Extracting prog: 1h37m54.317857614s Minimizing prog: 54m22.26538369s Simplifying prog options: 10m49.942714666s Extracting C: 2m58.26569158s Simplifying C: 0s extracting reproducer from 31 programs testing a last program of every proc single: executing 6 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-bpf$PROG_LOAD-ioctl$sock_inet_SIOCSIFFLAGS-socket$nl_route-socket$inet_udp-socket$inet_udp-socket$nl_route-sendmsg$nl_route_sched-sendmsg$nl_route detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc8, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x2}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r2}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r3}]}}}]}, 0x40}}, 0x0) program crashed: lost connection to test machine suppressed program crash: lost connection to test machine testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$nl_generic-bpf$BPF_BTF_LOAD-bpf$BPF_BTF_LOAD-bpf$PROG_LOAD-socket$kcm-socket$alg-socket$inet_mptcp-bind$inet-setsockopt$sock_int-socket-ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL-recvfrom$l2tp6-bind$802154_dgram-syz_genetlink_get_family_id$tipc-sendmsg$kcm-syz_genetlink_get_family_id$netlbl_cipso-sendmsg$inet-ioctl$sock_SIOCGIFINDEX_80211-socketpair$unix-sendmsg$inet-recvmsg$unix-close-socket$inet6-openat$tun-sendmsg$NLBL_CIPSOV4_C_LIST detailed listing: executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/55, 0xe3, 0x37, 0x1, 0x8}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum={0x3}]}, {0x0, [0x0, 0x0, 0x61, 0x5f]}}, 0x0, 0x2a}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x179, 0x11, 0x100000, 0x10}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000001dc0)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, r1}, 0x94) socket$kcm(0x10, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000000200)=0xb, 0x4) r3 = socket(0x28, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x0, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @private}}}}) recvfrom$l2tp6(r3, &(0x7f0000000380)=""/122, 0x7a, 0x10021, &(0x7f0000000440)={0xa, 0x0, 0x0, @empty}, 0x20) bind$802154_dgram(r3, &(0x7f0000000540)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r3) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600180003600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0800089e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}, 0x0) close(0x3) socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2aaf41, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-bpf$PROG_LOAD-ioctl$sock_inet_SIOCSIFFLAGS-socket$nl_route-socket$inet_udp-socket$inet_udp-socket$nl_route-sendmsg$nl_route_sched-sendmsg$nl_route detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc8, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x2}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r2}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r3}]}}}]}, 0x40}}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$xdp-socket$inet6_udplite-setsockopt$XDP_RX_RING-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-setsockopt$inet_sctp6_SCTP_CONTEXT-socket$nl_generic-openat$ppp-ioctl$PPPIOCNEWUNIT-pwritev-bind$xdp-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-sendmsg$kcm-socket$nl_generic-sendmsg$inet-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-sendmmsg$alg-recvmsg-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_FRAME detailed listing: executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="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", 0x12a}], 0x1, 0x80000001, 0x4dc7a87d) bind$xdp(r0, &(0x7f0000000300)={0x2c, 0x2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781b800c423ace69c1eba8d0c505baa2acd", 0x2d}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240ba45b930936aecd07ff84b35954a5a75c1ba4252e11ab09ebfa468f58829bb24aebceb96a9d4a5a856abe6aed", 0x50}], 0x1}, 0x20048050) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_ethernet-accept$packet-getsockname$packet-socket-ioctl$sock_inet_SIOCSARP-sendto$packet detailed listing: executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd68e4177f0028890020010000000000000000000000000001ff020000000000000000000000000001bd4fb9e9cbae6d1c21edd9ff38ebd97386806c27d875482109e2185d6f15c9ee51b342066e552bceaeff0a8d91755bf3714f9ed4805225843ab355a24af746bf214e111b50ee0256ae78725d248e07ac31710d22e3f61ec096cf6cd53f74a3db1e86f1b9028bbc91e76cc679ceec98cf385c0b0b4a996d3eb1dedf5e58785934b30c9903396280db5f4037ee2fa008b4f134f6740d1e9a2e9b74bbd49bb2b9c67649c8435c"], 0x0) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14) getsockname$packet(r0, &(0x7f0000000200), &(0x7f0000000240)=0x14) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @rand_addr=0x64010100}, {0x1, @multicast}, 0x0, {0x2, 0x4e23, @private=0xa010100}, 'xfrm0\x00'}) sendto$packet(r0, &(0x7f0000000080)="01a156ef9113b8600f20bc15551240df41d625d1", 0x14, 0x4000, &(0x7f00000000c0)={0x11, 0x4, 0x0, 0x1, 0x6, 0x6, @broadcast}, 0x14) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-openat$tun-ioctl$TUNSETIFF-openat$tun-close-socket$nl_generic-syz_genetlink_get_family_id$tipc-sendmsg$TIPC_CMD_ENABLE_BEARER-ioctl$SIOCSIFHWADDR-writev-recvmmsg detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) (async) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000007c0)=""/143, 0x8f}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/97, 0x61}, {&(0x7f00000000c0)=""/75, 0x4b}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f0000000440)=""/67, 0x43}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0xa}], 0x8, 0x0, 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 31 programs with base timeout 6m0s testing program (duration=6m7s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 10, 22, 5, 3, 6, 9, 11, 10, 12, 5, 21, 16, 19, 30, 18, 30, 13, 16, 12, 11, 30, 12, 6, 23, 30, 18, 10, 9, 25, 9] detailed listing: executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000002000000000000000000000f0300000063d038000000000000000f01000000de0100"], 0x0, 0x36}, 0x28) r0 = socket(0xa, 0x3, 0x4) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r1, 0x104, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030404000000fedbff2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062800000006500001400028005002500000000000500260000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32, @ANYBLOB="080001"], 0x48}}, 0x0) sendmmsg$inet(r1, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x46054) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xb1c0b87368371fa3}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_getaddr={0x58, 0x16, 0x100, 0x70bd25, 0x25dfdbff, {0xa, 0x40, 0x2, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x8}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x6000011) executing program 1: r0 = socket(0xa, 0x3, 0x4) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x2, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) (async) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x3ff, 0x0, 0x1, 0x216, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x0, 0x1, 0x2, 0xffff, {{0x36, 0x4, 0x1, 0xa, 0xd8, 0x65, 0x0, 0x1, 0x29, 0x0, @rand_addr=0x64010102, @remote, {[@lsrr={0x83, 0x23, 0x4f, [@empty, @multicast2, @empty, @remote, @dev={0xac, 0x14, 0x14, 0x33}, @empty, @dev={0xac, 0x14, 0x14, 0x10}, @remote]}, @cipso={0x86, 0x41, 0x3, [{0x6, 0x11, "946281afd7e1523f9d3dae9ae7eb6a"}, {0x6, 0x2}, {0x5, 0xa, "ca27067ece75e3be"}, {0x6, 0xb, "e761d93fd09f92b542"}, {0x2, 0xf, "e91c4717bd682cfda232e444e6"}, {0x0, 0x4, "8662"}]}, @lsrr={0x83, 0x23, 0x3d, [@multicast2, @empty, @broadcast, @rand_addr=0x64010101, @empty, @multicast1, @remote, @remote]}, @timestamp={0x44, 0x1c, 0x4a, 0x0, 0x4, [0xfffffff1, 0x7, 0x10000, 0x8, 0x7, 0x0]}, @ssrr={0x89, 0x1f, 0x9e, [@remote, @private=0xa010101, @local, @private=0xa010102, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}]}}}}}) (async) ioctl$int_in(r3, 0x5421, &(0x7f00000008c0)=0xc44) (async) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%pS \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x27, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x80000000}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0xc43, 0x0, 0x0, 0x40f00, 0x1, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000280)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x7, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000740)=[r7, r8, r9], &(0x7f0000000780)=[{0x2, 0x3, 0x7}, {0x3, 0x4, 0xc, 0x2}, {0x2, 0x1}, {0x4, 0x3, 0x1, 0x3}, {0x0, 0x4, 0xc, 0x1}, {0x5, 0x5, 0x3, 0x3}], 0x10, 0xc}, 0x94) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200", 0x5e, 0x0, 0x0, 0x0) (async) r10 = socket$xdp(0x2c, 0x3, 0x0) (async) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x8910, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x80, 0x7, 0x800, 0x6, {{0x5, 0x4, 0x0, 0x38, 0x14, 0x66, 0x0, 0x0, 0x2f, 0x0, @remote, @rand_addr=0x64010102}}}}) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x800, 0x0, 0x7}, 0x20) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x40, r1, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x1f, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1}, {0xd4}, @device_b, @device_a, @initial, {0x6, 0x8}}, @smps={0x7, 0x1, {0x0, 0x1}}}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x2404c001}, 0x40084) (fail_nth: 9) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x1c, 0x0, 0x0, @pid=r1}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c5060000000000000000000000000002a0bae5dc2f1d3e644d6501c56b33b57b"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x625}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000080000000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0280000020040000"], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c5060000000000000000000000000002a0bae5dc2f1d3e644d6501c56b33b57b"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x625}, 0x94) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000080000000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0280000020040000"], 0x20}}, 0x0) (async) executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f00000008c0)=ANY=[@ANYRESDEC=0x0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xbb, &(0x7f000000cf3d)=""/187, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x3c, r0, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48002080}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, r2, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x43}}, @GTPA_FAMILY={0x5, 0xd, 0xa}, @GTPA_I_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) executing program 0: r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), r2) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="871e1e0f", @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf250c0000000800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40008810}, 0x400c800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_EMATCHES={0x34, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x68}}, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) executing program 2: unshare(0x22020400) r0 = socket(0x9, 0x6, 0xa) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10000000}, 0x1c) listen(r1, 0x0) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, 0x0, 0x900}, 0x10) executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0x104, r0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4a84}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x20}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x326}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8}]]}, 0x104}, 0x1, 0x0, 0x0, 0x8080}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8b37, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f00000004c0)={{0x2, 0x0, @empty}, {0x0, @local}, 0x2c, {0x2, 0x0, @empty}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001400000000108000240000000090500030000000000140001800a0001007265646972000000040002800900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x5090}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x34, r0, 0x1, 0x70bd26, 0xfffffffc, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x74}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x7, 0x8]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000004a00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003e0007012dbd7000fcdbdf25047c0000040000001400018006000600800a000008000900", @ANYRES32=0x0, @ANYBLOB="4153eaebd0448de2a47cc6be9e37ff4fdf1a7426dbc9878130896bc2d61b5e61b8d5152a83dac0b219802abe4c2b342a4f8b370ae01a78c16463b6b9a16311e086b2fe395eeb963f7f6e315324771e471005198a1192d3b6c87e872aacb7e271436828dc4ade635432395d8ec8f7e1dcbc1ea9074d0230f6"], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}]}}]}, 