840)
r5 = openat$cgroup(r0, &(0x7f0000000f00)='syz1\x00', 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000f40)='cgroup.stat\x00', 0x0, 0x0)
write(r2, &(0x7f0000000f80)="a1b5b077cd12350fb1a9fe3386df37ae2eb8258cab3a8efab6eaf2396655ae280894132df21f37f552d4a845700e90bc4150ad718c705621f21dcc47dbf18bf44c2a0fd34b13541903b803c07641fd080e95402f811dcb59edb6bf501d04effb95e4a41cc9691b5b94", 0x69)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001000)={'veth0_macvtap\x00', 0x1000})
r7 = openat$cgroup_ro(r5, &(0x7f0000001040)='blkio.bfq.io_merged\x00', 0x0, 0x0)
setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000001080)=@gcm_128={{0x303}, "e20a26fa97af386c", "75150bb65797913373aabbb1949b60b0", "5faec56e", "7ee57ef7b2e7d2ac"}, 0x28)
r8 = accept4(r6, &(0x7f00000010c0)=@l2, &(0x7f0000001140)=0x80, 0x80000)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000011c0), r8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x28, r9, 0x205, 0x70bd28, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001300)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x3c, r3, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000001)
sendto$inet6(r0, &(0x7f0000001400)="6e89de6b0d991a74632eaa577fa02fc3fb2670a83bf37d4459e4a5007f93e7811e1e2b85554275882069799c0c68ca3fb6e8f244e4aece0c2952122683f0d9346d682b18465be06fcd4f40bc22c23b489d2d50341524d3513ff2722402df00a6e41af7e5743c84aa2db225f5095962b1a9e3a85264", 0x75, 0x8000, &(0x7f0000001480)={0xa, 0x4e20, 0xa, @rand_addr=' \x01\x00', 0x4}, 0x1c)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000014c0)={'veth1_to_bridge\x00', 0x400})
connect$inet6(r0, &(0x7f0000001500)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x7}, 0x1c)
sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x30, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x1, @bearer=@udp='udp:syz2\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x48c0}, 0x4000050)

28.195275292s ago: executing program 0 (id=1223):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="ad73364256", 0x5)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'erspan0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000001c0)=')\x03,\x00'}, 0x30)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0xc8, 0x8, 0x180, 0x5803, 0x2a0, 0x2e8, 0x2e8, 0x2a0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x118, 0x180, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@pkttype={{0x28}, {0x7, 0xddad}}, @common=@dst={{0x48}, {0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x3a, 0x80, 0x6, 0x1, 0x3ff, 0x2018, 0x1008}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)

27.833349271s ago: executing program 2 (id=1849):
r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800)
ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xfffd, @default, @bpq0, 0x1, [@null, @default, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x690303, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x5, 0x4)
sendto$inet6(r0, &(0x7f0000000140)="7ef6c4b53c5a355f2847ed8958d03e08a02e2fb20752c0dffcc9", 0x1a, 0x4000000, &(0x7f0000000180)={0xa, 0x4e23, 0x7, @mcast2, 0x1}, 0x1c)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r3, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3e6, 0x56}}}}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x5}, @NL80211_ATTR_TWT_RESPONDER={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000d00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2001}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000340)={0x964, r3, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x434, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x12}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6e}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6f}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff8}]}, {0x1fc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x68, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x3, 0x7}, {0x0, 0x7}, {0x4}, {0x0, 0x1}, {0x1, 0xa}, {0x5, 0x4}, {0x3, 0x4}, {0x1, 0x8}, {0x2}, {0x7, 0x6}, {0x1, 0x5}, {0x0, 0x9}, {0x1, 0x6}, {0x6, 0x8}, {0x1, 0x9}, {0x7, 0x5}, {0x5, 0x9}, {0x1, 0x2}, {0x2, 0x3}, {0x4, 0x4}, {0x0, 0x9}, {0x4, 0x8}, {0x3, 0x9}, {0x7}, {0x3, 0x3}, {0x4, 0x5}, {0x3, 0x1}, {0x0, 0x5}, {0x1, 0x5}, {0x0, 0xa}, {0x5, 0x4}, {0x7}, {0x4, 0x5}, {0x4, 0x3}, {0x6, 0x4}, {0x7, 0x9}, {0x2}, {0x4, 0xa}, {0x0, 0x2}, {0x3, 0x3}, {0x4}, {0x5, 0x7}, {0x4, 0x4}, {0x7, 0x4}, {0x2}, {0x2}, {0x4, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xfffc, 0xb, 0x2, 0x4, 0x5, 0x8, 0x2]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x7, 0x3, 0x0, 0x100, 0x651, 0x80, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6fd2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x14c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4a, 0x2, [{0x6, 0x8}, {0x1, 0x7}, {0x6}, {0x7, 0x9}, {0x6, 0x8}, {0x2, 0x6}, {0x3, 0x5}, {0x3, 0x4}, {0x0, 0x5}, {0x0, 0x1}, {0x3, 0x7}, {0x7, 0x3}, {0x2, 0x6}, {0x0, 0x5}, {0x2, 0x1}, {}, {0x3, 0x4}, {0x2}, {0x6, 0x6}, {0x3, 0x8}, {0x1, 0x1}, {0x2, 0x3}, {0x2}, {0x4, 0xa}, {0x5, 0x1}, {0x7, 0xa}, {0x6, 0x4}, {0x6, 0x6}, {0x6, 0x6}, {0x3, 0x2}, {0x0, 0x3}, {0x5, 0x3}, {0x3, 0x5}, {0x7, 0x3}, {0x1, 0x1}, {0x4, 0x3}, {0x1, 0x3}, {0x0, 0x3}, {0x1, 0x2}, {0x4}, {0x5, 0x3}, {0x7, 0x4}, {}, {0x2, 0x5}, {0x5, 0x3}, {0x4, 0x3}, {0x1, 0x7}, {0x2, 0x5}, {0x0, 0x5}, {0x5, 0x4}, {0x4, 0x4}, {0x6}, {0x7, 0x2}, {0x0, 0x1}, {0x4}, {0x5, 0x8}, {0x0, 0x9}, {0x1, 0x4}, {0x7, 0x7}, {0x6, 0x6}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x3}, {0x5, 0xa}, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x7}, {0x3, 0x5}, {0x7, 0xa}, {0x4, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x88, 0x7fff, 0x5, 0x98, 0x9b, 0x81, 0x9, 0x7f]}}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x2}, {0x3, 0x1}, {0x2, 0x7}, {0x0, 0x5}, {0x6, 0x2}, {0x4, 0x7}, {0x3, 0x2}, {0x3, 0x7}, {0x0, 0x2}, {0x2, 0x7}, {0x5, 0xa}, {0x2}, {0x0, 0x2}, {0x1, 0x9}, {0x5, 0x2}, {0x1}, {0x1, 0x6}, {0x3, 0x8}, {0x5, 0x9}, {0x2, 0x4}, {0x7, 0x1}, {0x2, 0x2}, {0x5}, {0x3}, {0x5, 0x1}, {0x7, 0x9}, {0x0, 0x5}, {0x1, 0x4}, {0x6, 0x8}, {0x6, 0x6}, {0x2, 0x8}, {0x3}, {0x7, 0x7}, {0x5, 0x8}, {0x6, 0x4}, {0x1, 0x1}, {}, {0x0, 0xa}, {0x6, 0x1}, {0x5, 0x6}, {0x1, 0x7}, {0x0, 0x4}, {0x4, 0x2}, {0x7}, {0x1, 0x4}, {0x3, 0x8}, {0x1, 0x4}, {0x4, 0x9}, {0x4}, {0x4, 0x2}, {0x0, 0x8}, {0x2, 0x2}, {0x2, 0x7}, {0x5}, {0x0, 0x1}, {}, {0x0, 0x6}, {0x0, 0x4}, {0x2, 0x8}, {0x1, 0x6}, {0x5, 0x5}, {0x5, 0x5}, {0x4, 0x8}, {0x6, 0x2}, {0x0, 0xa}, {0x1, 0x8}, {0x1, 0x7}, {0x4, 0x6}, {0x6}, {0x7}, {0x0, 0x5}, {0x0, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x5, 0x1}, {0x5, 0x3}, {0x2, 0x5}, {0x5, 0x5}, {0x0, 0x6}, {0x1}, {0x4, 0x5}, {0x6, 0x8}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x3}, {0x0, 0x5}, {0x2, 0x8}, {0x6, 0x5}, {0x1, 0x4}, {0x6, 0x4}, {0x2, 0x9}, {0x7, 0x6}, {0x4}, {0x0, 0x4}, {0x7, 0x8}, {0x3, 0x3}, {0x6, 0x3}, {0x6, 0xa}, {0x3, 0x9}, {0x5, 0x3}, {0x6, 0x2}, {0x4}, {0x4, 0x7}, {0x6, 0x17}]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x37, 0x2, [{0x2, 0x4}, {0x3}, {0x2, 0x7}, {0x1, 0x2}, {0x3, 0x5}, {0x6, 0x5}, {0x1, 0x4}, {0x1}, {0x6, 0x4}, {0x0, 0x9}, {0x3, 0x9}, {0x4, 0x8}, {0x0, 0x9}, {0x1, 0x4}, {0x0, 0x1}, {0x4, 0x5}, {0x6, 0xa}, {0x6, 0x3}, {0x3, 0x2}, {0x5, 0x7}, {0x1, 0x1}, {0x5}, {0x4, 0x5}, {}, {0x4, 0x3}, {0x5, 0x3}, {0x1, 0x4}, {0x3, 0x1}, {0x5, 0x4}, {0x7, 0x8}, {0x7, 0x8}, {0x5, 0xa}, {0x0, 0x1}, {0x0, 0x2}, {0x6, 0x4}, {0x2, 0x9}, {0x4, 0x4}, {0x6}, {0x0, 0xa}, {0x3, 0x4}, {0x7, 0x9}, {0x3, 0x1}, {0x5, 0x8}, {0x5, 0x5}, {0x4, 0x8}, {0x2, 0xa}, {0x1}, {0x6, 0x1}, {0x1}, {0x0, 0x1}, {0x7, 0x7}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x1, 0x1b, 0x6c, 0x16, 0x7b, 0x60, 0x30, 0x16, 0x1, 0x3, 0x2, 0x2, 0x30, 0x1, 0x18, 0x1b, 0x36, 0xc, 0x12, 0x6c, 0x4, 0x9, 0x36, 0x6, 0x48, 0x36, 0xb, 0x48, 0x4, 0x24]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}]}, {0x168, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xee, 0x4f, 0x80, 0x3, 0x3, 0xbb, 0xb2, 0x9]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x0, 0x3]}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7cf, 0x9, 0x6, 0x3, 0x2, 0x3, 0x3, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x7}, {0x0, 0x6}, {}, {0x3, 0x5}, {0x4, 0x7}, {0x1, 0x5}, {0x1, 0x7}, {0x0, 0x1}, {0x6, 0x7}, {0x3, 0x1}, {0x3, 0x7}, {0x3}, {0x2, 0x3}, {0x3, 0x6}, {0x0, 0x5}, {0x2, 0x7}, {0x5, 0x5}, {0x1, 0x3}, {0x0, 0x4}, {}, {0x4, 0x8}, {0x3}, {0x2, 0x3}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x4}, {0x4, 0x8}, {0x4, 0x1d}, {0x6, 0x3}, {0x1, 0x5}, {0x4, 0x2}, {0x1, 0x3}, {0x5, 0x2}, {0x7, 0x7}, {0x6, 0x2}, {0x7, 0x5}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x24, 0x30, 0xc, 0x36, 0x9, 0x9, 0x1, 0x754fb99b0e0b0239, 0x36, 0x5, 0x6c, 0x12, 0x3, 0x36, 0x48, 0x60, 0x6, 0x5, 0x30, 0x4, 0xc, 0x2, 0x1, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xff, 0x2, 0xd, 0x6, 0xff81, 0x0, 0x4]}}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1a5, 0x2, 0xffc0, 0xcc3f, 0x6, 0x81, 0xdd4, 0x6]}}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x2, 0x6}, {0x5, 0x7}, {0x2, 0x4}, {0x5}, {0x0, 0x3}, {0x7, 0xa}, {0x3}, {0x4, 0x8}, {0x7, 0x6}, {0x3, 0x6}, {0x1, 0x7}, {0x0, 0x8}, {0x0, 0xe}, {0x5, 0x9}, {0x5, 0x9}, {0x1}, {0x4, 0x1}, {0x1, 0x9}, {0x3, 0x8}, {0x5, 0x2}, {}, {0x2, 0x7}, {0x3, 0x3}, {}, {0x0, 0x2}, {0x1, 0xa}, {0x6, 0x9}, {0x0, 0x4}, {0x0, 0x2}, {0x6, 0x8}, {0x0, 0x4}, {0x4, 0x8}, {0x2, 0x1}, {0x1, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x1, 0x3}, {0x7}, {0x3, 0x9}, {0x2, 0x5}, {0x2, 0x5}, {0x3, 0x5}, {0x6, 0x7}, {0x3, 0x9}, {0x1}, {0x2, 0x9}, {0x6, 0x6}, {0x4, 0x2}, {0x2, 0x1}, {0x0, 0x8}, {0x7, 0x1}, {0x0, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1b, 0x16, 0xc, 0x6, 0x3, 0x30, 0x2, 0x16, 0x0, 0x9, 0x12, 0x12, 0x2, 0x3, 0x0, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x74, 0x2, 0x5, 0x7, 0x2, 0x100, 0xfff]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x0, 0x3, 0x6c, 0x1c, 0x4, 0x1b, 0x16, 0x6c, 0x6, 0x9, 0x5, 0xb, 0x6, 0x48, 0x5, 0x30, 0xc, 0x18, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x19}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcd}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000000000000000}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1c}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xf}]}]}, @NL80211_ATTR_TID_CONFIG={0x51c, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x62}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xde}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x1d4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x400}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1ac, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x642, 0x6, 0x0, 0xfc, 0x5, 0xfff, 0x4, 0xb]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1b, 0x2, 0x60, 0x6, 0x9, 0x4, 0xc, 0x3, 0x60, 0x6c, 0xc, 0x48, 0x18, 0x0, 0x24, 0x6c, 0x9, 0x1b, 0x36, 0xc, 0x2, 0x8aa429871800c742, 0xb, 0x13, 0x0, 0x60, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xde8, 0x3a41, 0x0, 0x6, 0x10, 0x9, 0x3, 0x6]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x2, 0x6, 0x1, 0x7, 0x1b, 0x9, 0x1b, 0x24, 0x0, 0x11, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7, 0x5, 0x2, 0x1000, 0x1, 0x9, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5f, 0x8, 0x0, 0x3, 0x8, 0xd, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8, 0xe, 0x4ef2, 0x9, 0x8001, 0x6, 0x660]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6b, 0xb, 0x1b, 0x4, 0x3, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbad2, 0x1, 0xb5cc, 0x1000, 0x401, 0x9, 0x7, 0x1d]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x97c, 0x3015, 0x1000, 0x8, 0x3, 0x2, 0x8b]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x1, 0x7}, {0x6, 0x7}, {0x3, 0x1d}, {0x2, 0x7}, {0x4, 0x5}, {0x1, 0x9}, {0x5, 0x6}, {0x0, 0x4}, {0x1, 0x5}, {0x6, 0x3}, {0x1, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x6, 0x4}, {0x1, 0x4}, {0x7, 0x6}, {0x5, 0x9}, {0x7, 0x2}, {0x6}, {0x2}, {0x7, 0x1}, {0x6, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6000, 0x40, 0x1, 0x44, 0x8, 0xf, 0x81]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x108, 0x6, 0x7f, 0x3e, 0x3, 0x10, 0x7]}}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x8bb3, 0x5, 0x138, 0x7, 0xd7, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0x3, 0xfffd, 0x4, 0x8, 0x9, 0xc]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcf}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x2e8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2a8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xd0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0xf, 0x9, 0x9, 0x7f, 0x2, 0x7fff, 0x1000]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xb, 0x1, 0x16, 0x5, 0xc, 0x21, 0x18, 0xc, 0x60, 0x5, 0x16, 0x0, 0xc, 0x6c, 0x4, 0x24, 0x6, 0x0]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x33a, 0x8, 0x7, 0xb, 0xfffc, 0xceb, 0x9, 0x7fff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0x3, 0xc, 0x0, 0xfffc, 0x6, 0x9]}}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x1, 0x6}, {0x3, 0x5}, {0x6, 0x5}, {0x4, 0x8}, {0x7, 0x8}, {0x4, 0x4}, {0x3, 0x3}, {0x0, 0x7}, {0x2}, {0x2, 0x4}, {0x5, 0x1}, {0x1, 0x5}, {0x6}, {0x0, 0xa}, {0x0, 0x2}, {0x0, 0x6}, {0x6, 0x8}, {0x4, 0x5}, {0x0, 0x4}, {0x1, 0xa}, {0x1}, {0x2, 0x6}, {0x1, 0x1}, {0x0, 0x5}, {0x5, 0x3}, {0x2, 0x8}, {0x3, 0x8}, {0x0, 0xa}, {0x5, 0x7}, {0x2, 0x3}, {0x2}, {0x2, 0xa}, {0x1, 0xa}, {0x0, 0x4}, {0x1, 0x7}]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x1}, {0x7, 0xa}, {0x3, 0x4}, {0x0, 0x5}, {0x2, 0x6}, {0x1, 0x3}, {}, {0x2, 0x9}, {0x1, 0x2}, {0x3}, {0x5, 0x3}, {0x5, 0x1}, {0x7, 0x3}, {0x3}, {0x1, 0xa}, {0x6, 0x5}, {0x5, 0x7}, {0x2, 0x5}, {}, {0x0, 0x1}, {0x7, 0xa}, {0x0, 0x8}, {0x5, 0x7}, {0x0, 0x7}, {0x6, 0x7}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x4}, {0x6, 0x1}, {0x6, 0x1}, {0x4, 0x2}, {0x0, 0x7}, {0x4, 0x5}, {0x2, 0x8}, {0x0, 0x1}, {0x3, 0x8}, {0x0, 0x3}, {0x3, 0x9}, {0x1, 0x9}, {0x0, 0x5}, {0x7, 0x2}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x9}, {0x5, 0x2}, {0x3, 0x2}, {0x1, 0x9}, {0x3, 0x3}, {0x0, 0xa}, {0x5, 0x1}, {0x0, 0x2}, {0x7, 0x7}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0x6, 0xffff, 0x101, 0xf8, 0xf841, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x2f1, 0x3, 0xd, 0x2e98, 0xbe, 0xd, 0x3ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x4, 0xfff, 0x292e, 0x8, 0x101, 0x3]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x4, 0x4}, {0x1, 0x6}, {0x5, 0xa}, {0x6, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x2, 0xa}, {0x1, 0x7}, {0x5, 0x6}, {0x0, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x0, 0xa}, {}, {0x7}, {0x5, 0x4}, {0x5, 0x5}, {0x5, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x4, 0x4}, {0x0, 0x4}, {0x1, 0x6}, {0x6, 0x7}, {0x4, 0x5}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x6}, {0x5, 0xa}, {0x4, 0x2}, {0x2, 0x5}, {0x7, 0x4}, {0x7, 0x5}, {0x0, 0x4}, {0x3, 0x7}, {0x0, 0x6}, {0x0, 0x8}, {0x0, 0x9}, {0x7}, {0x0, 0x6}, {0x0, 0x7}, {0x5, 0x1}, {0x4, 0x6}, {0x4}, {0x6, 0x4}, {0x1, 0x7}, {0x0, 0x4}, {0x6, 0x1}, {0x0, 0x6}, {0x7, 0x3}]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x14, 0x2, [{0x7}, {0x5}, {0x7, 0x1}, {0x0, 0x2}, {0x2, 0x2}, {0x6, 0x9}, {0x3, 0x8}, {}, {0x0, 0x2}, {0x3, 0xa}, {0x1, 0x3}, {0x4, 0x8}, {0x1, 0x1}, {0x4, 0x7}, {0x3, 0x5}, {0x7}]}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x6, 0x1ff, 0x7, 0x4, 0x7d2, 0xffe0, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x370, 0x5, 0x7, 0x6f0, 0x6, 0xffee, 0xe]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x7, 0x8}, {0x4, 0x3}, {0x1, 0x9}, {0x4, 0x3}, {0x6, 0x4}, {0x1, 0x5}, {0x7, 0x7}, {0x3, 0x2}, {0x7, 0x3}, {0x1, 0x1}, {0x6, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xb, 0x4b, 0x9, 0x6, 0xc, 0x3, 0x3, 0x12, 0xc, 0x6c, 0x2, 0x48, 0x2, 0x1, 0x1b, 0x36, 0x3, 0x54, 0x4, 0x30, 0x36, 0x2, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x2, 0x8}, {0x0, 0xa}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x7}, {0x2, 0x3}, {0x7, 0x2}, {0x1, 0x8}, {0x6, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x6, 0x0, 0x5fe9, 0x6, 0xf, 0x6, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0x280, 0xfffb, 0x1, 0x4, 0x7, 0x5]}}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xb, 0x3, 0x30, 0x4d, 0x16, 0x36, 0xb, 0x4, 0x2, 0x60, 0xb, 0x60, 0x4, 0x48, 0x48, 0xc, 0xb, 0x2, 0x6c, 0xc, 0x30, 0x30, 0x24, 0x36, 0x5, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x28c, 0x5, 0x4, 0x2, 0x6, 0xf84e, 0xa, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1ff, 0xfffb, 0x5, 0x0, 0x6, 0x6, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7d}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9562}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}]}]}]}, 0x964}, 0x1, 0x0, 0x0, 0x4}, 0x8010)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), r1)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0xb8, r4, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc0000000}}}}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x494}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x224}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x840)
r5 = openat$cgroup(r0, &(0x7f0000000f00)='syz1\x00', 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000f40)='cgroup.stat\x00', 0x0, 0x0)
write(r2, &(0x7f0000000f80)="a1b5b077cd12350fb1a9fe3386df37ae2eb8258cab3a8efab6eaf2396655ae280894132df21f37f552d4a845700e90bc4150ad718c705621f21dcc47dbf18bf44c2a0fd34b13541903b803c07641fd080e95402f811dcb59edb6bf501d04effb95e4a41cc9691b5b94", 0x69)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001000)={'veth0_macvtap\x00', 0x1000})
r7 = openat$cgroup_ro(r5, &(0x7f0000001040)='blkio.bfq.io_merged\x00', 0x0, 0x0)
setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000001080)=@gcm_128={{0x303}, "e20a26fa97af386c", "75150bb65797913373aabbb1949b60b0", "5faec56e", "7ee57ef7b2e7d2ac"}, 0x28)
r8 = accept4(r6, &(0x7f00000010c0)=@l2, &(0x7f0000001140)=0x80, 0x80000)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000011c0), r8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x28, r9, 0x205, 0x70bd28, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001300)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x3c, r3, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000001)
sendto$inet6(r0, &(0x7f0000001400)="6e89de6b0d991a74632eaa577fa02fc3fb2670a83bf37d4459e4a5007f93e7811e1e2b85554275882069799c0c68ca3fb6e8f244e4aece0c2952122683f0d9346d682b18465be06fcd4f40bc22c23b489d2d50341524d3513ff2722402df00a6e41af7e5743c84aa2db225f5095962b1a9e3a85264", 0x75, 0x8000, &(0x7f0000001480)={0xa, 0x4e20, 0xa, @rand_addr=' \x01\x00', 0x4}, 0x1c)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000014c0)={'veth1_to_bridge\x00', 0x400})
connect$inet6(r0, &(0x7f0000001500)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x7}, 0x1c)
sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x30, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x1, @bearer=@udp='udp:syz2\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x48c0}, 0x4000050)

