last executing test programs: 2m39.525757166s ago: executing program 3 (id=1764): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r4, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0xffffc000) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000d40)={0x24, r6, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x24}}, 0x20000800) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x80}}, 0x0) r7 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r7, 0x0, 0x0) 2m38.364655041s ago: executing program 3 (id=1776): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x4, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x0, 0x0, 0x700}]}, &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = socket(0x25, 0x5, 0x0) recvfrom$ax25(r6, 0x0, 0x0, 0x2063, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="50000000080211000001080211000000080211000000000000000000000000006400010000060202028d0202010182"], 0x2f) syz_80211_inject_frame(0x0, 0x0, 0x7b) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) r9 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000140)) bind$nfc_llcp(r9, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x1, 0x1, 0x6, "21c850a144297f6aa384a97fff59b150ac860226667ca9f96ca380b6daef68fde0ca448719083d923a9194ee2a937bd3a75b05631db34dbbb6923d5087283f", 0x3f}, 0x60) ioctl$sock_SIOCGIFCONF(r8, 0x8912, &(0x7f0000000100)=@req={0x28, &(0x7f0000000000)={'team_slave_0\x00', @ifru_flags=0x1}}) 2m38.32003394s ago: executing program 0 (id=1777): socket$igmp(0x2, 0x3, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000009000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000bff9a3299648e7fdd7", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000180), &(0x7f0000000100)=r2}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0xf, &(0x7f0000000680)=ANY=[@ANYRES16=r1, @ANYRESDEC=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a3006000000000003000400"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800490400000000000014000a100000000000000100000008001e0001000000"], 0x24}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x7, 0x10, 0x0, 0xff11}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r8, 0x1, 0x39, &(0x7f00000001c0), &(0x7f00000003c0)=0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'gretap0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x10, 0x700, 0x1, 0x79, {{0x30, 0x4, 0x0, 0x15, 0xc0, 0x65, 0x0, 0xe, 0x2f, 0x0, @empty, @multicast1, {[@ssrr={0x89, 0x1b, 0xdc, [@remote, @remote, @empty, @multicast2, @remote, @broadcast]}, @timestamp_prespec={0x44, 0x4, 0xb8, 0x3, 0x5}, @rr={0x7, 0x2b, 0x22, [@broadcast, @multicast2, @local, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @private=0xa010100, @broadcast, @remote, @loopback]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x4c, 0x4f, 0x3, 0xb, [{@local, 0x4}, {@dev={0xac, 0x14, 0x14, 0x36}, 0xf9}, {@remote, 0x3}, {@empty, 0x12}, {@empty, 0x4}, {@loopback, 0x4}, {@loopback, 0x6b2}, {@multicast2, 0x8001}, {@multicast2, 0x9}]}, @ssrr={0x89, 0xf, 0x8b, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x13}]}]}}}}}) r10 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x8, r9, 0x23, r10}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18102200050000000015000800"/24], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r12, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2m37.425933728s ago: executing program 0 (id=1781): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x9c}}, 0x0) 2m37.2628566s ago: executing program 0 (id=1783): ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'veth0_to_bridge\x00', {0xfffffff9}, 0x4}) (async, rerun: 64) r0 = socket$inet(0x2, 0x1, 0x7) (rerun: 64) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x6, 0x4, 0x8, 0x3}, 0x8) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008006}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r1) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x2, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20004840}, 0x4000800) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f00000003c0)) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f0000000400)={'filter\x00', 0x0, [0xd0, 0x5, 0x9c5]}, &(0x7f0000000480)=0x44) (async) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f00000004c0)={r6, 0x0, 0x800, "fafb2697e261faa988bdb7096373dcd13e9918ccc66a68617365b80e3401e8b4bb7d2ebce4d83173e8e8183140d71cf17cb025f3facab571001da942da36e1e1358becc3a6d20b7a1deec3c35f6feddfb21cd542250acbece57b188aa334a768f5bcfbe770ec9773024d12c8a9ca99ede8596a8cdfadb97a827b885c7f6274237578bb3ab16c6a6eb3c43e9534b4bb079711c5753049f6ee4ddd62432ab73517f45decf98bd1ef02ed01e50811ac7c5abbfdba6c087fe356432992fda4e1533d4c01595eabbe33db541c5dc243c6497eb32649a92c43f8dbb14df209bce921738369b5d0aa1e8fc0e901180012"}) (async) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f00000006c0)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000700)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x16}, @in=@empty, 0x4e24, 0x8, 0x4e20, 0x8, 0xa, 0x80, 0x80, 0x3b, 0x0, r8}, {0xdf84, 0x7, 0x3, 0x1ff, 0x7, 0x0, 0xffffffff, 0x9}, {0x10001, 0x4, 0x8000, 0x7}, 0x10000, 0x6e6bc0, 0x2, 0x0, 0x3, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x23}, 0x4d5, 0x3c}, 0x2, @in=@empty, 0x3506, 0x0, 0x2, 0xd1, 0x0, 0x4a2, 0xc}}, 0xe8) (async) splice(r5, &(0x7f0000000800)=0x8, r4, &(0x7f0000000840)=0x4, 0x6, 0x4) r9 = accept$netrom(0xffffffffffffffff, &(0x7f0000000880)={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @null, @remote, @null, @null]}, &(0x7f0000000900)=0x48) setsockopt$netrom_NETROM_T4(r9, 0x103, 0x6, &(0x7f0000000940)=0x8, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000009c0)={'sit0\x00', &(0x7f0000000980)={@rand_addr=0x64010102, 0x0, 0x0, 0x20, 0x0, [{@local}, {@empty}]}}) (async) sendto$inet(r6, &(0x7f0000000a00)="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", 0x1000, 0x4000, &(0x7f0000001a00)={0x2, 0x4e20, @remote}, 0x10) (async, rerun: 32) r10 = accept4$nfc_llcp(r3, &(0x7f0000001a40), &(0x7f0000001ac0)=0x60, 0x80800) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000001b00)={'bridge_slave_1\x00', 0x0}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r10, 0x40309410, &(0x7f0000001b40)={0x3, 0x80000001, 0x1, 0x3, 0x3, [0xffff, 0x3, 0x4, 0x204000]}) (async) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, &(0x7f0000001b80), &(0x7f0000001bc0)=0x30) (async) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001c00)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, '\x00', r7, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50) (async) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001ec0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', r7, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50) (async) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001f40)={0x1b, 0x0, 0x0, 0xc0000, 0x0, 0x1, 0x3, '\x00', r11, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002180)={0x18, 0x11, &(0x7f0000001c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2f6}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@call={0x85, 0x0, 0x0, 0x7d}, @generic={0x3, 0xa, 0x2, 0x1000, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001d40)='syzkaller\x00', 0xffffffa3, 0x95, &(0x7f0000001d80)=""/149, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001e40)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000001e80)={0x1, 0xc, 0x7, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000002100)=[r13, r14, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002140)=[{0x7f, 0x5, 0x7, 0x1}, {0x1, 0x2, 0x8, 0xc}], 0x10, 0xc}, 0x94) 2m37.057041351s ago: executing program 3 (id=1785): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000050c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000051c0)={0x0, 0x0, &(0x7f0000005180)={&(0x7f0000005100)={0x44, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x40080) getsockopt$sock_int(r0, 0x1, 0x2b, 0x0, &(0x7f000000cdc0)) 2m36.976213685s ago: executing program 0 (id=1786): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0xa1ff, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a0000000000000000070200002004681efa361595f6937420563b4b2a881877da027f90f0c42a621756c5656408d9979a40b7230c1fc399cc8aef53e454b2a0334c41f13bfc57f543fcc539d3"], 0x14}}, 0x0) 2m36.975875611s ago: executing program 3 (id=1787): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000002100010028bd7000fddbdf250a101407040000021000000014000100fe880000000000000000000000000001140002"], 0x4c}}, 0x0) r2 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000005b80)={@loopback={0xfec0ffffffffffff}, 0x32, r4}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f00000000c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x4, 0x4e23, 0x22, 0xa, 0x80, 0x80, 0x29, r4, r5}, {0xb, 0x5, 0x7f, 0x94, 0x2, 0x7, 0x9, 0x463}, {0x8, 0x6, 0x2, 0x8ff5}, 0x9, 0x6e6bb8, 0x0, 0x0, 0x2, 0x1}, {{@in=@local, 0x4d3, 0x6c}, 0x2, @in6=@mcast1, 0x3501, 0x3, 0x0, 0x6, 0x5, 0x3, 0x69c}}, 0xe8) write$cgroup_subtree(r2, &(0x7f0000000540)=ANY=[@ANYBLOB='+cpu'], 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x7a) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x2}, 0x0) openat$cgroup_int(r6, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000200), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r11, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) 2m36.697588132s ago: executing program 0 (id=1789): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0x1, 0x4, 0x5, 0x0, 0x0, {0x7}, [@NFULA_CFG_MODE={0xa, 0x2, {0x8, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x2000004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x88}}, 0x20050800) 2m36.648209007s ago: executing program 3 (id=1790): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r2, 0x0, 0x0, 0x0}, 0x30) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x0, 0x20000004, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000080)=0x3ff, 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010004b04bd7000fcdbdf257a000d0000", @ANYRES32=0x0, @ANYBLOB="0010000020900000400012800b0001006272696467650000300002800c0023000100000000000080050016000000000008001b004b0f00000500250001000000050024"], 0x60}}, 0x0) 2m36.208062621s ago: executing program 0 (id=1793): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) 2m35.576955401s ago: executing program 32 (id=1793): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) 2m35.556785365s ago: executing program 3 (id=1795): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000a40)=ANY=[@ANYBLOB="1d000000a1000000020000000000000001020000", @ANYRES32, @ANYBLOB="00000000000000008fac", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000fcffffff00"], 0x50) vmsplice(r0, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x604}], 0x1, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x13, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m35.358251213s ago: executing program 33 (id=1795): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000a40)=ANY=[@ANYBLOB="1d000000a1000000020000000000000001020000", @ANYRES32, @ANYBLOB="00000000000000008fac", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000fcffffff00"], 0x50) vmsplice(r0, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x604}], 0x1, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x13, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.525720024s ago: executing program 6 (id=3169): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000a40)=ANY=[@ANYBLOB="1d000000a1000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000fcffffff00"], 0x50) vmsplice(r0, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x604}], 0x1, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x13, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.142540792s ago: executing program 6 (id=3174): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000a40)=ANY=[@ANYBLOB="1d000000a100000002000000000000", @ANYRES32, @ANYBLOB="00000000000000008fac00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000fcffffff00"], 0x50) vmsplice(r0, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x604}], 0x1, 0x9) socket$nl_generic(0x10, 0x3, 0x10) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x13, 0xb, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.999487567s ago: executing program 1 (id=3177): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000a40)=ANY=[@ANYBLOB="1d000000a1000000020000000000000001020000", @ANYRES32, @ANYBLOB="00000000000000008fac", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000fcffffff00"], 0x50) vmsplice(0xffffffffffffffff, &(0x7f0000002440), 0x0, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x13, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.846187267s ago: executing program 6 (id=3179): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)='%pS \x00'}, 0x20) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18) socket$inet6_icmp(0xa, 0x2, 0x3a) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000400)={0xa}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRESDEC=r4], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000300), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000180)={r0, r5}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000001380)) 1.625568422s ago: executing program 2 (id=3180): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000a40)=ANY=[@ANYRES32, @ANYBLOB="00000000000000008fac00"/20, @ANYRES32, @ANYBLOB="0100000005000000fcffffff"], 0x50) vmsplice(r0, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x604}], 0x1, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.620216157s ago: executing program 4 (id=3181): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2008c014) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x12) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x4, 0xa, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) 1.557308288s ago: executing program 1 (id=3182): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000a40)=ANY=[@ANYBLOB="1d000000a100000002000000", @ANYRES32, @ANYBLOB="00000000000000008fac00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000fcffffff00"], 0x50) vmsplice(r0, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x604}], 0x1, 0x9) socket$nl_generic(0x10, 0x3, 0x10) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x13, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.546211336s ago: executing program 5 (id=3183): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000a40)=ANY=[@ANYBLOB="1d000000a100000002000000000000", @ANYRES32, @ANYBLOB="00000000000000008fac0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000fcffffff"], 0x50) vmsplice(r0, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x604}], 0x1, 0x9) socket$nl_generic(0x10, 0x3, 0x10) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x13, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.425670027s ago: executing program 4 (id=3184): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf090000000000005509010000000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000a40)=ANY=[@ANYBLOB="1d000000a1000000020000000000000001020000", @ANYRES32, @ANYBLOB="00000000000000008fac", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000fcffffff"], 0x50) vmsplice(r0, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x5ec}], 0x1, 0x9) socket$nl_generic(0x10, 0x3, 0x10) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x13, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.228418907s ago: executing program 2 (id=3185): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000a40)=ANY=[@ANYBLOB="1d000000a1000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000fcffffff00"], 0x50) vmsplice(r0, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x604}], 0x1, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x13, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.212045908s ago: executing program 5 (id=3186): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000a40)=ANY=[@ANYBLOB="1d000000a1000000020000000000000001020000", @ANYBLOB="00000000000000008fac00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000fcffffff"], 0x50) vmsplice(r0, &(0x7f0000002440)=[{&(0x7f00000002c0)="62af263ea3c1befb3bd81deb2fc1cacaa4d2f3c7d8ed578a43f7c4bb44173641f1fd8524ba1d6678d41a89626989170aadb2c8de3262863630637e1f80b2b4b51ee58b9299e10879e5e7cf131a96d45102b25ddcd1a9c1396236f8a9e1be48f3df174a31122fc89187100d16d31e65e68a314119e411a442d36d25fa1a910a16926bbe70937af1a2daffcd5c3a62c21741d80998ec5bdc21609f993fe686eab92a3d9509e824ba65d8ca5a278c2daaa30bae078462870b37ea7868c8f4793a95dfe47a9c60ea83231e51dda3ae07e726e228a4b101565798f3c4d0633da550910f4615720e9ca37e6f3e77bb52ae52a1312724d2f1a641035db3e81b35e55ca077ae17a98a375b6c3f56395c052113c3f125304a41a735b325b05243c1b8a0b8e47ad70f831e640e4d68e32614faef764f07940dbd655c7c45a7a22630e1c3d77bd86fd2c51621f5196efd4844bc327210f9d34141daa5acc425005e38ccdbeba7eafd392b4f3eb9f297aa6dbc28320b48b3f878d9e45916396519eb2f5c4084d210892cc8bd34489e4e12d78c16e5abcf841243e65dddfd7cbe36ec49b51d4ad368a01bba176ecdd8d147bedd7464a07dc59ad833ab8d26639de4131d324c8c1c1401a6758e660e0c7f0c9bd612f5f3589acba3b06198c30d6beb86a76c18cffff86ea6ebc282411a12ea8959b84672e17f10146575abcf6064ff36821f10c23c2e555b4c8d0af9f368e7db70ba47218a5947a1ecd42e08e6dc08ec3f3d51c522caed9d102a44f6d8f5944fa3307b7234f27483b285ef16925815cd9c05fbeee24b369c18fd05d3e7f034e99462de5f6b45c54f137b4b86e88ae17906071194223638760200d6e185e111301f039780bd9ab2d62682da82b0b752ef85f36a2308ced8b395405d2d30c3c883754767ed379aefbb8e4ff465ac1c6e938a41cb04915a16ab25eed7c2e54cd151821e0620fc314472c57b51d003d07a287d256744b8c8f6ac08fb3c143670b3b8318218d6be5e2ee5b71ad03a7c327a272de129875f170b5f1ea10473c3dac826e96a845aa809905b02c8e3e2e1b451d00f437271af7689f93920db839aba8c8c632cc31c7043b3b7e358c4f5725b31db55aa4f260504f6a78c6ff74d59c480b6f4276433eec67beef368c238bba859d2f4f4c28ab94a65821f55045e540914677befa72c15071d28435a016387cf0c69cef003550d83ef4f866ee78add21e6e69a19ca03ba5381791e38b4fb91d725d3e8c0bc7cfa95aa35f48a9127eb93dd67e9746ab92b9cdc9519f2bca2d5d2eaf864381ee2c6a76db4d1b0440dd3aa65b34fbcb3dbfd649c5886cb9b9be8e6aa0a1e5e09ad0afa6a70c203344468ae3e3750af30aff7b140d0906112767a4f5ce3147206ebe7478af7a3ec636f898f09063d138cf90b715bf1bcfb9f8132f9c612db07b458c249244a737095bbb428722e4473e4ef36494ebca4c6463e217ecea9beb0b9df3172e928464a67d0747ef707ee4a9ea8c1d0a8a608243305b8454a28230cf7632b5d6d67b176aadd4aa532b28a3b66a30aca5fcaf7cb2564c3543f97878cb1e35b6a636ab54e54f4cb6eab7c2315128dae5525db24b576ce67e50e2624ecdfedcda8f092a4622e8df12626c9036432f06f6e195dbbe3a1248000607a6ce5624d046239f5931ec6a4930abc7e5a42988a288bf781301c372d98b4236bba6151d51235db9e585cac207dfa16ca0eb6dfc748bdd091f39c86e5fbba9dc32abad2387ecf64d611ed8f433a42d2d12a7c603e86d70219469751108bf822934709171d54211d80e094be85cd034a4930e227b18907bceac6c441988c2e51f053abb79cb82df556b8e1db7dafd436002cd787773e5f58a1421784e402eea625e818d2fdbfcc2fc6480d98f6df816c3392a867a06cbcb8702f95588b919b7641f6fcac161994c399ebd24fbf1e4fe0a3c44aa921270e2246c37a43c64ffd4a0127733c1791a5fcb14b1c02d092e79b024e881fcdb44996e3fa669bea354bf81bbdc6efec3bd4f139b2bf42f52d9568dc6914117854228a7d5094814e739f738a6f5d97a60e17db7def18a7144f7e9bbe8585650b2993aff9d60d583ef8a2cdff8aca32d95df2f3c41c85c37178d82187379474fed55b657dc8ce8f6416243a370a495f26e5f48bd4", 0x604}], 0x1, 0x9) socket$nl_generic(0x10, 0x3, 0x10) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.196461424s ago: executing program 1 (id=3187): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf090000000000005509010000000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000a40)=ANY=[@ANYBLOB="1d000000a1000000020000000000000001020000", @ANYRES32, @ANYBLOB="00000000000000008fac", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000fcffffff"], 0x50) vmsplice(r0, &(0x7f0000002440)=[{&(0x7f00000002c0)="62af263ea3c1befb3bd81deb2fc1cacaa4d2f3c7d8ed578a43f7c4bb44173641f1fd8524ba1d6678d41a89626989170aadb2c8de3262863630637e1f80b2b4b51ee58b9299e10879e5e7cf131a96d45102b25ddcd1a9c1396236f8a9e1be48f3df174a31122fc89187100d16d31e65e68a314119e411a442d36d25fa1a910a16926bbe70937af1a2daffcd5c3a62c21741d80998ec5bdc21609f993fe686eab92a3d9509e824ba65d8ca5a278c2daaa30bae078462870b37ea7868c8f4793a95dfe47a9c60ea83231e51dda3ae07e726e228a4b101565798f3c4d0633da550910f4615720e9ca37e6f3e77bb52ae52a1312724d2f1a641035db3e81b35e55ca077ae17a98a375b6c3f56395c052113c3f125304a41a735b325b05243c1b8a0b8e47ad70f831e640e4d68e32614faef764f07940dbd655c7c45a7a22630e1c3d77bd86fd2c51621f5196efd4844bc327210f9d34141daa5acc425005e38ccdbeba7eafd392b4f3eb9f297aa6dbc28320b48b3f878d9e45916396519eb2f5c4084d210892cc8bd34489e4e12d78c16e5abcf841243e65dddfd7cbe36ec49b51d4ad368a01bba176ecdd8d147bedd7464a07dc59ad833ab8d26639de4131d324c8c1c1401a6758e660e0c7f0c9bd612f5f3589acba3b06198c30d6beb86a76c18cffff86ea6ebc282411a12ea8959b84672e17f10146575abcf6064ff36821f10c23c2e555b4c8d0af9f368e7db70ba47218a5947a1ecd42e08e6dc08ec3f3d51c522caed9d102a44f6d8f5944fa3307b7234f27483b285ef16925815cd9c05fbeee24b369c18fd05d3e7f034e99462de5f6b45c54f137b4b86e88ae17906071194223638760200d6e185e111301f039780bd9ab2d62682da82b0b752ef85f36a2308ced8b395405d2d30c3c883754767ed379aefbb8e4ff465ac1c6e938a41cb04915a16ab25eed7c2e54cd151821e0620fc314472c57b51d003d07a287d256744b8c8f6ac08fb3c143670b3b8318218d6be5e2ee5b71ad03a7c327a272de129875f170b5f1ea10473c3dac826e96a845aa809905b02c8e3e2e1b451d00f437271af7689f93920db839aba8c8c632cc31c7043b3b7e358c4f5725b31db55aa4f260504f6a78c6ff74d59c480b6f4276433eec67beef368c238bba859d2f4f4c28ab94a65821f55045e540914677befa72c15071d28435a016387cf0c69cef003550d83ef4f866ee78add21e6e69a19ca03ba5381791e38b4fb91d725d3e8c0bc7cfa95aa35f48a9127eb93dd67e9746ab92b9cdc9519f2bca2d5d2eaf864381ee2c6a76db4d1b0440dd3aa65b34fbcb3dbfd649c5886cb9b9be8e6aa0a1e5e09ad0afa6a70c203344468ae3e3750af30aff7b140d0906112767a4f5ce3147206ebe7478af7a3ec636f898f09063d138cf90b715bf1bcfb9f8132f9c612db07b458c249244a737095bbb428722e4473e4ef36494ebca4c6463e217ecea9beb0b9df3172e928464a67d0747ef707ee4a9ea8c1d0a8a608243305b8454a28230cf7632b5d6d67b176aadd4aa532b28a3b66a30aca5fcaf7cb2564c3543f97878cb1e35b6a636ab54e54f4cb6eab7c2315128dae5525db24b576ce67e50e2624ecdfedcda8f092a4622e8df12626c9036432f06f6e195dbbe3a1248000607a6ce5624d046239f5931ec6a4930abc7e5a42988a288bf781301c372d98b4236bba6151d51235db9e585cac207dfa16ca0eb6dfc748bdd091f39c86e5fbba9dc32abad2387ecf64d611ed8f433a42d2d12a7c603e86d70219469751108bf822934709171d54211d80e094be85cd034a4930e227b18907bceac6c441988c2e51f053abb79cb82df556b8e1db7dafd436002cd787773e5f58a1421784e402eea625e818d2fdbfcc2fc6480d98f6df816c3392a867a06cbcb8702f95588b919b7641f6fcac161994c399ebd24fbf1e4fe0a3c44aa921270e2246c37a43c64ffd4a0127733c1791a5fcb14b1c02d092e79b024e881fcdb44996e3fa669bea354bf81bbdc6efec3bd4f139b2bf42f52d9568dc6914117854228a7d5094814e739f738a6f5d97a60e17db7def18a7144f7e9bbe8585650b2993aff9d60d583ef8a2cdff8aca32d95df2f3c41c85c37178d82187379474fed55b657dc8ce8f6416243a370a495f26e5f48b", 