0x45c}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=0x1, 0xffffffffffffffff, 0x22, 0x2004}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0xfe, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x2, @loopback, @loopback}}}}}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='mm_lru_insertion\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r8, &(0x7f0000000180), 0x40010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180090001006c617374000000000400028010001280090001006c61737400000000080003400000011014"], 0xb4}}, 0x20050800) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001d40)="d8750288189987d0fabb09b23867772c615b8004f5071a7715f73be32aea3bb1ecc3e0814fb9b752a6d48b1d4d68a4282f76c2c6535ec3ec0fe9843311", 0x3d}], 0x1}], 0x1, 0x40) recvmmsg(r2, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/96, 0x7}, {&(0x7f0000000940)=""/53, 0x35}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0000000400007024f6321af63a2ccb4308002395bde09d5eb0890000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000500"/28], 0x48) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x76, @fixed, 0x0, 0x2}, 0xe) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b0027"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) socketpair(0x28, 0x5, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0xa002a0, 0xd, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905", &(0x7f0000000040)=""/24, 0x6414}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r2, &(0x7f0000000840)=[{&(0x7f0000000880)="80fd02000000", 0x6}], 0x1, 0xfffffffc, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x557081, 0x100408) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) getsockopt$sock_timeval(r0, 0x1, 0x49, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073014a00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48) executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) (rerun: 32) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r2}, 0xc) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x10, 0x80, 0x0, 0x7f, {{0x2a, 0x4, 0x0, 0x8, 0xa8, 0x68, 0x0, 0x6, 0x29, 0x0, @loopback, @broadcast, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x1b, 0xa7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010102, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @end, @timestamp_prespec={0x44, 0x14, 0x3e, 0x3, 0x2, [{@private=0xa010101, 0x8}, {@broadcast, 0x5}]}, @ssrr={0x89, 0x23, 0x73, [@multicast1, @loopback, @broadcast, @broadcast, @rand_addr=0x64010100, @rand_addr=0x64010101, @remote, @broadcast]}, @rr={0x7, 0x27, 0x41, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xc}, @private=0xa010101, @remote, @local, @loopback, @local, @loopback]}, @ssrr={0x89, 0x13, 0x1c, [@loopback, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2b}, @multicast2]}]}}}}}) (async) r4 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x807, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000000000000100000000000001010"}}}]}, 0x48}}, 0x0) (async) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2c}, 0x78, r8}) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x0, 0x5, 0x2f, 0xd, 0x8, @mcast1, @dev={0xfe, 0x80, '\x00', 0x38}, 0x80, 0x10, 0x4, 0x101}}) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000780)={'ip6gre0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x4, 0xf9, 0x4, 0x3, 0x22, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, @mcast2, 0x8000, 0x7800, 0x7, 0x9}}) (async) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async, rerun: 32) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (rerun: 32) sendmsg$nl_route_sched(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xfffffffe, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) (async) bind$packet(r11, &(0x7f0000000040)={0x11, 0x0, r14, 0x1, 0x0, 0x6, @remote}, 0x14) (async) r15 = socket(0x10, 0x3, 0x0) r16 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) (async) sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r17, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000007c0)=ANY=[@ANYBLOB="58020000", @ANYRES16=r1, @ANYBLOB="20002bbd7000fedbdf25190000004c000180080003000500000008000100", @ANYRES32=0x0, @ANYBLOB="14000200767863616e31000000000000000000000800030002000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="18000180140002006d6163767461703000090000000000201400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="6c000180140002006361696630000000000000000000000014000200776c616e30000000000000000000000014000200766972745f776966693000000000000014000200766574683100000000000000000000000800030002000000080003000400000008000300010000007c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000080003000100000014000200776c616e3100000000000000000000001400020076657468305f746f5f687372000000001400020074756e6c30000000000000000000000008000100", @ANYRES32=r2, @ANYBLOB="14000200697036746e6c300000000000000000004400018008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="14000200776731000000000000000000000000001400020073797a5f74756e00000000000000000008000300020000003800018008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="080003000000000014000200766972745f77696669300000000000005c0001800800030000000000140002007767310000000000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="0800030001000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="140002006772653000000000000000000000000008000100", @ANYRES32=r14, @ANYBLOB="0c00018008000100", @ANYRES32=r17, @ANYBLOB], 0x258}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3c, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}, {0x3}, 0x0, 0x0, 0x1}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in6=@mcast2, 0xffffffff}, {{@in6=@remote, 0x4d4, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3, 0x0, 0x0, 0x81}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast1, 0x0, 0x6d}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x23c}}, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xb8}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) (async) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) executing program 1: r0 = socket(0x15, 0x5, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0x200000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", "122000"}, 0x28) (async) recvfrom$inet6(r1, &(0x7f0000000040)=""/38, 0x26, 0x122, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000440)="83", 0x1, 0x4000, 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "2000a200009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) (async) recvfrom$inet6(r1, &(0x7f0000000300)=""/19, 0x13, 0x4001a060, 0x0, 0x0) (async, rerun: 64) getsockopt(r0, 0x200000000114, 0x3, 0x0, &(0x7f0000000000)) (rerun: 64) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000001080), 0x4) sendmsg$kcm(r2, &(0x7f00000001c0)={&(0x7f0000000540)=@phonet={0x23, 0x0, 0x0, 0xf}, 0xa, &(0x7f00000002c0)=[{&(0x7f0000000500)="270502001a0014000600002fb96dbcf706e1bd24161288a8070088a80100", 0x1e}, {&(0x7f00000004c0)="724260452eca7f662c", 0x9}, {&(0x7f0000003600)="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", 0xd00}], 0x3}, 0x200008d4) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000010c0)=@newtaction={0x1070, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x105c, 0x1, [@m_ctinfo={0x1058, 0x11, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2d5}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}]}, {0x1004, 0x6, "3af2f08774b1a31c62d1789355743c310735e89ea56c4a591453f0e237979fddf75f18fe56e320dc0eb7a2d96ddaba3d39ab3845a04ffefd4cdeba9333c2ffb0acfa82255e6bb6afa752b01b40b5fea70e52910775a66d93e568a7692127ecfa685dd60f36dff88ecded759dcbeba8904f82cc3d5103ef57843bfd0a9ce57bca5090b42e4e781afd9e03755bea0c73fcd2fa51cae744d1e7c5cbf93167c5d4065361a891ca7668e85a951a391eaa589f62d90c0f2519f5339715c310e25797087be5a2a8542fa3561aaea68dbb5a2518b16757717e95e0bd94226a22231fdb4c21a736153e15e18e2479f3eba65f9af0c2b9af393220995b8d56d45f12ec10e1475b58cba2e318364457597309a377bfbc372abb38dbf9321c919f3b0f41ae79126078d82c3c165a50a528e876ad904f0286ae903b5d992f0983aac4138a6ca51df7dea17e0cec3271a3ceaee5e464dbd307f8074614a0387d6bda8421cc900183a22ff6636db1651a278457b920f6528e7425dafa89e320fcb6a9659b718724c9f5c1b90bb3df3b8a79537c62e2aeb1c5aa7ff26f1d4217a9658a580e28f4e06a3a27e2f5711284072dff54298654cbfba85ecc4bac390b50e84e82c7d37f5a0eb8fe31b42e72c946ee1e11b8089d48842b5b39c529e0e228125a807b253828b35a7f960d8f050a88ee238e537b92ca429be4aa5e293115719b46b2a62b567072cf221267c121bb50b290398ec8f899a8183fa415614db7e1560b3b3d44f463b340dd1f01e18e9593520aa4519a3a572efd3b5500e65d524a937e920887298f2194779eec0a33fd256251d32ab47ee6637099841e200c05b3ef06d64174ee9fcdc48f6cb9e9310209f6ff2ff95dfe98366c40d563adc6c5b90a09bbef59fdedb1a6727bbd1b66f1d79e90164055afc0cf023b61080ab12c1a440c863e61935bac48d0dd5d26cdea695981cb0d0ccf0332fb419d896304f8edae96207b1681bd29d1b894ac443a07f9c6851a6e7063cedddbf64f35a385f60443f9baf734d3edd83959aab1e0277fe69e6e448cee220b23042566dadf76cad6811f8b542881e52ceb2cae20c6118bab8cd4645cfecbb9497edf472c5cf4b9d113c3729126d0737e4bc093d4b8b8676688e3c796635ca5cb0ab15cb5e29f22b7fe742dc42de75cff65127a6be27482cc3e7f25f2a378ec48d1cea9be8566c054f9c163bf3b95c541bb3c3b673756505c0d62107ab833aad7f880c747b31c4d94a9310e70a8d710f9af456d117a07176ae1f380697fa900745f37add9574a6f748163a3a1adfbccb7ada3b96ef43c22d0e8f3f26ba33c6762a44f17f2fe5e4a5643dda3989e0d53a562f2a50a3ac91e207105504071690f314facb31e8f6537bda22b218bf5942dc49e94020315df107058c05b9da6e69998582bc9c8f4f7d0e571f67c6c81cf8c454be71ad8ed647ef7d5d64912a8f47d8e8ab7785b5ad26274fa0f9c37dc59d97148b093769f253aa8ef257c7b2e6e559fda8586bdb49be079c0085fedce8b0fff4aa1beebbbed2711db8dc8a956f729f7e31070a39cf8e61d12f026504814eabb6be3356ae040b773e433502cb8d43edd815f529db5ee37a76848a0546e1ce7eab41782a9d548b09f9e4d83a8abff050d350445546fcc52aae974fc07920eca94ebfe23b80c5570d1c6548d5720935e3c5031c1da7bf9f012d6bf35665942092bf1100801240068405573d701963744bfe6375552d1ff82292a2cf4a93e5f1ab5a4cb6ace84803cd54eb96c763bb6632fff009d0cb441f9557ddffebc300192e1693689ef95de6029663c04883c84018887e8707ddce6512c8ef6525f93661e4e471f63bd9561cc28f9147d0d9bab36b56898e536fb952a7ea1aa1cb04f1c478ff8843666e434827fe805944d0fd9af1424b17b9e6285c3a93167e1f02a3c231424913037b528a372f2764d241b025d699bb210915e9a12ca3657c476fc2c528a9e15330b561c54c08b2fdf03b014e7f29c11cd6548f800ae13cc11b08f07ff6b20af7028c9f198902a0e66a0807f579b6295bda81fcda96a922913c8ede6d419798c99f930cc56fd74e739ee9a041a02acb958bc1d7194117264e480d8a630f3045448cf5ae96a641daa9574523ed37aec51a4c119f3f5bd38f15b1971076d11d3b96f9148d711e1486f4aa2f9976436318028884ee035a40709d5a3958f2a637a2cf3ab46fb06c232de37c4c9a2986dfbfa3df322cd1f6e541aa073a2c86fd54a6a9bfa160c06823efc47c396e8b5a0bac24d2b5eb519f3756471161d9b1ffafb3f896902e07d997f7a798ae5a7cbadcc9cec8b0a179c9e828fae297df573a6192e28afb7994201efb3d3f3e452cb2c0f25d2e8a6379615c8ea1dad8fc01332935bfd88526f0adc3bdb7568a7b9fee27b91530d20af0eab80505fafb46a3bc27f97009de9d6418e9de255cb9c2cc45578cb2a4ee76873be45153ba80a81efce192e622e04cd11325ef60c9080deb465f74aa8b79cac9454d81ab128831dd3bf790f0ab11689c5bb12c6497baccf44be439593ea8b39e9e8a17ed6a3e503c356473a814c88b6218b18df0a6bdad94f109bd07ec5aac92530ef27887523e4573c3865c9c2735fa26d28c091db2906f86fd5e776503b0f6183613db977c429ca1ed644b1e30abede7f307aecae9a1e23a6e26cbc664f540d0c8fd2da0cf003f612cc305a82ecd64096b3ff9c49d4b4aadc3efe652444e117e3ab0c64220f2ce1c4b1468cb71c28b67e1a5d382c873ed438e30ff95f0d16183b431dcc9fa4cbcd2374acc80935c4220022cd757ab112d3d6758f295f37fba078e6625952f8efb6626bacd6806b3c28feee2519ecbcf2748be0e693aa26057c25ff70a69c977f49d415687271a9353cbe633fbb31a7dbb9355436b8297fc0f458e5258e366181e9be4bdc8ec4b7e1365ecfda6c71a8ff056f0f9ff69ebe1dc794effc5fe2120acc5365e4a0d9ae152d43da859bdbb4f75e448edd26e3b6691cdb5e83d903e39717cc294578bf274df1aaf3acdfb30e2960fc9effcc00c33f63e689051e823dc4829ed2d6170361561640eac696a3ae8871f10d0a237d4f0b4594b153733e124489f446d9f87b304b6455e0f2cffb0bc4cc9c86fe71ea6c351c2ce38c7355c7a638d0786d78fc408baf98b6bca7b2476f789ac06137d321d163a58fd0f7f27025b8ec049d3ee0f879fd902bb9553da4c31cc6883d947db70252f1e80bd2a8add02507e6dd6fe61a31e1b70174d84e569661c46569759321b7e0bd0fc2ee6f9ce29d38cd54d3a200c04f913a3bf12b6325d76189762b762c2aa07c740b8277f397ce1f9e71cdfb6ccf50268afc8cdfc1c670c49e0d9c3c854269065d8cad1ff887b6d853988e3d6c7b242fa1a7ff85d328555a61bc2f03f811359228c950c4b7d17fa737204c55b6e5ca7bc59370f85c8cd51d6e519cc2cc87860567733cba8706c5aa56d7cc97dcf2796d54422f9c450bb35fdbbd29348a92cec5929a6a9424d5e3a3e138e17ba94bb54ca6cf3a0d73eb4d1b3c34d3c8504e973f6a91c997b53e8245ca1ae323a9616816a42