20.131305576s ago: executing program 0 (id=1223):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="ad73364256", 0x5)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'erspan0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000001c0)=')\x03,\x00'}, 0x30)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0xc8, 0x8, 0x180, 0x5803, 0x2a0, 0x2e8, 0x2e8, 0x2a0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x118, 0x180, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@pkttype={{0x28}, {0x7, 0xddad}}, @common=@dst={{0x48}, {0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x3a, 0x80, 0x6, 0x1, 0x3ff, 0x2018, 0x1008}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)

19.887477384s ago: executing program 2 (id=1849):
r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800)
ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xfffd, @default, @bpq0, 0x1, [@null, @default, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x690303, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x5, 0x4)
sendto$inet6(r0, &(0x7f0000000140)="7ef6c4b53c5a355f2847ed8958d03e08a02e2fb20752c0dffcc9", 0x1a, 0x4000000, &(0x7f0000000180)={0xa, 0x4e23, 0x7, @mcast2, 0x1}, 0x1c)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r3, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3e6, 0x56}}}}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x5}, @NL80211_ATTR_TWT_RESPONDER={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000d00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2001}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000340)={0x964, r3, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x434, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x12}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6e}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6f}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff8}]}, {0x1fc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x68, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x3, 0x7}, {0x0, 0x7}, {0x4}, {0x0, 0x1}, {0x1, 0xa}, {0x5, 0x4}, {0x3, 0x4}, {0x1, 0x8}, {0x2}, {0x7, 0x6}, {0x1, 0x5}, {0x0, 0x9}, {0x1, 0x6}, {0x6, 0x8}, {0x1, 0x9}, {0x7, 0x5}, {0x5, 0x9}, {0x1, 0x2}, {0x2, 0x3}, {0x4, 0x4}, {0x0, 0x9}, {0x4, 0x8}, {0x3, 0x9}, {0x7}, {0x3, 0x3}, {0x4, 0x5}, {0x3, 0x1}, {0x0, 0x5}, {0x1, 0x5}, {0x0, 0xa}, {0x5, 0x4}, {0x7}, {0x4, 0x5}, {0x4, 0x3}, {0x6, 0x4}, {0x7, 0x9}, {0x2}, {0x4, 0xa}, {0x0, 0x2}, {0x3, 0x3}, {0x4}, {0x5, 0x7}, {0x4, 0x4}, {0x7, 0x4}, {0x2}, {0x2}, {0x4, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xfffc, 0xb, 0x2, 0x4, 0x5, 0x8, 0x2]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x7, 0x3, 0x0, 0x100, 0x651, 0x80, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6fd2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x14c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4a, 0x2, [{0x6, 0x8}, {0x1, 0x7}, {0x6}, {0x7, 0x9}, {0x6, 0x8}, {0x2, 0x6}, {0x3, 0x5}, {0x3, 0x4}, {0x0, 0x5}, {0x0, 0x1}, {0x3, 0x7}, {0x7, 0x3}, {0x2, 0x6}, {0x0, 0x5}, {0x2, 0x1}, {}, {0x3, 0x4}, {0x2}, {0x6, 0x6}, {0x3, 0x8}, {0x1, 0x1}, {0x2, 0x3}, {0x2}, {0x4, 0xa}, {0x5, 0x1}, {0x7, 0xa}, {0x6, 0x4}, {0x6, 0x6}, {0x6, 0x6}, {0x3, 0x2}, {0x0, 0x3}, {0x5, 0x3}, {0x3, 0x5}, {0x7, 0x3}, {0x1, 0x1}, {0x4, 0x3}, {0x1, 0x3}, {0x0, 0x3}, {0x1, 0x2}, {0x4}, {0x5, 0x3}, {0x7, 0x4}, {}, {0x2, 0x5}, {0x5, 0x3}, {0x4, 0x3}, {0x1, 0x7}, {0x2, 0x5}, {0x0, 0x5}, {0x5, 0x4}, {0x4, 0x4}, {0x6}, {0x7, 0x2}, {0x0, 0x1}, {0x4}, {0x5, 0x8}, {0x0, 0x9}, {0x1, 0x4}, {0x7, 0x7}, {0x6, 0x6}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x3}, {0x5, 0xa}, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x7}, {0x3, 0x5}, {0x7, 0xa}, {0x4, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x88, 0x7fff, 0x5, 0x98, 0x9b, 0x81, 0x9, 0x7f]}}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x2}, {0x3, 0x1}, {0x2, 0x7}, {0x0, 0x5}, {0x6, 0x2}, {0x4, 0x7}, {0x3, 0x2}, {0x3, 0x7}, {0x0, 0x2}, {0x2, 0x7}, {0x5, 0xa}, {0x2}, {0x0, 0x2}, {0x1, 0x9}, {0x5, 0x2}, {0x1}, {0x1, 0x6}, {0x3, 0x8}, {0x5, 0x9}, {0x2, 0x4}, {0x7, 0x1}, {0x2, 0x2}, {0x5}, {0x3}, {0x5, 0x1}, {0x7, 0x9}, {0x0, 0x5}, {0x1, 0x4}, {0x6, 0x8}, {0x6, 0x6}, {0x2, 0x8}, {0x3}, {0x7, 0x7}, {0x5, 0x8}, {0x6, 0x4}, {0x1, 0x1}, {}, {0x0, 0xa}, {0x6, 0x1}, {0x5, 0x6}, {0x1, 0x7}, {0x0, 0x4}, {0x4, 0x2}, {0x7}, {0x1, 0x4}, {0x3, 0x8}, {0x1, 0x4}, {0x4, 0x9}, {0x4}, {0x4, 0x2}, {0x0, 0x8}, {0x2, 0x2}, {0x2, 0x7}, {0x5}, {0x0, 0x1}, {}, {0x0, 0x6}, {0x0, 0x4}, {0x2, 0x8}, {0x1, 0x6}, {0x5, 0x5}, {0x5, 0x5}, {0x4, 0x8}, {0x6, 0x2}, {0x0, 0xa}, {0x1, 0x8}, {0x1, 0x7}, {0x4, 0x6}, {0x6}, {0x7}, {0x0, 0x5}, {0x0, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x5, 0x1}, {0x5, 0x3}, {0x2, 0x5}, {0x5, 0x5}, {0x0, 0x6}, {0x1}, {0x4, 0x5}, {0x6, 0x8}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x3}, {0x0, 0x5}, {0x2, 0x8}, {0x6, 0x5}, {0x1, 0x4}, {0x6, 0x4}, {0x2, 0x9}, {0x7, 0x6}, {0x4}, {0x0, 0x4}, {0x7, 0x8}, {0x3, 0x3}, {0x6, 0x3}, {0x6, 0xa}, {0x3, 0x9}, {0x5, 0x3}, {0x6, 0x2}, {0x4}, {0x4, 0x7}, {0x6, 0x17}]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x37, 0x2, [{0x2, 0x4}, {0x3}, {0x2, 0x7}, {0x1, 0x2}, {0x3, 0x5}, {0x6, 0x5}, {0x1, 0x4}, {0x1}, {0x6, 0x4}, {0x0, 0x9}, {0x3, 0x9}, {0x4, 0x8}, {0x0, 0x9}, {0x1, 0x4}, {0x0, 0x1}, {0x4, 0x5}, {0x6, 0xa}, {0x6, 0x3}, {0x3, 0x2}, {0x5, 0x7}, {0x1, 0x1}, {0x5}, {0x4, 0x5}, {}, {0x4, 0x3}, {0x5, 0x3}, {0x1, 0x4}, {0x3, 0x1}, {0x5, 0x4}, {0x7, 0x8}, {0x7, 0x8}, {0x5, 0xa}, {0x0, 0x1}, {0x0, 0x2}, {0x6, 0x4}, {0x2, 0x9}, {0x4, 0x4}, {0x6}, {0x0, 0xa}, {0x3, 0x4}, {0x7, 0x9}, {0x3, 0x1}, {0x5, 0x8}, {0x5, 0x5}, {0x4, 0x8}, {0x2, 0xa}, {0x1}, {0x6, 0x1}, {0x1}, {0x0, 0x1}, {0x7, 0x7}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x1, 0x1b, 0x6c, 0x16, 0x7b, 0x60, 0x30, 0x16, 0x1, 0x3, 0x2, 0x2, 0x30, 0x1, 0x18, 0x1b, 0x36, 0xc, 0x12, 0x6c, 0x4, 0x9, 0x36, 0x6, 0x48, 0x36, 0xb, 0x48, 0x4, 0x24]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}]}, {0x168, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xee, 0x4f, 0x80, 0x3, 0x3, 0xbb, 0xb2, 0x9]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x0, 0x3]}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7cf, 0x9, 0x6, 0x3, 0x2, 0x3, 0x3, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x7}, {0x0, 0x6}, {}, {0x3, 0x5}, {0x4, 0x7}, {0x1, 0x5}, {0x1, 0x7}, {0x0, 0x1}, {0x6, 0x7}, {0x3, 0x1}, {0x3, 0x7}, {0x3}, {0x2, 0x3}, {0x3, 0x6}, {0x0, 0x5}, {0x2, 0x7}, {0x5, 0x5}, {0x1, 0x3}, {0x0, 0x4}, {}, {0x4, 0x8}, {0x3}, {0x2, 0x3}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x4}, {0x4, 0x8}, {0x4, 0x1d}, {0x6, 0x3}, {0x1, 0x5}, {0x4, 0x2}, {0x1, 0x3}, {0x5, 0x2}, {0x7, 0x7}, {0x6, 0x2}, {0x7, 0x5}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x24, 0x30, 0xc, 0x36, 0x9, 0x9, 0x1, 0x754fb99b0e0b0239, 0x36, 0x5, 0x6c, 0x12, 0x3, 0x36, 0x48, 0x60, 0x6, 0x5, 0x30, 0x4, 0xc, 0x2, 0x1, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xff, 0x2, 0xd, 0x6, 0xff81, 0x0, 0x4]}}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1a5, 0x2, 0xffc0, 0xcc3f, 0x6, 0x81, 0xdd4, 0x6]}}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x2, 0x6}, {0x5, 0x7}, {0x2, 0x4}, {0x5}, {0x0, 0x3}, {0x7, 0xa}, {0x3}, {0x4, 0x8}, {0x7, 0x6}, {0x3, 0x6}, {0x1, 0x7}, {0x0, 0x8}, {0x0, 0xe}, {0x5, 0x9}, {0x5, 0x9}, {0x1}, {0x4, 0x1}, {0x1, 0x9}, {0x3, 0x8}, {0x5, 0x2}, {}, {0x2, 0x7}, {0x3, 0x3}, {}, {0x0, 0x2}, {0x1, 0xa}, {0x6, 0x9}, {0x0, 0x4}, {0x0, 0x2}, {0x6, 0x8}, {0x0, 0x4}, {0x4, 0x8}, {0x2, 0x1}, {0x1, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x1, 0x3}, {0x7}, {0x3, 0x9}, {0x2, 0x5}, {0x2, 0x5}, {0x3, 0x5}, {0x6, 0x7}, {0x3, 0x9}, {0x1}, {0x2, 0x9}, {0x6, 0x6}, {0x4, 0x2}, {0x2, 0x1}, {0x0, 0x8}, {0x7, 0x1}, {0x0, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1b, 0x16, 0xc, 0x6, 0x3, 0x30, 0x2, 0x16, 0x0, 0x9, 0x12, 0x12, 0x2, 0x3, 0x0, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x74, 0x2, 0x5, 0x7, 0x2, 0x100, 0xfff]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x0, 0x3, 0x6c, 0x1c, 0x4, 0x1b, 0x16, 0x6c, 0x6, 0x9, 0x5, 0xb, 0x6, 0x48, 0x5, 0x30, 0xc, 0x18, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x19}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcd}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000000000000000}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1c}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xf}]}]}, @NL80211_ATTR_TID_CONFIG={0x51c, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x62}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xde}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x1d4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x400}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1ac, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x642, 0x6, 0x0, 0xfc, 0x5, 0xfff, 0x4, 0xb]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1b, 0x2, 0x60, 0x6, 0x9, 0x4, 0xc, 0x3, 0x60, 0x6c, 0xc, 0x48, 0x18, 0x0, 0x24, 0x6c, 0x9, 0x1b, 0x36, 0xc, 0x2, 0x8aa429871800c742, 0xb, 0x13, 0x0, 0x60, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xde8, 0x3a41, 0x0, 0x6, 0x10, 0x9, 0x3, 0x6]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x2, 0x6, 0x1, 0x7, 0x1b, 0x9, 0x1b, 0x24, 0x0, 0x11, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7, 0x5, 0x2, 0x1000, 0x1, 0x9, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5f, 0x8, 0x0, 0x3, 0x8, 0xd, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8, 0xe, 0x4ef2, 0x9, 0x8001, 0x6, 0x660]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6b, 0xb, 0x1b, 0x4, 0x3, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbad2, 0x1, 0xb5cc, 0x1000, 0x401, 0x9, 0x7, 0x1d]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x97c, 0x3015, 0x1000, 0x8, 0x3, 0x2, 0x8b]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x1, 0x7}, {0x6, 0x7}, {0x3, 0x1d}, {0x2, 0x7}, {0x4, 0x5}, {0x1, 0x9}, {0x5, 0x6}, {0x0, 0x4}, {0x1, 0x5}, {0x6, 0x3}, {0x1, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x6, 0x4}, {0x1, 0x4}, {0x7, 0x6}, {0x5, 0x9}, {0x7, 0x2}, {0x6}, {0x2}, {0x7, 0x1}, {0x6, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6000, 0x40, 0x1, 0x44, 0x8, 0xf, 0x81]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x108, 0x6, 0x7f, 0x3e, 0x3, 0x10, 0x7]}}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x8bb3, 0x5, 0x138, 0x7, 0xd7, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0x3, 0xfffd, 0x4, 0x8, 0x9, 0xc]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcf}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x2e8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2a8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xd0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0xf, 0x9, 0x9, 0x7f, 0x2, 0x7fff, 0x1000]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xb, 0x1, 0x16, 0x5, 0xc, 0x21, 0x18, 0xc, 0x60, 0x5, 0x16, 0x0, 0xc, 0x6c, 0x4, 0x24, 0x6, 0x0]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x33a, 0x8, 0x7, 0xb, 0xfffc, 0xceb, 0x9, 0x7fff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0x3, 0xc, 0x0, 0xfffc, 0x6, 0x9]}}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x1, 0x6}, {0x3, 0x5}, {0x6, 0x5}, {0x4, 0x8}, {0x7, 0x8}, {0x4, 0x4}, {0x3, 0x3}, {0x0, 0x7}, {0x2}, {0x2, 0x4}, {0x5, 0x1}, {0x1, 0x5}, {0x6}, {0x0, 0xa}, {0x0, 0x2}, {0x0, 0x6}, {0x6, 0x8}, {0x4, 0x5}, {0x0, 0x4}, {0x1, 0xa}, {0x1}, {0x2, 0x6}, {0x1, 0x1}, {0x0, 0x5}, {0x5, 0x3}, {0x2, 0x8}, {0x3, 0x8}, {0x0, 0xa}, {0x5, 0x7}, {0x2, 0x3}, {0x2}, {0x2, 0xa}, {0x1, 0xa}, {0x0, 0x4}, {0x1, 0x7}]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x1}, {0x7, 0xa}, {0x3, 0x4}, {0x0, 0x5}, {0x2, 0x6}, {0x1, 0x3}, {}, {0x2, 0x9}, {0x1, 0x2}, {0x3}, {0x5, 0x3}, {0x5, 0x1}, {0x7, 0x3}, {0x3}, {0x1, 0xa}, {0x6, 0x5}, {0x5, 0x7}, {0x2, 0x5}, {}, {0x0, 0x1}, {0x7, 0xa}, {0x0, 0x8}, {0x5, 0x7}, {0x0, 0x7}, {0x6, 0x7}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x4}, {0x6, 0x1}, {0x6, 0x1}, {0x4, 0x2}, {0x0, 0x7}, {0x4, 0x5}, {0x2, 0x8}, {0x0, 0x1}, {0x3, 0x8}, {0x0, 0x3}, {0x3, 0x9}, {0x1, 0x9}, {0x0, 0x5}, {0x7, 0x2}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x9}, {0x5, 0x2}, {0x3, 0x2}, {0x1, 0x9}, {0x3, 0x3}, {0x0, 0xa}, {0x5, 0x1}, {0x0, 0x2}, {0x7, 0x7}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0x6, 0xffff, 0x101, 0xf8, 0xf841, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x2f1, 0x3, 0xd, 0x2e98, 0xbe, 0xd, 0x3ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x4, 0xfff, 0x292e, 0x8, 0x101, 0x3]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x4, 0x4}, {0x1, 0x6}, {0x5, 0xa}, {0x6, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x2, 0xa}, {0x1, 0x7}, {0x5, 0x6}, {0x0, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x0, 0xa}, {}, {0x7}, {0x5, 0x4}, {0x5, 0x5}, {0x5, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x4, 0x4}, {0x0, 0x4}, {0x1, 0x6}, {0x6, 0x7}, {0x4, 0x5}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x6}, {0x5, 0xa}, {0x4, 0x2}, {0x2, 0x5}, {0x7, 0x4}, {0x7, 0x5}, {0x0, 0x4}, {0x3, 0x7}, {0x0, 0x6}, {0x0, 0x8}, {0x0, 0x9}, {0x7}, {0x0, 0x6}, {0x0, 0x7}, {0x5, 0x1}, {0x4, 0x6}, {0x4}, {0x6, 0x4}, {0x1, 0x7}, {0x0, 0x4}, {0x6, 0x1}, {0x0, 0x6}, {0x7, 0x3}]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x14, 0x2, [{0x7}, {0x5}, {0x7, 0x1}, {0x0, 0x2}, {0x2, 0x2}, {0x6, 0x9}, {0x3, 0x8}, {}, {0x0, 0x2}, {0x3, 0xa}, {0x1, 0x3}, {0x4, 0x8}, {0x1, 0x1}, {0x4, 0x7}, {0x3, 0x5}, {0x7}]}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x6, 0x1ff, 0x7, 0x4, 0x7d2, 0xffe0, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x370, 0x5, 0x7, 0x6f0, 0x6, 0xffee, 0xe]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x7, 0x8}, {0x4, 0x3}, {0x1, 0x9}, {0x4, 0x3}, {0x6, 0x4}, {0x1, 0x5}, {0x7, 0x7}, {0x3, 0x2}, {0x7, 0x3}, {0x1, 0x1}, {0x6, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xb, 0x4b, 0x9, 0x6, 0xc, 0x3, 0x3, 0x12, 0xc, 0x6c, 0x2, 0x48, 0x2, 0x1, 0x1b, 0x36, 0x3, 0x54, 0x4, 0x30, 0x36, 0x2, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x2, 0x8}, {0x0, 0xa}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x7}, {0x2, 0x3}, {0x7, 0x2}, {0x1, 0x8}, {0x6, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x6, 0x0, 0x5fe9, 0x6, 0xf, 0x6, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0x280, 0xfffb, 0x1, 0x4, 0x7, 0x5]}}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xb, 0x3, 0x30, 0x4d, 0x16, 0x36, 0xb, 0x4, 0x2, 0x60, 0xb, 0x60, 0x4, 0x48, 0x48, 0xc, 0xb, 0x2, 0x6c, 0xc, 0x30, 0x30, 0x24, 0x36, 0x5, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x28c, 0x5, 0x4, 0x2, 0x6, 0xf84e, 0xa, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1ff, 0xfffb, 0x5, 0x0, 0x6, 0x6, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7d}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9562}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}]}]}]}, 0x964}, 0x1, 0x0, 0x0, 0x4}, 0x8010)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), r1)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0xb8, r4, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc0000000}}}}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x494}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x224}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x840)
r5 = openat$cgroup(r0, &(0x7f0000000f00)='syz1\x00', 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000f40)='cgroup.stat\x00', 0x0, 0x0)
write(r2, &(0x7f0000000f80)="a1b5b077cd12350fb1a9fe3386df37ae2eb8258cab3a8efab6eaf2396655ae280894132df21f37f552d4a845700e90bc4150ad718c705621f21dcc47dbf18bf44c2a0fd34b13541903b803c07641fd080e95402f811dcb59edb6bf501d04effb95e4a41cc9691b5b94", 0x69)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001000)={'veth0_macvtap\x00', 0x1000})
r7 = openat$cgroup_ro(r5, &(0x7f0000001040)='blkio.bfq.io_merged\x00', 0x0, 0x0)
setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000001080)=@gcm_128={{0x303}, "e20a26fa97af386c", "75150bb65797913373aabbb1949b60b0", "5faec56e", "7ee57ef7b2e7d2ac"}, 0x28)
r8 = accept4(r6, &(0x7f00000010c0)=@l2, &(0x7f0000001140)=0x80, 0x80000)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000011c0), r8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x28, r9, 0x205, 0x70bd28, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001300)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x3c, r3, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000001)
sendto$inet6(r0, &(0x7f0000001400)="6e89de6b0d991a74632eaa577fa02fc3fb2670a83bf37d4459e4a5007f93e7811e1e2b85554275882069799c0c68ca3fb6e8f244e4aece0c2952122683f0d9346d682b18465be06fcd4f40bc22c23b489d2d50341524d3513ff2722402df00a6e41af7e5743c84aa2db225f5095962b1a9e3a85264", 0x75, 0x8000, &(0x7f0000001480)={0xa, 0x4e20, 0xa, @rand_addr=' \x01\x00', 0x4}, 0x1c)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000014c0)={'veth1_to_bridge\x00', 0x400})
connect$inet6(r0, &(0x7f0000001500)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x7}, 0x1c)
sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x30, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x1, @bearer=@udp='udp:syz2\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x48c0}, 0x4000050)

13.390671342s ago: executing program 0 (id=1223):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="ad73364256", 0x5)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'erspan0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000001c0)=')\x03,\x00'}, 0x30)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0xc8, 0x8, 0x180, 0x5803, 0x2a0, 0x2e8, 0x2e8, 0x2a0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x118, 0x180, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@pkttype={{0x28}, {0x7, 0xddad}}, @common=@dst={{0x48}, {0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x3a, 0x80, 0x6, 0x1, 0x3ff, 0x2018, 0x1008}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)