0x603}], 0x1, 0x9) socket$nl_generic(0x10, 0x3, 0x10) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x13, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.17409629s ago: executing program 4 (id=3188): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000a40)=ANY=[@ANYBLOB="1d000000a100000002000000000000", @ANYRES32, @ANYBLOB="00000000000000008fac00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000fcffffff00"], 0x50) vmsplice(r0, &(0x7f0000002440)=[{0x0}], 0x1, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x13, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 970.281709ms ago: executing program 1 (id=3189): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000a40)=ANY=[@ANYRES32, @ANYBLOB="00000000000000008fac00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000fcffffff00"], 0x50) vmsplice(r0, &(0x7f0000002440)=[{&(0x7f00000002c0)="62af263ea3c1befb3bd81deb2fc1cacaa4d2f3c7d8ed578a43f7c4bb44173641f1fd8524ba1d6678d41a89626989170aadb2c8de3262863630637e1f80b2b4b51ee58b9299e10879e5e7cf131a96d45102b25ddcd1a9c1396236f8a9e1be48f3df174a31122fc89187100d16d31e65e68a314119e411a442d36d25fa1a910a16926bbe70937af1a2daffcd5c3a62c21741d80998ec5bdc21609f993fe686eab92a3d9509e824ba65d8ca5a278c2daaa30bae078462870b37ea7868c8f4793a95dfe47a9c60ea83231e51dda3ae07e726e228a4b101565798f3c4d0633da550910f4615720e9ca37e6f3e77bb52ae52a1312724d2f1a641035db3e81b35e55ca077ae17a98a375b6c3f56395c052113c3f125304a41a735b325b05243c1b8a0b8e47ad70f831e640e4d68e32614faef764f07940dbd655c7c45a7a22630e1c3d77bd86fd2c51621f5196efd4844bc327210f9d34141daa5acc425005e38ccdbeba7eafd392b4f3eb9f297aa6dbc28320b48b3f878d9e45916396519eb2f5c4084d210892cc8bd34489e4e12d78c16e5abcf841243e65dddfd7cbe36ec49b51d4ad368a01bba176ecdd8d147bedd7464a07dc59ad833ab8d26639de4131d324c8c1c1401a6758e660e0c7f0c9bd612f5f3589acba3b06198c30d6beb86a76c18cffff86ea6ebc282411a12ea8959b84672e17f10146575abcf6064ff36821f10c23c2e555b4c8d0af9f368e7db70ba47218a5947a1ecd42e08e6dc08ec3f3d51c522caed9d102a44f6d8f5944fa3307b7234f27483b285ef16925815cd9c05fbeee24b369c18fd05d3e7f034e99462de5f6b45c54f137b4b86e88ae17906071194223638760200d6e185e111301f039780bd9ab2d62682da82b0b752ef85f36a2308ced8b395405d2d30c3c883754767ed379aefbb8e4ff465ac1c6e938a41cb04915a16ab25eed7c2e54cd151821e0620fc314472c57b51d003d07a287d256744b8c8f6ac08fb3c143670b3b8318218d6be5e2ee5b71ad03a7c327a272de129875f170b5f1ea10473c3dac826e96a845aa809905b02c8e3e2e1b451d00f437271af7689f93920db839aba8c8c632cc31c7043b3b7e358c4f5725b31db55aa4f260504f6a78c6ff74d59c480b6f4276433eec67beef368c238bba859d2f4f4c28ab94a65821f55045e540914677befa72c15071d28435a016387cf0c69cef003550d83ef4f866ee78add21e6e69a19ca03ba5381791e38b4fb91d725d3e8c0bc7cfa95aa35f48a9127eb93dd67e9746ab92b9cdc9519f2bca2d5d2eaf864381ee2c6a76db4d1b0440dd3aa65b34fbcb3dbfd649c5886cb9b9be8e6aa0a1e5e09ad0afa6a70c203344468ae3e3750af30aff7b140d0906112767a4f5ce3147206ebe7478af7a3ec636f898f09063d138cf90b715bf1bcfb9f8132f9c612db07b458c249244a737095bbb428722e4473e4ef36494ebca4c6463e217ecea9beb0b9df3172e928464a67d0747ef707ee4a9ea8c1d0a8a608243305b8454a28230cf7632b5d6d67b176aadd4aa532b28a3b66a30aca5fcaf7cb2564c3543f97878cb1e35b6a636ab54e54f4cb6eab7c2315128dae5525db24b576ce67e50e2624ecdfedcda8f0", 0x483}], 0x1, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x13, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 908.931859ms ago: executing program 2 (id=3190): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @bcast}, [@null, @netrom, @netrom, @bcast, @default, @rose]}, &(0x7f00000000c0)=0x48) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000000140)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x3a, @empty, 0x4ea3, 0x0, 'lblcr\x00', 0x3c, 0x8003, 0x8000063}, 0x2c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0xa, 0x3, 0x1) setsockopt$MRT_TABLE(r3, 0x0, 0xcf, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x90) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000001240)=@add_del={0x2, &(0x7f0000001200)='syzkaller0\x00'}) 875.445894ms ago: executing program 5 (id=3191): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000a40)=ANY=[@ANYBLOB="1d000000a1000000020000000000000001020000", @ANYBLOB="00000000000000008fac00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000fcffffff"], 0x50) vmsplice(r0, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x544}], 0x1, 0x9) socket$nl_generic(0x10, 0x3, 0x10) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x13, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 791.029163ms ago: executing program 6 (id=3192): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000a40)=ANY=[@ANYBLOB="1d000000a1000000020000000000000001020000", @ANYRES32, @ANYBLOB="00000000000000008fac", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000fcffffff00"], 0x50) vmsplice(0xffffffffffffffff, &(0x7f0000002440), 0x0, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x13, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 716.339089ms ago: executing program 4 (id=3193): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000a40)=ANY=[@ANYBLOB="1d000000a1000000020000000000000001020000", @ANYRES32, @ANYBLOB="00000000000000008fac", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000fcffffff"], 0x50) vmsplice(r0, &(0x7f0000002440)=[{&(0x7f00000002c0)="62af263ea3c1befb3bd81deb2fc1cacaa4d2f3c7d8ed578a43f7c4bb44173641f1fd8524ba1d6678d41a89626989170aadb2c8de3262863630637e1f80b2b4b51ee58b9299e10879e5e7cf131a96d45102b25ddcd1a9c1396236f8a9e1be48f3df174a31122fc89187100d16d31e65e68a314119e411a442d36d25fa1a910a16926bbe70937af1a2daffcd5c3a62c21741d80998ec5bdc21609f993fe686eab92a3d9509e824ba65d8ca5a278c2daaa30bae078462870b37ea7868c8f4793a95dfe47a9c60ea83231e51dda3ae07e726e228a4b101565798f3c4d0633da550910f4615720e9ca37e6f3e77bb52ae52a1312724d2f1a641035db3e81b35e55ca077ae17a98a375b6c3f56395c052113c3f125304a41a735b325b05243c1b8a0b8e47ad70f831e640e4d68e32614faef764f07940dbd655c7c45a7a22630e1c3d77bd86fd2c51621f5196efd4844bc327210f9d34141daa5acc425005e38ccdbeba7eafd392b4f3eb9f297aa6dbc28320b48b3f878d9e45916396519eb2f5c4084d210892cc8bd34489e4e12d78c16e5abcf841243e65dddfd7cbe36ec49b51d4ad368a01bba176ecdd8d147bedd7464a07dc59ad833ab8d26639de4131d324c8c1c1401a6758e660e0c7f0c9bd612f5f3589acba3b06198c30d6beb86a76c18cffff86ea6ebc282411a12ea8959b84672e17f10146575abcf6064ff36821f10c23c2e555b4c8d0af9f368e7db70ba47218a5947a1ecd42e08e6dc08ec3f3d51c522caed9d102a44f6d8f5944fa3307b7234f27483b285ef16925815cd9c05fbeee24b369c18fd05d3e7f034e99462de5f6b45c54f137b4b86e88ae17906071194223638760200d6e185e111301f039780bd9ab2d62682da82b0b752ef85f36a2308ced8b395405d2d30c3c883754767ed379aefbb8e4ff465ac1c6e938a41cb04915a16ab25eed7c2e54cd151821e0620fc314472c57b51d003d07a287d256744b8c8f6ac08fb3c143670b3b8318218d6be5e2ee5b71ad03a7c327a272de129875f170b5f1ea10473c3dac826e96a845aa809905b02c8e3e2e1b451d00f437271af7689f93920db839aba8c8c632cc31c7043b3b7e358c4f5725b31db55aa4f260504f6a78c6ff74d59c480b6f4276433eec67beef368c238bba859d2f4f4c28ab94a65821f55045e540914677befa72c15071d28435a016387cf0c69cef003550d83ef4f866ee78add21e6e69a19ca03ba5381791e38b4fb91d725d3e8c0bc7cfa95aa35f48a9127eb93dd67e9746ab92b9cdc9519f2bca2d5d2eaf864381ee2c6a76db4d1b0440dd3aa65b34fbcb3dbfd649c5886cb9b9be8e6aa0a1e5e09ad0afa6a70c203344468ae3e3750af30aff7b140d0906112767a4f5ce3147206ebe7478af7a3ec636f898f09063d138cf90b715bf1bcfb9f8132f9c612db07b458c249244a737095bbb428722e4473e4ef36494ebca4c6463e217ecea9beb0b9df3172e928464a67d0747ef707ee4a9ea8c1d0a8a608243305b8454a28230cf7632b5d6d67b176aadd4aa532b28a3b66a30aca5fcaf7cb2564c3543f97878cb1e35b6a636ab54e54f4cb6eab7c2315128dae5525db24b576ce67e50e2624ecdfedcda8f092a4622e8df12626c9036432f06f6e195dbbe3a1248000607a6ce5624d046239f5931ec6a4930abc7e5a42988a288bf781301c372d98b4236bba6151d51235db9e585cac207dfa16ca0eb6dfc748bdd091f39c86e5fbba9dc32abad2387ecf64d611ed8f433a42d2d12a7c603e86d70219469751108bf822934709171d54211d80e094be85cd034a4930e227b18907bceac6c441988c2e51f053abb79cb82df556b8e1db7dafd436002cd787773e5f58a1421784e402eea625e818d2fdbfcc2fc6480d98f6df816c3392a867a06cbcb8702f95588b919b7641f6fcac161994c399ebd24fbf1e4fe0a3c44aa921270e2246c37a43c64ffd4a0127733c1791a5fcb14b1c02d092e79b024e881fcdb44996e3fa669bea354bf81bbdc6efec3bd4f139b2bf42f52d9568dc6914117854228a7d5094814e739f738a6f5d97a60e17db7def18a7144f7e9bbe8585650b2993aff9d60d583ef8a2cdff8aca32d95df2f3c41c85c37178d82187379474fed55b657dc8ce8f6416243a370a495f26e5f48bd4", 0x604}], 0x1, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x13, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 681.878434ms ago: executing program 5 (id=3194): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2008c014) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x12) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x4, 0xa, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) 670.633443ms ago: executing program 2 (id=3195): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x700000000000000, 0x0, 0x50) vmsplice(r0, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x5f1}], 0x1, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 454.92027ms ago: executing program 6 (id=3196): r0 = socket$inet(0x2, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@private=0xa010101, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x40000002dd}, 0x4, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x144, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in=@remote}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x0, 0x32}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, 0xa, @in=@broadcast, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}]}]}, 0x1fc}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x10) r5 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r5, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc, 0x20}, @val={0xd, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x5, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3d, 0x0, 0x1, 0x20}, {0x4d}, {0x6, 0x0, 0x0, 0x41}]}) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r7, 0x107, 0x16, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000002ac0)={@local, @remote, @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x7, 0x0, 0x1}}}}}}}, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000040)=0x6, 0x4) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8915, &(0x7f0000000000)={'wg1\x00', @random="0200e97fffff"}) connect$pptp(r6, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan1\x00', 0x0}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'ip_vti0\x00', 0x4000}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r9, @ANYRES64=r1], 0x68}}, 0x0) 454.259127ms ago: executing program 5 (id=3197): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000a40)=ANY=[@ANYRES32, @ANYBLOB="00000000000000008fac00"/20, @ANYRES32, @ANYBLOB="0100000005000000fcffffff"], 0x50) vmsplice(r0, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x604}], 0x1, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 427.922779ms ago: executing program 1 (id=3198): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000a40)=ANY=[@ANYBLOB="1d000000a100000002000000000000", @ANYRES32, @ANYBLOB="00000000000000008fac0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000fcffffff"], 0x50) vmsplice(r0, &(0x7f0000002440)=[{&(0x7f00000002c0)="62af263ea3c1befb3bd81deb2fc1cacaa4d2f3c7d8ed578a43f7c4bb44173641f1fd8524ba1d6678d41a89626989170aadb2c8de3262863630637e1f80b2b4b51ee58b9299e10879e5e7cf131a96d45102b25ddcd1a9c1396236f8a9e1be48f3df174a31122fc89187100d16d31e65e68a314119e411a442d36d25fa1a910a16926bbe70937af1a2daffcd5c3a62c21741d80998ec5bdc21609f993fe686eab92a3d9509e824ba65d8ca5a278c2daaa30bae078462870b37ea7868c8f4793a95dfe47a9c60ea83231e51dda3ae07e726e228a4b101565798f3c4d0633da550910f4615720e9ca37e6f3e77bb52ae52a1312724d2f1a641035db3e81b35e55ca077ae17a98a375b6c3f56395c052113c3f125304a41a735b325b05243c1b8a0b8e47ad70f831e640e4d68e32614faef764f07940dbd655c7c45a7a22630e1c3d77bd86fd2c51621f5196efd4844bc327210f9d34141daa5acc425005e38ccdbeba7eafd392b4f3eb9f297aa6dbc28320b48b3f878d9e45916396519eb2f5c4084d210892cc8bd34489e4e12d78c16e5abcf841243e65dddfd7cbe36ec49b51d4ad368a01bba176ecdd8d147bedd7464a07dc59ad833ab8d26639de4131d324c8c1c1401a6758e660e0c7f0c9bd612f5f3589acba3b06198c30d6beb86a76c18cffff86ea6ebc282411a12ea8959b84672e17f10146575abcf6064ff36821f10c23c2e555b4c8d0af9f368e7db70ba47218a5947a1ecd42e08e6dc08ec3f3d51c522caed9d102a44f6d8f5944fa3307b7234f27483b285ef16925815cd9c05fbeee24b369c18fd05d3e7f034e99462de5f6b45c54f137b4b86e88ae17906071194223638760200d6e185e111301f039780bd9ab2d62682da82b0b752ef85f36a2308ced8b395405d2d30c3c883754767ed379aefbb8e4ff465ac1c6e938a41cb04915a16ab25eed7c2e54cd151821e0620fc314472c57b51d003d07a287d256744b8c8f6ac08fb3c143670b3b8318218d6be5e2ee5b71ad03a7c327a272de129875f170b5f1ea10473c3dac826e96a845aa809905b02c8e3e2e1b451d00f437271af7689f93920db839aba8c8c632cc31c7043b3b7e358c4f5725b31db55aa4f260504f6a78c6ff74d59c480b6f4276433eec67beef368c238bba859d2f4f4c28ab94a65821f55045e540914677befa72c15071d28435a016387cf0c69cef003550d83ef4f866ee78add21e6e69a19ca03ba5381791e38b4fb91d725d3e8c0bc7cfa95aa35f48a9127eb93dd67e9746ab92b9cdc9519f2bca2d5d2eaf864381ee2c6a76db4d1b0440dd3aa65b34fbcb3dbfd649c5886cb9b9be8e6aa0a1e5e09ad0afa6a70c203344468ae3e3750af30aff7b140d0906112767a4f5ce3147206ebe7478af7a3ec636f898f09063d138cf90b715bf1bcfb9f8132f9c612db07b458c249244a737095bbb428722e4473e4ef36494ebca4c6463e217ecea9beb0b9df3172e928464a67d0747ef707ee4a9ea8c1d0a8a608243305b8454a28230cf7632b5d6d67b176aadd4aa532b28a3b66a30aca5fcaf7cb2564c3543f97878cb1e35b6a636ab54e54f4cb6eab7c2315128dae5525db24b576ce67e50e2624ecdfedcda8f092a4622e8df12626c9036432f06f6e195dbbe3a1248000607a6ce5624d046239f5931ec6a4930abc7e5a42988a288bf781301c372d98b4236bba6151d51235db9e585cac207dfa16ca0eb6dfc748bdd091f39c86e5fbba9dc32abad2387ecf64d611ed8f433a42d2d12a7c603e86d70219469751108bf822934709171d54211d80e094be85cd034a4930e227b18907bceac6c441988c2e51f053abb79cb82df556b8e1db7dafd436002cd787773e5f58a1421784e402eea625e818d2fdbfcc2fc6480d98f6df816c3392a867a06cbcb8702f95588b919b7641f6fcac161994c399ebd24fbf1e4fe0a3c44aa921270e2246c37a43c64ffd4a0127733c1791a5fcb14b1c02d092e79b024e881fcdb44996e3fa669bea354bf81bbdc6efec3bd4f139b2bf42f52d9568dc6914117854228a7d5094814e739f738a6f5d97a60e17db7def18a7144f7e9bbe8585650b2993aff9d60d583ef8a2cdff8aca32d95df2f3c41c85c37178d82187379474fed55b657dc8ce8f6416243a370a495f26e5f48bd4", 0x604}], 0x1, 0x9) socket$nl_generic(0x10, 0x3, 0x10) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x13, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 404.636475ms ago: executing program 4 (id=3199): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf090000000000005509010000000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000a40)=ANY=[@ANYBLOB="1d000000a1000000020000000000000001020000", @ANYRES32, @ANYBLOB="00000000000000008fac", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000fcffffff"], 0x50) vmsplice(r0, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x604}], 0x1, 0x9) socket$nl_generic(0x10, 0x3, 0x10) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x13, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 272.782905ms ago: executing program 2 (id=3200): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000a40)=ANY=[@ANYBLOB="1d000000a100000002000000", @ANYRES32, @ANYBLOB="00000000000000008fac00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000fcffffff00"], 0x50) vmsplice(r0, &(0x7f0000002440)=[{&(0x7f00000002c0)="62af263ea3c1befb3bd81deb2fc1cacaa4d2f3c7d8ed578a43f7c4bb44173641f1fd8524ba1d6678d41a89626989170aadb2c8de3262863630637e1f80b2b4b51ee58b9299e10879e5e7cf131a96d45102b25ddcd1a9c1396236f8a9e1be48f3df174a31122fc89187100d16d31e65e68a314119e411a442d36d25fa1a910a16926bbe70937af1a2daffcd5c3a62c21741d80998ec5bdc21609f993fe686eab92a3d9509e824ba65d8ca5a278c2daaa30bae078462870b37ea7868c8f4793a95dfe47a9c60ea83231e51dda3ae07e726e228a4b101565798f3c4d0633da550910f4615720e9ca37e6f3e77bb52ae52a1312724d2f1a641035db3e81b35e55ca077ae17a98a375b6c3f56395c052113c3f125304a41a735b325b05243c1b8a0b8e47ad70f831e640e4d68e32614faef764f07940dbd655c7c45a7a22630e1c3d77bd86fd2c51621f5196efd4844bc327210f9d34141daa5acc425005e38ccdbeba7eafd392b4f3eb9f297aa6dbc28320b48b3f878d9e45916396519eb2f5c4084d210892cc8bd34489e4e12d78c16e5abcf841243e65dddfd7cbe36ec49b51d4ad368a01bba176ecdd8d147bedd7464a07dc59ad833ab8d26639de4131d324c8c1c1401a6758e660e0c7f0c9bd612f5f3589acba3b06198c30d6beb86a76c18cffff86ea6ebc282411a12ea8959b84672e17f10146575abcf6064ff36821f10c23c2e555b4c8d0af9f368e7db70ba47218a5947a1ecd42e08e6dc08ec3f3d51c522caed9d102a44f6d8f5944fa3307b7234f27483b285ef16925815cd9c05fbeee24b369c18fd05d3e7f034e99462de5f6b45c54f137b4b86e88ae17906071194223638760200d6e185e111301f039780bd9ab2d62682da82b0b752ef85f36a2308ced8b395405d2d30c3c883754767ed379aefbb8e4ff465ac1c6e938a41cb04915a16ab25eed7c2e54cd151821e0620fc314472c57b51d003d07a287d256744b8c8f6ac08fb3c143670b3b8318218d6be5e2ee5b71ad03a7c327a272de129875f170b5f1ea10473c3dac826e96a845aa809905b02c8e3e2e1b451d00f437271af7689f93920db839aba8c8c632cc31c7043b3b7e358c4f5725b31db55aa4f260504f6a78c6ff74d59c480b6f4276433eec67beef368c238bba859d2f4f4c28ab94a65821f55045e540914677befa72c15071d28435a016387cf0c69cef003550d83ef4f866ee78add21e6e69a19ca03ba5381791e38b4fb91d725d3e8c0bc7cfa95aa35f48a9127eb93dd67e9746ab92b9cdc9519f2bca2d5d2eaf864381ee2c6a76db4d1b0440dd3aa65b34fbcb3dbfd649c5886cb9b9be8e6aa0a1e5e09ad0afa6a70c203344468ae3e3750af30aff7b140d0906112767a4f5ce3147206ebe7478af7a3ec636f898f09063d138cf90b715bf1bcfb9f8132f9c612db07b458c249244a737095bbb428722e4473e4ef36494ebca4c6463e217ecea9beb0b9df3172e928464a67d0747ef707ee4a9ea8c1d0a8a608243305b8454a28230cf7632b5d6d67b176aadd4aa532b28a3b66a30aca5fcaf7cb2564c3543f97878cb1e35b6a636ab54e54f4cb6eab7c2315128dae5525db24b576ce67e50e2624ecdfedcda8f092a4622e8df12626c9036432f06f6e195dbbe3a1248000607a6ce5624d046239f5931ec6a4930abc7e5a42988a288bf781301c372d98b4236bba6151d51235db9e585cac207dfa16ca0eb6dfc748bdd091f39c86e5fbba9dc32abad2387ecf64d611ed8f433a42d2d12a7c603e86d70219469751108bf822934709171d54211d80e094be85cd034a4930e227b18907bceac6c441988c2e51f053abb79cb82df556b8e1db7dafd436002cd787773e5f58a1421784e402eea625e818d2fdbfcc2fc6480d98f6df816c3392a867a06cbcb8702f95588b919b7641f6fcac161994c399ebd24fbf1e4fe0a3c44aa921270e2246c37a43c64ffd4a0127733c1791a5fcb14b1c02d092e79b024e881fcdb44996e3fa669bea354bf81bbdc6efec3bd4f139b2bf42f52d9568dc6914117854228a7d5094814e739f738a6f5d97a60e17db7def18a7144f7e9bbe8585650b2993aff9d60d583ef8a2cdff8aca32d95df2f3c41c85c37178d82187379474fed55b657dc8ce8f6416243a370a495f26e5f48bd4", 0x604}], 0x1, 0x9) socket$nl_generic(0x10, 0x3, 0x10) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x13, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 155.426326ms ago: executing program 4 (id=3201): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000a40)=ANY=[@ANYBLOB="1d000000a1000000020000000000000001020000", @ANYBLOB="00000000000000008fac00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000fcffffff"], 