c1acba71b01f7ea6ac283c20f5da89c8fdc656a8687cd0c15f5b0a66e806c4e20375ae781080816e03d7dfc336c24d5ce147d1924b9d6702e72aa5844b8038b843d9f826fb913c8f7b30b9da03835f4938ee91b1a88420e60f696b355298ea18df73e696723ae06321cf400e8f54f963098245e0a9b862c117f4572c201cc4518be55fab1bd0b0e0cc20dfe61d30a5530de6106bce6a137ef80e7e52e6f046d943af8c4bc408e472ebf0a737e79b9782576830328e03a010e2a4ad7faca618a034ef1b2e64a53877dba8200f9cdd7f12e4613335cd7dca4547c51817c3cc172724e78be84d282a2ad38a5ba0c323e51c45277d2f68920f25438351e678e820601357820272f8f4fed98332feef6196a176b2d0f311048d0e3e6f2cf26653e9b6c8be72a37220ecc7dff61e5c29a63f8c176ff01205280768fdd7d08accb23e17c805bec91be7937a701937cbbe948d48376adc43a5cbeb107d7ac859a3164ef49d133ad37e0117fa2deae980546119a7435a40e8f6e098b75183625e2a0f6c46f7eefbbc0cf01efa1a4a1fc5380108f33885a3898ea8b60e2aec2ce4df20e45465c4287de1e70176266ad1185abe40ff00b2d9092dcde0015292cdac4a404b50404384a73ed7e489e4bb08d410028ed3822467969be9eec15bb27fd25286f7ff1b3193b89b73999d4587562b60e648bc237054a3d2c09a2ee03ef8a8588f7d2c2bdae04a814f7728e1605bca46df6f542bcbc7ee5d186661b847526a85c4a5c9ab4b039c390eb05fa1771859decf8d90501afbc0dda0346aef8a9ad9a0f413333cfe9ea4e3b8eb549572dcca0eb36b4ab1436996ed788941bcaabf5e4d18e74ef4e1ec9c6314728738b9abbe243cef3ccae3cb93505ed267552841c19729532d2ce1d26179885eac9f21569920775c4d8ec981375973f30614cfce5b5560b94ccd30acaf1abb38213ed4c630683e6a2d430775c0f202cd00ef919033a134c71072f7594b341e2101c092a14cf133a344e296342e5f9198fc7e3be728e0e4641ac8e1df83774cdaaae23b988d12f7da05e52bad5222bee281abb3da3d2ba7cf8c5bafbc28bcc733762f8766d043e001c4845c0d6e4e316069cd9eeff8705f8f943346fa3c8395904219e856ef47f4e79a2ade70d11a03540814b98edc15f5e6a277dbf348e8f7cb17f54b3b6dfd9610585aba2e0746e2ee3ed7e75955a22f138e923355dc9fe26762c4ff99aebfe3ba6e01c5e4fd90e022a0f665ac02021de3a7fb3d973db43d26a26d63846b67d6b56a8d1cf3d78980e14c746fac235b5e8f24433d82ad1efcee732f5c8b7cffd2a8e0b7a974527af5cbb5abf72e6946b73307407deaf3c21a0ceaebd911e4a4caec0a7ab3e0403bdcd5729532f0db5c5d7a9b33de52411e7e8bb3469e011f29f9d79c907c6b5e3c2d4af5971f1077bdf75c4fca0d998f49242508fc8cdc24eb6ca6c04f34a8e9e6acc89618ed33a1108f40421818f33c4632bb4524c672f00aff3301c89aed86267256fbf489baa9763ff3f2dbbe971c44a3a0998f6ae4ffc25eb20a12cc8fd6098326bb46edf383ed7ab23c334af4bf46ce0bcf9f23b1a02501734f5a6a11b2f506542fba175a2f6365ad55a905622e0c513fd4280ebf8ad19fae33c2e70e64ede8a8163cf84d356f7b09e2692bc1d79074e576bf5139bad6b6a94067acd47015a84e9b1deeaac895e721add29435d776ed8d046f47b552a625f3fdfb0c013b42a47152133d9ab90df7f808ec4d2559c88a7964a3fbcc2142b8ab0954b505abb51184a07314e9568fe33694dd4d1b8619644e89da5d4f88b618149f574fde9b921625149a8cb08d69b27d19b7988fdcf817ae8938ba2a24e4c3d432e85c3752dddf3f39710bff53d46f19fbe3982e54c2f11d49279d06cd915045e91e8910b9cb27354c5d59a810a781eb0db9def53c9d4cf94632bdce3773ef4f469830b942e0a727d96e7f2c320fa4a5b6964496a54885486e08010692145affc83429d67c215059549db6dac570c832161fb62ff76cb900ad5178563acb7fd3649c973308ca7ea3cd6e18a6dbd9fa453b73cd8974627d0b138ab78d5aac50452373c791c6c7a99e736a0b59c76089ddef3b8249b5787946dec59799028fb3628525e024aeeaa9c6fdd4501f177fd1dcee36e75224a8a384a40cfe91e92928d3ee3e419f968bd"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x1070}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x18, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001700000095", @ANYRES16=r0], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/time_for_children\x00') (async) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) (async) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000240)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r10], 0x1c}}, 0x0) (async, rerun: 64) write$nci(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="4024967c"], 0x4) (rerun: 64) write$nci(r6, &(0x7f0000000380)=ANY=[@ANYRES32=r7, @ANYRES32=r2], 0x9d) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc86a457991", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) executing program 3: r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f0000000a00)=0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000790028000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x401, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x8c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}]}]}, 0x8c}}, 0x0) r4 = socket(0x10, 0x3, 0xbffffffd) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001040)=ANY=[@ANYBLOB="20000000520001000000000000001b001c0000000c0001000200000000000000"], 0x20}}, 0x0) executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x14, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @mcast2}}}}}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000500)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2002}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0xfd, 0x85, 0x0, 0x2, 0x4, 0x2, 0x0, 0xf, 0x5}, 0xe) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}, {0x95, 0x0, 0x6000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a200000001d0a05090001cc73797a3000000000140000001100010000000000000000000300000a00000000000000000000000000db5b5824627fa0e30ffba65c"], 0x48}}, 0x20000000) executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8}, 0x18) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="ffff0000d4211ceb21b7764917bb94a0940784eb79589e01079a6ec85b26f06f620b92c8b1438998565a844b8592842b001eb034ac32543a39100ab92d59a3235319236e3f82b308bb3de0ad2f9bdb4540408e37e15dc2771135a933e6770619a4e8554bb4336b44e1a562a14a407c29b47be5807d0fe1842860659b05a8e16dd40a3573a51eb3ce5f1466ae279d2709da891358608474d1770ec02feab0a16f"], 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710441000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x969c}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000140)={r1, 0xb5cb, 0x20, 0x2, 0x7fffffff}, &(0x7f0000000240)=0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@ipv4_newroute={0x3c, 0x18, 0x2, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14}}]}, 0x3c}}, 0x0) executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000180)={0x40, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x40}}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x6c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r6, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2d8, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x50) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x65, &(0x7f0000000140)=0x23, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f0000000180)="5abf1b75d26aec640e4778aa815a382f96336378e4903e3fb73e9903bca9c57db1313be076bbf737ceabfdcc36e49f35e13ac7020fdcd5870c4c3f99cfb6fab0ce39fab9e41c3270", &(0x7f0000000200)=@tcp6=r4, 0x2}, 0x20) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000280)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x201) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xcf3c, 0x0, 0x0, 0x0, 0x2}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x1b, &(0x7f0000000340)=""/27, 0x41000, 0x15, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000003c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x3, 0x9, 0x400}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r6, r2, r2, r2, r2, r2, r7], 0x0, 0x10, 0x5}, 0x94) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r9, 0x65, 0x3, &(0x7f00000006c0), 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000780)={0x0, @remote, @multicast2}, &(0x7f00000007c0)=0xc) sendmsg$MPTCP_PM_CMD_GET_ADDR(r10, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x50, r11, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xccd1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x850}, 0x28008081) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000900), 0x121000, 0x0) ioctl$PPPIOCGDEBUG(r13, 0x80047441, &(0x7f0000000940)) sendmsg$AUDIT_GET_FEATURE(r13, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x10, 0x3fb, 0x100, 0x70bd28, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f0000000a80)={{{@in=@initdev, @in=@initdev}}, {{@in6=@loopback}, 0x0, @in6=@private0}}, &(0x7f0000000b80)=0xe8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e00)={r8, 0x0, 0xdb, 0x62, &(0x7f0000000bc0)="4c8506011e13c1ab9701c18815fd16d81f47d631e81651a8dcc9686b072335eb0c35b18e46254631890b0c495936939a60155789d4a955079e23dada5d5025ee21e1211f55929336762d5943c6aa0bf4e24043139495e724596fbdaf59cf30c6d32ad7d954a7e9697a2b05cbb7cd640005674d96cda7735366360bc74b8fc60f795330831340df3091314a90a1beeaf0e9cac5c0ad9b9734b57d1eec36f76f40668c745ff1096cfe0cc89911bf88aa5a199b9c54788e181f59fadf089d9ceb902a458c23eaeec2988d0590775abc8c12d184fe0904ec2fe59d8080", &(0x7f0000000cc0)=""/98, 0x4, 0x0, 0x35, 0x75, &(0x7f0000000d40)="44a900a961acb02b0ac7e6c98b3da267107e5356ddb5e049c7d2b72075d6fda9f9f525bda86addda84267ec8c2c64eb01a1f440f5a", &(0x7f0000000d80)="66a8745b01185184f39a6a84c039eec218423cb3a426cb08686872d7a27e683d2bc5cc5bf154d5ccb076388cec63a54294174b84bb83619571bd8b4d2a2f9ad612a1b42a5f08a6de247ef3f36729d7b3dec04cf421317c5ed3dd7cbe4aad363d2c6cfab8a55ff8a5698061435021fdce8dac7b7370", 0x5, 0x0, 0xa}, 0x50) pwritev(r3, &(0x7f0000000f00)=[{&(0x7f0000000e80)="29530c8694f9c198f2b042e75b859ddc093d20bb903c1ce2e078c8e0167048458b00f41ea1487fd3dee54e0ea96bd8d15a3249b088c816fd5e636d1c950c174406df749696d57b34f380d145fb1950434021d0742af2604bbcf9b59e8de55e", 0x5f}], 0x1, 0x7, 0x9) r14 = accept$inet(r0, 0x0, &(0x7f0000000f40)) setsockopt$inet_sctp_SCTP_INITMSG(r14, 0x84, 0x2, &(0x7f0000000f80)={0x1, 0x5, 0x2, 0xfff}, 0x8) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000fc0)={0x0, 0x2, 0x7f, 0x200}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000001040)={'netdevsim0\x00'}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) (async) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000007c0)=""/143, 0x8f}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/97, 0x61}, {&(0x7f00000000c0)=""/75, 0x4b}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f0000000440)=""/67, 0x43}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0xa}], 0x8, 0x0, 0x0) executing program 1: syz_emit_ethernet(0x5e, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd68e4177f0028890020010000000000000000000000000001ff020000000000000000000000000001bd4fb9e9cbae6d1c21edd9ff38ebd97386806c27d875482109e2185d6f15c9ee51b342066e552bceaeff0a8d91755bf3714f9ed4805225843ab355a24af746bf214e111b50ee0256ae78725d248e07ac31710d22e3f61ec096cf6cd53f74a3db1e86f1b9028bbc91e76cc679ceec98cf385c0b0b4a996d3eb1dedf5e58785934b30c9903396280db5f4037ee2fa008b4f134f6740d1e9a2e9b74bbd49bb2b9c67649c8435c"], 0x0) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14) getsockname$packet(r0, &(0x7f0000000200), &(0x7f0000000240)=0x14) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @rand_addr=0x64010100}, {0x1, @multicast}, 0x0, {0x2, 0x4e23, @private=0xa010100}, 'xfrm0\x00'}) sendto$packet(r0, &(0x7f0000000080)="01a156ef9113b8600f20bc15551240df41d625d1", 0x14, 0x4000, &(0x7f00000000c0)={0x11, 0x4, 0x0, 0x1, 0x6, 0x6, @broadcast}, 0x14) executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="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", 0x12a}], 0x1, 0x80000001, 0x4dc7a87d) bind$xdp(r0, &(0x7f0000000300)={0x2c, 0x2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781b800c423ace69c1eba8d0c505baa2acd", 0x2d}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240ba45b930936aecd07ff84b35954a5a75c1ba4252e11ab09ebfa468f58829bb24aebceb96a9d4a5a856abe6aed", 0x50}], 0x1}, 0x20048050) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000001a40)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0x1, @private0, 0x3}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6119aedd5) (async) shutdown(r3, 0x1) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000140)={0x1000, 0xb88, 0x2, 0x8, 0x5, 0xbad, 0x9, 0x7f}, 0x20) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r2, 0x403, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x32f6a000) (async) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r7, 0x0) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r7, 0xd1383000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0x0) (async) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r8, 0x1000) (async) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0xfffff000) (async) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r6, 0x0) (async) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r6, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r9, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r5, 0x2000) (async) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x521041, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400e0000", @ANYBLOB="cf0400000000000000001300", @ANYBLOB="0400130006001200000000000600b500850100000a0006"], 