12.439813245s ago: executing program 2 (id=1849):
r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800)
ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xfffd, @default, @bpq0, 0x1, [@null, @default, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x690303, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x5, 0x4)
sendto$inet6(r0, &(0x7f0000000140)="7ef6c4b53c5a355f2847ed8958d03e08a02e2fb20752c0dffcc9", 0x1a, 0x4000000, &(0x7f0000000180)={0xa, 0x4e23, 0x7, @mcast2, 0x1}, 0x1c)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r3, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3e6, 0x56}}}}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x5}, @NL80211_ATTR_TWT_RESPONDER={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000d00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2001}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000340)={0x964, r3, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x434, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x12}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6e}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6f}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff8}]}, {0x1fc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x68, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x3, 0x7}, {0x0, 0x7}, {0x4}, {0x0, 0x1}, {0x1, 0xa}, {0x5, 0x4}, {0x3, 0x4}, {0x1, 0x8}, {0x2}, {0x7, 0x6}, {0x1, 0x5}, {0x0, 0x9}, {0x1, 0x6}, {0x6, 0x8}, {0x1, 0x9}, {0x7, 0x5}, {0x5, 0x9}, {0x1, 0x2}, {0x2, 0x3}, {0x4, 0x4}, {0x0, 0x9}, {0x4, 0x8}, {0x3, 0x9}, {0x7}, {0x3, 0x3}, {0x4, 0x5}, {0x3, 0x1}, {0x0, 0x5}, {0x1, 0x5}, {0x0, 0xa}, {0x5, 0x4}, {0x7}, {0x4, 0x5}, {0x4, 0x3}, {0x6, 0x4}, {0x7, 0x9}, {0x2}, {0x4, 0xa}, {0x0, 0x2}, {0x3, 0x3}, {0x4}, {0x5, 0x7}, {0x4, 0x4}, {0x7, 0x4}, {0x2}, {0x2}, {0x4, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xfffc, 0xb, 0x2, 0x4, 0x5, 0x8, 0x2]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x7, 0x3, 0x0, 0x100, 0x651, 0x80, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6fd2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x14c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4a, 0x2, [{0x6, 0x8}, {0x1, 0x7}, {0x6}, {0x7, 0x9}, {0x6, 0x8}, {0x2, 0x6}, {0x3, 0x5}, {0x3, 0x4}, {0x0, 0x5}, {0x0, 0x1}, {0x3, 0x7}, {0x7, 0x3}, {0x2, 0x6}, {0x0, 0x5}, {0x2, 0x1}, {}, {0x3, 0x4}, {0x2}, {0x6, 0x6}, {0x3, 0x8}, {0x1, 0x1}, {0x2, 0x3}, {0x2}, {0x4, 0xa}, {0x5, 0x1}, {0x7, 0xa}, {0x6, 0x4}, {0x6, 0x6}, {0x6, 0x6}, {0x3, 0x2}, {0x0, 0x3}, {0x5, 0x3}, {0x3, 0x5}, {0x7, 0x3}, {0x1, 0x1}, {0x4, 0x3}, {0x1, 0x3}, {0x0, 0x3}, {0x1, 0x2}, {0x4}, {0x5, 0x3}, {0x7, 0x4}, {}, {0x2, 0x5}, {0x5, 0x3}, {0x4, 0x3}, {0x1, 0x7}, {0x2, 0x5}, {0x0, 0x5}, {0x5, 0x4}, {0x4, 0x4}, {0x6}, {0x7, 0x2}, {0x0, 0x1}, {0x4}, {0x5, 0x8}, {0x0, 0x9}, {0x1, 0x4}, {0x7, 0x7}, {0x6, 0x6}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x3}, {0x5, 0xa}, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x7}, {0x3, 0x5}, {0x7, 0xa}, {0x4, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x88, 0x7fff, 0x5, 0x98, 0x9b, 0x81, 0x9, 0x7f]}}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x2}, {0x3, 0x1}, {0x2, 0x7}, {0x0, 0x5}, {0x6, 0x2}, {0x4, 0x7}, {0x3, 0x2}, {0x3, 0x7}, {0x0, 0x2}, {0x2, 0x7}, {0x5, 0xa}, {0x2}, {0x0, 0x2}, {0x1, 0x9}, {0x5, 0x2}, {0x1}, {0x1, 0x6}, {0x3, 0x8}, {0x5, 0x9}, {0x2, 0x4}, {0x7, 0x1}, {0x2, 0x2}, {0x5}, {0x3}, {0x5, 0x1}, {0x7, 0x9}, {0x0, 0x5}, {0x1, 0x4}, {0x6, 0x8}, {0x6, 0x6}, {0x2, 0x8}, {0x3}, {0x7, 0x7}, {0x5, 0x8}, {0x6, 0x4}, {0x1, 0x1}, {}, {0x0, 0xa}, {0x6, 0x1}, {0x5, 0x6}, {0x1, 0x7}, {0x0, 0x4}, {0x4, 0x2}, {0x7}, {0x1, 0x4}, {0x3, 0x8}, {0x1, 0x4}, {0x4, 0x9}, {0x4}, {0x4, 0x2}, {0x0, 0x8}, {0x2, 0x2}, {0x2, 0x7}, {0x5}, {0x0, 0x1}, {}, {0x0, 0x6}, {0x0, 0x4}, {0x2, 0x8}, {0x1, 0x6}, {0x5, 0x5}, {0x5, 0x5}, {0x4, 0x8}, {0x6, 0x2}, {0x0, 0xa}, {0x1, 0x8}, {0x1, 0x7}, {0x4, 0x6}, {0x6}, {0x7}, {0x0, 0x5}, {0x0, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x5, 0x1}, {0x5, 0x3}, {0x2, 0x5}, {0x5, 0x5}, {0x0, 0x6}, {0x1}, {0x4, 0x5}, {0x6, 0x8}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x3}, {0x0, 0x5}, {0x2, 0x8}, {0x6, 0x5}, {0x1, 0x4}, {0x6, 0x4}, {0x2, 0x9}, {0x7, 0x6}, {0x4}, {0x0, 0x4}, {0x7, 0x8}, {0x3, 0x3}, {0x6, 0x3}, {0x6, 0xa}, {0x3, 0x9}, {0x5, 0x3}, {0x6, 0x2}, {0x4}, {0x4, 0x7}, {0x6, 0x17}]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x37, 0x2, [{0x2, 0x4}, {0x3}, {0x2, 0x7}, {0x1, 0x2}, {0x3, 0x5}, {0x6, 0x5}, {0x1, 0x4}, {0x1}, {0x6, 0x4}, {0x0, 0x9}, {0x3, 0x9}, {0x4, 0x8}, {0x0, 0x9}, {0x1, 0x4}, {0x0, 0x1}, {0x4, 0x5}, {0x6, 0xa}, {0x6, 0x3}, {0x3, 0x2}, {0x5, 0x7}, {0x1, 0x1}, {0x5}, {0x4, 0x5}, {}, {0x4, 0x3}, {0x5, 0x3}, {0x1, 0x4}, {0x3, 0x1}, {0x5, 0x4}, {0x7, 0x8}, {0x7, 0x8}, {0x5, 0xa}, {0x0, 0x1}, {0x0, 0x2}, {0x6, 0x4}, {0x2, 0x9}, {0x4, 0x4}, {0x6}, {0x0, 0xa}, {0x3, 0x4}, {0x7, 0x9}, {0x3, 0x1}, {0x5, 0x8}, {0x5, 0x5}, {0x4, 0x8}, {0x2, 0xa}, {0x1}, {0x6, 0x1}, {0x1}, {0x0, 0x1}, {0x7, 0x7}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x1, 0x1b, 0x6c, 0x16, 0x7b, 0x60, 0x30, 0x16, 0x1, 0x3, 0x2, 0x2, 0x30, 0x1, 0x18, 0x1b, 0x36, 0xc, 0x12, 0x6c, 0x4, 0x9, 0x36, 0x6, 0x48, 0x36, 0xb, 0x48, 0x4, 0x24]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}]}, {0x168, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xee, 0x4f, 0x80, 0x3, 0x3, 0xbb, 0xb2, 0x9]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x0, 0x3]}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7cf, 0x9, 0x6, 0x3, 0x2, 0x3, 0x3, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x7}, {0x0, 0x6}, {}, {0x3, 0x5}, {0x4, 0x7}, {0x1, 0x5}, {0x1, 0x7}, {0x0, 0x1}, {0x6, 0x7}, {0x3, 0x1}, {0x3, 0x7}, {0x3}, {0x2, 0x3}, {0x3, 0x6}, {0x0, 0x5}, {0x2, 0x7}, {0x5, 0x5}, {0x1, 0x3}, {0x0, 0x4}, {}, {0x4, 0x8}, {0x3}, {0x2, 0x3}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x4}, {0x4, 0x8}, {0x4, 0x1d}, {0x6, 0x3}, {0x1, 0x5}, {0x4, 0x2}, {0x1, 0x3}, {0x5, 0x2}, {0x7, 0x7}, {0x6, 0x2}, {0x7, 0x5}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x24, 0x30, 0xc, 0x36, 0x9, 0x9, 0x1, 0x754fb99b0e0b0239, 0x36, 0x5, 0x6c, 0x12, 0x3, 0x36, 0x48, 0x60, 0x6, 0x5, 0x30, 0x4, 0xc, 0x2, 0x1, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xff, 0x2, 0xd, 0x6, 0xff81, 0x0, 0x4]}}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1a5, 0x2, 0xffc0, 0xcc3f, 0x6, 0x81, 0xdd4, 0x6]}}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x2, 0x6}, {0x5, 0x7}, {0x2, 0x4}, {0x5}, {0x0, 0x3}, {0x7, 0xa}, {0x3}, {0x4, 0x8}, {0x7, 0x6}, {0x3, 0x6}, {0x1, 0x7}, {0x0, 0x8}, {0x0, 0xe}, {0x5, 0x9}, {0x5, 0x9}, {0x1}, {0x4, 0x1}, {0x1, 0x9}, {0x3, 0x8}, {0x5, 0x2}, {}, {0x2, 0x7}, {0x3, 0x3}, {}, {0x0, 0x2}, {0x1, 0xa}, {0x6, 0x9}, {0x0, 0x4}, {0x0, 0x2}, {0x6, 0x8}, {0x0, 0x4}, {0x4, 0x8}, {0x2, 0x1}, {0x1, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x1, 0x3}, {0x7}, {0x3, 0x9}, {0x2, 0x5}, {0x2, 0x5}, {0x3, 0x5}, {0x6, 0x7}, {0x3, 0x9}, {0x1}, {0x2, 0x9}, {0x6, 0x6}, {0x4, 0x2}, {0x2, 0x1}, {0x0, 0x8}, {0x7, 0x1}, {0x0, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1b, 0x16, 0xc, 0x6, 0x3, 0x30, 0x2, 0x16, 0x0, 0x9, 0x12, 0x12, 0x2, 0x3, 0x0, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x74, 0x2, 0x5, 0x7, 0x2, 0x100, 0xfff]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x0, 0x3, 0x6c, 0x1c, 0x4, 0x1b, 0x16, 0x6c, 0x6, 0x9, 0x5, 0xb, 0x6, 0x48, 0x5, 0x30, 0xc, 0x18, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x19}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcd}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000000000000000}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1c}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xf}]}]}, @NL80211_ATTR_TID_CONFIG={0x51c, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x62}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xde}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x1d4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x400}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1ac, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x642, 0x6, 0x0, 0xfc, 0x5, 0xfff, 0x4, 0xb]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1b, 0x2, 0x60, 0x6, 0x9, 0x4, 0xc, 0x3, 0x60, 0x6c, 0xc, 0x48, 0x18, 0x0, 0x24, 0x6c, 0x9, 0x1b, 0x36, 0xc, 0x2, 0x8aa429871800c742, 0xb, 0x13, 0x0, 0x60, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xde8, 0x3a41, 0x0, 0x6, 0x10, 0x9, 0x3, 0x6]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x2, 0x6, 0x1, 0x7, 0x1b, 0x9, 0x1b, 0x24, 0x0, 0x11, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7, 0x5, 0x2, 0x1000, 0x1, 0x9, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5f, 0x8, 0x0, 0x3, 0x8, 0xd, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8, 0xe, 0x4ef2, 0x9, 0x8001, 0x6, 0x660]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6b, 0xb, 0x1b, 0x4, 0x3, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbad2, 0x1, 0xb5cc, 0x1000, 0x401, 0x9, 0x7, 0x1d]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x97c, 0x3015, 0x1000, 0x8, 0x3, 0x2, 0x8b]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x1, 0x7}, {0x6, 0x7}, {0x3, 0x1d}, {0x2, 0x7}, {0x4, 0x5}, {0x1, 0x9}, {0x5, 0x6}, {0x0, 0x4}, {0x1, 0x5}, {0x6, 0x3}, {0x1, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x6, 0x4}, {0x1, 0x4}, {0x7, 0x6}, {0x5, 0x9}, {0x7, 0x2}, {0x6}, {0x2}, {0x7, 0x1}, {0x6, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6000, 0x40, 0x1, 0x44, 0x8, 0xf, 0x81]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x108, 0x6, 0x7f, 0x3e, 0x3, 0x10, 0x7]}}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x8bb3, 0x5, 0x138, 0x7, 0xd7, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0x3, 0xfffd, 0x4, 0x8, 0x9, 0xc]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcf}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x2e8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2a8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xd0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0xf, 0x9, 0x9, 0x7f, 0x2, 0x7fff, 0x1000]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xb, 0x1, 0x16, 0x5, 0xc, 0x21, 0x18, 0xc, 0x60, 0x5, 0x16, 0x0, 0xc, 0x6c, 0x4, 0x24, 0x6, 0x0]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x33a, 0x8, 0x7, 0xb, 0xfffc, 0xceb, 0x9, 0x7fff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0x3, 0xc, 0x0, 0xfffc, 0x6, 0x9]}}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x1, 0x6}, {0x3, 0x5}, {0x6, 0x5}, {0x4, 0x8}, {0x7, 0x8}, {0x4, 0x4}, {0x3, 0x3}, {0x0, 0x7}, {0x2}, {0x2, 0x4}, {0x5, 0x1}, {0x1, 0x5}, {0x6}, {0x0, 0xa}, {0x0, 0x2}, {0x0, 0x6}, {0x6, 0x8}, {0x4, 0x5}, {0x0, 0x4}, {0x1, 0xa}, {0x1}, {0x2, 0x6}, {0x1, 0x1}, {0x0, 0x5}, {0x5, 0x3}, {0x2, 0x8}, {0x3, 0x8}, {0x0, 0xa}, {0x5, 0x7}, {0x2, 0x3}, {0x2}, {0x2, 0xa}, {0x1, 0xa}, {0x0, 0x4}, {0x1, 0x7}]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x1}, {0x7, 0xa}, {0x3, 0x4}, {0x0, 0x5}, {0x2, 0x6}, {0x1, 0x3}, {}, {0x2, 0x9}, {0x1, 0x2}, {0x3}, {0x5, 0x3}, {0x5, 0x1}, {0x7, 0x3}, {0x3}, {0x1, 0xa}, {0x6, 0x5}, {0x5, 0x7}, {0x2, 0x5}, {}, {0x0, 0x1}, {0x7, 0xa}, {0x0, 0x8}, {0x5, 0x7}, {0x0, 0x7}, {0x6, 0x7}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x4}, {0x6, 0x1}, {0x6, 0x1}, {0x4, 0x2}, {0x0, 0x7}, {0x4, 0x5}, {0x2, 0x8}, {0x0, 0x1}, {0x3, 0x8}, {0x0, 0x3}, {0x3, 0x9}, {0x1, 0x9}, {0x0, 0x5}, {0x7, 0x2}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x9}, {0x5, 0x2}, {0x3, 0x2}, {0x1, 0x9}, {0x3, 0x3}, {0x0, 0xa}, {0x5, 0x1}, {0x0, 0x2}, {0x7, 0x7}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0x6, 0xffff, 0x101, 0xf8, 0xf841, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x2f1, 0x3, 0xd, 0x2e98, 0xbe, 0xd, 0x3ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x4, 0xfff, 0x292e, 0x8, 0x101, 0x3]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x4, 0x4}, {0x1, 0x6}, {0x5, 0xa}, {0x6, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x2, 0xa}, {0x1, 0x7}, {0x5, 0x6}, {0x0, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x0, 0xa}, {}, {0x7}, {0x5, 0x4}, {0x5, 0x5}, {0x5, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x4, 0x4}, {0x0, 0x4}, {0x1, 0x6}, {0x6, 0x7}, {0x4, 0x5}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x6}, {0x5, 0xa}, {0x4, 0x2}, {0x2, 0x5}, {0x7, 0x4}, {0x7, 0x5}, {0x0, 0x4}, {0x3, 0x7}, {0x0, 0x6}, {0x0, 0x8}, {0x0, 0x9}, {0x7}, {0x0, 0x6}, {0x0, 0x7}, {0x5, 0x1}, {0x4, 0x6}, {0x4}, {0x6, 0x4}, {0x1, 0x7}, {0x0, 0x4}, {0x6, 0x1}, {0x0, 0x6}, {0x7, 0x3}]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x14, 0x2, [{0x7}, {0x5}, {0x7, 0x1}, {0x0, 0x2}, {0x2, 0x2}, {0x6, 0x9}, {0x3, 0x8}, {}, {0x0, 0x2}, {0x3, 0xa}, {0x1, 0x3}, {0x4, 0x8}, {0x1, 0x1}, {0x4, 0x7}, {0x3, 0x5}, {0x7}]}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x6, 0x1ff, 0x7, 0x4, 0x7d2, 0xffe0, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x370, 0x5, 0x7, 0x6f0, 0x6, 0xffee, 0xe]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x7, 0x8}, {0x4, 0x3}, {0x1, 0x9}, {0x4, 0x3}, {0x6, 0x4}, {0x1, 0x5}, {0x7, 0x7}, {0x3, 0x2}, {0x7, 0x3}, {0x1, 0x1}, {0x6, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xb, 0x4b, 0x9, 0x6, 0xc, 0x3, 0x3, 0x12, 0xc, 0x6c, 0x2, 0x48, 0x2, 0x1, 0x1b, 0x36, 0x3, 0x54, 0x4, 0x30, 0x36, 0x2, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x2, 0x8}, {0x0, 0xa}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x7}, {0x2, 0x3}, {0x7, 0x2}, {0x1, 0x8}, {0x6, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x6, 0x0, 0x5fe9, 0x6, 0xf, 0x6, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0x280, 0xfffb, 0x1, 0x4, 0x7, 0x5]}}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xb, 0x3, 0x30, 0x4d, 0x16, 0x36, 0xb, 0x4, 0x2, 0x60, 0xb, 0x60, 0x4, 0x48, 0x48, 0xc, 0xb, 0x2, 0x6c, 0xc, 0x30, 0x30, 0x24, 0x36, 0x5, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x28c, 0x5, 0x4, 0x2, 0x6, 0xf84e, 0xa, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1ff, 0xfffb, 0x5, 0x0, 0x6, 0x6, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7d}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9562}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}]}]}]}, 0x964}, 0x1, 0x0, 0x0, 0x4}, 0x8010)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), r1)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0xb8, r4, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc0000000}}}}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x494}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x224}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x840)
r5 = openat$cgroup(r0, &(0x7f0000000f00)='syz1\x00', 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000f40)='cgroup.stat\x00', 0x0, 0x0)
write(r2, &(0x7f0000000f80)="a1b5b077cd12350fb1a9fe3386df37ae2eb8258cab3a8efab6eaf2396655ae280894132df21f37f552d4a845700e90bc4150ad718c705621f21dcc47dbf18bf44c2a0fd34b13541903b803c07641fd080e95402f811dcb59edb6bf501d04effb95e4a41cc9691b5b94", 0x69)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001000)={'veth0_macvtap\x00', 0x1000})
r7 = openat$cgroup_ro(r5, &(0x7f0000001040)='blkio.bfq.io_merged\x00', 0x0, 0x0)
setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000001080)=@gcm_128={{0x303}, "e20a26fa97af386c", "75150bb65797913373aabbb1949b60b0", "5faec56e", "7ee57ef7b2e7d2ac"}, 0x28)
r8 = accept4(r6, &(0x7f00000010c0)=@l2, &(0x7f0000001140)=0x80, 0x80000)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000011c0), r8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x28, r9, 0x205, 0x70bd28, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001300)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x3c, r3, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000001)
sendto$inet6(r0, &(0x7f0000001400)="6e89de6b0d991a74632eaa577fa02fc3fb2670a83bf37d4459e4a5007f93e7811e1e2b85554275882069799c0c68ca3fb6e8f244e4aece0c2952122683f0d9346d682b18465be06fcd4f40bc22c23b489d2d50341524d3513ff2722402df00a6e41af7e5743c84aa2db225f5095962b1a9e3a85264", 0x75, 0x8000, &(0x7f0000001480)={0xa, 0x4e20, 0xa, @rand_addr=' \x01\x00', 0x4}, 0x1c)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000014c0)={'veth1_to_bridge\x00', 0x400})
connect$inet6(r0, &(0x7f0000001500)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x7}, 0x1c)
sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x30, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x1, @bearer=@udp='udp:syz2\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x48c0}, 0x4000050)

5.888758615s ago: executing program 0 (id=1223):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="ad73364256", 0x5)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'erspan0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000001c0)=')\x03,\x00'}, 0x30)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0xc8, 0x8, 0x180, 0x5803, 0x2a0, 0x2e8, 0x2e8, 0x2a0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x118, 0x180, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@pkttype={{0x28}, {0x7, 0xddad}}, @common=@dst={{0x48}, {0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x3a, 0x80, 0x6, 0x1, 0x3ff, 0x2018, 0x1008}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)