0x50) vmsplice(r0, &(0x7f0000002440)=[{&(0x7f00000002c0)="62af263ea3c1befb3bd81deb2fc1cacaa4d2f3c7d8ed578a43f7c4bb44173641f1fd8524ba1d6678d41a89626989170aadb2c8de3262863630637e1f80b2b4b51ee58b9299e10879e5e7cf131a96d45102b25ddcd1a9c1396236f8a9e1be48f3df174a31122fc89187100d16d31e65e68a314119e411a442d36d25fa1a910a16926bbe70937af1a2daffcd5c3a62c21741d80998ec5bdc21609f993fe686eab92a3d9509e824ba65d8ca5a278c2daaa30bae078462870b37ea7868c8f4793a95dfe47a9c60ea83231e51dda3ae07e726e228a4b101565798f3c4d0633da550910f4615720e9ca37e6f3e77bb52ae52a1312724d2f1a641035db3e81b35e55ca077ae17a98a375b6c3f56395c052113c3f125304a41a735b325b05243c1b8a0b8e47ad70f831e640e4d68e32614faef764f07940dbd655c7c45a7a22630e1c3d77bd86fd2c51621f5196efd4844bc327210f9d34141daa5acc425005e38ccdbeba7eafd392b4f3eb9f297aa6dbc28320b48b3f878d9e45916396519eb2f5c4084d210892cc8bd34489e4e12d78c16e5abcf841243e65dddfd7cbe36ec49b51d4ad368a01bba176ecdd8d147bedd7464a07dc59ad833ab8d26639de4131d324c8c1c1401a6758e660e0c7f0c9bd612f5f3589acba3b06198c30d6beb86a76c18cffff86ea6ebc282411a12ea8959b84672e17f10146575abcf6064ff36821f10c23c2e555b4c8d0af9f368e7db70ba47218a5947a1ecd42e08e6dc08ec3f3d51c522caed9d102a44f6d8f5944fa3307b7234f27483b285ef16925815cd9c05fbeee24b369c18fd05d3e7f034e99462de5f6b45c54f137b4b86e88ae17906071194223638760200d6e185e111301f039780bd9ab2d62682da82b0b752ef85f36a2308ced8b395405d2d30c3c883754767ed379aefbb8e4ff465ac1c6e938a41cb04915a16ab25eed7c2e54cd151821e0620fc314472c57b51d003d07a287d256744b8c8f6ac08fb3c143670b3b8318218d6be5e2ee5b71ad03a7c327a272de129875f170b5f1ea10473c3dac826e96a845aa809905b02c8e3e2e1b451d00f437271af7689f93920db839aba8c8c632cc31c7043b3b7e358c4f5725b31db55aa4f260504f6a78c6ff74d59c480b6f4276433eec67beef368c238bba859d2f4f4c28ab94a65821f55045e540914677befa72c15071d28435a016387cf0c69cef003550d83ef4f866ee78add21e6e69a19ca03ba5381791e38b4fb91d725d3e8c0bc7cfa95aa35f48a9127eb93dd67e9746ab92b9cdc9519f2bca2d5d2eaf864381ee2c6a76db4d1b0440dd3aa65b34fbcb3dbfd649c5886cb9b9be8e6aa0a1e5e09ad0afa6a70c203344468ae3e3750af30aff7b140d0906112767a4f5ce3147206ebe7478af7a3ec636f898f09063d138cf90b715bf1bcfb9f8132f9c612db07b458c249244a737095bbb428722e4473e4ef36494ebca4c6463e217ecea9beb0b9df3172e928464a67d0747ef707ee4a9ea8c1d0a8a608243305b8454a28230cf7632b5d6d67b176aadd4aa532b28a3b66a30aca5fcaf7cb2564c3543f97878cb1e35b6a636ab54e54f4cb6eab7c2315128dae5525db24b576ce67e50e2624ecdfedcda8f092a4622e8df12626c9036432f06f6e195dbbe3a1248000607a6ce5624d046239f5931ec6a4930abc7e5a42988a288bf781301c372d98b4236bba6151d51235db9e585cac207dfa16ca0eb6dfc748bdd091f39c86e5fbba9dc32abad2387ecf64d611ed8f433a42d2d12a7c603e86d70219469751108bf822934709171d54211d80e094be85cd034a4930e227b18907bceac6c441988c2e51f053abb79cb82df556b8e1db7dafd436002cd787773e5f58a1421784e402eea625e818d2fdbfcc2fc6480d98f6df816c3392a867a06cbcb8702f95588b919b7641f6fcac161994c399ebd24fbf1e4fe0a3c44aa921270e2246c37a43c64ffd4a0127733c1791a5fcb14b1c02d092e79b024e881fcdb44996e3fa669bea354bf81bbdc6efec3bd4f139b2bf42f52d9568dc6914117854228a7d5094814e739f738a6f5d97a60e17db7def18a7144f7e9bbe8585650b2993aff9d60d583ef8a2cdff8aca32d95df2f3c41c85c37178d82187379474fed55b657dc8ce8f6416243a370a495f26e5f48bd4", 0x604}], 0x1, 0x9) socket$nl_generic(0x10, 0x3, 0x10) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x13, 0xb, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 121.011577ms ago: executing program 5 (id=3202): sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x40c4854) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x5c4, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff3}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x590, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0x420, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x919f}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x5, 0xf, 0x9, 0x0, 0x8, 0x7, 0x0, 0x4, 0x9, 0x6, 0x8, 0xe59b, 0x7, 0xf, 0x2, 0x7, 0x9, 0x2, 0x3, 0x9f, 0x100, 0x3, 0x1, 0x80000001, 0x9, 0x0, 0x0, 0x7, 0x1ff, 0xfffffffb, 0x1000, 0x2, 0x9, 0xd, 0x5, 0xe, 0x79a098fb, 0x7ff, 0x2, 0x6, 0xdce3, 0x4, 0x7c2f, 0x100, 0x5, 0x100000, 0x9, 0x3, 0x7ff, 0x9, 0x47b7, 0x10000, 0x2cf2ebd6, 0x8, 0x7, 0x5, 0x8, 0x6933, 0xb, 0x6, 0x3, 0x2, 0xd64, 0x7, 0x4, 0x4, 0x4, 0x6005, 0x4, 0x8d31, 0xffff, 0x4, 0x4, 0x80, 0xc, 0x7, 0x4, 0x0, 0x5391, 0x1, 0xa2a, 0x3, 0x5, 0x200, 0x0, 0x9, 0x8d, 0x5, 0x8, 0x4da, 0xfffffffa, 0x9, 0x7, 0x10000, 0x9, 0x0, 0x7, 0x120000, 0xd44, 0x253, 0x5, 0x6, 0x80, 0x2, 0x6, 0x3ff, 0xb42, 0x7, 0x6, 0x9, 0x7, 0x1, 0x0, 0x800000, 0x8, 0x400, 0xb95, 0xff, 0x775, 0x1, 0x3bae, 0x1, 0xc, 0x340000, 0x9, 0x200, 0x58, 0x1000, 0x10001, 0x7d43, 0x8d, 0x6, 0x6, 0x36d, 0x8, 0x1, 0x6e94, 0x0, 0xbc, 0xfff, 0xffffffe3, 0x1, 0xc99, 0x1000, 0x4, 0x3, 0x8, 0x1000, 0x4, 0x2, 0xfffffffd, 0x7fffffff, 0xa5, 0x4, 0x5, 0x0, 0x8, 0x3, 0x2, 0x3, 0x5, 0x80, 0x5, 0x4, 0x8, 0x3ff, 0x270d, 0x7, 0x10f, 0x800, 0xfaf, 0xfffffffb, 0x4, 0xffffff01, 0x2c, 0x1, 0x9, 0x2, 0x4, 0x24b, 0x4, 0x1, 0x1, 0x6, 0x4, 0x6, 0x2, 0x3, 0x9, 0xb, 0x3, 0x2, 0x6, 0x111b, 0xffffffff, 0x3, 0xff, 0x101, 0xfffffff9, 0x94, 0x0, 0x401, 0x5, 0x1, 0xe4, 0xfffffffd, 0x2, 0xffff, 0x3, 0x4, 0x4, 0x9, 0x5, 0x2, 0x8000, 0x11f, 0x153f, 0x4, 0x2, 0x5, 0xd5b5, 0xd71e, 0x800, 0x3ff, 0x869, 0x26, 0x9, 0x9, 0x8, 0x24, 0x3, 0x3, 0xf70, 0x4, 0x8, 0xfffffff7, 0x80, 0x4, 0x2, 0xfffffff8, 0x4, 0x7fffffff, 0x0, 0x5, 0x5, 0x6000000, 0x51, 0x2, 0x10, 0x95f, 0x6, 0x7, 0x6e, 0x7fffffff, 0x1]}]}, @TCA_BPF_ACT={0x164, 0x1, [@m_mirred={0x160, 0x11, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x10001, 0x3, 0x8, 0xe, 0x4}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x5c, 0x7, 0xfff, 0x1}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe, 0xff000000, 0x8, 0xffff0001, 0xff}, 0x2}}]}, {0xd1, 0x6, "319bb848351b002738b6c4c50b9141bebb58a1fd9f04e35af9c32268b29dfa1c25c9502b51b55eff39526a56fd0f6d8f94d05679ea0836ee4adecfe3236d2d9a2d17310974eb3856d00a1028999d09c1f69183f20defc6d04e2c20de3729c15f156d19b570d01b6142387bd42a81ccacf99246c39d5c0d6e393d44dab6dd2521c8f0dd94491c7577458990a9641f0c88b8c57718b8f2c791c8d35eeee9461545ee2dd6d5371b63e2755d125610f6fb5c23db3466b1c9e7b9a79e2f269e7e897258f89199853270075498a6c432"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x1d8}]}, 0x5c4}, 0x1, 0x0, 0x0, 0x884}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000980)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56561, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x7}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x4, 0xff, 0x8, 0x0, 0x5, 0x8}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4040010) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 84.959517ms ago: executing program 6 (id=3203): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x700000000000000, 0x0, 0x50) vmsplice(r0, &(0x7f0000002440)=[{&(0x7f00000002c0)="62af263ea3c1befb3bd81deb2fc1cacaa4d2f3c7d8ed578a43f7c4bb44173641f1fd8524ba1d6678d41a89626989170aadb2c8de3262863630637e1f80b2b4b51ee58b9299e10879e5e7cf131a96d45102b25ddcd1a9c1396236f8a9e1be48f3df174a31122fc89187100d16d31e65e68a314119e411a442d36d25fa1a910a16926bbe70937af1a2daffcd5c3a62c21741d80998ec5bdc21609f993fe686eab92a3d9509e824ba65d8ca5a278c2daaa30bae078462870b37ea7868c8f4793a95dfe47a9c60ea83231e51dda3ae07e726e228a4b101565798f3c4d0633da550910f4615720e9ca37e6f3e77bb52ae52a1312724d2f1a641035db3e81b35e55ca077ae17a98a375b6c3f56395c052113c3f125304a41a735b325b05243c1b8a0b8e47ad70f831e640e4d68e32614faef764f07940dbd655c7c45a7a22630e1c3d77bd86fd2c51621f5196efd4844bc327210f9d34141daa5acc425005e38ccdbeba7eafd392b4f3eb9f297aa6dbc28320b48b3f878d9e45916396519eb2f5c4084d210892cc8bd34489e4e12d78c16e5abcf841243e65dddfd7cbe36ec49b51d4ad368a01bba176ecdd8d147bedd7464a07dc59ad833ab8d26639de4131d324c8c1c1401a6758e660e0c7f0c9bd612f5f3589acba3b06198c30d6beb86a76c18cffff86ea6ebc282411a12ea8959b84672e17f10146575abcf6064ff36821f10c23c2e555b4c8d0af9f368e7db70ba47218a5947a1ecd42e08e6dc08ec3f3d51c522caed9d102a44f6d8f5944fa3307b7234f27483b285ef16925815cd9c05fbeee24b369c18fd05d3e7f034e99462de5f6b45c54f137b4b86e88ae17906071194223638760200d6e185e111301f039780bd9ab2d62682da82b0b752ef85f36a2308ced8b395405d2d30c3c883754767ed379aefbb8e4ff465ac1c6e938a41cb04915a16ab25eed7c2e54cd151821e0620fc314472c57b51d003d07a287d256744b8c8f6ac08fb3c143670b3b8318218d6be5e2ee5b71ad03a7c327a272de129875f170b5f1ea10473c3dac826e96a845aa809905b02c8e3e2e1b451d00f437271af7689f93920db839aba8c8c632cc31c7043b3b7e358c4f5725b31db55aa4f260504f6a78c6ff74d59c480b6f4276433eec67beef368c238bba859d2f4f4c28ab94a65821f55045e540914677befa72c15071d28435a016387cf0c69cef003550d83ef4f866ee78add21e6e69a19ca03ba5381791e38b4fb91d725d3e8c0bc7cfa95aa35f48a9127eb93dd67e9746ab92b9cdc9519f2bca2d5d2eaf864381ee2c6a76db4d1b0440dd3aa65b34fbcb3dbfd649c5886cb9b9be8e6aa0a1e5e09ad0afa6a70c203344468ae3e3750af30aff7b140d0906112767a4f5ce3147206ebe7478af7a3ec636f898f09063d138cf90b715bf1bcfb9f8132f9c612db07b458c249244a737095bbb428722e4473e4ef36494ebca4c6463e217ecea9beb0b9df3172e928464a67d0747ef707ee4a9ea8c1d0a8a608243305b8454a28230cf7632b5d6d67b176aadd4aa532b28a3b66a30aca5fcaf7cb2564c3543f97878cb1e35b6a636ab54e54f4cb6eab7c2315128dae5525db24b576ce67e50e2624ecdfedcda8f092a4622e8df12626c9036432f06f6e195dbbe3a1248000607a6ce5624d046239f5931ec6a4930abc7e5a42988a288bf781301c372d98b4236bba6151d51235db9e585cac207dfa16ca0eb6dfc748bdd091f39c86e5fbba9dc32abad2387ecf64d611ed8f433a42d2d12a7c603e86d70219469751108bf822934709171d54211d80e094be85cd034a4930e227b18907bceac6c441988c2e51f053abb79cb82df556b8e1db7dafd436002cd787773e5f58a1421784e402eea625e818d2fdbfcc2fc6480d98f6df816c3392a867a06cbcb8702f95588b919b7641f6fcac161994c399ebd24fbf1e4fe0a3c44aa921270e2246c37a43c64ffd4a0127733c1791a5fcb14b1c02d092e79b024e881fcdb44996e3fa669bea354bf81bbdc6efec3bd4f139b2bf42f52d9568dc6914117854228a7d5094814e739f738a6f5d97a60e17db7def18a7144f7e9bbe8585650b2993aff9d60d583ef8a2cdff8aca32d95df2f3c41c85c37178d82187379474fed55b657dc8ce8f6416243a370a495f26e5f48bd4", 0x604}], 0x1, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 576.542µs ago: executing program 1 (id=3204): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000a40)=ANY=[@ANYBLOB="1d000000a100000002000000000000", @ANYRES32, @ANYBLOB="00000000000000008fac00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000fcffffff00"], 0x50) vmsplice(r0, &(0x7f0000002440)=[{&(0x7f00000002c0)}], 0x1, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x13, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 2 (id=3205): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @bcast}, [@null, @netrom, @netrom, @bcast, @default, @rose]}, &(0x7f00000000c0)=0x48) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000000140)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x3a, @empty, 0x4ea3, 0x0, 'lblcr\x00', 0x3c, 0x8003, 0x8000063}, 0x2c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0xa, 0x3, 0x1) setsockopt$MRT_TABLE(r3, 0x0, 0xcf, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x90) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000001240)=@add_del={0x2, &(0x7f0000001200)='syzkaller0\x00'}) kernel console output (not intermixed with test programs): modehelper_setup+0x8e/0x270 [ 298.229563][T11522] ? __pfx_free_modprobe_argv+0x10/0x10 [ 298.229597][T11522] __request_module+0x39f/0x5e0 [ 298.229634][T11522] ? __pfx___request_module+0x10/0x10 [ 298.229667][T11522] ? apparmor_capable+0x137/0x1b0 [ 298.229698][T11522] ? capable+0x89/0xe0 [ 298.229716][T11522] ? dev_load+0x21/0x1f0 [ 298.229747][T11522] ieee802154_sock_ioctl+0x1a2/0x3e0 [ 298.229773][T11522] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 298.229799][T11522] ? __pfx_ieee802154_sock_ioctl+0x10/0x10 [ 298.229829][T11522] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 298.229861][T11522] sock_do_ioctl+0xd9/0x300 [ 298.229889][T11522] ? __pfx_sock_do_ioctl+0x10/0x10 [ 298.229911][T11522] ? __lock_acquire+0xab9/0xd20 [ 298.229957][T11522] sock_ioctl+0x576/0x790 [ 298.229983][T11522] ? __pfx_sock_ioctl+0x10/0x10 [ 298.230007][T11522] ? __fget_files+0x2a/0x420 [ 298.230041][T11522] ? __fget_files+0x3a0/0x420 [ 298.230058][T11522] ? __fget_files+0x2a/0x420 [ 298.230093][T11522] ? bpf_lsm_file_ioctl+0x9/0x20 [ 298.230118][T11522] ? __pfx_sock_ioctl+0x10/0x10 [ 298.230141][T11522] __se_sys_ioctl+0xf9/0x170 [ 298.230167][T11522] do_syscall_64+0xfa/0x3b0 [ 298.230195][T11522] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.230228][T11522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.230248][T11522] ? clear_bhb_loop+0x60/0xb0 [ 298.230271][T11522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.230290][T11522] RIP: 0033:0x7f4c5218ebe9 [ 298.230308][T11522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.230325][T11522] RSP: 002b:00007f4c52f9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 298.230345][T11522] RAX: ffffffffffffffda RBX: 00007f4c523b5fa0 RCX: 00007f4c5218ebe9 [ 298.230360][T11522] RDX: 0000200000000040 RSI: 0000000000008916 RDI: 0000000000000004 [ 298.230372][T11522] RBP: 00007f4c52f9d090 R08: 0000000000000000 R09: 0000000000000000 [ 298.230384][T11522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.230396][T11522] R13: 00007f4c523b6038 R14: 00007f4c523b5fa0 R15: 00007ffe2014f348 [ 298.230427][T11522] [ 298.855159][T11537] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1744'. [ 298.857546][T11538] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1745'. [ 298.898873][T11538] openvswitch: netlink: Flow actions attr not present in new flow. [ 298.983722][T11540] FAULT_INJECTION: forcing a failure. [ 298.983722][T11540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.003735][T11540] CPU: 1 UID: 0 PID: 11540 Comm: syz.3.1747 Not tainted syzkaller #0 PREEMPT(full) [ 299.003764][T11540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 299.003777][T11540] Call Trace: [ 299.003786][T11540] [ 299.003795][T11540] dump_stack_lvl+0x189/0x250 [ 299.003825][T11540] ? __pfx____ratelimit+0x10/0x10 [ 299.003855][T11540] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.003881][T11540] ? __pfx__printk+0x10/0x10 [ 299.003911][T11540] ? __might_fault+0xb0/0x130 [ 299.003952][T11540] should_fail_ex+0x414/0x560 [ 299.003986][T11540] _copy_from_user+0x2d/0xb0 [ 299.004011][T11540] ___sys_recvmsg+0x12e/0x510 [ 299.004042][T11540] ? __pfx____sys_recvmsg+0x10/0x10 [ 299.004094][T11540] ? __pfx_set_normalized_timespec64+0x10/0x10 [ 299.004137][T11540] do_recvmmsg+0x307/0x770 [ 299.004171][T11540] ? __pfx_do_recvmmsg+0x10/0x10 [ 299.004210][T11540] ? _copy_from_user+0x94/0xb0 [ 299.004250][T11540] __x64_sys_recvmmsg+0x1af/0x240 [ 299.004277][T11540] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 299.004299][T11540] ? rcu_is_watching+0x15/0xb0 [ 299.004332][T11540] ? do_syscall_64+0xbe/0x3b0 [ 299.004368][T11540] do_syscall_64+0xfa/0x3b0 [ 299.004398][T11540] ? lockdep_hardirqs_on+0x9c/0x150 [ 299.004427][T11540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.004448][T11540] ? clear_bhb_loop+0x60/0xb0 [ 299.004474][T11540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.004494][T11540] RIP: 0033:0x7f3933d8ebe9 [ 299.004513][T11540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.004531][T11540] RSP: 002b:00007f3931ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 299.004553][T11540] RAX: ffffffffffffffda RBX: 00007f3933fb5fa0 RCX: 00007f3933d8ebe9 [ 299.004568][T11540] RDX: 0400000000000ec0 RSI: 0000200000002ec0 RDI: 0000000000000005 [ 299.004583][T11540] RBP: 00007f3931ff6090 R08: 00002000000001c0 R09: 0000000000000000 [ 299.004596][T11540] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 299.004609][T11540] R13: 00007f3933fb6038 R14: 00007f3933fb5fa0 R15: 00007ffd2cb30338 [ 299.004642][T11540] [ 299.374564][T11542] nbd4: detected capacity change from 0 to 63 [ 299.475130][T11545] block nbd4: NBD_DISCONNECT [ 299.481828][T11545] block nbd4: Disconnected due to user request. [ 299.492822][T11545] block nbd4: shutting down sockets [ 299.507150][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.516462][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 299.527976][ C0] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.537159][ C0] Buffer I/O error on dev nbd4, logical block 1, async page read [ 299.545021][ C0] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.554171][ C0] Buffer I/O error on dev nbd4, logical block 2, async page read [ 299.561975][ C0] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.571064][ C0] Buffer I/O error on dev nbd4, logical block 3, async page read [ 299.590393][T11542] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1746'. [ 299.599559][ T6177] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.641724][T11549] netlink: 'syz.2.1748': attribute type 1 has an invalid length. [ 299.649850][ T6177] Buffer I/O error on dev nbd4, logical block 0, async page read [ 299.666625][ T6177] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.688094][T11542] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.724826][ T6177] Buffer I/O error on dev nbd4, logical block 1, async page read [ 299.744080][ T6177] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.804482][ T6177] Buffer I/O error on dev nbd4, logical block 2, async page read [ 299.815174][ T6177] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.828683][ T6177] Buffer I/O error on dev nbd4, logical block 3, async page read [ 299.845089][ T6177] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.855199][ T6177] Buffer I/O error on dev nbd4, logical block 0, async page read [ 299.863437][ T6177] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.872848][ T6177] Buffer I/O error on dev nbd4, logical block 1, async page read [ 299.886196][ T6177] ldm_validate_partition_table(): Disk read failed. [ 299.901409][ T6177] Dev nbd4: unable to read RDB block 0 [ 299.911340][ T6177] nbd4: unable to read partition table [ 299.937739][ T6177] ldm_validate_partition_table(): Disk read failed. [ 299.951808][ T6177] Dev nbd4: unable to read RDB block 0 [ 299.962777][ T6177] nbd4: unable to read partition table [ 299.989185][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807f7ecc00: rx timeout, send abort [ 299.998715][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807f7ecc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 300.060850][T11551] vxcan1 speed is unknown, defaulting to 1000 [ 300.669505][T11565] netlink: 'syz.0.1752': attribute type 2 has an invalid length. [ 300.719867][T11565] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1752'. [ 300.855491][T11581] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1758'. [ 300.866419][T11579] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 300.931105][T11583] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1759'. [ 300.960615][T11583] openvswitch: netlink: Flow actions attr not present in new flow. [ 301.369609][T11601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1765'. [ 301.390858][T11601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1765'. [ 301.765504][T11614] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1768'. [ 301.938528][T11617] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20131 [ 301.959559][T11619] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1770'. [ 302.368037][T11629] netlink: 'syz.1.1774': attribute type 2 has an invalid length. [ 302.493766][T11639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.519504][T11626] vxcan1 speed is unknown, defaulting to 1000 [ 302.623088][T11643] netlink: 'syz.0.1777': attribute type 16 has an invalid length. [ 302.632864][T11643] netlink: 'syz.0.1777': attribute type 17 has an invalid length. [ 302.779723][T11643] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 303.016714][T11633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.337676][T11625] vxcan1 speed is unknown, defaulting to 1000 [ 304.493054][T11649] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 304.531935][T11649] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 305.463722][T11724] netlink: 'syz.2.1796': attribute type 1 has an invalid length. [ 305.471784][T11724] __nla_validate_parse: 4 callbacks suppressed [ 305.471801][T11724] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1796'. [ 305.925737][T11734] vxcan1 speed is unknown, defaulting to 1000 [ 306.343493][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 306.352928][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 306.360686][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 306.369597][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 306.379185][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 306.622397][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 306.639612][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 306.654026][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 306.663973][T11745] vxcan1 speed is unknown, defaulting to 1000 [ 306.671706][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 306.685005][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 307.439963][T11740] vxcan1 speed is unknown, defaulting to 1000 [ 307.688875][T11748] vxcan1 speed is unknown, defaulting to 1000 [ 307.822036][T11766] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1810'. [ 307.932925][T11766] nbd: socks must be embedded in a SOCK_ITEM attr [ 308.035049][T11756] siw: device registration error -23 [ 308.098328][T11771] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1811'. [ 308.109244][T11771] openvswitch: netlink: Flow actions attr not present in new flow. [ 308.402207][ T51] Bluetooth: hci1: command tx timeout [ 308.722284][ T51] Bluetooth: hci3: command tx timeout [ 309.134987][T11784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1815'. [ 309.177903][T11784] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1815'. [ 309.186618][T11787] FAULT_INJECTION: forcing a failure. [ 309.186618][T11787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.230177][T11787] CPU: 0 UID: 0 PID: 11787 Comm: syz.1.1816 Not tainted syzkaller #0 PREEMPT(full) [ 309.230205][T11787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 309.230229][T11787] Call Trace: [ 309.230238][T11787] [ 309.230247][T11787] dump_stack_lvl+0x189/0x250 [ 309.230277][T11787] ? __pfx____ratelimit+0x10/0x10 [ 309.230307][T11787] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.230332][T11787] ? __pfx__printk+0x10/0x10 [ 309.230361][T11787] ? __might_fault+0xb0/0x130 [ 309.230402][T11787] should_fail_ex+0x414/0x560 [ 309.230434][T11787] _copy_from_user+0x2d/0xb0 [ 309.230459][T11787] ___sys_recvmsg+0x12e/0x510 [ 309.230489][T11787] ? __pfx____sys_recvmsg+0x10/0x10 [ 309.230545][T11787] ? __might_fault+0xb0/0x130 [ 309.230577][T11787] do_recvmmsg+0x307/0x770 [ 309.230609][T11787] ? __pfx_do_recvmmsg+0x10/0x10 [ 309.230644][T11787] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 309.230694][T11787] __x64_sys_recvmmsg+0x190/0x240 [ 309.230720][T11787] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 309.230741][T11787] ? rcu_is_watching+0x15/0xb0 [ 309.230767][T11787] ? do_syscall_64+0xbe/0x3b0 [ 309.230801][T11787] do_syscall_64+0xfa/0x3b0 [ 309.230831][T11787] ? lockdep_hardirqs_on+0x9c/0x150 [ 309.230859][T11787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.230879][T11787] ? clear_bhb_loop+0x60/0xb0 [ 