0x40}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f00f9ffff7f00000000000001"], 0x114}], 0x1}, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb4}}, &(0x7f0000000000)='GPL\x00'}, 0x90) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000140)='syz0\x00', 0x1ff) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x1) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x521041, 0x0) (async) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400e0000", @ANYBLOB="cf0400000000000000001300", @ANYBLOB="0400130006001200000000000600b500850100000a0006"], 0x40}}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f00f9ffff7f00000000000001"], 0x114}], 0x1}, 0x0) (async) vmsplice(r0, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb4}}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) (async) mkdirat$cgroup(r2, &(0x7f0000000140)='syz0\x00', 0x1ff) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x1) (async) executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05050000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a3000000000340000001c0a010100000000000000000100000008000940000000000900020073797a323a0000000900010073797a30"], 0xa8}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000140)="3836c332e5fd0b957b1a87012535b4a4e870", &(0x7f0000000280)=@udp6=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000640)="b4", &(0x7f0000000180)=@udp=r3}, 0x20) close(r3) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fbdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="981238d357278620d8f34e5c83ec6821addbb73de3893f18d0388e89cec27b5bacaa7d19eb3d49ddc7256ed0538fa087bc2c7a09000000000032d7a3bb1d205cc8002f7291c5271969af5f023951a28b74aeaeba3648263b5cf8a2c88483c30e72fe18da9ba2d55c9188d26bb490d5febea0f84e29d569aa04addbc711"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc8, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x2}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r2}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r3}]}}}]}, 0x40}}, 0x0) executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/55, 0xe3, 0x37, 0x1, 0x8}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum={0x3}]}, {0x0, [0x0, 0x0, 0x61, 0x5f]}}, 0x0, 0x2a}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x179, 0x11, 0x100000, 0x10}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000001dc0)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, r1}, 0x94) socket$kcm(0x10, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000000200)=0xb, 0x4) r3 = socket(0x28, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x0, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @private}}}}) recvfrom$l2tp6(r3, &(0x7f0000000380)=""/122, 0x7a, 0x10021, &(0x7f0000000440)={0xa, 0x0, 0x0, @empty}, 0x20) bind$802154_dgram(r3, &(0x7f0000000540)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r3) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600180003600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0800089e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}, 0x0) close(0x3) socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2aaf41, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) executing program 32: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc8, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x2}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r2}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r3}]}}}]}, 0x40}}, 0x0) program crashed: INFO: task hung in corrupted bisect: bisecting 31 programs bisect: split chunks (needed=false): <31> bisect: split chunk #0 of len 31 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=6m5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 16, 19, 30, 18, 30, 13, 16, 12, 11, 30, 12, 6, 23, 30, 18, 10, 9, 25, 9] detailed listing: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}]}}]}, 0x45c}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=0x1, 0xffffffffffffffff, 0x22, 0x2004}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0xfe, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x2, @loopback, @loopback}}}}}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='mm_lru_insertion\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r8, &(0x7f0000000180), 0x40010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180090001006c617374000000000400028010001280090001006c61737400000000080003400000011014"], 0xb4}}, 0x20050800) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001d40)="d8750288189987d0fabb09b23867772c615b8004f5071a7715f73be32aea3bb1ecc3e0814fb9b752a6d48b1d4d68a4282f76c2c6535ec3ec0fe9843311", 0x3d}], 0x1}], 0x1, 0x40) recvmmsg(r2, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/96, 0x7}, {&(0x7f0000000940)=""/53, 0x35}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0000000400007024f6321af63a2ccb4308002395bde09d5eb0890000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000500"/28], 0x48) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x76, @fixed, 0x0, 0x2}, 0xe) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b0027"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) socketpair(0x28, 0x5, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0xa002a0, 0xd, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905", &(0x7f0000000040)=""/24, 0x6414}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r2, &(0x7f0000000840)=[{&(0x7f0000000880)="80fd02000000", 0x6}], 0x1, 0xfffffffc, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x557081, 0x100408) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) getsockopt$sock_timeval(r0, 0x1, 0x49, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073014a00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48) executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) (rerun: 32) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r2}, 0xc) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x10, 0x80, 0x0, 0x7f, {{0x2a, 0x4, 0x0, 0x8, 0xa8, 0x68, 0x0, 0x6, 0x29, 0x0, @loopback, @broadcast, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x1b, 0xa7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010102, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @end, @timestamp_prespec={0x44, 0x14, 0x3e, 0x3, 0x2, [{@private=0xa010101, 0x8}, {@broadcast, 0x5}]}, @ssrr={0x89, 0x23, 0x73, [@multicast1, @loopback, @broadcast, @broadcast, @rand_addr=0x64010100, @rand_addr=0x64010101, @remote, @broadcast]}, @rr={0x7, 0x27, 0x41, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xc}, @private=0xa010101, @remote, @local, @loopback, @local, @loopback]}, @ssrr={0x89, 0x13, 0x1c, [@loopback, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2b}, @multicast2]}]}}}}}) (async) r4 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x807, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000000000000100000000000001010"}}}]}, 0x48}}, 0x0) (async) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2c}, 0x78, r8}) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x0, 0x5, 0x2f, 0xd, 0x8, @mcast1, @dev={0xfe, 0x80, '\x00', 0x38}, 0x80, 0x10, 0x4, 0x101}}) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000780)={'ip6gre0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x4, 0xf9, 0x4, 0x3, 0x22, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, @mcast2, 0x8000, 0x7800, 0x7, 0x9}}) (async) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async, rerun: 32) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (rerun: 32) sendmsg$nl_route_sched(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xfffffffe, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) (async) bind$packet(r11, &(0x7f0000000040)={0x11, 0x0, r14, 0x1, 0x0, 0x6, @remote}, 0x14) (async) r15 = socket(0x10, 0x3, 0x0) r16 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) (async) sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r17, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000007c0)=ANY=[@ANYBLOB="58020000", @ANYRES16=r1, @ANYBLOB="20002bbd7000fedbdf25190000004c000180080003000500000008000100", @ANYRES32=0x0, @ANYBLOB="14000200767863616e31000000000000000000000800030002000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="18000180140002006d6163767461703000090000000000201400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="6c000180140002006361696630000000000000000000000014000200776c616e30000000000000000000000014000200766972745f776966693000000000000014000200766574683100000000000000000000000800030002000000080003000400000008000300010000007c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000080003000100000014000200776c616e3100000000000000000000001400020076657468305f746f5f687372000000001400020074756e6c30000000000000000000000008000100", @ANYRES32=r2, @ANYBLOB="14000200697036746e6c300000000000000000004400018008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="14000200776731000000000000000000000000001400020073797a5f74756e00000000000000000008000300020000003800018008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="080003000000000014000200766972745f77696669300000000000005c0001800800030000000000140002007767310000000000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="0800030001000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="140002006772653000000000000000000000000008000100", @ANYRES32=r14, @ANYBLOB="0c00018008000100", @ANYRES32=r17, @ANYBLOB], 0x258}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3c, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}, {0x3}, 0x0, 0x0, 0x1}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in6=@mcast2, 0xffffffff}, {{@in6=@remote, 0x4d4, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3, 0x0, 0x0, 0x81}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast1, 0x0, 0x6d}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x23c}}, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xb8}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) (async) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) executing program 1: r0 = socket(0x15, 0x5, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0x200000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", "122000"}, 0x28) (async) recvfrom$inet6(r1, &(0x7f0000000040)=""/38, 0x26, 0x122, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000440)="83", 0x1, 0x4000, 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "2000a200009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) (async) recvfrom$inet6(r1, &(0x7f0000000300)=""/19, 0x13, 0x4001a060, 0x0, 0x0) (async, rerun: 64) getsockopt(r0, 0x200000000114, 0x3, 0x0, &(0x7f0000000000)) (rerun: 64) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000001080), 0x4) sendmsg$kcm(r2, &(0x7f00000001c0)={&(0x7f0000000540)=@phonet={0x23, 0x0, 0x0, 0xf}, 0xa, &(0x7f00000002c0)=[{&(0x7f0000000500)="270502001a0014000600002fb96dbcf706e1bd24161288a8070088a80100", 0x1e}, {&(0x7f00000004c0)="724260452eca7f662c", 0x9}, {&(0x7f0000003600)="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", 0xd00}], 0x3}, 0x200008d4) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000010c0)=@newtaction={0x1070, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x105c, 0x1, [@m_ctinfo={0x1058, 0x11, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2d5}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x1070}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x18, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001700000095", @ANYRES16=r0], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/time_for_children\x00') (async) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) (async) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000240)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r10], 0x1c}}, 0x0) (async, rerun: 64) write$nci(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="4024967c"], 0x4) (rerun: 64) write$nci(r6, &(0x7f0000000380)=ANY=[@ANYRES32=r7, @ANYRES32=r2], 0x9d) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc86a457991", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) executing program 3: r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f0000000a00)=0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000790028000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x401, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x8c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}]}]}, 0x8c}}, 0x0) r4 = socket(0x10, 0x3, 0xbffffffd) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001040)=ANY=[@ANYBLOB="20000000520001000000000000001b001c0000000c0001000200000000000000"], 0x20}}, 