4.509347204s ago: executing program 2 (id=1849):
r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800)
ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xfffd, @default, @bpq0, 0x1, [@null, @default, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x690303, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x5, 0x4)
sendto$inet6(r0, &(0x7f0000000140)="7ef6c4b53c5a355f2847ed8958d03e08a02e2fb20752c0dffcc9", 0x1a, 0x4000000, &(0x7f0000000180)={0xa, 0x4e23, 0x7, @mcast2, 0x1}, 0x1c)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r3, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3e6, 0x56}}}}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x5}, @NL80211_ATTR_TWT_RESPONDER={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000d00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2001}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000340)={0x964, r3, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x434, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x12}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6e}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6f}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff8}]}, {0x1fc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x68, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x3, 0x7}, {0x0, 0x7}, {0x4}, {0x0, 0x1}, {0x1, 0xa}, {0x5, 0x4}, {0x3, 0x4}, {0x1, 0x8}, {0x2}, {0x7, 0x6}, {0x1, 0x5}, {0x0, 0x9}, {0x1, 0x6}, {0x6, 0x8}, {0x1, 0x9}, {0x7, 0x5}, {0x5, 0x9}, {0x1, 0x2}, {0x2, 0x3}, {0x4, 0x4}, {0x0, 0x9}, {0x4, 0x8}, {0x3, 0x9}, {0x7}, {0x3, 0x3}, {0x4, 0x5}, {0x3, 0x1}, {0x0, 0x5}, {0x1, 0x5}, {0x0, 0xa}, {0x5, 0x4}, {0x7}, {0x4, 0x5}, {0x4, 0x3}, {0x6, 0x4}, {0x7, 0x9}, {0x2}, {0x4, 0xa}, {0x0, 0x2}, {0x3, 0x3}, {0x4}, {0x5, 0x7}, {0x4, 0x4}, {0x7, 0x4}, {0x2}, {0x2}, {0x4, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xfffc, 0xb, 0x2, 0x4, 0x5, 0x8, 0x2]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x7, 0x3, 0x0, 0x100, 0x651, 0x80, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6fd2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x14c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4a, 0x2, [{0x6, 0x8}, {0x1, 0x7}, {0x6}, {0x7, 0x9}, {0x6, 0x8}, {0x2, 0x6}, {0x3, 0x5}, {0x3, 0x4}, {0x0, 0x5}, {0x0, 0x1}, {0x3, 0x7}, {0x7, 0x3}, {0x2, 0x6}, {0x0, 0x5}, {0x2, 0x1}, {}, {0x3, 0x4}, {0x2}, {0x6, 0x6}, {0x3, 0x8}, {0x1, 0x1}, {0x2, 0x3}, {0x2}, {0x4, 0xa}, {0x5, 0x1}, {0x7, 0xa}, {0x6, 0x4}, {0x6, 0x6}, {0x6, 0x6}, {0x3, 0x2}, {0x0, 0x3}, {0x5, 0x3}, {0x3, 0x5}, {0x7, 0x3}, {0x1, 0x1}, {0x4, 0x3}, {0x1, 0x3}, {0x0, 0x3}, {0x1, 0x2}, {0x4}, {0x5, 0x3}, {0x7, 0x4}, {}, {0x2, 0x5}, {0x5, 0x3}, {0x4, 0x3}, {0x1, 0x7}, {0x2, 0x5}, {0x0, 0x5}, {0x5, 0x4}, {0x4, 0x4}, {0x6}, {0x7, 0x2}, {0x0, 0x1}, {0x4}, {0x5, 0x8}, {0x0, 0x9}, {0x1, 0x4}, {0x7, 0x7}, {0x6, 0x6}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x3}, {0x5, 0xa}, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x7}, {0x3, 0x5}, {0x7, 0xa}, {0x4, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x88, 0x7fff, 0x5, 0x98, 0x9b, 0x81, 0x9, 0x7f]}}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x2}, {0x3, 0x1}, {0x2, 0x7}, {0x0, 0x5}, {0x6, 0x2}, {0x4, 0x7}, {0x3, 0x2}, {0x3, 0x7}, {0x0, 0x2}, {0x2, 0x7}, {0x5, 0xa}, {0x2}, {0x0, 0x2}, {0x1, 0x9}, {0x5, 0x2}, {0x1}, {0x1, 0x6}, {0x3, 0x8}, {0x5, 0x9}, {0x2, 0x4}, {0x7, 0x1}, {0x2, 0x2}, {0x5}, {0x3}, {0x5, 0x1}, {0x7, 0x9}, {0x0, 0x5}, {0x1, 0x4}, {0x6, 0x8}, {0x6, 0x6}, {0x2, 0x8}, {0x3}, {0x7, 0x7}, {0x5, 0x8}, {0x6, 0x4}, {0x1, 0x1}, {}, {0x0, 0xa}, {0x6, 0x1}, {0x5, 0x6}, {0x1, 0x7}, {0x0, 0x4}, {0x4, 0x2}, {0x7}, {0x1, 0x4}, {0x3, 0x8}, {0x1, 0x4}, {0x4, 0x9}, {0x4}, {0x4, 0x2}, {0x0, 0x8}, {0x2, 0x2}, {0x2, 0x7}, {0x5}, {0x0, 0x1}, {}, {0x0, 0x6}, {0x0, 0x4}, {0x2, 0x8}, {0x1, 0x6}, {0x5, 0x5}, {0x5, 0x5}, {0x4, 0x8}, {0x6, 0x2}, {0x0, 0xa}, {0x1, 0x8}, {0x1, 0x7}, {0x4, 0x6}, {0x6}, {0x7}, {0x0, 0x5}, {0x0, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x5, 0x1}, {0x5, 0x3}, {0x2, 0x5}, {0x5, 0x5}, {0x0, 0x6}, {0x1}, {0x4, 0x5}, {0x6, 0x8}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x3}, {0x0, 0x5}, {0x2, 0x8}, {0x6, 0x5}, {0x1, 0x4}, {0x6, 0x4}, {0x2, 0x9}, {0x7, 0x6}, {0x4}, {0x0, 0x4}, {0x7, 0x8}, {0x3, 0x3}, {0x6, 0x3}, {0x6, 0xa}, {0x3, 0x9}, {0x5, 0x3}, {0x6, 0x2}, {0x4}, {0x4, 0x7}, {0x6, 0x17}]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x37, 0x2, [{0x2, 0x4}, {0x3}, {0x2, 0x7}, {0x1, 0x2}, {0x3, 0x5}, {0x6, 0x5}, {0x1, 0x4}, {0x1}, {0x6, 0x4}, {0x0, 0x9}, {0x3, 0x9}, {0x4, 0x8}, {0x0, 0x9}, {0x1, 0x4}, {0x0, 0x1}, {0x4, 0x5}, {0x6, 0xa}, {0x6, 0x3}, {0x3, 0x2}, {0x5, 0x7}, {0x1, 0x1}, {0x5}, {0x4, 0x5}, {}, {0x4, 0x3}, {0x5, 0x3}, {0x1, 0x4}, {0x3, 0x1}, {0x5, 0x4}, {0x7, 0x8}, {0x7, 0x8}, {0x5, 0xa}, {0x0, 0x1}, {0x0, 0x2}, {0x6, 0x4}, {0x2, 0x9}, {0x4, 0x4}, {0x6}, {0x0, 0xa}, {0x3, 0x4}, {0x7, 0x9}, {0x3, 0x1}, {0x5, 0x8}, {0x5, 0x5}, {0x4, 0x8}, {0x2, 0xa}, {0x1}, {0x6, 0x1}, {0x1}, {0x0, 0x1}, {0x7, 0x7}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x1, 0x1b, 0x6c, 0x16, 0x7b, 0x60, 0x30, 0x16, 0x1, 0x3, 0x2, 0x2, 0x30, 0x1, 0x18, 0x1b, 0x36, 0xc, 0x12, 0x6c, 0x4, 0x9, 0x36, 0x6, 0x48, 0x36, 0xb, 0x48, 0x4, 0x24]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}]}, {0x168, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xee, 0x4f, 0x80, 0x3, 0x3, 0xbb, 0xb2, 0x9]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x0, 0x3]}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7cf, 0x9, 0x6, 0x3, 0x2, 0x3, 0x3, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x7}, {0x0, 0x6}, {}, {0x3, 0x5}, {0x4, 0x7}, {0x1, 0x5}, {0x1, 0x7}, {0x0, 0x1}, {0x6, 0x7}, {0x3, 0x1}, {0x3, 0x7}, {0x3}, {0x2, 0x3}, {0x3, 0x6}, {0x0, 0x5}, {0x2, 0x7}, {0x5, 0x5}, {0x1, 0x3}, {0x0, 0x4}, {}, {0x4, 0x8}, {0x3}, {0x2, 0x3}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x4}, {0x4, 0x8}, {0x4, 0x1d}, {0x6, 0x3}, {0x1, 0x5}, {0x4, 0x2}, {0x1, 0x3}, {0x5, 0x2}, {0x7, 0x7}, {0x6, 0x2}, {0x7, 0x5}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x24, 0x30, 0xc, 0x36, 0x9, 0x9, 0x1, 0x754fb99b0e0b0239, 0x36, 0x5, 0x6c, 0x12, 0x3, 0x36, 0x48, 0x60, 0x6, 0x5, 0x30, 0x4, 0xc, 0x2, 0x1, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xff, 0x2, 0xd, 0x6, 0xff81, 0x0, 0x4]}}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1a5, 0x2, 0xffc0, 0xcc3f, 0x6, 0x81, 0xdd4, 0x6]}}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x2, 0x6}, {0x5, 0x7}, {0x2, 0x4}, {0x5}, {0x0, 0x3}, {0x7, 0xa}, {0x3}, {0x4, 0x8}, {0x7, 0x6}, {0x3, 0x6}, {0x1, 0x7}, {0x0, 0x8}, {0x0, 0xe}, {0x5, 0x9}, {0x5, 0x9}, {0x1}, {0x4, 0x1}, {0x1, 0x9}, {0x3, 0x8}, {0x5, 0x2}, {}, {0x2, 0x7}, {0x3, 0x3}, {}, {0x0, 0x2}, {0x1, 0xa}, {0x6, 0x9}, {0x0, 0x4}, {0x0, 0x2}, {0x6, 0x8}, {0x0, 0x4}, {0x4, 0x8}, {0x2, 0x1}, {0x1, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x1, 0x3}, {0x7}, {0x3, 0x9}, {0x2, 0x5}, {0x2, 0x5}, {0x3, 0x5}, {0x6, 0x7}, {0x3, 0x9}, {0x1}, {0x2, 0x9}, {0x6, 0x6}, {0x4, 0x2}, {0x2, 0x1}, {0x0, 0x8}, {0x7, 0x1}, {0x0, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1b, 0x16, 0xc, 0x6, 0x3, 0x30, 0x2, 0x16, 0x0, 0x9, 0x12, 0x12, 0x2, 0x3, 0x0, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x74, 0x2, 0x5, 0x7, 0x2, 0x100, 0xfff]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x0, 0x3, 0x6c, 0x1c, 0x4, 0x1b, 0x16, 0x6c, 0x6, 0x9, 0x5, 0xb, 0x6, 0x48, 0x5, 0x30, 0xc, 0x18, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x19}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcd}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000000000000000}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1c}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xf}]}]}, @NL80211_ATTR_TID_CONFIG={0x51c, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x62}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xde}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x1d4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x400}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1ac, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x642, 0x6, 0x0, 0xfc, 0x5, 0xfff, 0x4, 0xb]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1b, 0x2, 0x60, 0x6, 0x9, 0x4, 0xc, 0x3, 0x60, 0x6c, 0xc, 0x48, 0x18, 0x0, 0x24, 0x6c, 0x9, 0x1b, 0x36, 0xc, 0x2, 0x8aa429871800c742, 0xb, 0x13, 0x0, 0x60, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xde8, 0x3a41, 0x0, 0x6, 0x10, 0x9, 0x3, 0x6]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x2, 0x6, 0x1, 0x7, 0x1b, 0x9, 0x1b, 0x24, 0x0, 0x11, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7, 0x5, 0x2, 0x1000, 0x1, 0x9, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5f, 0x8, 0x0, 0x3, 0x8, 0xd, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8, 0xe, 0x4ef2, 0x9, 0x8001, 0x6, 0x660]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6b, 0xb, 0x1b, 0x4, 0x3, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbad2, 0x1, 0xb5cc, 0x1000, 0x401, 0x9, 0x7, 0x1d]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x97c, 0x3015, 0x1000, 0x8, 0x3, 0x2, 0x8b]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x1, 0x7}, {0x6, 0x7}, {0x3, 0x1d}, {0x2, 0x7}, {0x4, 0x5}, {0x1, 0x9}, {0x5, 0x6}, {0x0, 0x4}, {0x1, 0x5}, {0x6, 0x3}, {0x1, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x6, 0x4}, {0x1, 0x4}, {0x7, 0x6}, {0x5, 0x9}, {0x7, 0x2}, {0x6}, {0x2}, {0x7, 0x1}, {0x6, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6000, 0x40, 0x1, 0x44, 0x8, 0xf, 0x81]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x108, 0x6, 0x7f, 0x3e, 0x3, 0x10, 0x7]}}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x8bb3, 0x5, 0x138, 0x7, 0xd7, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0x3, 0xfffd, 0x4, 0x8, 0x9, 0xc]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcf}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x2e8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2a8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xd0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0xf, 0x9, 0x9, 0x7f, 0x2, 0x7fff, 0x1000]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xb, 0x1, 0x16, 0x5, 0xc, 0x21, 0x18, 0xc, 0x60, 0x5, 0x16, 0x0, 0xc, 0x6c, 0x4, 0x24, 0x6, 0x0]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x33a, 0x8, 0x7, 0xb, 0xfffc, 0xceb, 0x9, 0x7fff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0x3, 0xc, 0x0, 0xfffc, 0x6, 0x9]}}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x1, 0x6}, {0x3, 0x5}, {0x6, 0x5}, {0x4, 0x8}, {0x7, 0x8}, {0x4, 0x4}, {0x3, 0x3}, {0x0, 0x7}, {0x2}, {0x2, 0x4}, {0x5, 0x1}, {0x1, 0x5}, {0x6}, {0x0, 0xa}, {0x0, 0x2}, {0x0, 0x6}, {0x6, 0x8}, {0x4, 0x5}, {0x0, 0x4}, {0x1, 0xa}, {0x1}, {0x2, 0x6}, {0x1, 0x1}, {0x0, 0x5}, {0x5, 0x3}, {0x2, 0x8}, {0x3, 0x8}, {0x0, 0xa}, {0x5, 0x7}, {0x2, 0x3}, {0x2}, {0x2, 0xa}, {0x1, 0xa}, {0x0, 0x4}, {0x1, 0x7}]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x1}, {0x7, 0xa}, {0x3, 0x4}, {0x0, 0x5}, {0x2, 0x6}, {0x1, 0x3}, {}, {0x2, 0x9}, {0x1, 0x2}, {0x3}, {0x5, 0x3}, {0x5, 0x1}, {0x7, 0x3}, {0x3}, {0x1, 0xa}, {0x6, 0x5}, {0x5, 0x7}, {0x2, 0x5}, {}, {0x0, 0x1}, {0x7, 0xa}, {0x0, 0x8}, {0x5, 0x7}, {0x0, 0x7}, {0x6, 0x7}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x4}, {0x6, 0x1}, {0x6, 0x1}, {0x4, 0x2}, {0x0, 0x7}, {0x4, 0x5}, {0x2, 0x8}, {0x0, 0x1}, {0x3, 0x8}, {0x0, 0x3}, {0x3, 0x9}, {0x1, 0x9}, {0x0, 0x5}, {0x7, 0x2}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x9}, {0x5, 0x2}, {0x3, 0x2}, {0x1, 0x9}, {0x3, 0x3}, {0x0, 0xa}, {0x5, 0x1}, {0x0, 0x2}, {0x7, 0x7}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0x6, 0xffff, 0x101, 0xf8, 0xf841, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x2f1, 0x3, 0xd, 0x2e98, 0xbe, 0xd, 0x3ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x4, 0xfff, 0x292e, 0x8, 0x101, 0x3]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x4, 0x4}, {0x1, 0x6}, {0x5, 0xa}, {0x6, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x2, 0xa}, {0x1, 0x7}, {0x5, 0x6}, {0x0, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x0, 0xa}, {}, {0x7}, {0x5, 0x4}, {0x5, 0x5}, {0x5, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x4, 0x4}, {0x0, 0x4}, {0x1, 0x6}, {0x6, 0x7}, {0x4, 0x5}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x6}, {0x5, 0xa}, {0x4, 0x2}, {0x2, 0x5}, {0x7, 0x4}, {0x7, 0x5}, {0x0, 0x4}, {0x3, 0x7}, {0x0, 0x6}, {0x0, 0x8}, {0x0, 0x9}, {0x7}, {0x0, 0x6}, {0x0, 0x7}, {0x5, 0x1}, {0x4, 0x6}, {0x4}, {0x6, 0x4}, {0x1, 0x7}, {0x0, 0x4}, {0x6, 0x1}, {0x0, 0x6}, {0x7, 0x3}]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x14, 0x2, [{0x7}, {0x5}, {0x7, 0x1}, {0x0, 0x2}, {0x2, 0x2}, {0x6, 0x9}, {0x3, 0x8}, {}, {0x0, 0x2}, {0x3, 0xa}, {0x1, 0x3}, {0x4, 0x8}, {0x1, 0x1}, {0x4, 0x7}, {0x3, 0x5}, {0x7}]}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x6, 0x1ff, 0x7, 0x4, 0x7d2, 0xffe0, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x370, 0x5, 0x7, 0x6f0, 0x6, 0xffee, 0xe]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x7, 0x8}, {0x4, 0x3}, {0x1, 0x9}, {0x4, 0x3}, {0x6, 0x4}, {0x1, 0x5}, {0x7, 0x7}, {0x3, 0x2}, {0x7, 0x3}, {0x1, 0x1}, {0x6, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xb, 0x4b, 0x9, 0x6, 0xc, 0x3, 0x3, 0x12, 0xc, 0x6c, 0x2, 0x48, 0x2, 0x1, 0x1b, 0x36, 0x3, 0x54, 0x4, 0x30, 0x36, 0x2, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x2, 0x8}, {0x0, 0xa}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x7}, {0x2, 0x3}, {0x7, 0x2}, {0x1, 0x8}, {0x6, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x6, 0x0, 0x5fe9, 0x6, 0xf, 0x6, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0x280, 0xfffb, 0x1, 0x4, 0x7, 0x5]}}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xb, 0x3, 0x30, 0x4d, 0x16, 0x36, 0xb, 0x4, 0x2, 0x60, 0xb, 0x60, 0x4, 0x48, 0x48, 0xc, 0xb, 0x2, 0x6c, 0xc, 0x30, 0x30, 0x24, 0x36, 0x5, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x28c, 0x5, 0x4, 0x2, 0x6, 0xf84e, 0xa, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1ff, 0xfffb, 0x5, 0x0, 0x6, 0x6, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7d}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9562}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}]}]}]}, 0x964}, 0x1, 0x0, 0x0, 0x4}, 0x8010)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), r1)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0xb8, r4, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc0000000}}}}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x494}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x224}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x840)
r5 = openat$cgroup(r0, &(0x7f0000000f00)='syz1\x00', 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000f40)='cgroup.stat\x00', 0x0, 0x0)
write(r2, &(0x7f0000000f80)="a1b5b077cd12350fb1a9fe3386df37ae2eb8258cab3a8efab6eaf2396655ae280894132df21f37f552d4a845700e90bc4150ad718c705621f21dcc47dbf18bf44c2a0fd34b13541903b803c07641fd080e95402f811dcb59edb6bf501d04effb95e4a41cc9691b5b94", 0x69)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001000)={'veth0_macvtap\x00', 0x1000})
r7 = openat$cgroup_ro(r5, &(0x7f0000001040)='blkio.bfq.io_merged\x00', 0x0, 0x0)
setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000001080)=@gcm_128={{0x303}, "e20a26fa97af386c", "75150bb65797913373aabbb1949b60b0", "5faec56e", "7ee57ef7b2e7d2ac"}, 0x28)
r8 = accept4(r6, &(0x7f00000010c0)=@l2, &(0x7f0000001140)=0x80, 0x80000)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000011c0), r8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x28, r9, 0x205, 0x70bd28, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001300)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x3c, r3, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000001)
sendto$inet6(r0, &(0x7f0000001400)="6e89de6b0d991a74632eaa577fa02fc3fb2670a83bf37d4459e4a5007f93e7811e1e2b85554275882069799c0c68ca3fb6e8f244e4aece0c2952122683f0d9346d682b18465be06fcd4f40bc22c23b489d2d50341524d3513ff2722402df00a6e41af7e5743c84aa2db225f5095962b1a9e3a85264", 0x75, 0x8000, &(0x7f0000001480)={0xa, 0x4e20, 0xa, @rand_addr=' \x01\x00', 0x4}, 0x1c)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000014c0)={'veth1_to_bridge\x00', 0x400})
connect$inet6(r0, &(0x7f0000001500)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x7}, 0x1c)
sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x30, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x1, @bearer=@udp='udp:syz2\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x48c0}, 0x4000050)

2.184654519s ago: executing program 1 (id=2015):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0x42, 0x4, 0x2f8, 0xffffffff, 0x178, 0x178, 0x178, 0xffffffff, 0xffffffff, 0x260, 0x260, 0x260, 0xffffffff, 0x4, 0x0, {[{{@ip={@private=0x1, @remote, 0x0, 0x0, 'rose0\x00', 'wg2\x00'}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @local, 0xffffffff, 0xff, 'ip6erspan0\x00', 'ipvlan0\x00', {}, {}, 0x8, 0x0, 0x40}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x100, 0x719, 0x5}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x358)
r2 = socket(0x1, 0xa, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'netdevsim0\x00', &(0x7f0000000240)=@ethtool_flash={0x33, 0x6, './file0\x00'}})
ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x7, 0x0, 0xffdfffff}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r2], 0x1c}}, 0x0)
setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000000)={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffffffffffff, "ef13708ecae09b1cc326f55344e4ba1bc0f79039b2229fd87f1cac1eb9806215", 0x1, 0x44d, 0x0, 0x3}, 0x3c)

1.258245578s ago: executing program 1 (id=2016):
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x7, 0x0, 0xffdfffff}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r0], 0x1c}}, 0x0)

1.14009067s ago: executing program 1 (id=2017):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff8070000001700000000000000", 0x1c) (async)
write(r0, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff8070000001700000000000000", 0x1c)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4}}, [], {0x14, 0x10}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x4, &(0x7f0000001c00)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0xa, 0xfe00}]}, &(0x7f0000001c40)='syzkaller\x00', 0xf}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10200, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10200, 0x0)

1.055078794s ago: executing program 1 (id=2018):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f00000003c0)=0x7, 0x8)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @multicast}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000080)=0x80)
pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000300)="80fd0fa67941", 0x6}], 0x1, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@deltaction={0x14, 0x18, 0x1, 0x70bd29, 0x25dfdbfe, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000240)={'team0\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r9)
setsockopt$inet_int(r2, 0x0, 0xe, &(0x7f00000002c0)=0x38, 0x4)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="210000000800000000000500000024000180060003000000000000000300ac1e006c7747e2f9c1e0d90008000700", @ANYRES32=0x0, @ANYBLOB], 0x38}}, 0x40000)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'pim6reg\x00', <r11=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000140)={0xa0, r7, 0x2, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}, {0x8, 0x6, r11}}}]}}]}, 0xfffffffffffffddb}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000000)={'team0\x00', <r13=>0x0})
sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x3c}}, 0x0)

182.639964ms ago: executing program 1 (id=2019):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@allocspi={0x10c, 0x16, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in=@broadcast}, {@in=@dev, 0x0, 0x6c}, @in6=@mcast2}, 0x0, 0x7fff}, [@proto={0x5, 0x1b}, @mark={0xc, 0x15, {0x35075a, 0x5}}]}, 0x10c}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r5=>r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r4}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x2, r6}, 0x38)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={r4, r6}, 0xc)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r9, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000000)={0x14, 0x21, 0xa, 0x401}, 0x14}}, 0x0)
r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r8)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r8, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="94000000", @ANYRES16=r10, @ANYBLOB="01002cbd70000000000006000009"], 0x14}, 0x2, 0x34005}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r10, @ANYRES16=r10, @ANYRESDEC=r5], 0x90}, 0x1, 0x0, 0x0, 0x8041}, 0x4000001)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r11)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r11, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="190026bd7000fddbdf2525000000050029000000000008000200", @ANYRES32=r1, @ANYBLOB="05002a210500000081d0812a93a3eba73ad61b4c825c47e49b6814113443995c20f2b5e8975a65a9a2d2fa9da5c7fa51d9baed55cd2f1ff55a"], 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x44004094)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}, 0x1, 0x0, 0x0, 0x8010}, 0x0)