309.230905][T11787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.230925][T11787] RIP: 0033:0x7f4c5218ebe9 [ 309.230943][T11787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.230960][T11787] RSP: 002b:00007f4c52f9d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 309.230982][T11787] RAX: ffffffffffffffda RBX: 00007f4c523b5fa0 RCX: 00007f4c5218ebe9 [ 309.230997][T11787] RDX: 03ffffffffffff81 RSI: 0000200000000780 RDI: 0000000000000003 [ 309.231010][T11787] RBP: 00007f4c52f9d090 R08: 0000000000000000 R09: 0000000000000000 [ 309.231023][T11787] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 309.231035][T11787] R13: 00007f4c523b6038 R14: 00007f4c523b5fa0 R15: 00007ffe2014f348 [ 309.231067][T11787] [ 309.450754][T11784] FAULT_INJECTION: forcing a failure. [ 309.450754][T11784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.476518][T11784] CPU: 1 UID: 0 PID: 11784 Comm: syz.2.1815 Not tainted syzkaller #0 PREEMPT(full) [ 309.476544][T11784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 309.476556][T11784] Call Trace: [ 309.476564][T11784] [ 309.476572][T11784] dump_stack_lvl+0x189/0x250 [ 309.476600][T11784] ? __pfx____ratelimit+0x10/0x10 [ 309.476628][T11784] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.476652][T11784] ? __pfx__printk+0x10/0x10 [ 309.476680][T11784] ? __might_fault+0xb0/0x130 [ 309.476719][T11784] should_fail_ex+0x414/0x560 [ 309.476749][T11784] _copy_from_user+0x2d/0xb0 [ 309.476773][T11784] kstrtouint_from_user+0xc4/0x170 [ 309.476805][T11784] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 309.476851][T11784] proc_fail_nth_write+0x88/0x200 [ 309.476873][T11784] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 309.476896][T11784] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 309.476916][T11784] vfs_write+0x27e/0xb30 [ 309.476945][T11784] ? __pfx_vfs_write+0x10/0x10 [ 309.476967][T11784] ? __fget_files+0x2a/0x420 [ 309.476985][T11784] ? __fget_files+0x3a0/0x420 [ 309.476998][T11784] ? __fget_files+0x2a/0x420 [ 309.477019][T11784] ksys_write+0x145/0x250 [ 309.477043][T11784] ? __pfx_ksys_write+0x10/0x10 [ 309.477062][T11784] ? rcu_is_watching+0x15/0xb0 [ 309.477083][T11784] ? do_syscall_64+0xbe/0x3b0 [ 309.477112][T11784] do_syscall_64+0xfa/0x3b0 [ 309.477152][T11784] ? lockdep_hardirqs_on+0x9c/0x150 [ 309.477176][T11784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.477193][T11784] ? clear_bhb_loop+0x60/0xb0 [ 309.477214][T11784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.477230][T11784] RIP: 0033:0x7fa738f8d69f [ 309.477246][T11784] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 309.477261][T11784] RSP: 002b:00007fa739d34030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 309.477279][T11784] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa738f8d69f [ 309.477291][T11784] RDX: 0000000000000001 RSI: 00007fa739d340a0 RDI: 0000000000000006 [ 309.477301][T11784] RBP: 00007fa739d34090 R08: 0000000000000000 R09: 0000000000000000 [ 309.477311][T11784] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 309.477321][T11784] R13: 00007fa7391b6038 R14: 00007fa7391b5fa0 R15: 00007ffdb02068a8 [ 309.477348][T11784] [ 309.825406][T11740] chnl_net:caif_netlink_parms(): no params data found [ 309.877769][T11748] chnl_net:caif_netlink_parms(): no params data found [ 310.020225][T11799] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1819'. [ 310.033815][T11799] openvswitch: netlink: Flow actions attr not present in new flow. [ 310.117495][T11740] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.125192][T11740] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.133564][T11740] bridge_slave_0: entered allmulticast mode [ 310.141603][T11740] bridge_slave_0: entered promiscuous mode [ 310.195992][T11748] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.205056][T11748] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.215140][T11748] bridge_slave_0: entered allmulticast mode [ 310.229563][T11748] bridge_slave_0: entered promiscuous mode [ 310.238650][T11740] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.247086][T11740] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.255153][T11740] bridge_slave_1: entered allmulticast mode [ 310.263282][T11740] bridge_slave_1: entered promiscuous mode [ 310.271266][T11748] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.280081][T11748] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.298217][T11748] bridge_slave_1: entered allmulticast mode [ 310.307793][T11748] bridge_slave_1: entered promiscuous mode [ 310.420674][T11811] vxcan1 speed is unknown, defaulting to 1000 [ 310.468941][T11740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.483077][ T51] Bluetooth: hci1: command tx timeout [ 310.516184][T11748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.559716][T11748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.595739][T11740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.794665][T11748] team0: Port device team_slave_0 added [ 310.802823][ T51] Bluetooth: hci3: command tx timeout [ 310.821074][T11748] team0: Port device team_slave_1 added [ 310.861215][T11740] team0: Port device team_slave_0 added [ 311.030648][T11819] netlink: 'syz.2.1824': attribute type 1 has an invalid length. [ 311.101835][T11740] team0: Port device team_slave_1 added [ 311.225196][T11748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.232446][T11748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.259449][T11748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.319933][T11823] syz_tun: entered allmulticast mode [ 311.331475][T11740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.343149][T11740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.370810][T11740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.399521][T11825] netlink: 'syz.4.1823': attribute type 23 has an invalid length. [ 311.405512][T11824] dvmrp8: entered allmulticast mode [ 311.421378][T11748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.429228][T11748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.461984][T11748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.516114][T11740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.532447][T11740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.559344][T11740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.776770][T11740] hsr_slave_0: entered promiscuous mode [ 311.791755][T11740] hsr_slave_1: entered promiscuous mode [ 311.801991][T11740] debugfs: 'hsr0' already exists in 'hsr' [ 311.808631][T11740] Cannot create hsr debugfs directory [ 311.817938][T11823] vxcan1 speed is unknown, defaulting to 1000 [ 312.316188][T11748] hsr_slave_0: entered promiscuous mode [ 312.323512][T11748] hsr_slave_1: entered promiscuous mode [ 312.329909][T11748] debugfs: 'hsr0' already exists in 'hsr' [ 312.338780][T11748] Cannot create hsr debugfs directory [ 312.356589][T11817] syz_tun: left allmulticast mode [ 312.361768][T11817] dvmrp8: left allmulticast mode [ 312.562496][ T51] Bluetooth: hci1: command tx timeout [ 312.883168][ T51] Bluetooth: hci3: command tx timeout [ 313.161429][T11740] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 313.201747][T11740] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 313.250296][T11740] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 313.330997][T11740] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 313.470002][T11748] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 313.488021][T11748] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 313.501539][T11748] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 313.514963][T11850] IPv4: Oversized IP packet from 127.202.26.0 [ 313.532994][T11748] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 313.655675][T11852] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1830'. [ 313.669411][T11852] openvswitch: netlink: Flow actions attr not present in new flow. [ 313.835836][T11865] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1833'. [ 313.840180][T11740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.861069][T11865] openvswitch: netlink: Flow actions attr not present in new flow. [ 313.881009][T11740] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.921717][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.928953][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.971275][T11748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.997752][T10067] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.005002][T10067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.063394][T11748] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.118954][T10067] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.126249][T10067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.179313][T11867] vxcan1 speed is unknown, defaulting to 1000 [ 314.182015][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.192713][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.389601][T11873] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1836'. [ 314.399643][T11873] openvswitch: netlink: Flow actions attr not present in new flow. [ 314.642776][ T51] Bluetooth: hci1: command tx timeout [ 314.698865][T11880] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 314.966587][ T51] Bluetooth: hci3: command tx timeout [ 315.188653][T11748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.249559][T11740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.508241][T11900] siw: device registration error -23 [ 315.558408][T11904] vxcan1 speed is unknown, defaulting to 1000 [ 316.121885][T11748] veth0_vlan: entered promiscuous mode [ 316.155337][T11748] veth1_vlan: entered promiscuous mode [ 316.230040][T11740] veth0_vlan: entered promiscuous mode [ 316.269324][T11748] veth0_macvtap: entered promiscuous mode [ 316.299111][T11748] veth1_macvtap: entered promiscuous mode [ 316.323267][T11740] veth1_vlan: entered promiscuous mode [ 316.371520][T11748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.423421][T11748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.495807][T11740] veth0_macvtap: entered promiscuous mode [ 316.541312][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.611388][ T59] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.626899][ T59] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.698022][T11740] veth1_macvtap: entered promiscuous mode [ 316.710090][ T59] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.799306][T11918] vxcan1 speed is unknown, defaulting to 1000 [ 317.008387][T11740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.028652][ T7140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.053270][ T7140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.074304][T11740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.111065][ T7140] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.130609][ T7140] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.178092][ T7140] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.200237][ T7140] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.245889][ T7140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.255187][ T7140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.548859][ T7140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.570786][ T7140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.765746][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.788356][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.950091][T11932] netlink: 232 bytes leftover after parsing attributes in process `syz.5.1794'. [ 318.745693][T11948] netlink: 'syz.2.1852': attribute type 11 has an invalid length. [ 318.787951][T11952] FAULT_INJECTION: forcing a failure. [ 318.787951][T11952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.805809][T11952] CPU: 1 UID: 0 PID: 11952 Comm: syz.1.1853 Not tainted syzkaller #0 PREEMPT(full) [ 318.805836][T11952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 318.805850][T11952] Call Trace: [ 318.805858][T11952] [ 318.805867][T11952] dump_stack_lvl+0x189/0x250 [ 318.805897][T11952] ? __pfx____ratelimit+0x10/0x10 [ 318.805927][T11952] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.805952][T11952] ? __pfx__printk+0x10/0x10 [ 318.805980][T11952] ? __might_fault+0xb0/0x130 [ 318.806064][T11952] should_fail_ex+0x414/0x560 [ 318.806098][T11952] _copy_from_user+0x2d/0xb0 [ 318.806123][T11952] __sys_bpf+0x1ed/0x870 [ 318.806155][T11952] ? __pfx___sys_bpf+0x10/0x10 [ 318.806197][T11952] ? ksys_write+0x22a/0x250 [ 318.806228][T11952] ? __pfx_ksys_write+0x10/0x10 [ 318.806254][T11952] ? rcu_is_watching+0x15/0xb0 [ 318.806283][T11952] __x64_sys_bpf+0x7c/0x90 [ 318.806309][T11952] do_syscall_64+0xfa/0x3b0 [ 318.806340][T11952] ? lockdep_hardirqs_on+0x9c/0x150 [ 318.806369][T11952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.806397][T11952] ? clear_bhb_loop+0x60/0xb0 [ 318.806423][T11952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.806443][T11952] RIP: 0033:0x7f4c5218ebe9 [ 318.806462][T11952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.806480][T11952] RSP: 002b:00007f4c52f9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 318.806502][T11952] RAX: ffffffffffffffda RBX: 00007f4c523b5fa0 RCX: 00007f4c5218ebe9 [ 318.806518][T11952] RDX: 0000000000000010 RSI: 0000200000000600 RDI: 000000000000000f [ 318.806532][T11952] RBP: 00007f4c52f9d090 R08: 0000000000000000 R09: 0000000000000000 [ 318.806545][T11952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.806557][T11952] R13: 00007f4c523b6038 R14: 00007f4c523b5fa0 R15: 00007ffe2014f348 [ 318.806591][T11952] [ 319.021969][T11951] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1851'. [ 320.426079][T11985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1864'. [ 320.670649][T11989] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1866'. [ 320.715901][T11989] openvswitch: netlink: Flow actions attr not present in new flow. [ 321.097378][T11998] vxcan1 speed is unknown, defaulting to 1000 [ 321.547889][T12018] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1877'. [ 321.561010][T12018] openvswitch: netlink: Flow actions attr not present in new flow. [ 321.831630][T12015] vxcan1 speed is unknown, defaulting to 1000 [ 322.633185][T12036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1882'. [ 322.694261][T12036] netlink: 'syz.4.1882': attribute type 1 has an invalid length. [ 322.763304][T12039] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1882'. [ 322.804505][T12036] bond0: entered promiscuous mode [ 322.810004][T12036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.848822][T12039] batadv2: entered promiscuous mode [ 322.917381][T12039] batadv2: entered allmulticast mode [ 322.958871][T12039] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 323.023671][T12039] bond0: (slave batadv2): making interface the new active one [ 323.024210][T12048] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1882'. [ 323.050064][T12039] bond0: (slave batadv2): Enslaving as an active interface with an up link [ 323.113029][T12033] vxcan1 speed is unknown, defaulting to 1000 [ 323.510009][T12053] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1885'. [ 323.519955][T12053] openvswitch: netlink: Flow actions attr not present in new flow. [ 324.258628][T12063] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1890'. [ 324.280750][T12063] openvswitch: netlink: Flow actions attr not present in new flow. [ 324.411680][T12065] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1891'. [ 324.459293][T12067] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1892'. [ 324.473948][T12065] openvswitch: netlink: Flow actions attr not present in new flow. [ 324.489623][T12067] openvswitch: netlink: Flow actions attr not present in new flow. [ 325.073639][T12082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1897'. [ 325.277871][T12091] syzkaller1: entered promiscuous mode [ 325.294603][T12091] syzkaller1: entered allmulticast mode [ 325.461177][ T30] audit: type=1800 audit(1755746566.002:4): pid=12096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1900" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1963 res=0 errno=0 [ 325.679357][T12105] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1904'. [ 325.679716][T12104] batadv_slave_1: entered promiscuous mode [ 325.692137][T12105] openvswitch: netlink: Flow actions attr not present in new flow. [ 325.760201][T12107] @ÿ: renamed from bond_slave_0 [ 325.817086][T12109] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1906'. [ 325.831774][T12109] openvswitch: netlink: Flow actions attr not present in new flow. [ 325.861866][T12112] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1907'. [ 325.871865][T12104] batadv_slave_1: left promiscuous mode [ 325.890848][T12112] openvswitch: netlink: Flow actions attr not present in new flow. [ 326.169978][T12116] vxcan1 speed is unknown, defaulting to 1000 [ 326.329745][T12128] sock: sock_timestamping_bind_phc: sock not bind to device [ 326.371348][T12128] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1913'. [ 326.384021][T12130] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1914'. [ 326.404475][T12130] openvswitch: netlink: Flow actions attr not present in new flow. [ 326.454463][T12128] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1913'. [ 326.863634][T12137] netlink: 'syz.5.1917': attribute type 7 has an invalid length. [ 327.333849][T12150] openvswitch: netlink: Flow actions attr not present in new flow. [ 327.425170][T12152] openvswitch: netlink: Flow actions attr not present in new flow. [ 327.527122][T12156] openvswitch: netlink: Flow actions attr not present in new flow. [ 327.940594][T12163] bond6: entered promiscuous mode [ 327.949989][T12163] 8021q: adding VLAN 0 to HW filter on device bond6 [ 328.108166][T12173] netlink: 'syz.4.1932': attribute type 39 has an invalid length. [ 328.271895][T12176] netlink: 'syz.2.1933': attribute type 7 has an invalid length. [ 328.622899][T12184] openvswitch: netlink: Flow actions attr not present in new flow. [ 329.180908][T12203] vxcan1 speed is unknown, defaulting to 1000 [ 329.383621][T12209] netlink: 'syz.4.1949': attribute type 7 has an invalid length. [ 329.399491][T12209] __nla_validate_parse: 6 callbacks suppressed [ 329.399510][T12209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1949'. [ 329.724556][ T9514] IPVS: starting estimator thread 0... [ 329.781067][T12220] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1952'. [ 329.818162][T12220] openvswitch: netlink: Flow actions attr not present in new flow. [ 329.833090][T12218] IPVS: using max 24 ests per chain, 57600 per kthread [ 330.233616][T12216] vxcan1 speed is unknown, defaulting to 1000 [ 330.995948][T12250] netlink: 'syz.6.1963': attribute type 7 has an invalid length. [ 331.010385][T12250] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1963'. [ 331.038441][T12223] vxcan1 speed is unknown, defaulting to 1000 [ 331.048701][T12254] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1965'. [ 331.059603][T12254] openvswitch: netlink: Flow actions attr not present in new flow. [ 331.668819][T12267] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1970'. [ 331.680413][T12267] openvswitch: netlink: Flow actions attr not present in new flow. [ 332.015502][T12273] netlink: 428 bytes leftover after parsing attributes in process `syz.6.1971'. [ 332.058817][T12273] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1971'. [ 332.737180][T12285] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1977'. [ 332.766724][T12285] openvswitch: netlink: Flow actions attr not present in new flow. [ 332.830483][T12282] vxcan1 speed is unknown, defaulting to 1000 [ 333.756050][T12303] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1981'. [ 333.804504][T12305] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1982'. [ 333.808682][T12303] openvswitch: netlink: Flow actions attr not present in new flow. [ 333.854751][T12305] openvswitch: netlink: Flow actions attr not present in new flow. [ 334.381206][T12317] openvswitch: netlink: Flow actions attr not present in new flow. [ 334.405676][T12291] vxcan1 speed is unknown, defaulting to 1000 [ 334.668833][T12324] __nla_validate_parse: 1 callbacks suppressed [ 334.668855][T12324] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1990'. [ 334.722368][T12324] openvswitch: netlink: Flow actions attr not present in new flow. [ 334.991548][T12307] vxcan1 speed is unknown, defaulting to 1000 [ 335.024067][ T5917] IPVS: starting estimator thread 0... [ 335.132963][T12329] IPVS: using max 28 ests per chain, 67200 per kthread [ 335.291479][T12327] vxcan1 speed is unknown, defaulting to 1000 [ 335.637221][T12336] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1994'. [ 335.650849][T12336] openvswitch: netlink: Flow actions attr not present in new flow. [ 335.761582][T12338] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1995'. [ 335.786399][T12338] openvswitch: netlink: Flow actions attr not present in new flow. [ 335.891818][T12340] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1996'. [ 335.931707][T12340] openvswitch: netlink: Flow actions attr not present in new flow. [ 337.081316][T12357] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2003'. [ 337.130522][T12357] openvswitch: netlink: Flow actions attr not present in new flow. [ 337.326407][T12364] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2005'. [ 337.364496][T12367] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2007'. [ 337.376664][T12364] openvswitch: netlink: Flow actions attr not present in new flow. [ 