0x0) executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x14, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @mcast2}}}}}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000500)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2002}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0xfd, 0x85, 0x0, 0x2, 0x4, 0x2, 0x0, 0xf, 0x5}, 0xe) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}, {0x95, 0x0, 0x6000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a200000001d0a05090001cc73797a3000000000140000001100010000000000000000000300000a00000000000000000000000000db5b5824627fa0e30ffba65c"], 0x48}}, 0x20000000) executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8}, 0x18) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="ffff0000d4211ceb21b7764917bb94a0940784eb79589e01079a6ec85b26f06f620b92c8b1438998565a844b8592842b001eb034ac32543a39100ab92d59a3235319236e3f82b308bb3de0ad2f9bdb4540408e37e15dc2771135a933e6770619a4e8554bb4336b44e1a562a14a407c29b47be5807d0fe1842860659b05a8e16dd40a3573a51eb3ce5f1466ae279d2709da891358608474d1770ec02feab0a16f"], 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710441000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x969c}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000140)={r1, 0xb5cb, 0x20, 0x2, 0x7fffffff}, &(0x7f0000000240)=0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@ipv4_newroute={0x3c, 0x18, 0x2, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14}}]}, 0x3c}}, 0x0) executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000180)={0x40, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x40}}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x6c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r6, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2d8, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x50) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x65, &(0x7f0000000140)=0x23, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f0000000180)="5abf1b75d26aec640e4778aa815a382f96336378e4903e3fb73e9903bca9c57db1313be076bbf737ceabfdcc36e49f35e13ac7020fdcd5870c4c3f99cfb6fab0ce39fab9e41c3270", &(0x7f0000000200)=@tcp6=r4, 0x2}, 0x20) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000280)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x201) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xcf3c, 0x0, 0x0, 0x0, 0x2}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x1b, &(0x7f0000000340)=""/27, 0x41000, 0x15, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000003c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x3, 0x9, 0x400}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r6, r2, r2, r2, r2, r2, r7], 0x0, 0x10, 0x5}, 0x94) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r9, 0x65, 0x3, &(0x7f00000006c0), 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000780)={0x0, @remote, @multicast2}, &(0x7f00000007c0)=0xc) sendmsg$MPTCP_PM_CMD_GET_ADDR(r10, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x50, r11, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xccd1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x850}, 0x28008081) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000900), 0x121000, 0x0) ioctl$PPPIOCGDEBUG(r13, 0x80047441, &(0x7f0000000940)) sendmsg$AUDIT_GET_FEATURE(r13, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x10, 0x3fb, 0x100, 0x70bd28, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f0000000a80)={{{@in=@initdev, @in=@initdev}}, {{@in6=@loopback}, 0x0, @in6=@private0}}, &(0x7f0000000b80)=0xe8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e00)={r8, 0x0, 0xdb, 0x62, &(0x7f0000000bc0)="4c8506011e13c1ab9701c18815fd16d81f47d631e81651a8dcc9686b072335eb0c35b18e46254631890b0c495936939a60155789d4a955079e23dada5d5025ee21e1211f55929336762d5943c6aa0bf4e24043139495e724596fbdaf59cf30c6d32ad7d954a7e9697a2b05cbb7cd640005674d96cda7735366360bc74b8fc60f795330831340df3091314a90a1beeaf0e9cac5c0ad9b9734b57d1eec36f76f40668c745ff1096cfe0cc89911bf88aa5a199b9c54788e181f59fadf089d9ceb902a458c23eaeec2988d0590775abc8c12d184fe0904ec2fe59d8080", &(0x7f0000000cc0)=""/98, 0x4, 0x0, 0x35, 0x75, &(0x7f0000000d40)="44a900a961acb02b0ac7e6c98b3da267107e5356ddb5e049c7d2b72075d6fda9f9f525bda86addda84267ec8c2c64eb01a1f440f5a", &(0x7f0000000d80)="66a8745b01185184f39a6a84c039eec218423cb3a426cb08686872d7a27e683d2bc5cc5bf154d5ccb076388cec63a54294174b84bb83619571bd8b4d2a2f9ad612a1b42a5f08a6de247ef3f36729d7b3dec04cf421317c5ed3dd7cbe4aad363d2c6cfab8a55ff8a5698061435021fdce8dac7b7370", 0x5, 0x0, 0xa}, 0x50) pwritev(r3, &(0x7f0000000f00)=[{&(0x7f0000000e80)="29530c8694f9c198f2b042e75b859ddc093d20bb903c1ce2e078c8e0167048458b00f41ea1487fd3dee54e0ea96bd8d15a3249b088c816fd5e636d1c950c174406df749696d57b34f380d145fb1950434021d0742af2604bbcf9b59e8de55e", 0x5f}], 0x1, 0x7, 0x9) r14 = accept$inet(r0, 0x0, &(0x7f0000000f40)) setsockopt$inet_sctp_SCTP_INITMSG(r14, 0x84, 0x2, &(0x7f0000000f80)={0x1, 0x5, 0x2, 0xfff}, 0x8) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000fc0)={0x0, 0x2, 0x7f, 0x200}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000001040)={'netdevsim0\x00'}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) (async) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000007c0)=""/143, 0x8f}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/97, 0x61}, {&(0x7f00000000c0)=""/75, 0x4b}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f0000000440)=""/67, 0x43}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0xa}], 0x8, 0x0, 0x0) executing program 1: syz_emit_ethernet(0x5e, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd68e4177f0028890020010000000000000000000000000001ff020000000000000000000000000001bd4fb9e9cbae6d1c21edd9ff38ebd97386806c27d875482109e2185d6f15c9ee51b342066e552bceaeff0a8d91755bf3714f9ed4805225843ab355a24af746bf214e111b50ee0256ae78725d248e07ac31710d22e3f61ec096cf6cd53f74a3db1e86f1b9028bbc91e76cc679ceec98cf385c0b0b4a996d3eb1dedf5e58785934b30c9903396280db5f4037ee2fa008b4f134f6740d1e9a2e9b74bbd49bb2b9c67649c8435c"], 0x0) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14) getsockname$packet(r0, &(0x7f0000000200), &(0x7f0000000240)=0x14) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @rand_addr=0x64010100}, {0x1, @multicast}, 0x0, {0x2, 0x4e23, @private=0xa010100}, 'xfrm0\x00'}) sendto$packet(r0, &(0x7f0000000080)="01a156ef9113b8600f20bc15551240df41d625d1", 0x14, 0x4000, &(0x7f00000000c0)={0x11, 0x4, 0x0, 0x1, 0x6, 0x6, @broadcast}, 0x14) executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="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", 0x12a}], 0x1, 0x80000001, 0x4dc7a87d) bind$xdp(r0, &(0x7f0000000300)={0x2c, 0x2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781b800c423ace69c1eba8d0c505baa2acd", 0x2d}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240ba45b930936aecd07ff84b35954a5a75c1ba4252e11ab09ebfa468f58829bb24aebceb96a9d4a5a856abe6aed", 0x50}], 0x1}, 0x20048050) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000001a40)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0x1, @private0, 0x3}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6119aedd5) (async) shutdown(r3, 0x1) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000140)={0x1000, 0xb88, 0x2, 0x8, 0x5, 0xbad, 0x9, 0x7f}, 0x20) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r2, 0x403, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x32f6a000) (async) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r7, 0x0) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r7, 0xd1383000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0x0) (async) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r8, 0x1000) (async) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0xfffff000) (async) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r6, 0x0) (async) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r6, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r9, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r5, 0x2000) (async) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x521041, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400e0000", @ANYBLOB="cf0400000000000000001300", @ANYBLOB="0400130006001200000000000600b500850100000a0006"], 0x40}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f00f9ffff7f00000000000001"], 0x114}], 0x1}, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb4}}, &(0x7f0000000000)='GPL\x00'}, 0x90) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000140)='syz0\x00', 0x1ff) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x1) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x521041, 0x0) (async) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400e0000", @ANYBLOB="cf0400000000000000001300", @ANYBLOB="0400130006001200000000000600b500850100000a0006"], 0x40}}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f00f9ffff7f00000000000001"], 0x114}], 0x1}, 0x0) (async) vmsplice(r0, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb4}}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) (async) mkdirat$cgroup(r2, &(0x7f0000000140)='syz0\x00', 0x1ff) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x1) (async) executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05050000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a3000000000340000001c0a010100000000000000000100000008000940000000000900020073797a323a0000000900010073797a30"], 0xa8}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000140)="3836c332e5fd0b957b1a87012535b4a4e870", &(0x7f0000000280)=@udp6=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000640)="b4", &(0x7f0000000180)=@udp=r3}, 0x20) close(r3) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fbdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="981238d357278620d8f34e5c83ec6821addbb73de3893f18d0388e89cec27b5bacaa7d19eb3d49ddc7256ed0538fa087bc2c7a09000000000032d7a3bb1d205cc8002f7291c5271969af5f023951a28b74aeaeba3648263b5cf8a2c88483c30e72fe18da9ba2d55c9188d26bb490d5febea0f84e29d569aa04addbc711"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc8, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x2}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r2}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r3}]}}}]}, 0x40}}, 0x0) executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/55, 0xe3, 0x37, 0x1, 0x8}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum={0x3}]}, {0x0, [0x0, 0x0, 0x61, 0x5f]}}, 0x0, 0x2a}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x179, 0x11, 0x100000, 0x10}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000001dc0)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, r1}, 0x94) socket$kcm(0x10, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000000200)=0xb, 0x4) r3 = socket(0x28, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x0, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @private}}}}) recvfrom$l2tp6(r3, &(0x7f0000000380)=""/122, 0x7a, 0x10021, &(0x7f0000000440)={0xa, 0x0, 0x0, @empty}, 0x20) bind$802154_dgram(r3, &(0x7f0000000540)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r3) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600180003600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0800089e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}, 0x0) close(0x3) socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2aaf41, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) executing program 32: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc8, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x2}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r2}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r3}]}}}]}, 0x40}}, 0x0) program did not crash bisect: testing without sub-chunk 2/3 testing program (duration=6m5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 10, 22, 5, 3, 6, 9, 11, 10, 12, 5, 12, 6, 23, 30, 18, 10, 9, 25, 9] detailed listing: executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000002000000000000000000000f0300000063d038000000000000000f01000000de0100"], 0x0, 0x36}, 0x28) r0 = socket(0xa, 0x3, 0x4) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r1, 0x104, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030404000000fedbff2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062800000006500001400028005002500000000000500260000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32, @ANYBLOB="080001"], 0x48}}, 0x0) sendmmsg$inet(r1, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x46054) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xb1c0b87368371fa3}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_getaddr={0x58, 0x16, 0x100, 0x70bd25, 0x25dfdbff, {0xa, 0x40, 