0s ago: executing program 1 (id=2020):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0})
r2 = socket$inet6_sctp(0xa, 0x2, 0x84)
getsockname$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x50}}, 0x4000010)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0xd8, 0x0, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_LABELS_MASK={0x8, 0x17, [0x2]}, @CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x180}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfb2b}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x39}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_TUPLE_MASTER={0x44, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8020}, 0x40)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$SIOCNRDECOBS(r3, 0x89e2)
syz_emit_ethernet(0xa9, &(0x7f0000000080)={@multicast, @random="12c2ca70a5f0", @void, {@x25={0x805, {0x0, 0x7, 0xfd, "eceb27b9c28c3a6b62dce7f47ceb073440d8d2324935df15a0f65e9ce355353fbd5a0527385a84a1be5b1f7278d5c0bac320510d04614971c2d6664b9402fa765264b1d9f318e870bda3c87378d1a08632661c0e458e0d8f111a8e69d90c48c4db1e2c88d43a7850788e154d5c6531cee071544ce42d4c0d2d401b8d2b9b93858cee4f8625c52916453f0dc32382451fb3f674bdaf8f7b59"}}}}, 0x0)

kernel console output (not intermixed with test programs):

vice team_slave_0 removed
[  191.157491][T11293] __nla_validate_parse: 5 callbacks suppressed
[  191.157507][T11293] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1668'.
[  191.167628][T11293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1668'.
[  191.228387][T11294] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1668'.
[  191.662134][T11296] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1669'.
[  191.684606][T11296] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1669'.
[  191.735280][T11298] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1670'.
[  191.949123][T11303] can: request_module (can-proto-4) failed.
[  191.955475][T11303] netlink: 8480 bytes leftover after parsing attributes in process `syz.2.1671'.
[  191.997257][T11217] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  192.014167][T11303] sctp: [Deprecated]: syz.2.1671 (pid 11303) Use of int in max_burst socket option deprecated.
[  192.014167][T11303] Use struct sctp_assoc_value instead
[  192.020512][T11217] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  192.026718][T11217] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  192.033050][T11217] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  192.120975][T11217] 8021q: adding VLAN 0 to HW filter on device bond0
[  192.154725][T11217] 8021q: adding VLAN 0 to HW filter on device team0
[  192.167485][T11318] nbd1: detected capacity change from 0 to 63
[  192.170406][T11324] block nbd1: NBD_DISCONNECT
[  192.174751][T11324] block nbd1: Disconnected due to user request.
[  192.179143][T11324] block nbd1: shutting down sockets
[  192.180851][ T9522] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  192.189983][ T3897] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.193133][ T3897] bridge0: port 1(bridge_slave_0) entered forwarding state
[  192.193949][ T9522] Buffer I/O error on dev nbd1, logical block 0, async page read
[  192.206600][ T1112] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 0
[  192.210172][ T1112] Buffer I/O error on dev nbd1, logical block 1, async page read
[  192.213611][ T1112] Buffer I/O error on dev nbd1, logical block 2, async page read
[  192.215598][ T3897] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.216189][ T1112] Buffer I/O error on dev nbd1, logical block 3, async page read
[  192.219525][ T3897] bridge0: port 2(bridge_slave_1) entered forwarding state
[  192.225622][ T9522] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  192.225647][ T9522] Buffer I/O error on dev nbd1, logical block 0, async page read
[  192.254558][ T9522] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  192.258296][ T9522] Buffer I/O error on dev nbd1, logical block 1, async page read
[  192.261705][ T9522] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  192.271827][ T9522] Buffer I/O error on dev nbd1, logical block 2, async page read
[  192.276046][ T9522] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  192.280865][ T9522] Buffer I/O error on dev nbd1, logical block 3, async page read
[  192.285390][ T9522] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  192.289303][ T9522] Buffer I/O error on dev nbd1, logical block 0, async page read
[  192.292063][ T9522] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  192.295800][ T9522] Buffer I/O error on dev nbd1, logical block 1, async page read
[  192.299208][ T9522] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  192.303396][ T9522] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  192.308803][ T9522] ldm_validate_partition_table(): Disk read failed.
[  192.319024][ T9522] Dev nbd1: unable to read RDB block 0
[  192.323836][ T9522]  nbd1: unable to read partition table
[  192.333806][ T9522] ldm_validate_partition_table(): Disk read failed.
[  192.338701][ T9522] Dev nbd1: unable to read RDB block 0
[  192.366206][ T9522]  nbd1: unable to read partition table
[  192.523437][T11217] 8021q: adding VLAN 0 to HW filter on device batadv0
[  192.561747][T11217] veth0_vlan: entered promiscuous mode
[  192.580147][T11217] veth1_vlan: entered promiscuous mode
[  192.609218][T11217] veth0_macvtap: entered promiscuous mode
[  192.616688][T11217] veth1_macvtap: entered promiscuous mode
[  192.631988][T11217] batman_adv: batadv0: Interface activated: batadv_slave_0
[  192.640108][T11217] batman_adv: batadv0: Interface activated: batadv_slave_1
[  192.647690][T11217] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  192.650673][T11217] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  192.655563][T11217] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  192.660416][T11217] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  192.669947][T11345] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1680'.
[  192.676042][T11345] openvswitch: netlink: Missing key (keys=40, expected=80)
[  192.765487][  T582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.771064][  T582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.779706][T11347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1681'.
[  192.803426][  T582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.808398][  T582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.889173][T11351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1683'.
[  193.276837][T11360] syz!: rxe_newlink: already configured on team_slave_0
[  193.404232][T11369] tipc: New replicast peer: 255.255.255.255
[  193.407249][T11369] tipc: Enabled bearer <udp:syz2>, priority 10
[  193.662785][   T10] page_pool_release_retry() stalled pool shutdown: id 28, 1 inflight 60 sec
[  193.829799][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  194.256503][ T7889] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.566060][ T7889] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.619583][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  195.629607][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  195.635271][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  195.638464][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  195.642021][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  195.778212][T11431] validate_nla: 26 callbacks suppressed
[  195.778232][T11431] netlink: 'syz.1.1706': attribute type 1 has an invalid length.
[  196.334888][ T7889] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.532099][ T7889] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.578028][T11438] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address
[  196.586551][T11438] bond5: (slave vxcan1): Error -95 calling set_mac_address
[  196.748233][T11449] netlink: 'syz.2.1708': attribute type 1 has an invalid length.
[  196.831957][T11422] chnl_net:caif_netlink_parms(): no params data found
[  196.842916][ T7889] bridge_slave_1: left allmulticast mode
[  196.845278][ T7889] bridge_slave_1: left promiscuous mode
[  196.847489][ T7889] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.856183][ T7889] bridge_slave_0: left allmulticast mode
[  196.859716][ T7889] bridge_slave_0: left promiscuous mode
[  196.861789][ T7889] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.008190][T11456] __nla_validate_parse: 6 callbacks suppressed
[  197.008205][T11456] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1709'.
[  197.018907][T11456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1709'.
[  197.023204][T11456] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1709'.
[  197.229419][ T7889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  197.237935][ T7889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  197.245901][ T7889] bond0 (unregistering): Released all slaves
[  197.406687][T11463] netlink: 'syz.1.1711': attribute type 9 has an invalid length.
[  197.452206][T11422] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.456996][T11422] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.459476][T11422] bridge_slave_0: entered allmulticast mode
[  197.464010][T11422] bridge_slave_0: entered promiscuous mode
[  197.470301][T11422] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.474061][T11422] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.477557][T11422] bridge_slave_1: entered allmulticast mode
[  197.486041][T11422] bridge_slave_1: entered promiscuous mode
[  197.490066][T11469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1713'.
[  197.508324][T11469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1713'.
[  197.564635][T11422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  197.571365][T11422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  197.647938][T11422] team0: Port device team_slave_0 added
[  197.659656][T11422] team0: Port device team_slave_1 added
[  197.664621][ T5837] Bluetooth: hci2: command tx timeout
[  197.748693][T11422] batman_adv: batadv0: Adding interface: batadv_slave_0
[  197.759294][T11422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.774804][T11422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  197.783880][T11422] batman_adv: batadv0: Adding interface: batadv_slave_1
[  197.787393][T11422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.799236][T11422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  197.810000][ T7889] hsr_slave_0: left promiscuous mode
[  197.831482][ T7889] hsr_slave_1: left promiscuous mode
[  197.834205][ T7889] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  197.837155][ T7889] batman_adv: batadv0: Removing interface: batadv_slave_0
[  197.840676][ T7889] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  197.843506][ T7889] batman_adv: batadv0: Removing interface: batadv_slave_1
[  197.854658][ T7889] veth1_macvtap: left promiscuous mode
[  197.857744][ T7889] veth0_macvtap: left promiscuous mode
[  197.860293][ T7889] veth1_vlan: left promiscuous mode
[  197.862713][ T7889] veth0_vlan: left promiscuous mode
[  198.246565][ T7889] team0 (unregistering): Port device team_slave_1 removed
[  198.301463][ T7889] team0 (unregistering): Port device team_slave_0 removed
[  198.719127][T11422] hsr_slave_0: entered promiscuous mode
[  198.723738][T11422] hsr_slave_1: entered promiscuous mode
[  198.726904][T11422] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  198.730147][T11422] Cannot create hsr debugfs directory
[  198.938547][T11495] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  199.107874][ T7848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.111229][ T7848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.217676][T11501] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1725'.
[  199.456800][T11422] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  199.458016][T11515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1730'.
[  199.463495][T11515] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  199.467555][T11515] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  199.474468][T11422] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  199.490198][T11422] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  199.500291][T11517] netlink: 'syz.2.1731': attribute type 23 has an invalid length.
[  199.527995][T11422] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  199.602521][T11530] netlink: 'syz.2.1733': attribute type 1 has an invalid length.
[  199.606764][T11530] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1733'.
[  199.610939][T11530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1733'.
[  199.631287][T11422] 8021q: adding VLAN 0 to HW filter on device bond0
[  199.647576][T11422] 8021q: adding VLAN 0 to HW filter on device team0
[  199.653497][ T7848] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.655903][ T7848] bridge0: port 1(bridge_slave_0) entered forwarding state
[  199.674484][ T7848] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.677004][ T7848] bridge0: port 2(bridge_slave_1) entered forwarding state
[  199.742544][ T5837] Bluetooth: hci2: command tx timeout
[  199.809841][T11422] 8021q: adding VLAN 0 to HW filter on device batadv0
[  199.843503][T11422] veth0_vlan: entered promiscuous mode
[  199.849426][T11422] veth1_vlan: entered promiscuous mode
[  199.872030][T11422] veth0_macvtap: entered promiscuous mode
[  199.879873][T11422] veth1_macvtap: entered promiscuous mode
[  199.890028][T11422] batman_adv: batadv0: Interface activated: batadv_slave_0
[  199.903104][T11422] batman_adv: batadv0: Interface activated: batadv_slave_1
[  199.910233][T11422] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  199.915903][T11422] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  199.919587][T11422] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  199.923350][T11422] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  199.987742][ T3897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.995137][ T3897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  200.020934][ T3897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  200.025380][ T3897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  200.437405][T11544] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  200.455501][T11544] bond6: entered promiscuous mode
[  200.457343][T11544] bond6: entered allmulticast mode
[  200.460105][T11544] 8021q: adding VLAN 0 to HW filter on device bond6
[  200.555215][T11554] netlink: 'syz.1.1739': attribute type 1 has an invalid length.
[  200.560165][T11554] netlink: 'syz.1.1739': attribute type 1 has an invalid length.
[  200.564425][T11554] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1739'.
[  201.707691][T11595] netlink: 'syz.1.1753': attribute type 7 has an invalid length.
[  201.923983][T11598] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  201.927441][T11598] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  201.970674][T11600] x_tables: duplicate underflow at hook 2
[  202.015317][ T5845] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.282654][T11607] __nla_validate_parse: 5 callbacks suppressed
[  203.282665][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1758'.
[  203.294325][T11609] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  203.299109][T11609] syzkaller0: MTU too low for tipc bearer
[  203.301203][T11609] tipc: Disabling bearer <eth:syzkaller0>
[  203.347318][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  203.354161][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  203.357964][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  203.363190][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  203.367207][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  203.425808][T11621] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  203.625235][T11639] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1767'.
[  203.628566][T11639] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1767'.
[  203.726913][T11612] chnl_net:caif_netlink_parms(): no params data found
[  203.764275][T11645] syz!: rxe_newlink: already configured on team_slave_0
[  203.769984][T11645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1769'.
[  203.774686][T11645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1769'.
[  203.820427][T11612] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.827837][T11612] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.830877][T11612] bridge_slave_0: entered allmulticast mode
[  203.835592][T11612] bridge_slave_0: entered promiscuous mode
[  203.871045][ T5845] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.886542][T11612] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.889412][T11612] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.893133][T11612] bridge_slave_1: entered allmulticast mode
[  203.896471][T11612] bridge_slave_1: entered promiscuous mode
[  203.907459][T11652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1771'.
[  203.915791][T11652] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  203.919489][T11652] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  203.937812][T11612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  203.961331][ T5845] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.974889][T11612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  203.981078][T11654] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  204.051561][ T5845] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.068928][T11612] team0: Port device team_slave_0 added
[  204.075698][T11612] team0: Port device team_slave_1 added
[  204.118164][T11612] batman_adv: batadv0: Adding interface: batadv_slave_0
[  204.121092][T11612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.134413][T11612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  204.147685][T11612] batman_adv: batadv0: Adding interface: batadv_slave_1
[  204.154301][T11612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.165934][T11612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  204.243529][T11659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1773'.
[  204.265280][T11612] hsr_slave_0: entered promiscuous mode
[  204.271025][T11612] hsr_slave_1: entered promiscuous mode
[  204.283083][T11612] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  204.286462][T11612] Cannot create hsr debugfs directory
[  204.301035][T11663] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1775'.
[  204.414914][T11669] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1778'.
[  204.450019][ T5845] bridge_slave_1: left allmulticast mode
[  204.451998][ T5845] bridge_slave_1: left promiscuous mode
[  204.457466][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.467296][ T5845] bridge_slave_0: left allmulticast mode
[  204.469503][ T5845] bridge_slave_0: left promiscuous mode
[  204.471523][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.811447][ T5845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  204.816943][ T5845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  204.823581][ T5845] bond0 (unregistering): Released all slaves
[  204.853900][T11668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  205.088301][T11687] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1784'.
[  205.169560][T11689] macsec2: entered allmulticast mode
[  205.183461][T11689] ip6gretap0: entered allmulticast mode
[  205.187291][T11689] ip6gretap0: left allmulticast mode
[  205.229493][ T5845] hsr_slave_0: left promiscuous mode
[  205.232582][ T5845] hsr_slave_1: left promiscuous mode
[  205.235313][ T5845] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  205.238575][ T5845] batman_adv: batadv0: Removing interface: batadv_slave_0
[  205.241712][ T5845] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  205.252891][ T5845] batman_adv: batadv0: Removing interface: batadv_slave_1
[  205.277271][ T5845] veth1_macvtap: left promiscuous mode
[  205.279106][ T5845] veth0_macvtap: left promiscuous mode
[  205.281084][ T5845] veth1_vlan: left promiscuous mode
[  205.283610][ T5845] veth0_vlan: left promiscuous mode
[  205.432443][ T5837] Bluetooth: hci2: command tx timeout
[  205.676774][ T5845] team0 (unregistering): Port device team_slave_1 removed
[  205.724630][ T5845] team0 (unregistering): Port device team_slave_0 removed
[  205.742680][   T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  206.076615][T11693] macvlan1: entered promiscuous mode
[  206.079938][T11693] ipvlan0: entered promiscuous mode
[  206.083861][T11693] ipvlan0: left promiscuous mode
[  206.086448][T11693] macvlan1: left promiscuous mode
[  206.180310][T11612] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  206.197493][T11612] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  206.216996][T11612] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  206.234191][T11612] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  206.348489][T11612] 8021q: adding VLAN 0 to HW filter on device bond0
[  206.409958][T11612] 8021q: adding VLAN 0 to HW filter on device team0
[  206.426652][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.430093][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  206.446280][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.449371][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  206.646342][T11612] 8021q: adding VLAN 0 to HW filter on device batadv0
[  206.689855][T11612] veth0_vlan: entered promiscuous mode
[  206.699496][T11612] veth1_vlan: entered promiscuous mode
[  206.729935][T11612] veth0_macvtap: entered promiscuous mode
[  206.740672][T11612] veth1_macvtap: entered promiscuous mode
[  206.759571][T11612] batman_adv: batadv0: Interface activated: batadv_slave_0
[  206.774911][T11612] batman_adv: batadv0: Interface activated: batadv_slave_1
[  206.786011][T11612] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  206.790568][T11612] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  206.796707][T11612] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  206.807421][T11612] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  206.894999][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.903209][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.924165][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.927252][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.105994][T11740] syz!: rxe_newlink: already configured on team_slave_0
[  207.148567][T11743] netlink: 'syz.1.1797': attribute type 1 has an invalid length.
[  208.399039][T11783] bridge0: port 1(gretap0) entered blocking state
[  208.401215][T11783] bridge0: port 1(gretap0) entered disabled state
[  208.404158][T11783] gretap0: entered allmulticast mode
[  208.408215][T11783] bridge0: port 1(gretap0) entered blocking state
[  208.410727][T11783] bridge0: port 1(gretap0) entered forwarding state
[  208.447146][T11790] __nla_validate_parse: 10 callbacks suppressed
[  208.447157][T11790] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1812'.
[  208.459207][T11790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1812'.
[  208.520255][T11795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1813'.
[  208.567312][T11799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1814'.
[  208.571471][T11799] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1814'.
[  208.703270][T11803] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.750481][ T5857] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.804373][T11803] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.899413][T11803] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.947681][T11803] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.062503][T11803] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  209.078640][T11803] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  209.091776][T11803] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  209.109331][T11803] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  210.090146][T11821] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  210.098020][T11821] syzkaller0: entered promiscuous mode
[  210.100089][T11821] syzkaller0: entered allmulticast mode
[  210.119070][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1823'.
[  210.127037][T11819] tipc: Resetting bearer <eth:syzkaller0>
[  210.138086][T11819] tipc: Disabling bearer <eth:syzkaller0>
[  210.200002][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  210.213844][T11830] netlink: 'syz.1.1824': attribute type 1 has an invalid length.
[  210.217382][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  210.220983][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  210.226478][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  210.229898][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  210.661318][ T5857] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.827188][ T5857] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.964442][ T5857] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.029482][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1825'.
[  211.036302][T11836] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  211.040022][T11836] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  211.157624][T11827] chnl_net:caif_netlink_parms(): no params data found
[  211.210882][ T5857] bridge_slave_1: left allmulticast mode
[  211.214440][ T5857] bridge_slave_1: left promiscuous mode
[  211.218551][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.226441][ T5857] bridge_slave_0: left allmulticast mode
[  211.229168][ T5857] bridge_slave_0: left promiscuous mode
[  211.235751][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.527202][ T5857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  211.533003][ T5857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  211.536824][ T5857] bond0 (unregistering): Released all slaves
[  211.554918][T11844] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (253)
[  211.647769][T11827] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.650264][T11827] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.655939][T11827] bridge_slave_0: entered allmulticast mode
[  211.659251][T11827] bridge_slave_0: entered promiscuous mode
[  211.663642][T11827] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.666733][T11827] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.670543][T11827] bridge_slave_1: entered allmulticast mode
[  211.676849][T11827] bridge_slave_1: entered promiscuous mode
[  211.760768][T11827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  211.766746][T11827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  211.806763][T11827] team0: Port device team_slave_0 added
[  211.812729][T11827] team0: Port device team_slave_1 added
[  211.906692][T11827] batman_adv: batadv0: Adding interface: batadv_slave_0
[  211.910279][T11827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.919331][T11827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  211.934440][ T5857] hsr_slave_0: left promiscuous mode
[  211.937263][ T5857] hsr_slave_1: left promiscuous mode
[  211.939634][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  211.946111][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_0
[  211.950326][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  211.953366][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_1
[  211.965219][ T5857] veth1_macvtap: left promiscuous mode
[  211.967855][ T5857] veth0_macvtap: left promiscuous mode
[  211.970128][ T5857] veth1_vlan: left promiscuous mode
[  211.972735][ T5857] veth0_vlan: left promiscuous mode
[  212.305525][   T54] Bluetooth: hci2: command tx timeout
[  212.328288][ T5857] team0 (unregistering): Port device team_slave_1 removed
[  212.358245][ T5857] team0 (unregistering): Port device team_slave_0 removed
[  212.711061][   T10] hid-generic 0005:15C2:0007.0002: collection stack underflow
[  212.715549][   T10] hid-generic 0005:15C2:0007.0002: item 0 0 0 12 parsing failed
[  212.718690][   T10] hid-generic 0005:15C2:0007.0002: probe with driver hid-generic failed with error -22
[  212.735630][T11827] batman_adv: batadv0: Adding interface: batadv_slave_1
[  212.738676][T11827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  212.750068][T11827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  212.765081][T11859] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1831'.
[  212.852058][T11827] hsr_slave_0: entered promiscuous mode
[  212.855986][T11827] hsr_slave_1: entered promiscuous mode
[  212.859102][T11827] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  212.864301][T11827] Cannot create hsr debugfs directory
[  212.906439][T11863] syzkaller1: entered promiscuous mode
[  212.908949][T11863] syzkaller1: entered allmulticast mode
[  213.119255][T11865] xt_hashlimit: size too large, truncated to 1048576
[  213.335683][T11869] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1834'.
[  213.410787][T11872] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  213.410791][T11871] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  213.430397][T11827] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  213.436347][T11827] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  213.446135][T11827] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  213.454560][T11827] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  213.533466][T11884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1838'.
[  213.537887][T11884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1838'.
[  213.565011][T11827] 8021q: adding VLAN 0 to HW filter on device bond0
[  213.572203][T11884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1838'.
[  213.589607][T11827] 8021q: adding VLAN 0 to HW filter on device team0
[  213.599403][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[  213.602619][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[  213.614675][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.617847][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[  213.670729][T11827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  213.773734][T11827] 8021q: adding VLAN 0 to HW filter on device batadv0
[  213.811358][T11827] veth0_vlan: entered promiscuous mode
[  213.837560][T11827] veth1_vlan: entered promiscuous mode
[  213.867572][T11827] veth0_macvtap: entered promiscuous mode