337.387764][T12366] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2006'. [ 337.397626][T12366] openvswitch: netlink: Flow actions attr not present in new flow. [ 337.411047][T12367] openvswitch: netlink: Flow actions attr not present in new flow. [ 337.670898][T12379] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2010'. [ 337.838837][T12387] netlink: 348 bytes leftover after parsing attributes in process `syz.6.2014'. [ 337.890477][T12389] openvswitch: netlink: Flow actions attr not present in new flow. [ 338.118694][T12398] openvswitch: netlink: Flow actions attr not present in new flow. [ 338.214733][T12399] vxcan1 speed is unknown, defaulting to 1000 [ 338.561041][T12410] openvswitch: netlink: Flow actions attr not present in new flow. [ 338.662600][T12412] FAULT_INJECTION: forcing a failure. [ 338.662600][T12412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.732901][T12412] CPU: 1 UID: 0 PID: 12412 Comm: syz.5.2024 Not tainted syzkaller #0 PREEMPT(full) [ 338.732946][T12412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 338.732967][T12412] Call Trace: [ 338.732981][T12412] [ 338.732995][T12412] dump_stack_lvl+0x189/0x250 [ 338.733042][T12412] ? __pfx____ratelimit+0x10/0x10 [ 338.733090][T12412] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.733133][T12412] ? __pfx__printk+0x10/0x10 [ 338.733185][T12412] ? __might_fault+0xb0/0x130 [ 338.733226][T12412] should_fail_ex+0x414/0x560 [ 338.733259][T12412] _copy_from_user+0x2d/0xb0 [ 338.733284][T12412] ___sys_sendmsg+0x158/0x2a0 [ 338.733309][T12412] ? __pfx____sys_sendmsg+0x10/0x10 [ 338.733370][T12412] ? __fget_files+0x2a/0x420 [ 338.733389][T12412] ? __fget_files+0x3a0/0x420 [ 338.733420][T12412] __x64_sys_sendmsg+0x19b/0x260 [ 338.733447][T12412] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 338.733480][T12412] ? __pfx_ksys_write+0x10/0x10 [ 338.733505][T12412] ? rcu_is_watching+0x15/0xb0 [ 338.733532][T12412] ? do_syscall_64+0xbe/0x3b0 [ 338.733567][T12412] do_syscall_64+0xfa/0x3b0 [ 338.733596][T12412] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.733624][T12412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.733644][T12412] ? clear_bhb_loop+0x60/0xb0 [ 338.733669][T12412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.733688][T12412] RIP: 0033:0x7f5e8d38ebe9 [ 338.733707][T12412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.733725][T12412] RSP: 002b:00007f5e8e1b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.733746][T12412] RAX: ffffffffffffffda RBX: 00007f5e8d5b5fa0 RCX: 00007f5e8d38ebe9 [ 338.733761][T12412] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 338.733774][T12412] RBP: 00007f5e8e1b1090 R08: 0000000000000000 R09: 0000000000000000 [ 338.733804][T12412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.733817][T12412] R13: 00007f5e8d5b6038 R14: 00007f5e8d5b5fa0 R15: 00007fffe1d8ddd8 [ 338.733850][T12412] [ 339.261703][T12430] openvswitch: netlink: Flow actions attr not present in new flow. [ 339.502825][T12435] vxcan1 speed is unknown, defaulting to 1000 [ 339.990069][T12446] __nla_validate_parse: 5 callbacks suppressed [ 339.990090][T12446] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2036'. [ 340.021968][T12446] openvswitch: netlink: Flow actions attr not present in new flow. [ 340.373966][T12455] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2040'. [ 340.414120][T12455] openvswitch: netlink: Flow actions attr not present in new flow. [ 340.905709][T12470] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2047'. [ 341.131342][T12477] Unsupported ieee802154 address type: 0 [ 341.368854][T12488] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2053'. [ 341.387492][T12484] vxcan1 speed is unknown, defaulting to 1000 [ 341.560390][T12495] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2055'. [ 342.279685][T12518] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2062'. [ 342.299697][T12518] net_ratelimit: 2 callbacks suppressed [ 342.299715][T12518] openvswitch: netlink: Flow actions attr not present in new flow. [ 342.494002][T12501] vxcan1 speed is unknown, defaulting to 1000 [ 342.826491][T12528] FAULT_INJECTION: forcing a failure. [ 342.826491][T12528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.887827][T12528] CPU: 1 UID: 0 PID: 12528 Comm: syz.2.2066 Not tainted syzkaller #0 PREEMPT(full) [ 342.887856][T12528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 342.887869][T12528] Call Trace: [ 342.887877][T12528] [ 342.887886][T12528] dump_stack_lvl+0x189/0x250 [ 342.887918][T12528] ? __pfx____ratelimit+0x10/0x10 [ 342.887950][T12528] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.887976][T12528] ? __pfx__printk+0x10/0x10 [ 342.888007][T12528] ? __might_fault+0xb0/0x130 [ 342.888060][T12528] should_fail_ex+0x414/0x560 [ 342.888095][T12528] _copy_from_user+0x2d/0xb0 [ 342.888121][T12528] ___sys_sendmsg+0x158/0x2a0 [ 342.888148][T12528] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.888213][T12528] ? __fget_files+0x2a/0x420 [ 342.888232][T12528] ? __fget_files+0x3a0/0x420 [ 342.888262][T12528] __x64_sys_sendmsg+0x19b/0x260 [ 342.888289][T12528] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 342.888323][T12528] ? __pfx_ksys_write+0x10/0x10 [ 342.888350][T12528] ? rcu_is_watching+0x15/0xb0 [ 342.888378][T12528] ? do_syscall_64+0xbe/0x3b0 [ 342.888415][T12528] do_syscall_64+0xfa/0x3b0 [ 342.888447][T12528] ? lockdep_hardirqs_on+0x9c/0x150 [ 342.888477][T12528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.888498][T12528] ? clear_bhb_loop+0x60/0xb0 [ 342.888525][T12528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.888545][T12528] RIP: 0033:0x7fa738f8ebe9 [ 342.888564][T12528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.888583][T12528] RSP: 002b:00007fa739d34038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.888606][T12528] RAX: ffffffffffffffda RBX: 00007fa7391b5fa0 RCX: 00007fa738f8ebe9 [ 342.888622][T12528] RDX: 0000000000040000 RSI: 0000200000000240 RDI: 0000000000000003 [ 342.888636][T12528] RBP: 00007fa739d34090 R08: 0000000000000000 R09: 0000000000000000 [ 342.888650][T12528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.888663][T12528] R13: 00007fa7391b6038 R14: 00007fa7391b5fa0 R15: 00007ffdb02068a8 [ 342.888698][T12528] [ 343.191347][T12532] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2068'. [ 343.211947][T12532] openvswitch: netlink: Flow actions attr not present in new flow. [ 343.216156][T12530] netlink: 'syz.4.2067': attribute type 7 has an invalid length. [ 343.243055][T12530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2067'. [ 343.478250][T12541] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2071'. [ 343.487425][T12541] openvswitch: netlink: Flow actions attr not present in new flow. [ 343.599760][T12547] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2073'. [ 343.638634][T12547] openvswitch: netlink: Flow actions attr not present in new flow. [ 343.843748][T12555] siw: device registration error -23 [ 344.191319][T12565] openvswitch: netlink: Flow actions attr not present in new flow. [ 344.262781][T12562] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 344.359547][ T36] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 344.399387][ T36] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 344.408742][T12575] openvswitch: netlink: Flow actions attr not present in new flow. [ 344.444562][ T36] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 344.466701][ T36] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 344.732100][ T30] audit: type=1800 audit(1755746585.262:5): pid=12585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2086" name="memory.events" dev="tmpfs" ino=2435 res=0 errno=0 [ 344.846129][ T30] audit: type=1804 audit(1755746585.272:6): pid=12585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2086" name="/newroot/454/memory.events" dev="tmpfs" ino=2435 res=1 errno=0 [ 344.908344][T12579] vxcan1 speed is unknown, defaulting to 1000 [ 345.020940][T12595] __nla_validate_parse: 3 callbacks suppressed [ 345.020959][T12595] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2089'. [ 345.068138][T12591] netlink: 'syz.1.2088': attribute type 7 has an invalid length. [ 345.086497][T12595] openvswitch: netlink: Flow actions attr not present in new flow. [ 345.095370][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2088'. [ 345.205063][T12597] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2090'. [ 345.242957][T12597] openvswitch: netlink: Flow actions attr not present in new flow. [ 345.453930][T12601] tipc: Enabling of bearer rejected, already enabled [ 345.463330][T12601] syzkaller0: entered promiscuous mode [ 345.468858][T12601] syzkaller0: entered allmulticast mode [ 345.515422][T12601] syzkaller0: mtu greater than device maximum [ 345.708341][T12610] openvswitch: netlink: Unknown key attributes 2 [ 345.881732][T12617] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2097'. [ 346.236995][T12625] netlink: 704 bytes leftover after parsing attributes in process `syz.2.2099'. [ 346.675205][T12639] netlink: 'syz.4.2104': attribute type 7 has an invalid length. [ 346.694219][T12639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2104'. [ 347.079734][T12649] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2109'. [ 347.659886][T12664] vxcan1 speed is unknown, defaulting to 1000 [ 348.175817][T12682] netlink: 'syz.5.2122': attribute type 7 has an invalid length. [ 348.206708][T12682] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2122'. [ 348.467350][T12692] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2125'. [ 348.472284][T12686] vxcan1 speed is unknown, defaulting to 1000 [ 348.487757][T12692] net_ratelimit: 2 callbacks suppressed [ 348.487775][T12692] openvswitch: netlink: Flow actions attr not present in new flow. [ 349.235310][T12706] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2131'. [ 349.282334][T12706] openvswitch: netlink: Flow actions attr not present in new flow. [ 349.470602][T12714] geneve2: entered promiscuous mode [ 349.476847][T12714] geneve2: entered allmulticast mode [ 349.497743][T12708] vxcan1 speed is unknown, defaulting to 1000 [ 349.497761][ T49] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 58251 - 0 [ 349.523449][ T49] netdevsim netdevsim6 netdevsim0: set [1, 2] type 2 family 0 port 49539 - 0 [ 349.553569][ T49] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 58251 - 0 [ 349.562746][ T49] netdevsim netdevsim6 netdevsim1: set [1, 2] type 2 family 0 port 49539 - 0 [ 349.581556][ T49] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 58251 - 0 [ 349.626982][ T49] netdevsim netdevsim6 netdevsim2: set [1, 2] type 2 family 0 port 49539 - 0 [ 349.667775][ T49] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 58251 - 0 [ 349.712362][ T49] netdevsim netdevsim6 netdevsim3: set [1, 2] type 2 family 0 port 49539 - 0 [ 349.755663][T12722] openvswitch: netlink: Flow actions attr not present in new flow. [ 349.823515][T12719] netlink: 'syz.1.2136': attribute type 7 has an invalid length. [ 350.628947][T12731] vxcan1 speed is unknown, defaulting to 1000 [ 351.204841][T12751] __nla_validate_parse: 2 callbacks suppressed [ 351.204862][T12751] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2146'. [ 351.221299][T12751] openvswitch: netlink: Flow actions attr not present in new flow. [ 351.601097][T12756] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2148'. [ 351.611897][T12756] openvswitch: netlink: Flow actions attr not present in new flow. [ 352.231183][T12772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2156'. [ 352.753892][T12790] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2161'. [ 352.763506][T12790] openvswitch: netlink: Flow actions attr not present in new flow. [ 352.979954][T12792] vxcan1 speed is unknown, defaulting to 1000 [ 353.325342][T12806] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2169'. [ 353.352653][T12806] openvswitch: netlink: Flow actions attr not present in new flow. [ 354.249243][T12808] vxcan1 speed is unknown, defaulting to 1000 [ 354.303705][T12838] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2177'. [ 354.349542][T12838] openvswitch: netlink: Flow actions attr not present in new flow. [ 354.871379][T12849] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2183'. [ 354.902922][T12849] openvswitch: netlink: Flow actions attr not present in new flow. [ 355.044012][T12851] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2184'. [ 355.062559][T12851] openvswitch: netlink: Flow actions attr not present in new flow. [ 355.508437][T12862] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2187'. [ 355.540186][T12862] openvswitch: netlink: Flow actions attr not present in new flow. [ 355.820491][T12870] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2190'. [ 355.860703][T12870] openvswitch: netlink: Flow actions attr not present in new flow. [ 355.900513][T12872] netlink: 'syz.5.2191': attribute type 1 has an invalid length. [ 355.991145][T12876] batadv1: entered promiscuous mode [ 356.025076][T12876] batadv1: entered allmulticast mode [ 356.258146][T12891] __nla_validate_parse: 2 callbacks suppressed [ 356.258167][T12891] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2191'. [ 356.369760][T12872] bond2: entered promiscuous mode [ 356.375455][T12872] 8021q: adding VLAN 0 to HW filter on device bond2 [ 356.548108][T12890] vxcan1 speed is unknown, defaulting to 1000 [ 356.774291][T12896] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2196'. [ 356.795934][T12896] openvswitch: netlink: Flow actions attr not present in new flow. [ 356.915505][T12898] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2195'. [ 356.943547][T12898] openvswitch: netlink: Flow actions attr not present in new flow. [ 357.311531][T12915] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2201'. [ 357.341662][T12915] openvswitch: netlink: Flow actions attr not present in new flow. [ 357.621319][T12922] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2205'. [ 357.644833][T12922] openvswitch: netlink: Flow actions attr not present in new flow. [ 357.786928][T12917] vxcan1 speed is unknown, defaulting to 1000 [ 358.339137][T12932] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2209'. [ 358.387368][T12932] openvswitch: netlink: Flow actions attr not present in new flow. [ 358.443648][T12936] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2210'. [ 358.724043][T12940] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2211'. [ 358.758837][T12942] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2212'. [ 358.983399][T12945] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2215'. [ 359.279474][T12954] netlink: 'syz.5.2216': attribute type 7 has an invalid length. [ 359.671929][T12972] net_ratelimit: 3 callbacks suppressed [ 359.671952][T12972] openvswitch: netlink: Flow actions attr not present in new flow. [ 359.704976][T12968] vxcan1 speed is unknown, defaulting to 1000 [ 359.921173][T12975] bridge_slave_0: left allmulticast mode [ 359.929015][T12975] bridge_slave_0: left promiscuous mode [ 359.938912][T12975] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.969744][T12975] bridge_slave_1: left allmulticast mode [ 360.043218][T12975] bridge_slave_1: left promiscuous mode [ 360.056038][T12975] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.149373][T12975] bond0: (slave bond_slave_0): Releasing backup interface [ 360.184995][T12975] bond0: (slave bond_slave_1): Releasing backup interface [ 360.226641][T12975] team0: Port device team_slave_0 removed [ 360.251942][T12975] team0: Port device team_slave_1 removed [ 360.269591][T12975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.293424][T12975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.329571][T12975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.349337][T12975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.402835][T12975] bond1: (slave geneve2): Releasing backup interface [ 360.502606][ T13] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 360.542976][ T13] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 360.672911][ T13] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 360.713612][ T13] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 360.726537][T12994] openvswitch: netlink: Flow actions attr not present in new flow. [ 361.648747][T13012] __nla_validate_parse: 5 callbacks suppressed [ 361.648814][T13012] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2235'. [ 361.664641][T13012] openvswitch: netlink: Flow actions attr not present in new flow. [ 361.997008][T13024] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2240'. [ 362.039060][T13024] openvswitch: netlink: Flow actions attr not present in new flow. [ 362.336897][T13033] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2244'. [ 362.388640][T13033] openvswitch: netlink: Flow actions attr not present in new flow. [ 362.637865][T13040] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2247'. [ 362.680384][T13040] openvswitch: netlink: Flow actions attr not present in new flow. [ 362.720665][T13047] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2250'. [ 362.770628][T13047] openvswitch: netlink: Flow actions attr not present in new flow. [ 363.116781][T13058] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2253'. [ 363.138164][T13055] vxcan1 speed is unknown, defaulting to 1000 [ 363.147834][T13058] openvswitch: netlink: Flow actions attr not present in new flow. [ 363.604712][T13075] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2260'. [ 363.635571][T13075] openvswitch: netlink: Flow actions attr not present in new flow. [ 363.826900][T13080] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2262'. [ 363.851949][T13080] openvswitch: netlink: Flow actions attr not present in new flow. [ 364.493927][T13098] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2270'. [ 364.533869][T13103] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2272'. [ 364.982832][T13109] netlink: 'syz.4.2274': attribute type 7 has an invalid length. [ 365.086893][T13114] netlink: 'syz.5.2277': attribute type 7 has an invalid length. [ 365.628258][T13134] net_ratelimit: 2 callbacks suppressed [ 365.628279][T13134] openvswitch: netlink: Flow actions attr not present in new flow. [ 365.655945][T13136] openvswitch: netlink: Flow actions attr not present in new flow. [ 366.288901][T13153] netlink: 'syz.4.2294': attribute type 7 has an invalid length. [ 366.298529][T13155] openvswitch: netlink: Flow actions attr not present in new flow. [ 366.587528][T13164] openvswitch: netlink: Flow actions attr not present in new flow. [ 366.802794][T13168] __nla_validate_parse: 8 callbacks suppressed [ 366.802814][T13168] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2301'. [ 366.822832][T13168] openvswitch: netlink: Flow actions attr not present in new flow. [ 366.869867][T13172] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2304'. [ 366.903038][T13172] openvswitch: netlink: Flow actions attr not present in new flow. [ 367.052845][T13177] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2305'. [ 367.070409][T13177] openvswitch: netlink: Flow actions attr not present in new flow. [ 367.308529][T13187] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2309'. [ 367.318306][T13187] openvswitch: netlink: Flow actions attr not present in new flow. [ 367.414163][T13191] netlink: 'syz.2.2311': attribute type 7 has an invalid length. [ 367.422857][T13191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2311'. [ 367.527364][T13195] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2313'. [ 367.540531][T13195] openvswitch: netlink: Flow actions attr not present in new flow. [ 367.779506][T13203] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2316'. [ 367.799810][T13203] openvswitch: netlink: Flow actions attr not present in new flow. [ 367.884434][T13206] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2319'. [ 368.378825][T13221] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2326'. [ 368.557904][T13223] netlink: 'syz.6.2327': attribute type 7 has an invalid length. [ 368.566549][T13223] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2327'. [ 368.619610][T13225] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 370.805771][T13290] vxcan1 speed is unknown, defaulting to 1000 [ 370.828606][T13296] net_ratelimit: 7 callbacks suppressed [ 370.828625][T13296] openvswitch: netlink: Flow actions attr not present in new flow. [ 371.311561][T13313] openvswitch: netlink: Flow actions attr not present in new flow. [ 372.274608][T13332] __nla_validate_parse: 10 callbacks suppressed [ 372.274629][T13332] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2370'. [ 372.291200][T13332] openvswitch: netlink: Flow actions attr not present in new flow. [ 372.409837][T13334] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2371'. [ 372.452297][T13334] openvswitch: netlink: Flow actions attr not present in new flow. [ 372.541170][T13337] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2372'. [ 372.583483][T13337] openvswitch: netlink: Flow actions attr not present in new flow. [ 372.751407][T13343] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2375'. [ 372.781063][T13343] openvswitch: netlink: Flow actions attr not present in new flow. [ 372.876909][T13347] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2376'. [ 372.889037][T13347] openvswitch: netlink: Flow actions attr not present in new flow. [ 373.266093][T13358] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2383'. [ 373.321987][T13361] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2382'. [ 