0x2, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x8}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x6000011) executing program 1: r0 = socket(0xa, 0x3, 0x4) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x2, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) (async) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x3ff, 0x0, 0x1, 0x216, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x0, 0x1, 0x2, 0xffff, {{0x36, 0x4, 0x1, 0xa, 0xd8, 0x65, 0x0, 0x1, 0x29, 0x0, @rand_addr=0x64010102, @remote, {[@lsrr={0x83, 0x23, 0x4f, [@empty, @multicast2, @empty, @remote, @dev={0xac, 0x14, 0x14, 0x33}, @empty, @dev={0xac, 0x14, 0x14, 0x10}, @remote]}, @cipso={0x86, 0x41, 0x3, [{0x6, 0x11, "946281afd7e1523f9d3dae9ae7eb6a"}, {0x6, 0x2}, {0x5, 0xa, "ca27067ece75e3be"}, {0x6, 0xb, "e761d93fd09f92b542"}, {0x2, 0xf, "e91c4717bd682cfda232e444e6"}, {0x0, 0x4, "8662"}]}, @lsrr={0x83, 0x23, 0x3d, [@multicast2, @empty, @broadcast, @rand_addr=0x64010101, @empty, @multicast1, @remote, @remote]}, @timestamp={0x44, 0x1c, 0x4a, 0x0, 0x4, [0xfffffff1, 0x7, 0x10000, 0x8, 0x7, 0x0]}, @ssrr={0x89, 0x1f, 0x9e, [@remote, @private=0xa010101, @local, @private=0xa010102, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}]}}}}}) (async) ioctl$int_in(r3, 0x5421, &(0x7f00000008c0)=0xc44) (async) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%pS \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x27, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x80000000}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0xc43, 0x0, 0x0, 0x40f00, 0x1, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000280)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x7, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000740)=[r7, r8, r9], &(0x7f0000000780)=[{0x2, 0x3, 0x7}, {0x3, 0x4, 0xc, 0x2}, {0x2, 0x1}, {0x4, 0x3, 0x1, 0x3}, {0x0, 0x4, 0xc, 0x1}, {0x5, 0x5, 0x3, 0x3}], 0x10, 0xc}, 0x94) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200", 0x5e, 0x0, 0x0, 0x0) (async) r10 = socket$xdp(0x2c, 0x3, 0x0) (async) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x8910, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x80, 0x7, 0x800, 0x6, {{0x5, 0x4, 0x0, 0x38, 0x14, 0x66, 0x0, 0x0, 0x2f, 0x0, @remote, @rand_addr=0x64010102}}}}) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x800, 0x0, 0x7}, 0x20) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x40, r1, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x1f, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1}, {0xd4}, @device_b, @device_a, @initial, {0x6, 0x8}}, @smps={0x7, 0x1, {0x0, 0x1}}}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x2404c001}, 0x40084) (fail_nth: 9) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x1c, 0x0, 0x0, @pid=r1}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c5060000000000000000000000000002a0bae5dc2f1d3e644d6501c56b33b57b"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x625}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000080000000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0280000020040000"], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c5060000000000000000000000000002a0bae5dc2f1d3e644d6501c56b33b57b"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x625}, 0x94) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000080000000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0280000020040000"], 0x20}}, 0x0) (async) executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f00000008c0)=ANY=[@ANYRESDEC=0x0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xbb, &(0x7f000000cf3d)=""/187, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x3c, r0, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48002080}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, r2, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x43}}, @GTPA_FAMILY={0x5, 0xd, 0xa}, @GTPA_I_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) executing program 0: r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), r2) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="871e1e0f", @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf250c0000000800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40008810}, 0x400c800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_EMATCHES={0x34, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x68}}, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) executing program 2: unshare(0x22020400) r0 = socket(0x9, 0x6, 0xa) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10000000}, 0x1c) listen(r1, 0x0) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, 0x0, 0x900}, 0x10) executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0x104, r0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4a84}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x20}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x326}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8}]]}, 0x104}, 0x1, 0x0, 0x0, 0x8080}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8b37, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f00000004c0)={{0x2, 0x0, @empty}, {0x0, @local}, 0x2c, {0x2, 0x0, @empty}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001400000000108000240000000090500030000000000140001800a0001007265646972000000040002800900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x5090}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x34, r0, 0x1, 0x70bd26, 0xfffffffc, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x74}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x7, 0x8]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000004a00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003e0007012dbd7000fcdbdf25047c0000040000001400018006000600800a000008000900", @ANYRES32=0x0, @ANYBLOB="4153eaebd0448de2a47cc6be9e37ff4fdf1a7426dbc9878130896bc2d61b5e61b8d5152a83dac0b219802abe4c2b342a4f8b370ae01a78c16463b6b9a16311e086b2fe395eeb963f7f6e315324771e471005198a1192d3b6c87e872aacb7e271436828dc4ade635432395d8ec8f7e1dcbc1ea9074d0230f6"], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) (async) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000007c0)=""/143, 0x8f}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/97, 0x61}, {&(0x7f00000000c0)=""/75, 0x4b}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f0000000440)=""/67, 0x43}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0xa}], 0x8, 0x0, 0x0) executing program 1: syz_emit_ethernet(0x5e, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd68e4177f0028890020010000000000000000000000000001ff020000000000000000000000000001bd4fb9e9cbae6d1c21edd9ff38ebd97386806c27d875482109e2185d6f15c9ee51b342066e552bceaeff0a8d91755bf3714f9ed4805225843ab355a24af746bf214e111b50ee0256ae78725d248e07ac31710d22e3f61ec096cf6cd53f74a3db1e86f1b9028bbc91e76cc679ceec98cf385c0b0b4a996d3eb1dedf5e58785934b30c9903396280db5f4037ee2fa008b4f134f6740d1e9a2e9b74bbd49bb2b9c67649c8435c"], 0x0) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14) getsockname$packet(r0, &(0x7f0000000200), &(0x7f0000000240)=0x14) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @rand_addr=0x64010100}, {0x1, @multicast}, 0x0, {0x2, 0x4e23, @private=0xa010100}, 'xfrm0\x00'}) sendto$packet(r0, &(0x7f0000000080)="01a156ef9113b8600f20bc15551240df41d625d1", 0x14, 0x4000, &(0x7f00000000c0)={0x11, 0x4, 0x0, 0x1, 0x6, 0x6, @broadcast}, 0x14) executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="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", 0x12a}], 0x1, 0x80000001, 0x4dc7a87d) bind$xdp(r0, &(0x7f0000000300)={0x2c, 0x2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781b800c423ace69c1eba8d0c505baa2acd", 0x2d}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240ba45b930936aecd07ff84b35954a5a75c1ba4252e11ab09ebfa468f58829bb24aebceb96a9d4a5a856abe6aed", 0x50}], 0x1}, 0x20048050) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000001a40)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0x1, @private0, 0x3}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6119aedd5) (async) shutdown(r3, 0x1) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000140)={0x1000, 0xb88, 0x2, 0x8, 0x5, 0xbad, 0x9, 0x7f}, 0x20) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r2, 0x403, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x32f6a000) (async) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r7, 0x0) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r7, 0xd1383000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0x0) (async) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r8, 0x1000) (async) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0xfffff000) (async) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r6, 0x0) (async) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r6, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r9, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r5, 0x2000) (async) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x521041, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400e0000", @ANYBLOB="cf0400000000000000001300", @ANYBLOB="0400130006001200000000000600b500850100000a0006"], 0x40}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f00f9ffff7f00000000000001"], 0x114}], 0x1}, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb4}}, &(0x7f0000000000)='GPL\x00'}, 0x90) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000140)='syz0\x00', 0x1ff) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x1) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x521041, 0x0) (async) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400e0000", @ANYBLOB="cf0400000000000000001300", @ANYBLOB="0400130006001200000000000600b500850100000a0006"], 0x40}}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f00f9ffff7f00000000000001"], 0x114}], 0x1}, 0x0) (async) vmsplice(r0, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb4}}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) (async) mkdirat$cgroup(r2, &(0x7f0000000140)='syz0\x00', 0x1ff) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x1) (async) executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05050000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a3000000000340000001c0a010100000000000000000100000008000940000000000900020073797a323a0000000900010073797a30"], 0xa8}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000140)="3836c332e5fd0b957b1a87012535b4a4e870", &(0x7f0000000280)=@udp6=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000640)="b4", &(0x7f0000000180)=@udp=r3}, 0x20) close(r3) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fbdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="981238d357278620d8f34e5c83ec6821addbb73de3893f18d0388e89cec27b5bacaa7d19eb3d49ddc7256ed0538fa087bc2c7a09000000000032d7a3bb1d205cc8002f7291c5271969af5f023951a28b74aeaeba3648263b5cf8a2c88483c30e72fe18da9ba2d55c9188d26bb490d5febea0f84e29d569aa04addbc711"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc8, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x2}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r2}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r3}]}}}]}, 0x40}}, 0x0) executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb01001800000000000000c4000000c48000000700000005000000000000100c00000005000000000000080200000000000000030000060400000007000000810000000b0000000002000009000000070000000d00000000000002050000000400000007000085020000000b00000001000000080000000500000002000000060000000a000000010000000900000003000000040000000000f7ffffff0800000005000000050000000700000004000000a2410000070000000000000100000000480075020d00000000000008020000000041305f2e11f065cbfae5f8f89800ffc66326a9c8a01774d9249c68ab369828ca4085bb9e82c316f71b4d9def8761d9750d1735b2bae9202ec0a8b12d05f70ad1ef833a2221ff583b1075de0e424937c73fd779204319b79d2444df2592b26f1ecfb8ace441ca9205095ee664c22c536f74e2388fa0f83176d06b94a35932b7a782c6a27d49c1e46537d4d1521f7b44daf8f5"], &(0x7f0000000280)=""/55, 0xe3, 0x37, 0x1, 0x8}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum={0x3}]}, {0x0, [0x0, 0x0, 0x61, 0x5f]}}, 0x0, 0x2a}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x179, 0x11, 0x100000, 0x10}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000001dc0)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, r1}, 0x94) socket$kcm(0x10, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000000200)=0xb, 0x4) r3 = socket(0x28, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x0, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @private}}}}) recvfrom$l2tp6(r3, &(0x7f0000000380)=""/122, 0x7a, 0x10021, &(0x7f0000000440)={0xa, 0x0, 0x0, @empty}, 