[  213.873274][T11827] veth1_macvtap: entered promiscuous mode
[  213.905200][T11827] batman_adv: batadv0: Interface activated: batadv_slave_0
[  213.914816][T11827] batman_adv: batadv0: Interface activated: batadv_slave_1
[  213.920802][T11827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.926068][T11827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.929224][T11827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.933299][T11827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.991909][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.996317][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.025137][ T7848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.028377][ T7848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.060824][T11901] x_tables: duplicate underflow at hook 2
[  214.760755][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  214.767077][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  214.770732][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  214.775252][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  214.778243][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  214.853552][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1850'.
[  214.857259][T11916] openvswitch: netlink: Flow key attr not present in new flow.
[  214.995000][T11922] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1853'.
[  215.086748][T11913] chnl_net:caif_netlink_parms(): no params data found
[  215.153021][T11913] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.156342][T11913] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.158803][T11913] bridge_slave_0: entered allmulticast mode
[  215.161526][T11913] bridge_slave_0: entered promiscuous mode
[  215.166156][T11913] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.169036][T11913] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.171575][T11913] bridge_slave_1: entered allmulticast mode
[  215.174479][T11913] bridge_slave_1: entered promiscuous mode
[  215.197623][T11913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  215.203251][T11913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  215.226631][T11913] team0: Port device team_slave_0 added
[  215.231460][T11913] team0: Port device team_slave_1 added
[  215.251726][T11913] batman_adv: batadv0: Adding interface: batadv_slave_0
[  215.254685][T11913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.262909][T11913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  215.268890][T11913] batman_adv: batadv0: Adding interface: batadv_slave_1
[  215.271262][T11913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.279538][T11913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  215.309825][T11913] hsr_slave_0: entered promiscuous mode
[  215.313185][T11913] hsr_slave_1: entered promiscuous mode
[  215.315711][T11913] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  215.318754][T11913] Cannot create hsr debugfs directory
[  215.401897][T11913] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.437512][T11913] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.486999][T11913] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.526799][T11913] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.638587][T11913] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  215.648872][T11913] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  215.654121][T11913] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  215.658359][T11913] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  215.681818][T11913] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.684874][T11913] bridge0: port 2(bridge_slave_1) entered forwarding state
[  215.687785][T11913] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.690941][T11913] bridge0: port 1(bridge_slave_0) entered forwarding state
[  215.733287][T11913] 8021q: adding VLAN 0 to HW filter on device bond0
[  215.746261][ T3897] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.749815][ T3897] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.762218][T11913] 8021q: adding VLAN 0 to HW filter on device team0
[  215.770394][ T3897] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.773579][ T3897] bridge0: port 1(bridge_slave_0) entered forwarding state
[  215.783189][ T3897] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.785548][ T3897] bridge0: port 2(bridge_slave_1) entered forwarding state
[  215.917919][T10155] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.940134][T11913] 8021q: adding VLAN 0 to HW filter on device batadv0
[  215.967921][T11913] veth0_vlan: entered promiscuous mode
[  215.975839][T11913] veth1_vlan: entered promiscuous mode
[  215.996923][T11913] veth0_macvtap: entered promiscuous mode
[  216.001154][T11913] veth1_macvtap: entered promiscuous mode
[  216.012153][T11913] batman_adv: batadv0: Interface activated: batadv_slave_0
[  216.024444][T11913] batman_adv: batadv0: Interface activated: batadv_slave_1
[  216.030581][T11913] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  216.033889][T11913] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  216.036717][T11913] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  216.039672][T11913] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  216.094372][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  216.097228][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  216.118088][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  216.121087][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.327384][T10155] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.395638][T10155] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.408491][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  217.413883][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  217.417404][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  217.428511][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  217.435352][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  217.498251][T10155] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.508755][T11955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1858'.
[  217.650474][T10155] bridge_slave_1: left allmulticast mode
[  217.655434][T10155] bridge_slave_1: left promiscuous mode
[  217.658266][T10155] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.665555][T10155] bridge_slave_0: left allmulticast mode
[  217.669653][T10155] bridge_slave_0: left promiscuous mode
[  217.671804][T10155] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.975390][T10155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  217.981761][T10155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  217.989943][T10155] bond0 (unregistering): Released all slaves
[  218.208802][T11949] chnl_net:caif_netlink_parms(): no params data found
[  218.406177][T11949] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.409479][T11949] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.415019][T11949] bridge_slave_0: entered allmulticast mode
[  218.457940][T11949] bridge_slave_0: entered promiscuous mode
[  218.464326][T11949] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.467313][T11949] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.470733][T11949] bridge_slave_1: entered allmulticast mode
[  218.489155][T11949] bridge_slave_1: entered promiscuous mode
[  218.542777][T10155] hsr_slave_0: left promiscuous mode
[  218.546995][T10155] hsr_slave_1: left promiscuous mode
[  218.549931][T10155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  218.554904][T10155] batman_adv: batadv0: Removing interface: batadv_slave_0
[  218.558199][T10155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  218.560881][T10155] batman_adv: batadv0: Removing interface: batadv_slave_1
[  218.577312][T10155] veth1_macvtap: left promiscuous mode
[  218.579189][T10155] veth0_macvtap: left promiscuous mode
[  218.581318][T10155] veth1_vlan: left promiscuous mode
[  218.584527][T10155] veth0_vlan: left promiscuous mode
[  218.803166][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  218.813504][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  218.817541][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  218.824731][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  218.832425][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  219.008175][T10155] team0 (unregistering): Port device team_slave_1 removed
[  219.041052][T10155] team0 (unregistering): Port device team_slave_0 removed
[  219.360107][T11949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  219.363782][T11967] lo speed is unknown, defaulting to 1000
[  219.385474][T11967] lo speed is unknown, defaulting to 1000
[  219.387038][T11949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  219.391476][T11967] lo speed is unknown, defaulting to 1000
[  219.411844][T11967] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  219.433209][T11949] team0: Port device team_slave_0 added
[  219.452069][T11967] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  219.453784][T11949] team0: Port device team_slave_1 added
[  219.499347][T11949] batman_adv: batadv0: Adding interface: batadv_slave_0
[  219.501955][T11949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.522804][T11949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  219.522865][   T54] Bluetooth: hci1: command tx timeout
[  219.528044][T11949] batman_adv: batadv0: Adding interface: batadv_slave_1
[  219.542748][T11949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.551590][T11949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  219.573483][T11967] lo speed is unknown, defaulting to 1000
[  219.597047][T11967] lo speed is unknown, defaulting to 1000
[  219.618036][T11949] hsr_slave_0: entered promiscuous mode
[  219.620682][T11949] hsr_slave_1: entered promiscuous mode
[  219.623193][T11949] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  219.626456][T11949] Cannot create hsr debugfs directory
[  219.628891][T11967] lo speed is unknown, defaulting to 1000
[  219.637989][T11967] lo speed is unknown, defaulting to 1000
[  219.643159][T11971] lo speed is unknown, defaulting to 1000
[  219.648744][T11967] lo speed is unknown, defaulting to 1000
[  219.807799][T11971] chnl_net:caif_netlink_parms(): no params data found
[  219.913526][T10155] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.964959][T11971] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.968349][T11971] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.971311][T11971] bridge_slave_0: entered allmulticast mode
[  219.979803][T11971] bridge_slave_0: entered promiscuous mode
[  219.988884][T11984] netlink: 'syz.1.1862': attribute type 10 has an invalid length.
[  219.989422][T11971] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.991736][T11984] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1862'.
[  219.994882][T11971] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.000325][T11971] bridge_slave_1: entered allmulticast mode
[  220.007834][T11971] bridge_slave_1: entered promiscuous mode
[  220.011265][T11984] bridge0: port 1(dummy0) entered blocking state
[  220.013828][T11984] bridge0: port 1(dummy0) entered disabled state
[  220.016180][T11984] dummy0: entered allmulticast mode
[  220.018844][T11984] dummy0: entered promiscuous mode
[  220.058280][T11971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  220.068367][T11971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  220.128063][T10155] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.147792][T11971] team0: Port device team_slave_0 added
[  220.162076][T11971] team0: Port device team_slave_1 added
[  220.175502][T10155] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.210696][T11949] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  220.218234][T11971] batman_adv: batadv0: Adding interface: batadv_slave_0
[  220.221041][T11971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  220.231748][T11971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  220.236693][T11971] batman_adv: batadv0: Adding interface: batadv_slave_1
[  220.239261][T11971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  220.249144][T11971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  220.283761][T10155] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.308046][T11949] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  220.313236][T11949] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  220.326234][T11949] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  220.359094][T11985] lo speed is unknown, defaulting to 1000
[  220.393328][T11971] hsr_slave_0: entered promiscuous mode
[  220.396080][T11971] hsr_slave_1: entered promiscuous mode
[  220.398602][T11971] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  220.401455][T11971] Cannot create hsr debugfs directory
[  220.612876][T10155] bridge_slave_1: left allmulticast mode
[  220.615902][T10155] bridge_slave_1: left promiscuous mode
[  220.618815][T10155] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.630137][T10155] bridge_slave_0: left allmulticast mode
[  220.633078][T10155] bridge_slave_0: left promiscuous mode
[  220.635597][T10155] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.863314][   T54] Bluetooth: hci2: command tx timeout
[  220.993351][T10155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  220.998354][T10155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  221.003845][T10155] bond0 (unregistering): Released all slaves
[  221.170498][T11949] 8021q: adding VLAN 0 to HW filter on device bond0
[  221.231503][T11949] 8021q: adding VLAN 0 to HW filter on device team0
[  221.243323][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.246725][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  221.274327][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.278709][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  221.388790][T10155] hsr_slave_0: left promiscuous mode
[  221.392138][T10155] hsr_slave_1: left promiscuous mode
[  221.397164][T10155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  221.399811][T10155] batman_adv: batadv0: Removing interface: batadv_slave_0
[  221.411579][T10155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  221.416240][T10155] batman_adv: batadv0: Removing interface: batadv_slave_1
[  221.430766][T10155] veth1_macvtap: left promiscuous mode
[  221.436874][T10155] veth0_macvtap: left promiscuous mode
[  221.439440][T10155] veth1_vlan: left promiscuous mode
[  221.442133][T10155] veth0_vlan: left promiscuous mode
[  221.593611][   T54] Bluetooth: hci1: command tx timeout
[  221.770199][T12002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1864'.
[  221.909055][T10155] team0 (unregistering): Port device team_slave_1 removed
[  221.941443][T10155] team0 (unregistering): Port device team_slave_0 removed
[  222.358813][T12006] x_tables: duplicate underflow at hook 1
[  222.391156][T11971] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  222.404596][T11971] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  222.411204][T11971] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  222.435774][T11971] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  222.561761][T11949] 8021q: adding VLAN 0 to HW filter on device batadv0
[  222.655758][T11949] veth0_vlan: entered promiscuous mode
[  222.667292][T11971] 8021q: adding VLAN 0 to HW filter on device bond0
[  222.675812][T11949] veth1_vlan: entered promiscuous mode
[  222.729195][T11971] 8021q: adding VLAN 0 to HW filter on device team0
[  222.753965][  T582] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.757356][  T582] bridge0: port 1(bridge_slave_0) entered forwarding state
[  222.764591][T11949] veth0_macvtap: entered promiscuous mode
[  222.778609][T11949] veth1_macvtap: entered promiscuous mode
[  222.786469][  T582] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.789700][  T582] bridge0: port 2(bridge_slave_1) entered forwarding state
[  222.827414][T11949] batman_adv: batadv0: Interface activated: batadv_slave_0
[  222.846569][T11949] batman_adv: batadv0: Interface activated: batadv_slave_1
[  222.897865][T11949] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  222.901569][T11949] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  222.912813][T11949] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  222.916551][T11949] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  222.953154][   T54] Bluetooth: hci2: command tx timeout
[  223.030966][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.038412][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.061900][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.065662][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.115343][T11971] 8021q: adding VLAN 0 to HW filter on device batadv0
[  223.194973][T11971] veth0_vlan: entered promiscuous mode
[  223.213612][T11971] veth1_vlan: entered promiscuous mode
[  223.242000][T11971] veth0_macvtap: entered promiscuous mode
[  223.248086][T11971] veth1_macvtap: entered promiscuous mode
[  223.259475][T11971] batman_adv: batadv0: Interface activated: batadv_slave_0
[  223.271732][T11971] batman_adv: batadv0: Interface activated: batadv_slave_1
[  223.278546][T11971] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  223.281829][T11971] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  223.286898][T11971] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  223.290677][T11971] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  223.341543][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.346174][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.380000][ T7848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.383232][ T7848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.511887][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.289847][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.509034][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.735809][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.901867][   T13] bridge_slave_1: left allmulticast mode
[  224.904164][   T13] bridge_slave_1: left promiscuous mode
[  224.906020][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.923526][   T13] bridge_slave_0: left allmulticast mode
[  224.925370][   T13] bridge_slave_0: left promiscuous mode
[  224.927302][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.101165][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  225.106645][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  225.115021][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  225.119234][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  225.127231][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  225.337091][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  225.346436][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  225.352204][   T13] bond0 (unregistering): Released all slaves
[  225.424329][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  225.435412][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  225.439940][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  225.448339][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  225.452983][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  225.603141][T12027] lo speed is unknown, defaulting to 1000
[  225.794492][T12031] lo speed is unknown, defaulting to 1000
[  225.829376][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1868'.
[  225.833276][T12037] openvswitch: netlink: Key 22 has unexpected len 2 expected 4
[  225.906854][T12027] chnl_net:caif_netlink_parms(): no params data found
[  225.999006][T12040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1869'.
[  226.058710][   T13] hsr_slave_0: left promiscuous mode
[  226.064836][   T13] hsr_slave_1: left promiscuous mode
[  226.068423][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  226.071668][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  226.089334][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  226.093085][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  226.110576][   T13] veth1_macvtap: left promiscuous mode
[  226.113431][   T13] veth0_macvtap: left promiscuous mode
[  226.116086][   T13] veth1_vlan: left promiscuous mode
[  226.118700][   T13] veth0_vlan: left promiscuous mode
[  226.383069][ T1085] wlan0: Trigger new scan to find an IBSS to join
[  226.505362][   T13] team0 (unregistering): Port device team_slave_1 removed
[  226.538097][   T13] team0 (unregistering): Port device team_slave_0 removed
[  226.986652][T12046] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1870'.
[  227.019463][T12048] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1871'.
[  227.027564][T12027] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.032157][T12027] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.038482][T12027] bridge_slave_0: entered allmulticast mode
[  227.044891][T12027] bridge_slave_0: entered promiscuous mode
[  227.071601][T12027] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.075683][T12027] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.078789][T12027] bridge_slave_1: entered allmulticast mode
[  227.083139][T12027] bridge_slave_1: entered promiscuous mode
[  227.161861][T12027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  227.169536][T12027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  227.173515][T12031] chnl_net:caif_netlink_parms(): no params data found
[  227.182864][   T54] Bluetooth: hci1: command tx timeout
[  227.196336][T12056] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1873'.
[  227.219953][T12053] netlink: 'syz.1.1873': attribute type 39 has an invalid length.
[  227.290620][T12027] team0: Port device team_slave_0 added
[  227.301793][T12027] team0: Port device team_slave_1 added
[  227.371301][T12027] batman_adv: batadv0: Adding interface: batadv_slave_0
[  227.375688][T12027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.388773][T12027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  227.413605][T12031] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.418529][T12031] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.422778][T12031] bridge_slave_0: entered allmulticast mode
[  227.433907][T12031] bridge_slave_0: entered promiscuous mode
[  227.438609][T12027] batman_adv: batadv0: Adding interface: batadv_slave_1
[  227.441586][T12027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.454923][T12027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  227.460331][T12031] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.464509][T12031] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.468886][T12031] bridge_slave_1: entered allmulticast mode
[  227.477374][T12031] bridge_slave_1: entered promiscuous mode
[  227.505514][   T54] Bluetooth: hci2: command tx timeout
[  227.557494][T12031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  227.574043][T12031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  227.634080][T12031] team0: Port device team_slave_0 added
[  227.647402][T12027] hsr_slave_0: entered promiscuous mode
[  227.650490][T12027] hsr_slave_1: entered promiscuous mode
[  227.653477][T12074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1877'.
[  227.653741][T12027] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  227.660263][T12027] Cannot create hsr debugfs directory
[  227.667105][T12031] team0: Port device team_slave_1 added
[  227.711696][T12031] batman_adv: batadv0: Adding interface: batadv_slave_0
[  227.716202][T12031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.728206][T12031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  227.742865][T12031] batman_adv: batadv0: Adding interface: batadv_slave_1
[  227.745326][T12031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.756431][T12031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  227.820222][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.852129][T12081] netlink: 'syz.1.1880': attribute type 1 has an invalid length.
[  227.864785][T12031] hsr_slave_0: entered promiscuous mode
[  227.869377][T12031] hsr_slave_1: entered promiscuous mode
[  227.876944][T12031] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  227.880277][T12031] Cannot create hsr debugfs directory
[  227.926308][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.946890][T12083] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  228.004934][T12081] veth7: entered promiscuous mode
[  228.010759][T12081] bond8: (slave veth7): Enslaving as a backup interface with a down link
[  228.049685][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.113648][T12088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1881'.
[  228.140946][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.190617][T12085] netlink: 'syz.1.1881': attribute type 10 has an invalid length.
[  228.311602][   T13] bridge_slave_1: left allmulticast mode
[  228.316996][   T13] bridge_slave_1: left promiscuous mode
[  228.318968][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.324019][   T13] bridge_slave_0: left allmulticast mode
[  228.326163][   T13] bridge_slave_0: left promiscuous mode
[  228.328324][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.633217][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  228.639684][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  228.645567][   T13] bond0 (unregistering): Released all slaves
[  228.733586][T12098] batadv_slave_1: entered promiscuous mode
[  228.796071][T12097] batadv_slave_1: left promiscuous mode
[  229.119066][   T13] hsr_slave_0: left promiscuous mode
[  229.121978][   T13] hsr_slave_1: left promiscuous mode
[  229.124464][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  229.127286][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  229.130251][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  229.133201][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  229.144400][   T13] veth1_macvtap: left promiscuous mode
[  229.146624][   T13] veth0_macvtap: left promiscuous mode
[  229.148489][   T13] veth1_vlan: left promiscuous mode
[  229.150546][   T13] veth0_vlan: left promiscuous mode
[  229.262742][   T54] Bluetooth: hci1: command tx timeout
[  229.422867][ T1085] wlan0: Trigger new scan to find an IBSS to join
[  229.525890][   T13] team0 (unregistering): Port device team_slave_1 removed
[  229.567619][   T13] team0 (unregistering): Port device team_slave_0 removed
[  229.582923][   T54] Bluetooth: hci2: command tx timeout
[  229.999665][T12107] ieee802154 phy0 wpan0: encryption failed: -90
[  230.005813][T12107] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1886'.
[  230.230837][T12027] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  230.255091][T12027] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  230.271784][T12027] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  230.314354][  T582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.318542][T12027] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  230.531075][T12031] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  230.571767][T12031] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  230.583556][T12031] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  230.608291][T12031] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  230.711779][T12027] 8021q: adding VLAN 0 to HW filter on device bond0
[  230.746281][T12027] 8021q: adding VLAN 0 to HW filter on device team0
[  230.759704][ T7848] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.763041][ T7848] bridge0: port 1(bridge_slave_0) entered forwarding state
[  230.775183][ T7848] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.778692][ T7848] bridge0: port 2(bridge_slave_1) entered forwarding state
[  230.814041][T12031] 8021q: adding VLAN 0 to HW filter on device bond0
[  230.846016][T12031] 8021q: adding VLAN 0 to HW filter on device team0
[  230.866837][ T3897] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.869851][ T3897] bridge0: port 1(bridge_slave_0) entered forwarding state
[  230.886561][ T3897] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.889932][ T3897] bridge0: port 2(bridge_slave_1) entered forwarding state
[  231.065439][T12027] 8021q: adding VLAN 0 to HW filter on device batadv0
[  231.079649][T12134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1887'.
[  231.094361][T12031] 8021q: adding VLAN 0 to HW filter on device batadv0
[  231.119087][T12027] veth0_vlan: entered promiscuous mode
[  231.121510][T12136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1888'.
[  231.129042][T12136] chnl_net:caif_netlink_parms(): no params data found
[  231.147277][T12027] veth1_vlan: entered promiscuous mode
[  231.164943][T12031] veth0_vlan: entered promiscuous mode
[  231.171733][T12031] veth1_vlan: entered promiscuous mode
[  231.203943][T12027] veth0_macvtap: entered promiscuous mode
[  231.209116][T12027] veth1_macvtap: entered promiscuous mode
[  231.230532][T12027] batman_adv: batadv0: Interface activated: batadv_slave_0
[  231.239527][T12031] veth0_macvtap: entered promiscuous mode
[  231.247347][T12027] batman_adv: batadv0: Interface activated: batadv_slave_1
[  231.265190][T12027] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  231.269108][T12027] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  231.272046][T12027] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  231.280881][T12027] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  231.295129][T12031] veth1_macvtap: entered promiscuous mode
[  231.338659][T12031] batman_adv: batadv0: Interface activated: batadv_slave_0
[  231.343492][   T54] Bluetooth: hci1: command tx timeout
[  231.356438][T12139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1889'.
[  231.389854][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  231.393537][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  231.393889][T12031] batman_adv: batadv0: Interface activated: batadv_slave_1