373.331172][T13361] openvswitch: netlink: Flow actions attr not present in new flow. [ 373.464298][T13364] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2384'. [ 373.474560][T13364] openvswitch: netlink: Flow actions attr not present in new flow. [ 373.629487][T13372] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2385'. [ 373.639235][T13371] netlink: 'syz.5.2387': attribute type 7 has an invalid length. [ 373.671247][T13372] openvswitch: netlink: Flow actions attr not present in new flow. [ 373.673109][T13371] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2387'. [ 373.981676][T13384] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 375.969405][T13448] net_ratelimit: 9 callbacks suppressed [ 375.969426][T13448] openvswitch: netlink: Flow actions attr not present in new flow. [ 376.160574][T13453] openvswitch: netlink: Flow actions attr not present in new flow. [ 376.360744][T13459] openvswitch: netlink: Flow actions attr not present in new flow. [ 376.445824][T13461] netlink: 'syz.2.2426': attribute type 7 has an invalid length. [ 376.601920][T13466] openvswitch: netlink: Flow actions attr not present in new flow. [ 376.876896][T13476] openvswitch: netlink: Flow actions attr not present in new flow. [ 377.148698][T13485] openvswitch: netlink: Flow actions attr not present in new flow. [ 377.350081][T13490] __nla_validate_parse: 19 callbacks suppressed [ 377.350101][T13490] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2438'. [ 377.366902][T13492] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2439'. [ 377.366926][T13492] openvswitch: netlink: Flow actions attr not present in new flow. [ 377.396029][T13490] openvswitch: netlink: Flow actions attr not present in new flow. [ 377.793815][T13500] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2443'. [ 377.822132][T13500] openvswitch: netlink: Flow actions attr not present in new flow. [ 377.953200][T13504] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2445'. [ 377.990066][T13504] openvswitch: netlink: Flow actions attr not present in new flow. [ 378.245896][T13513] netlink: 'syz.5.2447': attribute type 7 has an invalid length. [ 378.254828][T13513] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2447'. [ 378.331907][T13518] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2449'. [ 378.431165][T13520] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2451'. [ 378.464452][T13522] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2452'. [ 378.696516][T13529] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2456'. [ 378.875803][T13535] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2457'. [ 378.918811][T13536] vxcan1 speed is unknown, defaulting to 1000 [ 379.842483][ T5861] Bluetooth: hci3: command 0x0405 tx timeout [ 380.699105][T13587] FAULT_INJECTION: forcing a failure. [ 380.699105][T13587] name failslab, interval 1, probability 0, space 0, times 0 [ 380.725159][T13587] CPU: 0 UID: 0 PID: 13587 Comm: syz.6.2475 Not tainted syzkaller #0 PREEMPT(full) [ 380.725187][T13587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 380.725204][T13587] Call Trace: [ 380.725214][T13587] [ 380.725223][T13587] dump_stack_lvl+0x189/0x250 [ 380.725253][T13587] ? __pfx____ratelimit+0x10/0x10 [ 380.725283][T13587] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.725308][T13587] ? __pfx__printk+0x10/0x10 [ 380.725338][T13587] ? rcu_is_watching+0x15/0xb0 [ 380.725360][T13587] ? trace_fib_table_lookup+0x85/0x200 [ 380.725400][T13587] should_fail_ex+0x414/0x560 [ 380.725433][T13587] should_failslab+0xa8/0x100 [ 380.725468][T13587] kmem_cache_alloc_noprof+0x73/0x3c0 [ 380.725495][T13587] ? dst_alloc+0x105/0x170 [ 380.725518][T13587] ? fib_lookup+0x76/0x440 [ 380.725543][T13587] dst_alloc+0x105/0x170 [ 380.725571][T13587] ip_route_output_key_hash_rcu+0x14e1/0x23d0 [ 380.725607][T13587] ? ip_route_output_key_hash+0xde/0x2e0 [ 380.725635][T13587] ip_route_output_key_hash+0x1b9/0x2e0 [ 380.725659][T13587] ? __lock_acquire+0xab9/0xd20 [ 380.725690][T13587] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 380.725735][T13587] ip_route_output_flow+0x2a/0x150 [ 380.725755][T13587] ? security_sk_classify_flow+0x70/0x180 [ 380.725785][T13587] ping_v4_sendmsg+0xfe9/0x1750 [ 380.725812][T13587] ? __lock_acquire+0xab9/0xd20 [ 380.725862][T13587] ? __pfx_ping_v4_sendmsg+0x10/0x10 [ 380.725928][T13587] ? __local_bh_enable_ip+0x12d/0x1c0 [ 380.725949][T13587] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.725978][T13587] ? __local_bh_enable_ip+0x12d/0x1c0 [ 380.726006][T13587] ? inet_sendmsg+0x14f/0x370 [ 380.726033][T13587] ? inet_sendmsg+0x2f4/0x370 [ 380.726061][T13587] __sock_sendmsg+0x19c/0x270 [ 380.726091][T13587] ____sys_sendmsg+0x505/0x830 [ 380.726118][T13587] ? __pfx_____sys_sendmsg+0x10/0x10 [ 380.726149][T13587] ? import_iovec+0x74/0xa0 [ 380.726176][T13587] ___sys_sendmsg+0x21f/0x2a0 [ 380.726200][T13587] ? __pfx____sys_sendmsg+0x10/0x10 [ 380.726260][T13587] ? __fget_files+0x2a/0x420 [ 380.726276][T13587] ? __fget_files+0x3a0/0x420 [ 380.726304][T13587] __x64_sys_sendmsg+0x19b/0x260 [ 380.726328][T13587] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 380.726357][T13587] ? __pfx_ksys_write+0x10/0x10 [ 380.726388][T13587] ? rcu_is_watching+0x15/0xb0 [ 380.726414][T13587] ? do_syscall_64+0xbe/0x3b0 [ 380.726467][T13587] do_syscall_64+0xfa/0x3b0 [ 380.726496][T13587] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.726526][T13587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.726557][T13587] ? clear_bhb_loop+0x60/0xb0 [ 380.726582][T13587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.726608][T13587] RIP: 0033:0x7f8abbd8ebe9 [ 380.726626][T13587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.726643][T13587] RSP: 002b:00007f8abcb13038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.726662][T13587] RAX: ffffffffffffffda RBX: 00007f8abbfb5fa0 RCX: 00007f8abbd8ebe9 [ 380.726676][T13587] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000003 [ 380.726689][T13587] RBP: 00007f8abcb13090 R08: 0000000000000000 R09: 0000000000000000 [ 380.726701][T13587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.726712][T13587] R13: 00007f8abbfb6038 R14: 00007f8abbfb5fa0 R15: 00007ffcd61d83d8 [ 380.726744][T13587] [ 381.191996][T13590] net_ratelimit: 7 callbacks suppressed [ 381.228026][T13590] openvswitch: netlink: Flow actions attr not present in new flow. [ 381.597817][T13603] vxcan1 speed is unknown, defaulting to 1000 [ 381.973701][T13618] openvswitch: netlink: Flow actions attr not present in new flow. [ 382.425639][T13631] __nla_validate_parse: 8 callbacks suppressed [ 382.425659][T13631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2492'. [ 382.454759][T13632] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2490'. [ 382.479187][T13634] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2491'. [ 382.501145][T13632] openvswitch: netlink: Flow actions attr not present in new flow. [ 382.510577][T13634] openvswitch: netlink: Flow actions attr not present in new flow. [ 382.849046][T13642] tipc: Enabled bearer , priority 0 [ 383.431830][T13665] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2504'. [ 383.441260][T13664] vxcan1 speed is unknown, defaulting to 1000 [ 383.458311][T13665] openvswitch: netlink: Flow actions attr not present in new flow. [ 383.459729][T13667] netlink: 'syz.2.2503': attribute type 5 has an invalid length. [ 383.982831][ T5917] tipc: Node number set to 3099539720 [ 384.374858][T13681] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2508'. [ 384.396757][T13681] openvswitch: netlink: Flow actions attr not present in new flow. [ 384.686941][T13688] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2510'. [ 384.741714][T13688] openvswitch: netlink: Flow actions attr not present in new flow. [ 385.020652][T13702] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2525'. [ 385.062679][T13702] openvswitch: netlink: Flow actions attr not present in new flow. [ 385.116358][T13697] vxcan1 speed is unknown, defaulting to 1000 [ 385.441675][T13716] netlink: 'syz.4.2518': attribute type 5 has an invalid length. [ 385.760574][T13714] vxcan1 speed is unknown, defaulting to 1000 [ 386.314131][T13729] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2523'. [ 386.330303][T13729] openvswitch: netlink: Flow actions attr not present in new flow. [ 386.810592][T13743] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2528'. [ 386.847040][T13743] openvswitch: netlink: Flow actions attr not present in new flow. [ 387.161790][T13745] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.2530'. [ 387.229331][T13750] openvswitch: netlink: Flow actions attr not present in new flow. [ 387.585490][T13762] __nla_validate_parse: 1 callbacks suppressed [ 387.585511][T13762] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2537'. [ 387.631835][T13765] netlink: 'syz.4.2538': attribute type 5 has an invalid length. [ 387.640640][T13762] openvswitch: netlink: Flow actions attr not present in new flow. [ 387.643415][T13765] netlink: 'syz.4.2538': attribute type 7 has an invalid length. [ 387.680414][T13765] : entered promiscuous mode [ 387.799805][T13771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2540'. [ 387.913528][T13773] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2541'. [ 387.931049][T13773] openvswitch: netlink: Flow actions attr not present in new flow. [ 388.090814][T13778] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2544'. [ 388.096873][T13779] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2543'. [ 388.106751][T13778] openvswitch: netlink: Flow actions attr not present in new flow. [ 388.159477][T13781] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2545'. [ 388.184477][T13781] openvswitch: netlink: Flow actions attr not present in new flow. [ 388.488550][T13789] bpq0: entered promiscuous mode [ 388.515819][T13787] netlink: 'syz.5.2548': attribute type 7 has an invalid length. [ 388.539137][T13792] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2550'. [ 388.541932][T13787] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2548'. [ 388.578308][T13792] openvswitch: netlink: Flow actions attr not present in new flow. [ 388.766400][T13803] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2556'. [ 388.797115][T13803] openvswitch: netlink: Flow actions attr not present in new flow. [ 389.165698][T13817] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2560'. [ 389.191018][T13817] openvswitch: netlink: Flow actions attr not present in new flow. [ 390.168489][T13845] netlink: 'syz.5.2572': attribute type 7 has an invalid length. [ 390.917674][T13864] vxcan1 speed is unknown, defaulting to 1000 [ 391.373912][T13891] netlink: 'syz.2.2586': attribute type 5 has an invalid length. [ 391.584475][T13895] net_ratelimit: 7 callbacks suppressed [ 391.584493][T13895] openvswitch: netlink: Flow actions attr not present in new flow. [ 391.655274][T13888] vxcan1 speed is unknown, defaulting to 1000 [ 391.794459][T13902] openvswitch: netlink: Flow actions attr not present in new flow. [ 392.019195][T13907] netlink: 'syz.6.2591': attribute type 7 has an invalid length. [ 392.038571][T13906] openvswitch: netlink: Flow actions attr not present in new flow. [ 392.420954][T13913] openvswitch: netlink: Flow actions attr not present in new flow. [ 392.544088][T13915] openvswitch: netlink: Flow actions attr not present in new flow. [ 392.750825][T13921] __nla_validate_parse: 14 callbacks suppressed [ 392.750843][T13921] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2601'. [ 392.783768][T13921] openvswitch: netlink: Flow actions attr not present in new flow. [ 392.964338][T13926] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2603'. [ 393.009547][T13926] openvswitch: netlink: Flow actions attr not present in new flow. [ 393.109226][T13929] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2605'. [ 393.189373][T13929] openvswitch: netlink: Flow actions attr not present in new flow. [ 393.273809][T13933] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2617'. [ 393.312823][T13935] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2607'. [ 393.331412][T13935] openvswitch: netlink: Flow actions attr not present in new flow. [ 393.332193][T13933] openvswitch: netlink: Flow actions attr not present in new flow. [ 393.565918][T13946] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2611'. [ 393.686576][T13951] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2614'. [ 393.905384][T13959] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2616'. [ 394.078920][T13963] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2620'. [ 394.252804][T13967] netlink: 'syz.5.2621': attribute type 5 has an invalid length. [ 394.331327][T13966] vxcan1 speed is unknown, defaulting to 1000 [ 394.439933][ T51] Bluetooth: hci3: link tx timeout [ 394.446126][ T51] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 395.258580][T13994] netlink: 'syz.6.2626': attribute type 7 has an invalid length. [ 395.266705][T13994] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2626'. [ 395.806023][ T59] bond0 (unregistering): Released all slaves [ 395.904350][ T59] bond1 (unregistering): Released all slaves [ 395.996054][ T59] bond2 (unregistering): Released all slaves [ 396.156898][ T59] : left promiscuous mode [ 396.482579][ T5861] Bluetooth: hci3: command 0x0405 tx timeout [ 396.666236][T14024] net_ratelimit: 5 callbacks suppressed [ 396.666255][T14024] openvswitch: netlink: Flow actions attr not present in new flow. [ 397.445751][T14048] openvswitch: netlink: Flow actions attr not present in new flow. [ 397.743864][T14050] vxcan1 speed is unknown, defaulting to 1000 [ 397.849733][T14056] __nla_validate_parse: 3 callbacks suppressed [ 397.849753][T14056] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2645'. [ 397.929787][T14056] openvswitch: netlink: Flow actions attr not present in new flow. [ 398.073377][T14061] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2646'. [ 398.124105][T14061] openvswitch: netlink: Flow actions attr not present in new flow. [ 398.260975][ T59] hsr_slave_0: left promiscuous mode [ 399.549915][ T59] IPVS: stop unused estimator thread 0... [ 400.640221][T14113] bpq0: left promiscuous mode [ 400.856660][T14121] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2663'. [ 400.892205][T14121] openvswitch: netlink: Flow actions attr not present in new flow. [ 401.081984][T14125] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2664'. [ 401.103506][T14126] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2665'. [ 401.118288][T14125] openvswitch: netlink: Flow actions attr not present in new flow. [ 401.143275][T14126] openvswitch: netlink: Flow actions attr not present in new flow. [ 401.239508][T14128] netlink: 'syz.5.2666': attribute type 7 has an invalid length. [ 401.271497][T14128] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2666'. [ 401.523349][T14140] vxcan1 speed is unknown, defaulting to 1000 [ 401.705954][T14147] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2671'. [ 401.735839][T14147] openvswitch: netlink: Flow actions attr not present in new flow. [ 401.973444][T14156] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2673'. [ 402.012092][T14156] openvswitch: netlink: Flow actions attr not present in new flow. [ 402.187383][T14161] netlink: 'syz.6.2674': attribute type 7 has an invalid length. [ 402.195726][T14161] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2674'. [ 402.301254][T14168] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2676'. [ 402.332306][T14168] openvswitch: netlink: Flow actions attr not present in new flow. [ 402.528693][T14174] openvswitch: netlink: Flow actions attr not present in new flow. [ 402.872727][T14185] __nla_validate_parse: 1 callbacks suppressed [ 402.872746][T14185] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2681'. [ 402.926437][T14185] openvswitch: netlink: Flow actions attr not present in new flow. [ 403.529914][T14194] netlink: 'syz.2.2685': attribute type 7 has an invalid length. [ 403.570706][T14194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2685'. [ 403.696032][T14199] netlink: 'syz.1.2687': attribute type 7 has an invalid length. [ 403.735269][T14199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2687'. [ 404.015241][T14214] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2691'. [ 404.056405][T14214] openvswitch: netlink: Flow actions attr not present in new flow. [ 404.233855][T14224] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2693'. [ 404.269235][T14224] openvswitch: netlink: Flow actions attr not present in new flow. [ 404.461266][T14232] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2696'. [ 404.515956][T14232] openvswitch: netlink: Flow actions attr not present in new flow. [ 404.738117][T14246] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2701'. [ 404.916315][T14250] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2702'. [ 404.936395][T14250] openvswitch: netlink: Flow actions attr not present in new flow. [ 406.225678][T14293] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2717'. [ 406.249677][T14293] openvswitch: netlink: Flow actions attr not present in new flow. [ 406.751683][T14309] vxcan1 speed is unknown, defaulting to 1000 [ 406.934267][T14317] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2725'. [ 407.014786][T14317] openvswitch: netlink: Flow actions attr not present in new flow. [ 407.488008][T14331] openvswitch: netlink: Flow actions attr not present in new flow. [ 408.310467][T14353] netlink: 'syz.4.2740': attribute type 7 has an invalid length. [ 408.345931][T14353] __nla_validate_parse: 2 callbacks suppressed [ 408.345948][T14353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2740'. [ 408.609062][T14359] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2743'. [ 408.623498][T14359] openvswitch: netlink: Flow actions attr not present in new flow. [ 408.775631][T14365] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2749'. [ 408.815704][T14365] openvswitch: netlink: Flow actions attr not present in new flow. [ 408.839235][T14369] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2746'. [ 408.872203][T14369] openvswitch: netlink: Flow actions attr not present in new flow. [ 409.048080][T14373] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2751'. [ 409.090299][T14373] openvswitch: netlink: Flow actions attr not present in new flow. [ 409.147891][T14379] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2752'. [ 409.192421][T14379] openvswitch: netlink: Flow actions attr not present in new flow. [ 409.699938][T14403] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2763'. [ 409.737181][T14403] openvswitch: netlink: Flow actions attr not present in new flow. [ 409.933236][T14410] netlink: 'syz.5.2765': attribute type 7 has an invalid length. [ 409.951306][T14410] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2765'. [ 410.168981][T14411] vxcan1 speed is unknown, defaulting to 1000 [ 410.295130][T14419] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2768'. [ 410.360366][T14421] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2769'. [ 410.369806][T14419] openvswitch: netlink: Flow actions attr not present in new flow. [ 410.637421][T14428] openvswitch: netlink: Flow actions attr not present in new flow. [ 411.758819][T14451] netlink: 'syz.4.2779': attribute type 7 has an invalid length. [ 412.031165][T14464] net_ratelimit: 2 callbacks suppressed [ 412.031184][T14464] openvswitch: netlink: Flow actions attr not present in new flow. [ 412.677471][T14480] vxcan1 speed is unknown, defaulting to 1000 [ 412.732224][T14483] netlink: 'syz.1.2791': attribute type 5 has an invalid length. [ 412.764217][T14482] netlink: 'syz.6.2792': attribute type 7 has an invalid length. [ 412.912917][T14487] netlink: 'syz.2.2794': attribute type 7 has an invalid length. [ 413.405009][T14503] __nla_validate_parse: 8 callbacks suppressed [ 413.405029][T14503] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2799'. [ 413.548292][T14507] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2802'. [ 413.575164][T14507] openvswitch: netlink: Flow actions attr not present in new flow. [ 414.693256][T14523] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2809'. [ 414.829765][ T5861] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 414.840168][ T5861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 414.849196][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 414.858980][ T5861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 414.868128][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 415.066410][T14523] bridge_slave_1: left allmulticast mode [ 415.072274][T14523] bridge_slave_1: left promiscuous mode [ 415.078150][T14523] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.090910][T14523] bridge_slave_0: left allmulticast mode [ 415.099063][T14523] bridge_slave_0: left promiscuous mode [ 415.108598][T14523] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.415920][T14531] vxcan1 speed is unknown, defaulting to 1000 [ 415.463787][T14536] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2812'. [ 415.484323][T14536] openvswitch: netlink: Flow actions attr not present in new flow. [ 416.759927][T14581] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2826'. [ 416.800108][T14581] openvswitch: netlink: Flow actions attr not present in new flow. [ 416.853062][T14585] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2827'. [ 416.880863][T14531] chnl_net:caif_netlink_parms(): no params data found [ 416.894320][T14585] openvswitch: netlink: Flow actions attr not present in new flow. [ 416.963393][ T5861] Bluetooth: hci0: command tx timeout [ 417.071442][T14589] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2828'. [ 417.102409][T14589] openvswitch: netlink: Flow actions attr not present in new flow. [ 417.189407][T14531] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.197831][T14531] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.205597][T14531] bridge_slave_0: entered allmulticast mode [ 417.214213][T14531] bridge_slave_0: entered promiscuous mode [ 417.223034][T14531] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.230265][T14531] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.238391][T14531] bridge_slave_1: entered allmulticast mode [ 417.247111][T14531] bridge_slave_1: entered promiscuous mode [ 417.247215][T14597] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2830'. [ 417.315678][T14531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.320609][T14597] openvswitch: netlink: Flow actions attr not present in new flow. [ 417.382815][T14531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.558143][T14531] team0: Port device team_slave_0 added [ 417.600654][T14531] team0: Port device team_slave_1 added [ 417.820060][T14531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.842868][T14531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.881535][T14531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.906976][T14622] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2837'. [ 417.912442][T14531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.937279][T14531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.937906][T14622] openvswitch: netlink: Flow actions attr not present in new flow. [ 417.965217][T14531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.998848][T14624] netlink: 'syz.6.2834': attribute type 7 has an invalid length. [ 418.039992][T14624] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2834'. [ 418.316591][T14531] hsr_slave_0: entered promiscuous mode [ 418.324358][T14531] hsr_slave_1: entered promiscuous mode [ 418.338944][T14531] debugfs: 'hsr0' already exists in 'hsr' [ 418.348332][T14531] Cannot create hsr debugfs directory [ 418.672229][T14640] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2841'. [ 418.687997][T14640] openvswitch: netlink: Flow actions attr not present in new flow. [ 418.906011][T14649] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2844'. [ 419.044594][ T5861] Bluetooth: hci0: command tx timeout [ 419.075755][T14531] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.350289][T14531] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.473745][T14668] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2849'. [ 419.495683][T14668] openvswitch: netlink: Flow actions attr not present in new flow. [ 419.509166][T14531] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.537464][T14671] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2850'. [ 419.546622][T14671] openvswitch: netlink: Flow actions attr not present in new flow. [ 419.675857][T14531] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.781312][T14680] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2853'. [ 419.821839][T14680] openvswitch: netlink: Flow actions attr not present in new flow. [ 420.241807][T14676] vxcan1 speed is unknown, defaulting to 1000 [ 420.507013][T14531] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 420.541476][T14531] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 420.609518][T14531] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 420.700463][T14531] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 420.783397][T14708] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2858'. [ 420.808044][T14708] openvswitch: netlink: Flow actions attr not present in new flow. [ 421.036550][T14531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.084746][T14695] vxcan1 speed is unknown, defaulting to 1000 [ 421.136392][ T5861] Bluetooth: hci0: command tx timeout [ 421.143582][T14531] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.186983][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.194205][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.297422][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.304660][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.901827][T14740] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2863'. [ 421.964367][T14740] xt_socket: unknown flags 0xd0 [ 422.434811][T14750] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2864'. [ 422.463937][T14750] openvswitch: netlink: Flow actions attr not present in new flow. [ 422.554757][T14531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.859496][T14757] netlink: 'syz.6.2865': attribute type 7 has an invalid length. [ 422.909486][T14757] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2865'. [ 423.056804][T14764] netlink: 'syz.5.2867': attribute type 5 has an invalid length. [ 423.179478][T14766] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2868'. [ 423.205245][T14766] openvswitch: netlink: Flow actions attr not present in new flow. [ 423.209976][ T5861] Bluetooth: hci0: command tx timeout [ 423.260580][T14762] vxcan1 speed is unknown, defaulting to 1000 [ 423.661738][T14531] veth0_vlan: entered promiscuous mode [ 423.780264][T14784] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2875'. [ 423.791316][T14784] openvswitch: netlink: Flow actions attr not present in new flow. [ 423.799810][T14531] veth1_vlan: entered promiscuous mode [ 424.153912][T14531] veth0_macvtap: entered promiscuous mode [ 424.207330][T14531] veth1_macvtap: entered promiscuous mode [ 424.409459][T14531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.478472][T14531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.544569][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.651512][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.668532][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.691691][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.860148][T14798] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2879'. [ 424.870226][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.897317][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.905324][T14798] openvswitch: netlink: Flow actions attr not present in new flow. [ 424.986935][T14799] netlink: 'syz.6.2880': attribute type 7 has an invalid length. [ 424.994914][T14799] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2880'. [ 425.022608][ T7140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.042642][ T7140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.193702][T14810] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2883'. [ 425.237821][T14810] openvswitch: netlink: Flow actions attr not present in new flow. [ 425.523564][T14819] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2885'. [ 425.572498][T14819] openvswitch: netlink: Flow actions attr not present in new flow. [ 425.638724][T14827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2886'. [ 425.796796][T14831] FAULT_INJECTION: forcing a failure. [ 425.796796][T14831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.810754][T14831] CPU: 0 UID: 0 PID: 14831 Comm: syz.6.2890 Not tainted syzkaller #0 PREEMPT(full) [ 425.810777][T14831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 425.810788][T14831] Call Trace: [ 425.810794][T14831] [ 425.810810][T14831] dump_stack_lvl+0x189/0x250 [ 425.810836][T14831] ? __pfx____ratelimit+0x10/0x10 [ 425.810860][T14831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.810886][T14831] ? __pfx__printk+0x10/0x10 [ 425.810919][T14831] should_fail_ex+0x414/0x560 [ 425.810945][T14831] _copy_to_user+0x31/0xb0 [ 425.810965][T14831] ethtool_get_link+0xab/0x110 [ 425.810983][T14831] ? __pfx_ethtool_get_link+0x10/0x10 [ 425.811004][T14831] ? netdev_name_node_lookup+0xdf/0x120 [ 425.811027][T14831] dev_ethtool+0x10b7/0x19b0 [ 425.811054][T14831] ? __pfx_dev_ethtool+0x10/0x10 [ 425.811084][T14831] ? dev_load+0x21/0x1f0 [ 425.811108][T14831] dev_ioctl+0x392/0x1150 [ 425.811134][T14831] sock_do_ioctl+0x22c/0x300 [ 425.811157][T14831] ? __pfx_sock_do_ioctl+0x10/0x10 [ 425.811175][T14831] ? __lock_acquire+0xab9/0xd20 [ 425.811212][T14831] sock_ioctl+0x576/0x790 [ 425.811267][T14831] ? __pfx_sock_ioctl+0x10/0x10 [ 425.811295][T14831] ? __fget_files+0x2a/0x420 [ 425.811315][T14831] ? __fget_files+0x3a0/0x420 [ 425.811332][T14831] ? __fget_files+0x2a/0x420 [ 425.811354][T14831] ? bpf_lsm_file_ioctl+0x9/0x20 [ 425.811381][T14831] ? __pfx_sock_ioctl+0x10/0x10 [ 425.811402][T14831] __se_sys_ioctl+0xf9/0x170 [ 425.811425][T14831] do_syscall_64+0xfa/0x3b0 [ 425.811451][T14831] ? lockdep_hardirqs_on+0x9c/0x150 [ 425.811474][T14831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.811491][T14831] ? clear_bhb_loop+0x60/0xb0 [ 425.811512][T14831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.811528][T14831] RIP: 0033:0x7f8abbd8ebe9 [ 425.811544][T14831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.811559][T14831] RSP: 002b:00007f8abcb13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 425.811577][T14831] RAX: ffffffffffffffda RBX: 00007f8abbfb5fa0 RCX: 00007f8abbd8ebe9 [ 425.811589][T14831] RDX: 0000200000000100 RSI: 0000000000008946 RDI: 0000000000000003 [ 425.811600][T14831] RBP: 00007f8abcb13090 R08: 0000000000000000 R09: 0000000000000000 [ 425.811611][T14831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.811621][T14831] R13: 00007f8abbfb6038 R14: 00007f8abbfb5fa0 R15: 00007ffcd61d83d8 [ 425.811649][T14831] [ 426.397275][T14848] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2896'. [ 426.428217][T14848] openvswitch: netlink: Flow actions attr not present in new flow. [ 426.564285][T14850] netlink: 248 bytes leftover after parsing attributes in process `syz.6.2895'. [ 426.855427][T14861] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2902'. [ 426.873381][T14861] openvswitch: netlink: Flow actions attr not present in new flow. [ 426.899448][T14865] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2903'. [ 426.910128][T14865] openvswitch: netlink: Flow actions attr not present in new flow. [ 427.188504][T14869] netlink: 'syz.1.2905': attribute type 7 has an invalid length. [ 427.729319][T14893] netlink: 'syz.4.2915': attribute type 3 has an invalid length. [ 427.994326][T14896] openvswitch: netlink: Flow actions attr not present in new flow. [ 428.348313][T14904] netlink: 'syz.1.2921': attribute type 7 has an invalid length. [ 428.482864][ T5861] Bluetooth: hci0: command tx timeout [ 429.038712][T14933] __nla_validate_parse: 4 callbacks suppressed [ 429.038734][T14933] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2931'. [ 429.072903][T14933] openvswitch: netlink: Flow actions attr not present in new flow. [ 429.324876][T14940] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2934'. [ 429.343607][T14940] openvswitch: netlink: Flow actions attr not present in new flow. [ 430.070167][T14952] vxcan1 speed is unknown, defaulting to 1000 [ 430.354518][T14968] netlink: 'syz.5.2942': attribute type 7 has an invalid length. [ 430.362724][T14968] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2942'. [ 430.913232][T14983] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2946'. [ 430.951458][T14983] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2946'. [ 430.981799][T14983] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2946'. [ 431.105160][T14969] vxcan1 speed is unknown, defaulting to 1000 [ 431.293158][T14992] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2948'. [ 431.790896][T15005] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2954'. [ 431.817856][T15005] openvswitch: netlink: Flow actions attr not present in new flow. [ 431.924727][ T5861] Bluetooth: hci1: command 0x0406 tx timeout [ 432.173331][T15012] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2957'. [ 432.182982][T15012] openvswitch: netlink: Flow actions attr not present in new flow. [ 432.648970][T15027] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2962'. [ 432.677759][T15027] openvswitch: netlink: Flow actions attr not present in new flow. [ 432.920913][T15031] netlink: 'syz.5.2964': attribute type 7 has an invalid length. [ 433.435200][T15051] netlink: 'syz.1.2973': attribute type 83 has an invalid length. [ 433.450347][T15049] sctp: [Deprecated]: syz.5.2971 (pid 15049) Use of int in max_burst socket option deprecated. [ 433.450347][T15049] Use struct sctp_assoc_value instead [ 433.655452][T15058] openvswitch: netlink: Flow actions attr not present in new flow. [ 434.225729][T15071] __nla_validate_parse: 2 callbacks suppressed [ 434.225749][T15071] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2982'. [ 434.271799][T15069] netlink: 'syz.6.2981': attribute type 7 has an invalid length. [ 434.297937][T15071] openvswitch: netlink: Flow actions attr not present in new flow. [ 434.332789][T15069] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2981'. [ 434.586984][T15080] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2986'. [ 434.652864][T15080] openvswitch: netlink: Flow actions attr not present in new flow. [ 435.186862][ T5861] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 435.199928][ T5861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 435.208457][ T5861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 435.217883][ T5861] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 435.218698][T15098] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2993'. [ 435.246386][T15098] openvswitch: netlink: Flow actions attr not present in new flow. [ 435.258295][ T5861] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 435.329152][T15095] vxcan1 speed is unknown, defaulting to 1000 [ 435.648981][T15107] netlink: 'syz.5.2997': attribute type 7 has an invalid length. [ 435.665785][T15107] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2997'. [ 435.919025][T15115] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2999'. [ 435.928721][T15115] openvswitch: netlink: Flow actions attr not present in new flow. [ 436.210978][T15095] chnl_net:caif_netlink_parms(): no params data found [ 436.277495][T15124] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3004'. [ 436.287642][T15124] openvswitch: netlink: Flow actions attr not present in new flow. [ 436.563388][T15095] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.570643][T15095] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.578682][T15095] bridge_slave_0: entered allmulticast mode [ 436.588260][T15095] bridge_slave_0: entered promiscuous mode [ 436.600847][T15095] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.618685][T15095] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.632301][T15095] bridge_slave_1: entered allmulticast mode [ 436.649132][T15095] bridge_slave_1: entered promiscuous mode [ 436.708947][T15141] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3009'. [ 436.721597][T15141] openvswitch: netlink: Flow actions attr not present in new flow. [ 436.770499][T15095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.800434][T15095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.970797][T15095] team0: Port device team_slave_0 added [ 436.988378][T15095] team0: Port device team_slave_1 added [ 437.053619][T15150] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3012'. [ 437.063222][T15150] openvswitch: netlink: Flow actions attr not present in new flow. [ 437.214082][T15095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.228712][T15095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.279231][T15095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.356079][T15151] vxcan1 speed is unknown, defaulting to 1000 [ 437.364339][T15095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.371321][T15095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.372461][ T51] Bluetooth: hci4: command tx timeout [ 437.650568][T15095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.905834][T15095] hsr_slave_0: entered promiscuous mode [ 437.927014][T15095] hsr_slave_1: entered promiscuous mode [ 437.943458][T15095] debugfs: 'hsr0' already exists in 'hsr' [ 437.956548][T15095] Cannot create hsr debugfs directory [ 438.963443][T15187] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3025'. [ 439.012090][T15187] openvswitch: netlink: Flow actions attr not present in new flow. [ 439.022952][T15188] openvswitch: netlink: Flow actions attr not present in new flow. [ 439.065077][T15095] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 439.104952][T15095] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 439.218344][T15095] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 439.278674][T15095] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 439.442950][ T51] Bluetooth: hci4: command tx timeout [ 439.528558][T15208] __nla_validate_parse: 1 callbacks suppressed [ 439.528580][T15208] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3030'. [ 439.557764][T15208] openvswitch: netlink: Flow actions attr not present in new flow. [ 439.626856][T15095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.676925][T15095] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.715798][T15213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3032'. [ 439.727175][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.734411][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.778281][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.785522][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.048195][T15225] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3036'. [ 440.096097][T15225] openvswitch: netlink: Flow actions attr not present in new flow. [ 440.156301][T15228] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3037'. [ 440.201537][T15228] openvswitch: netlink: Flow actions attr not present in new flow. [ 440.456840][T15095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.505087][T15238] syz_tun: entered allmulticast mode [ 440.519399][T15236] syz_tun: left allmulticast mode [ 440.671275][T15095] veth0_vlan: entered promiscuous mode [ 440.721076][T15095] veth1_vlan: entered promiscuous mode [ 440.883496][T15095] veth0_macvtap: entered promiscuous mode [ 440.910064][T15095] veth1_macvtap: entered promiscuous mode [ 440.998350][T15095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.069495][T15095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.088489][T15261] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3049'. [ 441.117682][ T79] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.139489][ T79] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.140593][T15261] openvswitch: netlink: Flow actions attr not present in new flow. [ 441.170146][ T79] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.247094][ T1146] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.441169][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.471393][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.525331][ T51] Bluetooth: hci4: command tx timeout [ 441.639589][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.716743][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.859255][T15284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2980'. [ 442.415752][T15299] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3062'. [ 442.453281][T15299] openvswitch: netlink: Flow actions attr not present in new flow. [ 442.975575][T15307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3065'. [ 443.053028][T15309] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3066'. [ 443.082562][T15307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3065'. [ 443.120159][T15309] openvswitch: netlink: Flow actions attr not present in new flow. [ 443.429834][T15315] openvswitch: netlink: Flow actions attr not present in new flow. [ 443.488245][ T5861] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 443.497536][ T5861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 443.509844][ T5861] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 443.537051][ T5861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 443.547230][ T5861] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 443.606510][ T51] Bluetooth: hci4: command tx timeout [ 443.630665][ T7140] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.649587][T15321] openvswitch: netlink: Flow actions attr not present in new flow. [ 443.729532][T15318] vxcan1 speed is unknown, defaulting to 1000 [ 443.918376][ T7140] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.037702][ T7140] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.234159][ T7140] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.602511][ T51] Bluetooth: hci2: command tx timeout [ 446.311200][ T7140] bond0 (unregistering): Released all slaves [ 446.389925][T15318] chnl_net:caif_netlink_parms(): no params data found [ 446.555412][ T7140] tipc: Left network mode [ 447.338216][T15318] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.350478][T15318] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.374855][T15392] __nla_validate_parse: 2 callbacks suppressed [ 447.374872][T15392] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3091'. [ 447.390288][T15318] bridge_slave_0: entered allmulticast mode [ 447.401770][T15318] bridge_slave_0: entered promiscuous mode [ 447.420188][T15392] openvswitch: netlink: Flow actions attr not present in new flow. [ 447.465930][T15318] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.485710][T15318] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.503997][T15318] bridge_slave_1: entered allmulticast mode [ 447.530198][T15318] bridge_slave_1: entered promiscuous mode [ 447.614536][T15400] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3094'. [ 447.651251][T15400] openvswitch: netlink: Flow actions attr not present in new flow. [ 447.682663][ T51] Bluetooth: hci2: command tx timeout [ 447.879012][T15318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.017643][T15414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.206748][T15403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.232606][T15403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.250899][T15403] bond0 (unregistering): Released all slaves [ 448.281936][T15318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.350515][ T7140] hsr_slave_0: left promiscuous mode [ 448.409964][ T7140] hsr_slave_1: left promiscuous mode [ 448.468890][ T7140] veth1_macvtap: left promiscuous mode [ 448.476690][ T7140] veth0_macvtap: left promiscuous mode [ 448.483309][ T7140] veth1_vlan: left promiscuous mode [ 448.488728][ T7140] veth0_vlan: left promiscuous mode [ 449.378447][T15318] team0: Port device team_slave_0 added [ 449.417397][T15318] team0: Port device team_slave_1 added [ 449.508239][T15429] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3104'. [ 449.531484][T15429] openvswitch: netlink: Flow actions attr not present in new flow. [ 449.698528][T15318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.710153][T15318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.774870][ T51] Bluetooth: hci2: command tx timeout [ 449.810080][T15318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.906370][T15318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.940953][T15318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.977459][T15449] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3106'. [ 450.012970][T15449] openvswitch: netlink: Flow actions attr not present in new flow. [ 450.035342][T15318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.369311][T15318] hsr_slave_0: entered promiscuous mode [ 450.377015][T15318] hsr_slave_1: entered promiscuous mode [ 450.384446][T15318] debugfs: 'hsr0' already exists in 'hsr' [ 450.402639][T15318] Cannot create hsr debugfs directory [ 450.452667][T15464] syz_tun: entered allmulticast mode [ 450.547471][T15457] syz_tun: left allmulticast mode [ 450.560723][ T7140] IPVS: stop unused estimator thread 0... [ 450.844632][T15482] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3114'. [ 450.874327][T15482] openvswitch: netlink: Flow actions attr not present in new flow. [ 451.176884][T15491] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3118'. [ 451.186450][T15491] openvswitch: netlink: Flow actions attr not present in new flow. [ 451.190223][T15494] FAULT_INJECTION: forcing a failure. [ 451.190223][T15494] name failslab, interval 1, probability 0, space 0, times 0 [ 451.283525][T15494] CPU: 1 UID: 0 PID: 15494 Comm: syz.2.3119 Not tainted syzkaller #0 PREEMPT(full) [ 451.283554][T15494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 451.283567][T15494] Call Trace: [ 451.283575][T15494] [ 451.283584][T15494] dump_stack_lvl+0x189/0x250 [ 451.283633][T15494] ? __pfx____ratelimit+0x10/0x10 [ 451.283664][T15494] ? __pfx_dump_stack_lvl+0x10/0x10 [ 451.283690][T15494] ? __pfx__printk+0x10/0x10 [ 451.283723][T15494] ? __pfx___might_resched+0x10/0x10 [ 451.283744][T15494] ? fs_reclaim_acquire+0x7d/0x100 [ 451.283783][T15494] should_fail_ex+0x414/0x560 [ 451.283829][T15494] should_failslab+0xa8/0x100 [ 451.283861][T15494] kmem_cache_alloc_noprof+0x73/0x3c0 [ 451.283889][T15494] ? security_file_alloc+0x34/0x330 [ 451.283920][T15494] security_file_alloc+0x34/0x330 [ 451.283948][T15494] init_file+0x93/0x2f0 [ 451.283974][T15494] alloc_empty_file+0x6e/0x1d0 [ 451.283997][T15494] alloc_file_pseudo+0x13d/0x210 [ 451.284022][T15494] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 451.284042][T15494] ? __local_bh_enable_ip+0x12d/0x1c0 [ 451.284079][T15494] anon_inode_getfile+0xc5/0x1a0 [ 451.284105][T15494] bpf_link_prime+0xfc/0x220 [ 451.284132][T15494] bpf_raw_tp_link_attach+0x49a/0x6c0 [ 451.284160][T15494] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 451.284202][T15494] ? __fget_files+0x2a/0x420 [ 451.284241][T15494] bpf_raw_tracepoint_open+0x1b2/0x220 [ 451.284273][T15494] __sys_bpf+0x75a/0x870 [ 451.284301][T15494] ? __pfx___sys_bpf+0x10/0x10 [ 451.284339][T15494] ? ksys_write+0x22a/0x250 [ 451.284368][T15494] ? __pfx_ksys_write+0x10/0x10 [ 451.284391][T15494] ? rcu_is_watching+0x15/0xb0 [ 451.284418][T15494] __x64_sys_bpf+0x7c/0x90 [ 451.284442][T15494] do_syscall_64+0xfa/0x3b0 [ 451.284471][T15494] ? lockdep_hardirqs_on+0x9c/0x150 [ 451.284498][T15494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.284518][T15494] ? clear_bhb_loop+0x60/0xb0 [ 451.284542][T15494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.284561][T15494] RIP: 0033:0x7f4a7378ebe9 [ 451.284578][T15494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.284596][T15494] RSP: 002b:00007f4a719f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 451.284616][T15494] RAX: ffffffffffffffda RBX: 00007f4a739b5fa0 RCX: 00007f4a7378ebe9 [ 451.284630][T15494] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000011 [ 451.284643][T15494] RBP: 00007f4a719f6090 R08: 0000000000000000 R09: 0000000000000000 [ 451.284655][T15494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.284666][T15494] R13: 00007f4a739b6038 R14: 00007f4a739b5fa0 R15: 00007ffd444714d8 [ 451.284697][T15494] [ 451.862168][ T51] Bluetooth: hci2: command tx timeout [ 452.072933][T15517] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3123'. [ 452.122836][T15517] openvswitch: netlink: Flow actions attr not present in new flow. [ 452.159246][T15523] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3126'. [ 452.226896][T15524] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3127'. [ 452.265472][T15523] openvswitch: netlink: Flow actions attr not present in new flow. [ 452.300465][T15524] openvswitch: netlink: Flow actions attr not present in new flow. [ 452.403773][T15528] FAULT_INJECTION: forcing a failure. [ 452.403773][T15528] name failslab, interval 1, probability 0, space 0, times 0 [ 452.467139][T15528] CPU: 0 UID: 0 PID: 15528 Comm: syz.4.3128 Not tainted syzkaller #0 PREEMPT(full) [ 452.467179][T15528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 452.467190][T15528] Call Trace: [ 452.467198][T15528] [ 452.467206][T15528] dump_stack_lvl+0x189/0x250 [ 452.467235][T15528] ? __pfx____ratelimit+0x10/0x10 [ 452.467263][T15528] ? __pfx_dump_stack_lvl+0x10/0x10 [ 452.467287][T15528] ? __pfx__printk+0x10/0x10 [ 452.467320][T15528] ? __pfx___might_resched+0x10/0x10 [ 452.467338][T15528] ? fs_reclaim_acquire+0x7d/0x100 [ 452.467373][T15528] should_fail_ex+0x414/0x560 [ 452.467404][T15528] should_failslab+0xa8/0x100 [ 452.467434][T15528] kmem_cache_alloc_noprof+0x73/0x3c0 [ 452.467460][T15528] ? security_inode_alloc+0x39/0x330 [ 452.467484][T15528] security_inode_alloc+0x39/0x330 [ 452.467505][T15528] inode_init_always_gfp+0x9ed/0xdc0 [ 452.467541][T15528] ? __pfx_sock_alloc_inode+0x10/0x10 [ 452.467567][T15528] alloc_inode+0x82/0x1b0 [ 452.467596][T15528] __sock_create+0x12d/0x9f0 [ 452.467632][T15528] __sys_socket+0xd7/0x1b0 [ 452.467663][T15528] __x64_sys_socket+0x7a/0x90 [ 452.467691][T15528] do_syscall_64+0xfa/0x3b0 [ 452.467719][T15528] ? lockdep_hardirqs_on+0x9c/0x150 [ 452.467746][T15528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.467764][T15528] ? clear_bhb_loop+0x60/0xb0 [ 452.467787][T15528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.467806][T15528] RIP: 0033:0x7f73f8b8ebe9 [ 452.467823][T15528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.467841][T15528] RSP: 002b:00007f73f9a92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 452.467861][T15528] RAX: ffffffffffffffda RBX: 00007f73f8db5fa0 RCX: 00007f73f8b8ebe9 [ 452.467893][T15528] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d [ 452.467904][T15528] RBP: 00007f73f9a92090 R08: 0000000000000000 R09: 0000000000000000 [ 452.467917][T15528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.467929][T15528] R13: 00007f73f8db6038 R14: 00007f73f8db5fa0 R15: 00007ffde0e2db88 [ 452.467981][T15528] [ 452.468011][T15528] socket: no more sockets [ 452.533354][T15535] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3130'. [ 452.780287][T15535] openvswitch: netlink: Flow actions attr not present in new flow. [ 452.866711][T15318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 452.964486][T15545] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3132'. [ 452.982932][T15318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 453.020534][T15545] openvswitch: netlink: Flow actions attr not present in new flow. [ 453.041078][T15530] vxcan1 speed is unknown, defaulting to 1000 [ 453.047713][T15318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 453.125576][T15318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 453.403650][T15564] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3137'. [ 453.442114][T15564] openvswitch: netlink: Flow actions attr not present in new flow. [ 453.598962][T15318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.634369][T15572] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3139'. [ 453.683189][T15318] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.694967][T15572] openvswitch: netlink: Flow actions attr not present in new flow. [ 453.759950][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.767352][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.819196][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.826518][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.544212][T15595] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3143'. [ 454.595035][T15595] openvswitch: netlink: Flow actions attr not present in new flow. [ 455.159031][T15318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.438526][T15318] veth0_vlan: entered promiscuous mode [ 455.536009][T15318] veth1_vlan: entered promiscuous mode [ 455.683749][T15318] veth0_macvtap: entered promiscuous mode [ 455.729354][T15318] veth1_macvtap: entered promiscuous mode [ 455.758049][T15623] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3149'. [ 455.792206][T15623] openvswitch: netlink: Flow actions attr not present in new flow. [ 455.851112][T15318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.907079][T15318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.015765][ T3462] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.063037][ T3462] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.085508][T15630] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3151'. [ 456.097624][T15630] openvswitch: netlink: Flow actions attr not present in new flow. [ 456.127362][ T3462] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.287565][ T3462] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.345554][T15640] FAULT_INJECTION: forcing a failure. [ 456.345554][T15640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.401042][T15640] CPU: 1 UID: 0 PID: 15640 Comm: syz.4.3153 Not tainted syzkaller #0 PREEMPT(full) [ 456.401070][T15640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 456.401083][T15640] Call Trace: [ 456.401092][T15640] [ 456.401112][T15640] dump_stack_lvl+0x189/0x250 [ 456.401140][T15640] ? __pfx____ratelimit+0x10/0x10 [ 456.401186][T15640] ? __pfx_dump_stack_lvl+0x10/0x10 [ 456.401210][T15640] ? __pfx__printk+0x10/0x10 [ 456.401244][T15640] ? __might_fault+0xb0/0x130 [ 456.401295][T15640] should_fail_ex+0x414/0x560 [ 456.401325][T15640] _copy_to_iter+0x3f5/0x16f0 [ 456.401356][T15640] ? __pfx__copy_to_iter+0x10/0x10 [ 456.401373][T15640] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 456.401401][T15640] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 456.401430][T15640] __skb_datagram_iter+0xf8/0x990 [ 456.401454][T15640] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 456.401486][T15640] skb_copy_datagram_iter+0xc5/0x230 [ 456.401514][T15640] netlink_recvmsg+0x2ab/0xa30 [ 456.401553][T15640] ? __pfx_netlink_recvmsg+0x10/0x10 [ 456.401586][T15640] ? __lock_acquire+0xab9/0xd20 [ 456.401612][T15640] ? aa_sock_msg_perm+0xf1/0x1d0 [ 456.401642][T15640] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 456.401665][T15640] ? __pfx_netlink_recvmsg+0x10/0x10 [ 456.401695][T15640] sock_recvmsg_nosec+0x183/0x1c0 [ 456.401725][T15640] ____sys_recvmsg+0x3aa/0x460 [ 456.401755][T15640] ? __pfx_____sys_recvmsg+0x10/0x10 [ 456.401809][T15640] ? import_iovec+0x74/0xa0 [ 456.401836][T15640] ___sys_recvmsg+0x1b5/0x510 [ 456.401864][T15640] ? __pfx____sys_recvmsg+0x10/0x10 [ 456.401929][T15640] ? __might_fault+0xb0/0x130 [ 456.401961][T15640] do_recvmmsg+0x307/0x770 [ 456.401993][T15640] ? __pfx_do_recvmmsg+0x10/0x10 [ 456.402028][T15640] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 456.402080][T15640] __x64_sys_recvmmsg+0x190/0x240 [ 456.402106][T15640] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 456.402135][T15640] ? do_syscall_64+0xbe/0x3b0 [ 456.402171][T15640] do_syscall_64+0xfa/0x3b0 [ 456.402200][T15640] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.402243][T15640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.402262][T15640] ? clear_bhb_loop+0x60/0xb0 [ 456.402286][T15640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.402305][T15640] RIP: 0033:0x7f73f8b8ebe9 [ 456.402321][T15640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.402339][T15640] RSP: 002b:00007f73f9a71038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 456.402359][T15640] RAX: ffffffffffffffda RBX: 00007f73f8db6090 RCX: 00007f73f8b8ebe9 [ 456.402373][T15640] RDX: 0000000000000008 RSI: 0000200000002c00 RDI: 0000000000000003 [ 456.402385][T15640] RBP: 00007f73f9a71090 R08: 0000000000000000 R09: 0000000000000000 [ 456.402396][T15640] R10: 0000000040010020 R11: 0000000000000246 R12: 0000000000000002 [ 456.402409][T15640] R13: 00007f73f8db6128 R14: 00007f73f8db6090 R15: 00007ffde0e2db88 [ 456.402439][T15640] [ 456.805669][T15643] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3154'. [ 456.893179][T15643] openvswitch: netlink: Flow actions attr not present in new flow. [ 457.017451][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.026216][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.197147][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.239214][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.769478][T15674] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3162'. [ 457.809923][T15674] openvswitch: netlink: Flow actions attr not present in new flow. [ 457.868495][T15678] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3163'. [ 457.914994][T15678] openvswitch: netlink: Flow actions attr not present in new flow. [ 458.312604][T15696] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3169'. [ 458.344873][T15696] openvswitch: netlink: Flow actions attr not present in new flow. [ 458.708975][T15711] netlink: 'syz.4.3175': attribute type 7 has an invalid length. [ 458.726432][T15711] netlink: 'syz.4.3175': attribute type 8 has an invalid length. [ 458.759219][T15711] netlink: 'syz.4.3175': attribute type 1 has an invalid length. [ 458.767197][T15711] netlink: 208 bytes leftover after parsing attributes in process `syz.4.3175'. [ 458.793691][T15714] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3177'. [ 458.807772][T15714] openvswitch: netlink: Flow actions attr not present in new flow. [ 458.988637][T15721] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3178'. [ 458.997858][T15721] openvswitch: netlink: Flow actions attr not present in new flow. [ 459.185963][T15729] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3180'. [ 459.236801][T15729] openvswitch: netlink: Flow actions attr not present in new flow. [ 459.586561][T15742] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3185'. [ 459.614297][T15742] openvswitch: netlink: Flow actions attr not present in new flow. [ 459.668422][T15749] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3188'. [ 459.691608][T15749] openvswitch: netlink: Flow actions attr not present in new flow. [ 459.913514][T15754] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3189'. [ 459.985700][T15754] openvswitch: netlink: Flow actions attr not present in new flow. [ 460.008035][T15760] openvswitch: netlink: Flow actions attr not present in new flow. [ 460.807359][T15781] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffa000: 0000 [#1] SMP KASAN PTI [ 460.819314][T15781] KASAN: probably user-memory-access in range [0x00000000fffd0000-0x00000000fffd0007] [ 460.828871][T15781] CPU: 0 UID: 0 PID: 15781 Comm: rm Not tainted syzkaller #0 PREEMPT(full) [ 460.837575][T15781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 460.847639][T15781] RIP: 0010:percpu_ref_get_many+0x8d/0x140 [ 460.853464][T15781] Code: 01 48 c7 c7 00 4b 98 8b be 4b 03 00 00 48 c7 c2 40 4b 98 8b e8 54 bd 71 ff 49 bc 00 00 00 00 00 fc ff df 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 14 4c f7 ff 49 8b 07 a8 03 75 62 [ 460.873157][T15781] RSP: 0018:ffffc900044476f8 EFLAGS: 00010206 [ 460.879239][T15781] RAX: 000000001fffa000 RBX: ffffffff822bc8e9 RCX: c3dbc6a869edce00 [ 460.887219][T15781] RDX: 0000000000000000 RSI: ffffffff8be332e0 RDI: ffffffff8be332a0 [ 460.895196][T15781] RBP: 0000000000000078 R08: 0000000000000000 R09: ffffffff822bc8e9 [ 460.903349][T15781] R10: dffffc0000000000 R11: fffffbfff1f46f87 R12: dffffc0000000000 [ 460.911321][T15781] R13: ffff8880b863b540 R14: 0000000000000001 R15: 00000000fffd0000 [ 460.919291][T15781] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 460.928232][T15781] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 460.934814][T15781] CR2: 0000001b30a23ffc CR3: 00000000568d8000 CR4: 00000000003526f0 [ 460.942784][T15781] Call Trace: [ 460.946087][T15781] [ 460.949022][T15781] refill_obj_stock+0x254/0x850 [ 460.953905][T15781] ? refill_obj_stock+0x116/0x850 [ 460.958940][T15781] __memcg_slab_free_hook+0x127/0x3d0 [ 460.964328][T15781] ? unlink_anon_vmas+0x614/0x670 [ 460.969378][T15781] kmem_cache_free+0x223/0x400 [ 460.974151][T15781] unlink_anon_vmas+0x614/0x670 [ 460.979022][T15781] free_pgtables+0x72b/0x9c0 [ 460.983648][T15781] ? __pfx_free_pgtables+0x10/0x10 [ 460.988784][T15781] ? __pfx_down_write+0x10/0x10 [ 460.993640][T15781] ? __mas_set_range+0x12f/0x3c0 [ 460.998608][T15781] exit_mmap+0x444/0xb50 [ 461.002862][T15781] ? uprobe_clear_state+0x20f/0x290 [ 461.008071][T15781] ? __pfx_exit_mmap+0x10/0x10 [ 461.012849][T15781] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 461.018501][T15781] ? __pfx_exit_aio+0x10/0x10 [ 461.023202][T15781] ? uprobe_clear_state+0x274/0x290 [ 461.028409][T15781] __mmput+0x118/0x420 [ 461.032492][T15781] exit_mm+0x1da/0x2c0 [ 461.036570][T15781] ? __pfx_exit_mm+0x10/0x10 [ 461.041159][T15781] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 461.046629][T15781] ? rcu_is_watching+0x15/0xb0 [ 461.051390][T15781] do_exit+0x648/0x2300 [ 461.055554][T15781] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 461.060936][T15781] ? __pfx_do_exit+0x10/0x10 [ 461.065539][T15781] ? _raw_spin_unlock_irq+0x23/0x50 [ 461.070752][T15781] ? lockdep_hardirqs_on+0x9c/0x150 [ 461.075962][T15781] do_group_exit+0x21c/0x2d0 [ 461.080558][T15781] __x64_sys_exit_group+0x3f/0x40 [ 461.085590][T15781] x64_sys_call+0x21f7/0x2200 [ 461.090281][T15781] do_syscall_64+0xfa/0x3b0 [ 461.094793][T15781] ? lockdep_hardirqs_on+0x9c/0x150 [ 461.099991][T15781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.106058][T15781] ? clear_bhb_loop+0x60/0xb0 [ 461.110741][T15781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.116636][T15781] RIP: 0033:0x7ff400f1b6c5 [ 461.121064][T15781] Code: Unable to access opcode bytes at 0x7ff400f1b69b. [ 461.128072][T15781] RSP: 002b:00007ffcff1140a8 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 [ 461.136489][T15781] RAX: ffffffffffffffda RBX: 00007ff40101cfe8 RCX: 00007ff400f1b6c5 [ 461.144464][T15781] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000 [ 461.152438][T15781] RBP: 0000000000000001 R08: 00007ffcff114038 R09: 0000000000000000 [ 461.160412][T15781] R10: 00007ffcff113ed0 R11: 0000000000000206 R12: 0000000000000000 [ 461.168382][T15781] R13: 0000000000000000 R14: 00007ff40101b680 R15: 00007ff40101d000 [ 461.176364][T15781] [ 461.179397][T15781] Modules linked in: [ 461.186485][T15781] ---[ end trace 0000000000000000 ]--- [ 461.193824][T15781] RIP: 0010:percpu_ref_get_many+0x8d/0x140 [ 461.199675][T15781] Code: 01 48 c7 c7 00 4b 98 8b be 4b 03 00 00 48 c7 c2 40 4b 98 8b e8 54 bd 71 ff 49 bc 00 00 00 00 00 fc ff df 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 14 4c f7 ff 49 8b 07 a8 03 75 62 [ 461.219781][T15781] RSP: 0018:ffffc900044476f8 EFLAGS: 00010206 [ 461.225914][T15781] RAX: 000000001fffa000 RBX: ffffffff822bc8e9 RCX: c3dbc6a869edce00 [ 461.233943][T15781] RDX: 0000000000000000 RSI: ffffffff8be332e0 RDI: ffffffff8be332a0 [ 461.241936][T15781] RBP: 0000000000000078 R08: 0000000000000000 R09: ffffffff822bc8e9 [ 461.250311][T15781] R10: dffffc0000000000 R11: fffffbfff1f46f87 R12: dffffc0000000000 [ 461.258341][T15781] R13: ffff8880b863b540 R14: 0000000000000001 R15: 00000000fffd0000 [ 461.266366][T15781] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 461.276435][T15781] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 461.283881][T15781] CR2: 0000001b30a23ffc CR3: 000000000df36000 CR4: 00000000003526f0 [ 461.291887][T15781] Kernel panic - not syncing: Fatal exception [ 461.298252][T15781] Kernel Offset: disabled [ 461.302576][T15781] Rebooting in 86400 seconds..