0x20) bind$802154_dgram(r3, &(0x7f0000000540)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r3) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600180003600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0800089e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}, 0x0) close(0x3) socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2aaf41, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) executing program 32: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc8, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x2}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r2}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r3}]}}}]}, 0x40}}, 0x0) program crashed: INFO: task hung in corrupted bisect: the chunk can be dropped bisect: testing without sub-chunk 3/3 testing program (duration=6m2s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 10, 22, 5, 3, 6, 9, 11, 10, 12, 5] detailed listing: executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000002000000000000000000000f0300000063d038000000000000000f01000000de0100"], 0x0, 0x36}, 0x28) r0 = socket(0xa, 0x3, 0x4) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r1, 0x104, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030404000000fedbff2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062800000006500001400028005002500000000000500260000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32, @ANYBLOB="080001"], 0x48}}, 0x0) sendmmsg$inet(r1, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x46054) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xb1c0b87368371fa3}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_getaddr={0x58, 0x16, 0x100, 0x70bd25, 0x25dfdbff, {0xa, 0x40, 0x2, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x8}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x6000011) executing program 1: r0 = socket(0xa, 0x3, 0x4) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x2, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) (async) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x3ff, 0x0, 0x1, 0x216, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x0, 0x1, 0x2, 0xffff, {{0x36, 0x4, 0x1, 0xa, 0xd8, 0x65, 0x0, 0x1, 0x29, 0x0, @rand_addr=0x64010102, @remote, {[@lsrr={0x83, 0x23, 0x4f, [@empty, @multicast2, @empty, @remote, @dev={0xac, 0x14, 0x14, 0x33}, @empty, @dev={0xac, 0x14, 0x14, 0x10}, @remote]}, @cipso={0x86, 0x41, 0x3, [{0x6, 0x11, "946281afd7e1523f9d3dae9ae7eb6a"}, {0x6, 0x2}, {0x5, 0xa, "ca27067ece75e3be"}, {0x6, 0xb, "e761d93fd09f92b542"}, {0x2, 0xf, "e91c4717bd682cfda232e444e6"}, {0x0, 0x4, "8662"}]}, @lsrr={0x83, 0x23, 0x3d, [@multicast2, @empty, @broadcast, @rand_addr=0x64010101, @empty, @multicast1, @remote, @remote]}, @timestamp={0x44, 0x1c, 0x4a, 0x0, 0x4, [0xfffffff1, 0x7, 0x10000, 0x8, 0x7, 0x0]}, @ssrr={0x89, 0x1f, 0x9e, [@remote, @private=0xa010101, @local, @private=0xa010102, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}]}}}}}) (async) ioctl$int_in(r3, 0x5421, &(0x7f00000008c0)=0xc44) (async) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%pS \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x27, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x80000000}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0xc43, 0x0, 0x0, 0x40f00, 0x1, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000280)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x7, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000740)=[r7, r8, r9], &(0x7f0000000780)=[{0x2, 0x3, 0x7}, {0x3, 0x4, 0xc, 0x2}, {0x2, 0x1}, {0x4, 0x3, 0x1, 0x3}, {0x0, 0x4, 0xc, 0x1}, {0x5, 0x5, 0x3, 0x3}], 0x10, 0xc}, 0x94) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200", 0x5e, 0x0, 0x0, 0x0) (async) r10 = socket$xdp(0x2c, 0x3, 0x0) (async) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x8910, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x80, 0x7, 0x800, 0x6, {{0x5, 0x4, 0x0, 0x38, 0x14, 0x66, 0x0, 0x0, 0x2f, 0x0, @remote, @rand_addr=0x64010102}}}}) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x800, 0x0, 0x7}, 0x20) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x40, r1, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x1f, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1}, {0xd4}, @device_b, @device_a, @initial, {0x6, 0x8}}, @smps={0x7, 0x1, {0x0, 0x1}}}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x2404c001}, 0x40084) (fail_nth: 9) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x1c, 0x0, 0x0, @pid=r1}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c5060000000000000000000000000002a0bae5dc2f1d3e644d6501c56b33b57b"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x625}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000080000000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0280000020040000"], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c5060000000000000000000000000002a0bae5dc2f1d3e644d6501c56b33b57b"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x625}, 0x94) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000080000000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0280000020040000"], 0x20}}, 0x0) (async) executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f00000008c0)=ANY=[@ANYRESDEC=0x0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xbb, &(0x7f000000cf3d)=""/187, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x3c, r0, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48002080}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, r2, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x43}}, @GTPA_FAMILY={0x5, 0xd, 0xa}, @GTPA_I_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) executing program 0: r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), r2) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="871e1e0f", @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf250c0000000800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40008810}, 0x400c800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_EMATCHES={0x34, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x68}}, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) executing program 2: unshare(0x22020400) r0 = socket(0x9, 0x6, 0xa) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10000000}, 0x1c) listen(r1, 0x0) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, 0x0, 0x900}, 0x10) executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0x104, r0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4a84}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x20}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x326}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8}]]}, 0x104}, 0x1, 0x0, 0x0, 0x8080}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8b37, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f00000004c0)={{0x2, 0x0, @empty}, {0x0, @local}, 0x2c, {0x2, 0x0, @empty}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001400000000108000240000000090500030000000000140001800a0001007265646972000000040002800900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x5090}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x34, r0, 0x1, 0x70bd26, 0xfffffffc, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x74}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x7, 0x8]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000004a00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003e0007012dbd7000fcdbdf25047c0000040000001400018006000600800a000008000900", @ANYRES32=0x0, @ANYBLOB="4153eaebd0448de2a47cc6be9e37ff4fdf1a7426dbc9878130896bc2d61b5e61b8d5152a83dac0b219802abe4c2b342a4f8b370ae01a78c16463b6b9a16311e086b2fe395eeb963f7f6e315324771e471005198a1192d3b6c87e872aacb7e271436828dc4ade635432395d8ec8f7e1dcbc1ea9074d0230f6"], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000) program crashed: INFO: task hung in corrupted bisect: the chunk can be dropped bisect: split chunks (needed=true): <11> bisect: split chunk #0 of len 11 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 11, 10, 12, 5] detailed listing: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f00000008c0)=ANY=[@ANYRESDEC=0x0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xbb, &(0x7f000000cf3d)=""/187, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x3c, r0, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48002080}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, r2, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x43}}, @GTPA_FAMILY={0x5, 0xd, 0xa}, @GTPA_I_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) executing program 0: r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), r2) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="871e1e0f", @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf250c0000000800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40008810}, 0x400c800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_EMATCHES={0x34, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x68}}, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) executing program 2: unshare(0x22020400) r0 = socket(0x9, 0x6, 0xa) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10000000}, 0x1c) listen(r1, 0x0) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, 0x0, 0x900}, 0x10) executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0x104, r0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4a84}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x20}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x326}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8}]]}, 0x104}, 0x1, 0x0, 0x0, 0x8080}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8b37, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f00000004c0)={{0x2, 0x0, @empty}, {0x0, @local}, 0x2c, {0x2, 0x0, @empty}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001400000000108000240000000090500030000000000140001800a0001007265646972000000040002800900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x5090}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x34, r0, 0x1, 0x70bd26, 0xfffffffc, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x74}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x7, 0x8]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000004a00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003e0007012dbd7000fcdbdf25047c0000040000001400018006000600800a000008000900", @ANYRES32=0x0, @ANYBLOB="4153eaebd0448de2a47cc6be9e37ff4fdf1a7426dbc9878130896bc2d61b5e61b8d5152a83dac0b219802abe4c2b342a4f8b370ae01a78c16463b6b9a16311e086b2fe395eeb963f7f6e315324771e471005198a1192d3b6c87e872aacb7e271436828dc4ade635432395d8ec8f7e1dcbc1ea9074d0230f6"], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 10, 22, 5, 3, 6] detailed listing: executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000002000000000000000000000f0300000063d038000000000000000f01000000de0100"], 0x0, 0x36}, 0x28) r0 = socket(0xa, 0x3, 0x4) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r1, 0x104, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030404000000fedbff2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062800000006500001400028005002500000000000500260000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32, @ANYBLOB="080001"], 0x48}}, 0x0) sendmmsg$inet(r1, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x46054) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xb1c0b87368371fa3}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_getaddr={0x58, 0x16, 0x100, 0x70bd25, 0x25dfdbff, {0xa, 0x40, 0x2, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x8}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x6000011) executing program 1: r0 = socket(0xa, 0x3, 0x4) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x2, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) (async) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x3ff, 0x0, 0x1, 0x216, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x0, 0x1, 0x2, 0xffff, {{0x36, 0x4, 0x1, 0xa, 0xd8, 0x65, 0x0, 0x1, 0x29, 0x0, @rand_addr=0x64010102, @remote, {[@lsrr={0x83, 0x23, 0x4f, [@empty, @multicast2, @empty, @remote, @dev={0xac, 0x14, 0x14, 0x33}, @empty, @dev={0xac, 0x14, 0x14, 0x10}, @remote]}, @cipso={0x86, 0x41, 0x3, [{0x6, 0x11, "946281afd7e1523f9d3dae9ae7eb6a"}, {0x6, 0x2}, {0x5, 0xa, "ca27067ece75e3be"}, {0x6, 0xb, "e761d93fd09f92b542"}, {0x2, 0xf, "e91c4717bd682cfda232e444e6"}, {0x0, 0x4, "8662"}]}, @lsrr={0x83, 0x23, 0x3d, [@multicast2, @empty, @broadcast, @rand_addr=0x64010101, @empty, @multicast1, @remote, @remote]}, @timestamp={0x44, 0x1c, 0x4a, 0x0, 0x4, [0xfffffff1, 0x7, 0x10000, 0x8, 0x7, 0x0]}, @ssrr={0x89, 0x1f, 