[  231.420269][T12031] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  231.441001][T12031] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  231.450034][T12031] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  231.455271][T12031] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  231.525688][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  231.540525][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  231.580537][ T3897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  231.589714][ T3897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  231.626983][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  231.629579][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  231.663840][   T54] Bluetooth: hci2: command tx timeout
[  231.853035][T12160] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1893'.
[  232.027169][T12164] netlink: 'syz.1.1895': attribute type 10 has an invalid length.
[  232.269413][T12178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1900'.
[  232.276116][T12178] openvswitch: netlink: Missing key (keys=40, expected=100)
[  232.308221][T12180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1901'.
[  232.319659][T12180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1901'.
[  233.177042][ T7889] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.483252][T12191] syzkaller1: entered promiscuous mode
[  233.485536][T12191] syzkaller1: entered allmulticast mode
[  233.629007][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  233.635726][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  233.639767][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  233.644511][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  233.648325][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  233.776928][T12192] lo speed is unknown, defaulting to 1000
[  233.913217][T12192] chnl_net:caif_netlink_parms(): no params data found
[  234.019525][T12192] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.031987][T12192] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.042643][T12192] bridge_slave_0: entered allmulticast mode
[  234.053925][T12192] bridge_slave_0: entered promiscuous mode
[  234.066530][T12192] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.070526][T12192] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.077843][T12192] bridge_slave_1: entered allmulticast mode
[  234.081815][T12192] bridge_slave_1: entered promiscuous mode
[  234.111135][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  234.116423][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  234.119840][T12210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1907'.
[  234.121013][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  234.129264][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  234.133068][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  234.160017][T12192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  234.166745][T12192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  234.203219][T12192] team0: Port device team_slave_0 added
[  234.208011][T12192] team0: Port device team_slave_1 added
[  234.266618][T12192] batman_adv: batadv0: Adding interface: batadv_slave_0
[  234.269671][T12192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  234.282593][T12192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  234.297385][T12192] batman_adv: batadv0: Adding interface: batadv_slave_1
[  234.300290][T12192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  234.317085][T12192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  234.374973][T12192] hsr_slave_0: entered promiscuous mode
[  234.378653][T12192] hsr_slave_1: entered promiscuous mode
[  234.381918][T12192] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  234.389179][T12192] Cannot create hsr debugfs directory
[  234.438301][T12211] lo speed is unknown, defaulting to 1000
[  234.668480][T12211] chnl_net:caif_netlink_parms(): no params data found
[  234.741895][T12211] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.744720][T12211] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.747586][T12211] bridge_slave_0: entered allmulticast mode
[  234.751502][T12211] bridge_slave_0: entered promiscuous mode
[  234.755990][T12211] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.758670][T12211] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.761909][T12211] bridge_slave_1: entered allmulticast mode
[  234.765368][T12211] bridge_slave_1: entered promiscuous mode
[  234.792591][T12211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  234.798722][T12211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  234.825752][T12211] team0: Port device team_slave_0 added
[  234.829557][T12211] team0: Port device team_slave_1 added
[  234.866081][ T7889] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.876489][T12211] batman_adv: batadv0: Adding interface: batadv_slave_0
[  234.879236][T12211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  234.889936][T12211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  234.907290][ T7889] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.916255][T12211] batman_adv: batadv0: Adding interface: batadv_slave_1
[  234.918863][T12211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  234.929397][T12211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  234.971580][ T7889] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.989372][T12211] hsr_slave_0: entered promiscuous mode
[  234.991850][T12211] hsr_slave_1: entered promiscuous mode
[  234.994414][T12211] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  234.997607][T12211] Cannot create hsr debugfs directory
[  235.152555][ T7889] bridge_slave_1: left allmulticast mode
[  235.155270][ T7889] bridge_slave_1: left promiscuous mode
[  235.157284][ T7889] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.162041][ T7889] bridge_slave_0: left allmulticast mode
[  235.167927][ T7889] bridge_slave_0: left promiscuous mode
[  235.170428][ T7889] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.184091][T12227] syz!: rxe_newlink: already configured on team_slave_0
[  235.189012][T12227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1910'.
[  235.198398][T12227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1910'.
[  235.513114][ T7889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  235.518573][ T7889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  235.523619][ T7889] bond0 (unregistering): Released all slaves
[  235.663685][   T54] Bluetooth: hci1: command tx timeout
[  235.920006][ T7889] hsr_slave_0: left promiscuous mode
[  235.922756][ T7889] hsr_slave_1: left promiscuous mode
[  235.925066][ T7889] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  235.927694][ T7889] batman_adv: batadv0: Removing interface: batadv_slave_0
[  235.931125][ T7889] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  235.935006][ T7889] batman_adv: batadv0: Removing interface: batadv_slave_1
[  235.947991][ T7889] veth1_macvtap: left promiscuous mode
[  235.949895][ T7889] veth0_macvtap: left promiscuous mode
[  235.952149][ T7889] veth1_vlan: left promiscuous mode
[  235.954944][ T7889] veth0_vlan: left promiscuous mode
[  236.143068][   T54] Bluetooth: hci2: command tx timeout
[  236.478853][ T7889] team0 (unregistering): Port device team_slave_1 removed
[  236.516402][ T7889] team0 (unregistering): Port device team_slave_0 removed
[  237.001506][T12192] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  237.055799][T12211] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.069364][T12192] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  237.080873][T12192] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  237.091128][T12250] syz!: rxe_newlink: already configured on team_slave_0
[  237.095745][T12192] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  237.118686][T12250] __nla_validate_parse: 1 callbacks suppressed
[  237.118705][T12250] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1917'.
[  237.162785][T12211] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.233813][T12211] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.331619][T12211] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.348513][T12192] 8021q: adding VLAN 0 to HW filter on device bond0
[  237.364541][T12192] 8021q: adding VLAN 0 to HW filter on device team0
[  237.364780][T12265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1921'.
[  237.372993][  T582] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.375860][  T582] bridge0: port 1(bridge_slave_0) entered forwarding state
[  237.403813][  T582] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.406883][  T582] bridge0: port 2(bridge_slave_1) entered forwarding state
[  237.450617][T12267] pim6reg: entered allmulticast mode
[  237.454075][T12267] pim6reg: left allmulticast mode
[  237.499128][ T7889] bridge_slave_1: left allmulticast mode
[  237.509407][ T7889] bridge_slave_1: left promiscuous mode
[  237.511963][ T7889] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.518168][T12267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1922'.
[  237.544789][ T7889] bridge_slave_0: left allmulticast mode
[  237.547283][ T7889] bridge_slave_0: left promiscuous mode
[  237.549998][ T7889] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.747477][   T54] Bluetooth: hci1: command tx timeout
[  237.792895][T12275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1922'.
[  237.949950][ T7889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  237.956616][ T7889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  237.965362][ T7889] bond0 (unregistering): Released all slaves
[  238.105937][T12192] 8021q: adding VLAN 0 to HW filter on device batadv0
[  238.112590][T12280] ieee802154 phy0 wpan0: encryption failed: -22
[  238.116068][T12211] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  238.121399][T12280] ieee802154 phy0 wpan0: encryption failed: -22
[  238.129732][T12280] ieee802154 phy0 wpan0: encryption failed: -22
[  238.138616][T12280] ieee802154 phy0 wpan0: encryption failed: -22
[  238.141451][T12280] ieee802154 phy0 wpan0: encryption failed: -22
[  238.158501][T12211] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  238.216224][T12211] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  238.226815][   T54] Bluetooth: hci2: command tx timeout
[  238.231713][T12285] syz!: rxe_newlink: already configured on team_slave_0
[  238.236466][T12211] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  238.242905][T12285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1924'.
[  238.246754][T12285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1924'.
[  238.336068][T12294] mac80211_hwsim hwsim2 ": renamed from wlan0 (while UP)
[  238.428371][T12192] veth0_vlan: entered promiscuous mode
[  238.476446][T12192] veth1_vlan: entered promiscuous mode
[  238.554001][T12211] 8021q: adding VLAN 0 to HW filter on device bond0
[  238.570930][T12192] veth0_macvtap: entered promiscuous mode
[  238.604750][T12192] veth1_macvtap: entered promiscuous mode
[  238.616684][T12211] 8021q: adding VLAN 0 to HW filter on device team0
[  238.636412][ T7889] hsr_slave_0: left promiscuous mode
[  238.640175][ T7889] hsr_slave_1: left promiscuous mode
[  238.659030][ T7889] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  238.662732][ T7889] batman_adv: batadv0: Removing interface: batadv_slave_0
[  238.667263][ T7889] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  238.670475][ T7889] batman_adv: batadv0: Removing interface: batadv_slave_1
[  238.687279][ T7889] veth1_macvtap: left promiscuous mode
[  238.689713][ T7889] veth0_macvtap: left promiscuous mode
[  238.692132][ T7889] veth1_vlan: left promiscuous mode
[  238.694662][ T7889] veth0_vlan: left promiscuous mode
[  239.058637][T12308] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1927'.
[  239.189177][ T7889] team0 (unregistering): Port device team_slave_1 removed
[  239.222162][ T7889] team0 (unregistering): Port device team_slave_0 removed
[  239.605215][T12301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1927'.
[  239.609868][ T3897] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.612397][ T3897] bridge0: port 1(bridge_slave_0) entered forwarding state
[  239.660244][T12192] batman_adv: batadv0: Interface activated: batadv_slave_0
[  239.681263][ T3897] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.684393][ T3897] bridge0: port 2(bridge_slave_1) entered forwarding state
[  239.703789][T12192] batman_adv: batadv0: Interface activated: batadv_slave_1
[  239.726823][T12192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  239.730554][T12192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  239.738731][T12192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  239.744996][T12192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  239.789766][T12211] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  239.796182][T12211] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  239.817585][T12310] IPVS: Scheduler module ip_vs_sip not found
[  239.828955][   T54] Bluetooth: hci1: command tx timeout
[  239.966625][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  239.969983][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.033070][ T7842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.037688][ T7842] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.046356][T12211] 8021q: adding VLAN 0 to HW filter on device batadv0
[  240.166454][T12211] veth0_vlan: entered promiscuous mode
[  240.179813][T12211] veth1_vlan: entered promiscuous mode
[  240.198812][T12324] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1930'.
[  240.216508][T12211] veth0_macvtap: entered promiscuous mode
[  240.227644][T12211] veth1_macvtap: entered promiscuous mode
[  240.251297][T12211] batman_adv: batadv0: Interface activated: batadv_slave_0
[  240.261964][T12211] batman_adv: batadv0: Interface activated: batadv_slave_1
[  240.275254][T12211] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  240.278577][T12211] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  240.285473][T12211] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  240.288380][T12211] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  240.303451][   T54] Bluetooth: hci2: command tx timeout
[  240.328950][T12336] bridge0: port 2(gretap0) entered blocking state
[  240.331480][T12336] bridge0: port 2(gretap0) entered disabled state
[  240.335659][T12336] gretap0: entered allmulticast mode
[  240.338251][T12336] gretap0: entered promiscuous mode
[  240.375071][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.378354][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.401774][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.405790][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  241.266889][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.588749][T12344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1936'.
[  241.687003][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.693741][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  241.698485][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  241.701685][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  241.705242][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  241.708743][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  241.810401][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.863994][T12351] lo speed is unknown, defaulting to 1000
[  241.889314][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.993722][T12351] chnl_net:caif_netlink_parms(): no params data found
[  242.130924][   T13] bridge_slave_1: left allmulticast mode
[  242.137656][   T13] bridge_slave_1: left promiscuous mode
[  242.141455][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.150220][   T13] bridge_slave_0: left allmulticast mode
[  242.156990][   T13] bridge_slave_0: left promiscuous mode
[  242.159878][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.257488][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  242.265062][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  242.289423][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  242.305529][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  242.316751][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  242.499757][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  242.504516][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  242.508372][   T13] bond0 (unregistering): Released all slaves
[  242.528549][T12363] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1937'.
[  242.535525][T12351] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.538254][T12351] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.540850][T12351] bridge_slave_0: entered allmulticast mode
[  242.547424][T12351] bridge_slave_0: entered promiscuous mode
[  242.551875][T12351] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.560436][T12351] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.563227][T12351] bridge_slave_1: entered allmulticast mode
[  242.566626][T12351] bridge_slave_1: entered promiscuous mode
[  242.599287][T12351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  242.639430][T12351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  242.692856][T12351] team0: Port device team_slave_0 added
[  242.717060][T12351] team0: Port device team_slave_1 added
[  242.851980][T12351] batman_adv: batadv0: Adding interface: batadv_slave_0
[  242.859403][T12351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  242.864493][T12373] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1942'.
[  242.869051][T12351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  242.881320][T12351] batman_adv: batadv0: Adding interface: batadv_slave_1
[  242.885300][T12351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  242.898863][T12351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  242.929793][T12377] netlink: 'syz.1.1943': attribute type 5 has an invalid length.
[  242.947573][T12351] hsr_slave_0: entered promiscuous mode
[  242.950292][T12351] hsr_slave_1: entered promiscuous mode
[  242.953015][T12351] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  242.955536][T12351] Cannot create hsr debugfs directory
[  242.958452][T12360] lo speed is unknown, defaulting to 1000
[  243.104551][   T13] hsr_slave_0: left promiscuous mode
[  243.107717][   T13] hsr_slave_1: left promiscuous mode
[  243.116572][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  243.119842][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  243.124457][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  243.127670][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  243.148779][   T13] veth1_macvtap: left promiscuous mode
[  243.152058][   T13] veth0_macvtap: left promiscuous mode
[  243.158967][   T13] veth1_vlan: left promiscuous mode
[  243.161284][   T13] veth0_vlan: left promiscuous mode
[  243.545181][   T13] team0 (unregistering): Port device team_slave_1 removed
[  243.571610][   T13] team0 (unregistering): Port device team_slave_0 removed
[  243.742493][ T5837] Bluetooth: hci1: command tx timeout
[  244.029910][T12382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1945'.
[  244.037108][T12382] openvswitch: netlink: Flow actions attr not present in new flow.
[  244.101893][T12360] chnl_net:caif_netlink_parms(): no params data found
[  244.168731][T12360] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.171325][T12360] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.175331][T12360] bridge_slave_0: entered allmulticast mode
[  244.178117][T12360] bridge_slave_0: entered promiscuous mode
[  244.181320][T12360] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.184335][T12360] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.187146][T12360] bridge_slave_1: entered allmulticast mode
[  244.190254][T12360] bridge_slave_1: entered promiscuous mode
[  244.236441][T12360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  244.249944][T12360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  244.291277][T12360] team0: Port device team_slave_0 added
[  244.295578][T12360] team0: Port device team_slave_1 added
[  244.340617][T12360] batman_adv: batadv0: Adding interface: batadv_slave_0
[  244.344589][T12360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  244.356931][T12360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  244.368823][T12360] batman_adv: batadv0: Adding interface: batadv_slave_1
[  244.371759][T12360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  244.387046][ T5837] Bluetooth: hci2: command tx timeout
[  244.387737][T12360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  244.417073][T12399] netlink: 'syz.1.1950': attribute type 5 has an invalid length.
[  244.417949][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.513613][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.538047][T12351] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  244.548027][T12360] hsr_slave_0: entered promiscuous mode
[  244.551580][T12360] hsr_slave_1: entered promiscuous mode
[  244.555502][T12360] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  244.558570][T12360] Cannot create hsr debugfs directory
[  244.561315][T12351] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  244.571629][T12351] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  244.593868][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.618938][T12351] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  244.669127][T12407] netlink: 'syz.1.1952': attribute type 1 has an invalid length.
[  244.690920][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.723630][T12407] 8021q: adding VLAN 0 to HW filter on device bond9
[  244.939281][   T13] bridge_slave_1: left allmulticast mode
[  244.941939][   T13] bridge_slave_1: left promiscuous mode
[  244.947523][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.955160][   T13] bridge_slave_0: left allmulticast mode
[  244.958083][   T13] bridge_slave_0: left promiscuous mode
[  244.961334][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.360578][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  245.367642][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  245.373433][   T13] bond0 (unregistering): Released all slaves
[  245.480826][T12351] 8021q: adding VLAN 0 to HW filter on device bond0
[  245.543876][T12351] 8021q: adding VLAN 0 to HW filter on device team0
[  245.555237][  T582] bridge0: port 1(bridge_slave_0) entered blocking state
[  245.558343][  T582] bridge0: port 1(bridge_slave_0) entered forwarding state
[  245.591830][  T582] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.594963][  T582] bridge0: port 2(bridge_slave_1) entered forwarding state
[  245.739619][T12351] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  245.817844][T12360] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  245.827737][ T5837] Bluetooth: hci1: command tx timeout
[  245.837666][T12360] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  245.845930][T12360] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  245.865760][T12360] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  246.008183][T12351] 8021q: adding VLAN 0 to HW filter on device batadv0
[  246.018664][   T13] hsr_slave_0: left promiscuous mode
[  246.020974][   T13] hsr_slave_1: left promiscuous mode
[  246.024017][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  246.027394][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  246.031167][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  246.035630][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  246.035855][T12435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1957'.
[  246.051627][   T13] veth1_macvtap: left promiscuous mode
[  246.054083][   T13] veth0_macvtap: left promiscuous mode
[  246.055978][   T13] veth1_vlan: left promiscuous mode
[  246.057726][   T13] veth0_vlan: left promiscuous mode
[  246.401515][   T13] team0 (unregistering): Port device team_slave_1 removed
[  246.431445][   T13] team0 (unregistering): Port device team_slave_0 removed
[  246.462802][ T5837] Bluetooth: hci2: command tx timeout
[  246.841288][T12351] veth0_vlan: entered promiscuous mode
[  246.911394][T12440] 8021q: adding VLAN 0 to HW filter on device bond10
[  246.917882][T12351] veth1_vlan: entered promiscuous mode
[  246.951537][T12360] 8021q: adding VLAN 0 to HW filter on device bond0
[  246.987715][T12360] 8021q: adding VLAN 0 to HW filter on device team0
[  247.004410][  T582] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.007611][  T582] bridge0: port 1(bridge_slave_0) entered forwarding state
[  247.013995][  T582] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.016916][  T582] bridge0: port 2(bridge_slave_1) entered forwarding state
[  247.036753][T12351] veth0_macvtap: entered promiscuous mode
[  247.048790][T12351] veth1_macvtap: entered promiscuous mode
[  247.075510][T12443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1959'.
[  247.108138][T12351] batman_adv: batadv0: Interface activated: batadv_slave_0
[  247.125521][T12351] batman_adv: batadv0: Interface activated: batadv_slave_1
[  247.135363][T12351] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  247.139477][T12351] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  247.152824][T12351] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  247.159206][T12351] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  247.329833][ T3897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  247.333849][ T3897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.369490][T12360] 8021q: adding VLAN 0 to HW filter on device batadv0
[  247.395547][  T582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  247.398061][  T582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.429581][T12360] veth0_vlan: entered promiscuous mode
[  247.455535][T12360] veth1_vlan: entered promiscuous mode
[  247.475390][T12360] veth0_macvtap: entered promiscuous mode
[  247.481261][T12360] veth1_macvtap: entered promiscuous mode
[  247.498345][T12360] batman_adv: batadv0: Interface activated: batadv_slave_0
[  247.503701][T12455] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1962'.
[  247.517611][T12360] batman_adv: batadv0: Interface activated: batadv_slave_1
[  247.549684][T12455] dummy0: left allmulticast mode
[  247.551401][T12455] dummy0: left promiscuous mode
[  247.553455][T12455] bridge0: port 1(dummy0) entered disabled state
[  247.559685][T12360] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  247.559943][T12455] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1962'.
[  247.563084][T12360] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  247.570027][T12360] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  247.575156][T12360] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  247.629272][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  247.631775][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.659145][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  247.662985][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.966479][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.413849][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.641608][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.800645][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.050176][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  249.056642][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  249.060273][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  249.068435][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  249.071597][   T13] bridge_slave_1: left allmulticast mode
[  249.074850][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  249.075335][   T13] bridge_slave_1: left promiscuous mode
[  249.079858][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.099335][   T13] bridge_slave_0: left allmulticast mode
[  249.101284][   T13] bridge_slave_0: left promiscuous mode
[  249.104564][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.381930][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  249.386861][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  249.390984][   T13] bond0 (unregistering): Released all slaves
[  249.614847][T12474] lo speed is unknown, defaulting to 1000
[  249.699323][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  249.704581][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  249.708186][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  249.716345][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  249.719850][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  249.789873][T12491] (unnamed net_device) (uninitialized): option mode: invalid value (22)
[  249.964198][T12474] chnl_net:caif_netlink_parms(): no params data found
[  249.982534][T12488] lo speed is unknown, defaulting to 1000
[  249.996180][T12500] 8021q: adding VLAN 0 to HW filter on device macvlan36
[  250.008861][T12500] bond10: (slave macvlan36): Enslaving as a backup interface with a down link
[  250.067027][T12502] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1976'.
[  250.071312][T12502] netlink: 'syz.1.1976': attribute type 1 has an invalid length.
[  250.160700][   T13] hsr_slave_0: left promiscuous mode
[  250.165280][   T13] hsr_slave_1: left promiscuous mode
[  250.167723][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  250.170413][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  250.177379][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  250.180074][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  250.195867][   T13] veth1_macvtap: left promiscuous mode
[  250.197711][   T13] veth0_macvtap: left promiscuous mode
[  250.199586][   T13] veth1_vlan: left promiscuous mode
[  250.201317][   T13] veth0_vlan: left promiscuous mode
[  250.529366][   T13] team0 (unregistering): Port device team_slave_1 removed
[  250.561362][   T13] team0 (unregistering): Port device team_slave_0 removed
[  250.993167][T12474] bridge0: port 1(bridge_slave_0) entered blocking state
[  250.996405][T12474] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.999325][T12474] bridge_slave_0: entered allmulticast mode
[  251.007095][T12474] bridge_slave_0: entered promiscuous mode
[  251.011762][T12474] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.022980][T12474] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.025809][T12474] bridge_slave_1: entered allmulticast mode
[  251.039712][T12474] bridge_slave_1: entered promiscuous mode
[  251.078008][T12474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  251.095408][T12512] netlink: 'syz.1.1978': attribute type 1 has an invalid length.
[  251.096840][T12474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  251.104378][ T5837] Bluetooth: hci1: command tx timeout
[  251.191244][T12474] team0: Port device team_slave_0 added
[  251.216364][T12474] team0: Port device team_slave_1 added
[  251.306679][T12518] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1979'.
[  251.321496][T12474] batman_adv: batadv0: Adding interface: batadv_slave_0
[  251.332677][T12474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.353086][T12474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  251.359948][T12474] batman_adv: batadv0: Adding interface: batadv_slave_1
[  251.372656][T12474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.383779][T12474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  251.397941][T12488] chnl_net:caif_netlink_parms(): no params data found
[  251.510883][T12474] hsr_slave_0: entered promiscuous mode
[  251.518431][T12474] hsr_slave_1: entered promiscuous mode
[  251.521486][T12474] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  251.524924][T12474] Cannot create hsr debugfs directory
[  251.598950][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.630603][T12488] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.634777][T12488] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.638061][T12488] bridge_slave_0: entered allmulticast mode
[  251.646199][T12488] bridge_slave_0: entered promiscuous mode
[  251.657286][T12488] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.660835][T12488] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.668225][T12488] bridge_slave_1: entered allmulticast mode
[  251.681807][T12488] bridge_slave_1: entered promiscuous mode
[  251.719981][T12533] netlink: 'syz.1.1983': attribute type 3 has an invalid length.
[  251.725182][T12533] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1983'.
[  251.740335][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.745497][ T5837] Bluetooth: hci2: command tx timeout
[  251.787495][T12488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  251.794848][T12488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  251.835892][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.895902][T12488] team0: Port device team_slave_0 added
[  251.906774][T12488] team0: Port device team_slave_1 added
[  251.926492][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.978395][T12488] batman_adv: batadv0: Adding interface: batadv_slave_0
[  251.981514][T12488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.996075][T12488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  252.001731][T12488] batman_adv: batadv0: Adding interface: batadv_slave_1
[  252.005969][T12488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  252.016933][T12488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  252.120057][T12488] hsr_slave_0: entered promiscuous mode
[  252.123880][T12488] hsr_slave_1: entered promiscuous mode
[  252.126864][T12488] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  252.130965][T12488] Cannot create hsr debugfs directory
[  252.304201][   T13] bridge_slave_1: left allmulticast mode
[  252.306511][   T13] bridge_slave_1: left promiscuous mode
[  252.309053][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.331885][   T13] bridge_slave_0: left allmulticast mode
[  252.337197][   T13] bridge_slave_0: left promiscuous mode
[  252.339863][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.696517][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  252.701296][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  252.708342][   T13] bond0 (unregistering): Released all slaves
[  252.836585][T12541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1986'.
[  252.838499][T12474] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  252.880976][T12474] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  252.890928][T12474] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  252.934431][T12474] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  253.183545][ T5837] Bluetooth: hci1: command tx timeout
[  253.241277][T12474] 8021q: adding VLAN 0 to HW filter on device bond0
[  253.283892][T12474] 8021q: adding VLAN 0 to HW filter on device team0
[  253.305257][ T7848] bridge0: port 1(bridge_slave_0) entered blocking state
[  253.308679][ T7848] bridge0: port 1(bridge_slave_0) entered forwarding state
[  253.325711][   T13] hsr_slave_0: left promiscuous mode
[  253.328003][   T13] hsr_slave_1: left promiscuous mode
[  253.331167][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  253.338176][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  253.341967][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  253.349876][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  253.371779][   T13] veth1_macvtap: left promiscuous mode
[  253.374262][   T13] veth0_macvtap: left promiscuous mode
[  253.376528][   T13] veth1_vlan: left promiscuous mode
[  253.378821][   T13] veth0_vlan: left promiscuous mode
[  253.739979][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1992'.
[  253.748868][T12571] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  253.800408][T12573] syz!: rxe_newlink: already configured on team_slave_0
[  253.806463][T12573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1993'.
[  253.810914][T12573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1993'.
[  253.815653][   T13] team0 (unregistering): Port device team_slave_1 removed
[  253.833116][ T5837] Bluetooth: hci2: command tx timeout
[  253.869438][   T13] team0 (unregistering): Port device team_slave_0 removed
[  254.219311][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.222355][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[  254.322194][T12488] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  254.350821][T12488] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  254.359433][T12488] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  254.365283][T12488] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  254.464886][T12488] 8021q: adding VLAN 0 to HW filter on device bond0
[  254.487204][T12488] 8021q: adding VLAN 0 to HW filter on device team0
[  254.500636][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.503111][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[  254.516571][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.519351][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[  254.534696][T12474] 8021q: adding VLAN 0 to HW filter on device batadv0
[  254.600400][T12474] veth0_vlan: entered promiscuous mode
[  254.607733][T12474] veth1_vlan: entered promiscuous mode
[  254.624392][T12474] veth0_macvtap: entered promiscuous mode
[  254.629132][T12474] veth1_macvtap: entered promiscuous mode
[  254.639242][T12474] batman_adv: batadv0: Interface activated: batadv_slave_0
[  254.649221][T12474] batman_adv: batadv0: Interface activated: batadv_slave_1
[  254.654851][T12474] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  254.657746][T12474] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  254.660907][T12474] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  254.665192][T12474] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  254.754713][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.758065][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.815831][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.819817][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.830630][T12598] syz!: rxe_newlink: already configured on team_slave_0
[  254.836132][T12598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1996'.
[  254.838722][T12488] 8021q: adding VLAN 0 to HW filter on device batadv0
[  254.841727][T12598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1996'.
[  254.908006][T12488] veth0_vlan: entered promiscuous mode
[  254.929595][T12488] veth1_vlan: entered promiscuous mode
[  255.007630][T12488] veth0_macvtap: entered promiscuous mode
[  255.011736][T12488] veth1_macvtap: entered promiscuous mode
[  255.039060][T12488] batman_adv: batadv0: Interface activated: batadv_slave_0
[  255.047892][T12488] batman_adv: batadv0: Interface activated: batadv_slave_1
[  255.053602][T12488] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  255.056559][T12488] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  255.060509][T12488] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  255.066787][T12488] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  255.119139][  T582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.123471][  T582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  255.141679][T12608] 8021q: adding VLAN 0 to HW filter on device bond12
[  255.185362][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.190542][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  255.266469][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  255.285629][T12613] syz!: rxe_newlink: already configured on team_slave_0
[  255.289266][T12613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2003'.
[  255.293717][T12613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2003'.
[  255.487174][ T5845] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.890421][ T5845] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.215318][ T5845] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.666216][ T5845] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.974922][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  256.980016][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  256.989667][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  256.995084][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  256.999155][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  257.088476][ T5845] bridge_slave_1: left allmulticast mode
[  257.090534][ T5845] bridge_slave_1: left promiscuous mode
[  257.105313][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.111355][ T5845] bridge_slave_0: left allmulticast mode
[  257.117173][ T5845] bridge_slave_0: left promiscuous mode
[  257.119741][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.513418][T12629] netlink: 'syz.1.2007': attribute type 1 has an invalid length.
[  257.520295][T12629] netlink: 'syz.1.2007': attribute type 2 has an invalid length.
[  257.524232][ T5845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  257.527793][T12630] netlink: 'syz.1.2007': attribute type 1 has an invalid length.
[  257.533983][T12630] netlink: 'syz.1.2007': attribute type 2 has an invalid length.
[  257.537183][ T5845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  257.546459][ T5845] bond0 (unregistering): Released all slaves
[  257.559528][T12624] lo speed is unknown, defaulting to 1000
[  257.684784][T12632] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2008'.
[  257.713627][T12632] netlink: 'syz.1.2008': attribute type 1 has an invalid length.
[  257.716817][T12632] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2008'.
[  257.720839][T12632] netlink: 'syz.1.2008': attribute type 1 has an invalid length.
[  257.723766][T12632] netlink: 'syz.1.2008': attribute type 1 has an invalid length.
[  257.726624][T12632] netlink: 'syz.1.2008': attribute type 1 has an invalid length.
[  257.729742][T12632] netlink: 'syz.1.2008': attribute type 1 has an invalid length.
[  257.734886][T12632] netlink: 'syz.1.2008': attribute type 1 has an invalid length.
[  257.738365][T12632] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  257.772785][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  257.779897][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  257.792665][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  257.798200][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  257.801650][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  257.946647][T12624] chnl_net:caif_netlink_parms(): no params data found
[  258.091762][ T5845] hsr_slave_0: left promiscuous mode
[  258.099986][ T5845] hsr_slave_1: left promiscuous mode
[  258.102548][ T5845] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  258.105316][ T5845] batman_adv: batadv0: Removing interface: batadv_slave_0
[  258.108716][ T5845] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  258.111752][ T5845] batman_adv: batadv0: Removing interface: batadv_slave_1
[  258.127593][ T5845] veth1_macvtap: left promiscuous mode
[  258.129672][ T5845] veth0_macvtap: left promiscuous mode
[  258.131935][ T5845] veth1_vlan: left promiscuous mode
[  258.135301][ T5845] veth0_vlan: left promiscuous mode
[  258.611310][ T5845] team0 (unregistering): Port device team_slave_1 removed
[  258.653119][ T5845] team0 (unregistering): Port device team_slave_0 removed
[  259.027970][ T5837] Bluetooth: hci1: command tx timeout
[  259.039519][T12635] lo speed is unknown, defaulting to 1000
[  259.091447][T12624] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.094538][T12624] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.097129][T12624] bridge_slave_0: entered allmulticast mode
[  259.100368][T12624] bridge_slave_0: entered promiscuous mode
[  259.116671][T12624] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.125653][T12624] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.129154][T12624] bridge_slave_1: entered allmulticast mode
[  259.134079][T12624] bridge_slave_1: entered promiscuous mode
[  259.177949][T12665] xt_l2tp: wrong L2TP version: 0
[  259.207079][T12665] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2
[  259.208133][T12624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  259.210919][T12665] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0
[  259.215889][T12624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  259.260409][T12624] team0: Port device team_slave_0 added
[  259.272239][T12624] team0: Port device team_slave_1 added
[  259.295816][T12624] batman_adv: batadv0: Adding interface: batadv_slave_0
[  259.298197][T12624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  259.306931][T12624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  259.311478][T12624] batman_adv: batadv0: Adding interface: batadv_slave_1
[  259.313950][T12624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  259.322785][T12624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  259.401299][T12624] hsr_slave_0: entered promiscuous mode
[  259.405552][T12624] hsr_slave_1: entered promiscuous mode
[  259.407885][T12624] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  259.410451][T12624] Cannot create hsr debugfs directory
[  259.468829][T12635] chnl_net:caif_netlink_parms(): no params data found
[  259.591624][ T5845] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.605439][T12635] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.608387][T12635] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.611446][T12635] bridge_slave_0: entered allmulticast mode
[  259.615170][T12635] bridge_slave_0: entered promiscuous mode
[  259.622928][T12635] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.626072][T12635] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.628703][T12635] bridge_slave_1: entered allmulticast mode
[  259.632996][T12635] bridge_slave_1: entered promiscuous mode
[  259.670234][T12635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  259.707035][ T5845] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.718056][T12635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  259.760259][T12635] team0: Port device team_slave_0 added
[  259.766192][T12635] team0: Port device team_slave_1 added
[  259.786130][ T5845] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.818637][T12635] batman_adv: batadv0: Adding interface: batadv_slave_0
[  259.821291][T12635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  259.831457][T12635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  259.841205][T12635] batman_adv: batadv0: Adding interface: batadv_slave_1
[  259.844686][T12635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  259.859281][T12635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  259.881682][ T5845] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.902757][ T5837] Bluetooth: hci2: command tx timeout
[  259.950260][T12635] hsr_slave_0: entered promiscuous mode
[  259.955065][T12635] hsr_slave_1: entered promiscuous mode
[  259.958838][T12635] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  259.962254][T12635] Cannot create hsr debugfs directory
[  260.248485][ T5845] bridge_slave_1: left allmulticast mode
[  260.251787][ T5845] bridge_slave_1: left promiscuous mode
[  260.258672][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.268527][ T5845] bridge_slave_0: left allmulticast mode
[  260.271347][ T5845] bridge_slave_0: left promiscuous mode
[  260.278933][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.750146][ T5845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  260.758055][ T5845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  260.764705][ T5845] bond0 (unregistering): Released all slaves
[  260.783808][T12683] gretap0: left allmulticast mode
[  260.786292][T12683] gretap0: left promiscuous mode
[  260.788776][T12683] bridge0: port 2(gretap0) entered disabled state
[  260.813040][T12683] bond8: (slave ip6gretap1): Releasing backup interface
[  260.815956][T12683] bond8: (slave ip6gretap1): the permanent HWaddr of slave - 3e:7c:82:95:c7:96 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  260.859059][T12683] bond8: (slave veth7): Releasing backup interface
[  260.875390][T12683] bond10: (slave macvlan36): Releasing backup interface
[  260.915784][T12624] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  260.967613][T12624] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  260.977727][T12624] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  261.030103][T12624] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  261.104894][ T5837] Bluetooth: hci1: command tx timeout
[  261.221436][T12624] 8021q: adding VLAN 0 to HW filter on device bond0
[  261.239726][T12624] 8021q: adding VLAN 0 to HW filter on device team0
[  261.248471][ T7848] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.250970][ T7848] bridge0: port 1(bridge_slave_0) entered forwarding state
[  261.270409][ T7848] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.272807][ T7848] bridge0: port 2(bridge_slave_1) entered forwarding state
[  261.317731][ T5845] hsr_slave_0: left promiscuous mode
[  261.320281][ T5845] hsr_slave_1: left promiscuous mode
[  261.323465][ T5845] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  261.325958][ T5845] batman_adv: batadv0: Removing interface: batadv_slave_0
[  261.329184][ T5845] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  261.334490][ T5845] batman_adv: batadv0: Removing interface: batadv_slave_1
[  261.348328][ T5845] veth1_macvtap: left promiscuous mode
[  261.350284][ T5845] veth0_macvtap: left promiscuous mode
[  261.353331][ T5845] veth1_vlan: left promiscuous mode
[  261.355944][ T5845] veth0_vlan: left promiscuous mode
[  261.412693][T12706] 
[  261.413938][T12706] ======================================================
[  261.417020][T12706] WARNING: possible circular locking dependency detected
[  261.419852][T12706] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[  261.424205][T12706] ------------------------------------------------------
[  261.426833][T12706] syz.1.2020/12706 is trying to acquire lock:
[  261.429174][T12706] ffffffff8f676398 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50
[  261.432624][T12706] 
[  261.432624][T12706] but task is already holding lock:
[  261.435331][T12706] ffff88810f6d1870 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50
[  261.438903][T12706] 
[  261.438903][T12706] which lock already depends on the new lock.
[  261.438903][T12706] 
[  261.443423][T12706] 
[  261.443423][T12706] the existing dependency chain (in reverse order) is:
[  261.446869][T12706] 
[  261.446869][T12706] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  261.449952][T12706]        lock_acquire+0x120/0x360
[  261.451972][T12706]        _raw_spin_lock_bh+0x36/0x50
[  261.454285][T12706]        nr_rt_ioctl+0x193/0xd50
[  261.456130][T12706]        sock_do_ioctl+0xdc/0x300
[  261.458483][T12706]        sock_ioctl+0x576/0x790
[  261.460741][T12706]        __se_sys_ioctl+0xfc/0x170
[  261.462903][T12706]        do_syscall_64+0xfa/0x3b0
[  261.464842][T12706]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.467260][T12706] 
[  261.467260][T12706] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  261.470462][T12706]        lock_acquire+0x120/0x360
[  261.472499][T12706]        _raw_spin_lock_bh+0x36/0x50
[  261.474623][T12706]        nr_rt_device_down+0xa9/0x720
[  261.476710][T12706]        nr_device_event+0x137/0x150
[  261.478894][T12706]        notifier_call_chain+0x1b6/0x3e0
[  261.481056][T12706]        __dev_notify_flags+0x18d/0x2e0
[  261.483263][T12706]        netif_change_flags+0xe8/0x1a0
[  261.485562][T12706]        dev_change_flags+0x130/0x260
[  261.487909][T12706]        dev_ioctl+0x7b4/0x1150
[  261.489752][T12706]        sock_do_ioctl+0x22c/0x300
[  261.491700][T12706]        sock_ioctl+0x576/0x790
[  261.493688][T12706]        __se_sys_ioctl+0xfc/0x170
[  261.495702][T12706]        do_syscall_64+0xfa/0x3b0
[  261.497725][T12706]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.500402][T12706] 
[  261.500402][T12706] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  261.503740][T12706]        validate_chain+0xb9b/0x2140
[  261.505884][T12706]        __lock_acquire+0xab9/0xd20
[  261.507842][T12706]        lock_acquire+0x120/0x360
[  261.509745][T12706]        _raw_spin_lock_bh+0x36/0x50
[  261.511766][T12706]        nr_rt_ioctl+0x390/0xd50
[  261.513716][T12706]        sock_do_ioctl+0xdc/0x300
[  261.515818][T12706]        sock_ioctl+0x576/0x790
[  261.517946][T12706]        __se_sys_ioctl+0xfc/0x170
[  261.519921][T12706]        do_syscall_64+0xfa/0x3b0
[  261.521872][T12706]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.524251][T12706] 
[  261.524251][T12706] other info that might help us debug this:
[  261.524251][T12706] 
[  261.528181][T12706] Chain exists of:
[  261.528181][T12706]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  261.528181][T12706] 
[  261.533439][T12706]  Possible unsafe locking scenario:
[  261.533439][T12706] 
[  261.536572][T12706]        CPU0                    CPU1
[  261.538602][T12706]        ----                    ----
[  261.540650][T12706]   lock(&nr_node->node_lock);
[  261.542526][T12706]                                lock(nr_node_list_lock);
[  261.545373][T12706]                                lock(&nr_node->node_lock);
[  261.548557][T12706]   lock(nr_neigh_list_lock);
[  261.550530][T12706] 
[  261.550530][T12706]  *** DEADLOCK ***
[  261.550530][T12706] 
[  261.553598][T12706] 2 locks held by syz.1.2020/12706:
[  261.555546][T12706]  #0: ffffffff8f6763f8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50
[  261.559188][T12706]  #1: ffff88810f6d1870 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50
[  261.563556][T12706] 
[  261.563556][T12706] stack backtrace:
[  261.565754][T12706] CPU: 0 UID: 0 PID: 12706 Comm: syz.1.2020 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  261.565769][T12706] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  261.565777][T12706] Call Trace:
[  261.565784][T12706]  <TASK>
[  261.565789][T12706]  dump_stack_lvl+0x189/0x250
[  261.565806][T12706]  ? __pfx_dump_stack_lvl+0x10/0x10
[  261.565818][T12706]  ? __pfx__printk+0x10/0x10
[  261.565830][T12706]  ? stack_trace_save+0x9c/0xe0
[  261.565847][T12706]  print_circular_bug+0x2ee/0x310
[  261.565863][T12706]  check_noncircular+0x134/0x160
[  261.565881][T12706]  validate_chain+0xb9b/0x2140
[  261.565898][T12706]  __lock_acquire+0xab9/0xd20
[  261.565910][T12706]  ? nr_rt_ioctl+0x390/0xd50
[  261.565918][T12706]  lock_acquire+0x120/0x360
[  261.565927][T12706]  ? nr_rt_ioctl+0x390/0xd50
[  261.565937][T12706]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  261.565950][T12706]  ? nr_rt_ioctl+0x390/0xd50
[  261.565958][T12706]  _raw_spin_lock_bh+0x36/0x50
[  261.565972][T12706]  ? nr_rt_ioctl+0x390/0xd50
[  261.566005][T12706]  nr_rt_ioctl+0x390/0xd50
[  261.566014][T12706]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  261.566026][T12706]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  261.566037][T12706]  ? apparmor_capable+0x137/0x1b0
[  261.566049][T12706]  ? capable+0x89/0xe0
[  261.566062][T12706]  ? nr_ioctl+0x1b1/0x3b0
[  261.566076][T12706]  sock_do_ioctl+0xdc/0x300
[  261.566092][T12706]  ? __pfx_sock_do_ioctl+0x10/0x10
[  261.566105][T12706]  ? __lock_acquire+0xab9/0xd20
[  261.566117][T12706]  sock_ioctl+0x576/0x790
[  261.566133][T12706]  ? __pfx_sock_ioctl+0x10/0x10
[  261.566146][T12706]  ? __fget_files+0x2a/0x420
[  261.566157][T12706]  ? __fget_files+0x3a0/0x420
[  261.566169][T12706]  ? __fget_files+0x2a/0x420
[  261.566181][T12706]  ? bpf_lsm_file_ioctl+0x9/0x20
[  261.566190][T12706]  ? __pfx_sock_ioctl+0x10/0x10
[  261.566203][T12706]  __se_sys_ioctl+0xfc/0x170
[  261.566213][T12706]  do_syscall_64+0xfa/0x3b0
[  261.566222][T12706]  ? lockdep_hardirqs_on+0x9c/0x150
[  261.566236][T12706]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.566245][T12706]  ? exc_page_fault+0x9f/0xf0
[  261.566258][T12706]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.566268][T12706] RIP: 0033:0x7fd4d458e929
[  261.566278][T12706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  261.566288][T12706] RSP: 002b:00007fd4d547f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  261.566299][T12706] RAX: ffffffffffffffda RBX: 00007fd4d47b6080 RCX: 00007fd4d458e929
[  261.566306][T12706] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000005
[  261.566312][T12706] RBP: 00007fd4d4610b39 R08: 0000000000000000 R09: 0000000000000000
[  261.566318][T12706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  261.566324][T12706] R13: 0000000000000000 R14: 00007fd4d47b6080 R15: 00007ffc0ac1d528
[  261.566333][T12706]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  261.960547][ T5845] team0 (unregistering): Port device team_slave_1 removed
[  261.985701][ T5845] team0 (unregistering): Port device team_slave_0 removed
[  261.992677][ T5837] Bluetooth: hci2: command 0x041b tx timeout
[  262.936694][ T5845] bridge_slave_1: left allmulticast mode
[  262.938808][ T5845] bridge_slave_1: left promiscuous mode
[  262.940917][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.947132][ T5845] bridge_slave_0: left allmulticast mode
[  262.949120][ T5845] bridge_slave_0: left promiscuous mode
[  262.951550][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.952912][ T7842] ": No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  263.010086][ T5845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  263.016162][ T5845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  263.020622][ T5845] bond0 (unregistering): Released all slaves
[  263.126783][ T5845] hsr_slave_0: left promiscuous mode
[  263.129240][ T5845] hsr_slave_1: left promiscuous mode
[  263.131381][ T5845] batman_adv: batadv0: Removing interface: batadv_slave_0
[  263.157301][ T5845] batman_adv: batadv0: Removing interface: batadv_slave_1
[  263.251507][ T5845] team0 (unregistering): Port device team_slave_1 removed
[  263.274988][ T5845] team0 (unregistering): Port device team_slave_0 removed
[  264.118053][ T5845] bridge_slave_1: left allmulticast mode
[  264.121010][ T5845] bridge_slave_1: left promiscuous mode
[  264.124462][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.128827][ T5845] bridge_slave_0: left allmulticast mode
[  264.131317][ T5845] bridge_slave_0: left promiscuous mode
[  264.135081][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.247012][ T5845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  264.252631][ T5845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  264.257093][ T5845] bond0 (unregistering): Released all slaves
[  264.374864][ T5845] hsr_slave_0: left promiscuous mode
[  264.377465][ T5845] hsr_slave_1: left promiscuous mode
[  264.379563][ T5845] batman_adv: batadv0: Removing interface: batadv_slave_0
[  264.383600][ T5845] batman_adv: batadv0: Removing interface: batadv_slave_1
[  264.508608][ T5845] team0 (unregistering): Port device team_slave_1 removed
[  264.532064][ T5845] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
02:02:29  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000039 RBX=0000000000000039 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001422 RDI=0000000000001423 RBP=00000000000003f8 RSP=ffffc90002a8f150
R8 =ffff8881081b8237 R9 =1ffff11021037046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98ba R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd4d547f6c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b30a1bff8 CR3=00000001069fe000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fd4d4785478 00007fd4d4785450 XMM03=00007fd4d4785488 00007fd4d4785480
XMM04=00007fd4d52ed100 00007fd4d4785440 XMM05=00007fd4d4785458 00007fd4d47854a0
XMM06=00007fd4d4785498 00007fd4d4785490 XMM07=00007fd4d4785488 00007fd4d4785480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fd4d4611c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b4c210 RBX=ffff88813663b1c0 RCX=ffff888021fa3980 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90002f7f700 RSP=ffffc90002f7f5a0
R8 =ffffffff8fa1f3f7 R9 =1ffffffff1f43e7e R10=dffffc0000000000 R11=fffffbfff1f43e7f
R12=1ffff11009608385 R13=dffffc0000000000 R14=0000000000000000 R15=ffff88804b041c28
RIP=ffffffff81b4c1f9 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7fe6ce7d60 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f7fe61856a3 00007f7fe61856a3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=000055558354a74c 0000555583549d80
XMM06=000055558353d774 000055558353d770 XMM07=c30d3f451629c525 864fee8c85939b2b
XMM08=8d1b402d0d4c2de4 4c5471e0ce31655c XMM09=6769726f5f74696e 695f636e5f766461
XMM10=666666666666660a 342e79656b5f5f2e XMM11=6174616220622030 6534633130613966
XMM12=6666666666660a31 342e79656b5f5f2e XMM13=73766f2062203061 6663313061396666
XMM14=2e79656b5f5f2e74 656e5f74696e695f XMM15=6331306139666666 66666666660a3334