0x9e, [@remote, @private=0xa010101, @local, @private=0xa010102, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}]}}}}}) (async) ioctl$int_in(r3, 0x5421, &(0x7f00000008c0)=0xc44) (async) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%pS \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x27, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x80000000}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0xc43, 0x0, 0x0, 0x40f00, 0x1, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000280)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x7, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000740)=[r7, r8, r9], &(0x7f0000000780)=[{0x2, 0x3, 0x7}, {0x3, 0x4, 0xc, 0x2}, {0x2, 0x1}, {0x4, 0x3, 0x1, 0x3}, {0x0, 0x4, 0xc, 0x1}, {0x5, 0x5, 0x3, 0x3}], 0x10, 0xc}, 0x94) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200", 0x5e, 0x0, 0x0, 0x0) (async) r10 = socket$xdp(0x2c, 0x3, 0x0) (async) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x8910, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x80, 0x7, 0x800, 0x6, {{0x5, 0x4, 0x0, 0x38, 0x14, 0x66, 0x0, 0x0, 0x2f, 0x0, @remote, @rand_addr=0x64010102}}}}) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x800, 0x0, 0x7}, 0x20) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x40, r1, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x1f, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1}, {0xd4}, @device_b, @device_a, @initial, {0x6, 0x8}}, @smps={0x7, 0x1, {0x0, 0x1}}}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x2404c001}, 0x40084) (fail_nth: 9) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x1c, 0x0, 0x0, @pid=r1}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c5060000000000000000000000000002a0bae5dc2f1d3e644d6501c56b33b57b"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x625}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000080000000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0280000020040000"], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c5060000000000000000000000000002a0bae5dc2f1d3e644d6501c56b33b57b"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x625}, 0x94) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000080000000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0280000020040000"], 0x20}}, 0x0) (async) program crashed: INFO: task hung in corrupted bisect: the chunk can be dropped bisect: split chunks (needed=true): <6> bisect: split chunk #0 of len 6 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 3, 6] detailed listing: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x40, r1, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x1f, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1}, {0xd4}, @device_b, @device_a, @initial, {0x6, 0x8}}, @smps={0x7, 0x1, {0x0, 0x1}}}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x2404c001}, 0x40084) (fail_nth: 9) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x1c, 0x0, 0x0, @pid=r1}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c5060000000000000000000000000002a0bae5dc2f1d3e644d6501c56b33b57b"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x625}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000080000000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0280000020040000"], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c5060000000000000000000000000002a0bae5dc2f1d3e644d6501c56b33b57b"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x625}, 0x94) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000080000000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0280000020040000"], 0x20}}, 0x0) (async) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 10, 22] detailed listing: executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000002000000000000000000000f0300000063d038000000000000000f01000000de0100"], 0x0, 0x36}, 0x28) r0 = socket(0xa, 0x3, 0x4) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r1, 0x104, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030404000000fedbff2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062800000006500001400028005002500000000000500260000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32, @ANYBLOB="080001"], 0x48}}, 0x0) sendmmsg$inet(r1, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x46054) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xb1c0b87368371fa3}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_getaddr={0x58, 0x16, 0x100, 0x70bd25, 0x25dfdbff, {0xa, 0x40, 0x2, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x8}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x6000011) executing program 1: r0 = socket(0xa, 0x3, 0x4) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x2, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) (async) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x3ff, 0x0, 0x1, 0x216, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x0, 0x1, 0x2, 0xffff, {{0x36, 0x4, 0x1, 0xa, 0xd8, 0x65, 0x0, 0x1, 0x29, 0x0, @rand_addr=0x64010102, @remote, {[@lsrr={0x83, 0x23, 0x4f, [@empty, @multicast2, @empty, @remote, @dev={0xac, 0x14, 0x14, 0x33}, @empty, @dev={0xac, 0x14, 0x14, 0x10}, @remote]}, @cipso={0x86, 0x41, 0x3, [{0x6, 0x11, "946281afd7e1523f9d3dae9ae7eb6a"}, {0x6, 0x2}, {0x5, 0xa, "ca27067ece75e3be"}, {0x6, 0xb, "e761d93fd09f92b542"}, {0x2, 0xf, "e91c4717bd682cfda232e444e6"}, {0x0, 0x4, "8662"}]}, @lsrr={0x83, 0x23, 0x3d, [@multicast2, @empty, @broadcast, @rand_addr=0x64010101, @empty, @multicast1, @remote, @remote]}, @timestamp={0x44, 0x1c, 0x4a, 0x0, 0x4, [0xfffffff1, 0x7, 0x10000, 0x8, 0x7, 0x0]}, @ssrr={0x89, 0x1f, 0x9e, [@remote, @private=0xa010101, @local, @private=0xa010102, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}]}}}}}) (async) ioctl$int_in(r3, 0x5421, &(0x7f00000008c0)=0xc44) (async) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%pS \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x27, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x80000000}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0xc43, 0x0, 0x0, 0x40f00, 0x1, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000280)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x7, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000740)=[r7, r8, r9], &(0x7f0000000780)=[{0x2, 0x3, 0x7}, {0x3, 0x4, 0xc, 0x2}, {0x2, 0x1}, {0x4, 0x3, 0x1, 0x3}, {0x0, 0x4, 0xc, 0x1}, {0x5, 0x5, 0x3, 0x3}], 0x10, 0xc}, 0x94) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200", 0x5e, 0x0, 0x0, 0x0) (async) r10 = socket$xdp(0x2c, 0x3, 0x0) (async) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x8910, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x80, 0x7, 0x800, 0x6, {{0x5, 0x4, 0x0, 0x38, 0x14, 0x66, 0x0, 0x0, 0x2f, 0x0, @remote, @rand_addr=0x64010102}}}}) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x800, 0x0, 0x7}, 0x20) program crashed: INFO: task hung in corrupted bisect: the chunk can be dropped bisect: split chunks (needed=true): <3> bisect: split chunk #0 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket$inet_mptcp-getsockopt$inet_mptcp_buf-socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-getsockopt$inet_IP_XFRM_POLICY-bpf$MAP_CREATE_RINGBUF-bpf$BPF_MAP_CONST_STR_FREEZE-ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL-ioctl$int_in-bpf$ITER_CREATE-close-bpf$MAP_CREATE_TAIL_CALL-bpf$MAP_CREATE_TAIL_CALL-bpf$MAP_UPDATE_CONST_STR-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-sendto$inet6-socket$xdp-socket$inet_udp-ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL-setsockopt$XDP_UMEM_REG detailed listing: executing program 1: r0 = socket(0xa, 0x3, 0x4) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x2, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) (async) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x3ff, 0x0, 0x1, 0x216, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x0, 0x1, 0x2, 0xffff, {{0x36, 0x4, 0x1, 0xa, 0xd8, 0x65, 0x0, 0x1, 0x29, 0x0, @rand_addr=0x64010102, @remote, {[@lsrr={0x83, 0x23, 0x4f, [@empty, @multicast2, @empty, @remote, @dev={0xac, 0x14, 0x14, 0x33}, @empty, @dev={0xac, 0x14, 0x14, 0x10}, @remote]}, @cipso={0x86, 0x41, 0x3, [{0x6, 0x11, "946281afd7e1523f9d3dae9ae7eb6a"}, {0x6, 0x2}, {0x5, 0xa, "ca27067ece75e3be"}, {0x6, 0xb, "e761d93fd09f92b542"}, {0x2, 0xf, "e91c4717bd682cfda232e444e6"}, {0x0, 0x4, "8662"}]}, @lsrr={0x83, 0x23, 0x3d, [@multicast2, @empty, @broadcast, @rand_addr=0x64010101, @empty, @multicast1, @remote, @remote]}, @timestamp={0x44, 0x1c, 0x4a, 0x0, 0x4, [0xfffffff1, 0x7, 0x10000, 0x8, 0x7, 0x0]}, @ssrr={0x89, 0x1f, 0x9e, [@remote, @private=0xa010101, @local, @private=0xa010102, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}]}}}}}) (async) ioctl$int_in(r3, 0x5421, &(0x7f00000008c0)=0xc44) (async) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%pS \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x27, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x80000000}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0xc43, 0x0, 0x0, 0x40f00, 0x1, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000280)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x7, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000740)=[r7, r8, r9], &(0x7f0000000780)=[{0x2, 0x3, 0x7}, {0x3, 0x4, 0xc, 0x2}, {0x2, 0x1}, {0x4, 0x3, 0x1, 0x3}, {0x0, 0x4, 0xc, 0x1}, {0x5, 0x5, 0x3, 0x3}], 0x10, 0xc}, 0x94) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200", 0x5e, 0x0, 0x0, 0x0) (async) r10 = socket$xdp(0x2c, 0x3, 0x0) (async) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x8910, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x80, 0x7, 0x800, 0x6, {{0x5, 0x4, 0x0, 0x38, 0x14, 0x66, 0x0, 0x0, 0x2f, 0x0, @remote, @rand_addr=0x64010102}}}}) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x800, 0x0, 0x7}, 0x20) program crashed: lost connection to test machine suppressed program crash: lost connection to test machine bisect: testing without sub-chunk 2/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 10] detailed listing: executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000002000000000000000000000f0300000063d038000000000000000f01000000de0100"], 0x0, 0x36}, 0x28) r0 = socket(0xa, 0x3, 0x4) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r1, 0x104, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030404000000fedbff2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062800000006500001400028005002500000000000500260000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32, @ANYBLOB="080001"], 0x48}}, 0x0) sendmmsg$inet(r1, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x46054) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xb1c0b87368371fa3}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_getaddr={0x58, 0x16, 0x100, 0x70bd25, 0x25dfdbff, {0xa, 0x40, 0x2, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x8}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x6000011) program crashed: INFO: task hung in corrupted bisect: the chunk can be dropped bisect: split chunks (needed=true): <2> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-socket$inet_sctp-socket$nl_route-sendmsg$nl_route-sendmmsg$inet-setsockopt$sock_linger-close-socket$nl_route-sendmsg$nl_route detailed listing: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030404000000fedbff2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062800000006500001400028005002500000000000500260000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32, @ANYBLOB="080001"], 0x48}}, 0x0) sendmmsg$inet(r1, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x46054) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xb1c0b87368371fa3}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_getaddr={0x58, 0x16, 0x100, 0x70bd25, 0x25dfdbff, {0xa, 0x40, 0x2, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x8}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x6000011) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_BTF_LOAD-socket-syz_init_net_socket$rose-setsockopt$rose-ioctl$sock_SIOCBRDELBR detailed listing: executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000002000000000000000000000f0300000063d038000000000000000f01000000de0100"], 0x0, 0x36}, 0x28) r0 = socket(0xa, 0x3, 0x4) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r1, 0x104, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') program crashed: INFO: task hung in corrupted bisect: the chunk can be dropped bisect: split chunks (needed=true): <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 1 programs left: executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000002000000000000000000000f0300000063d038000000000000000f01000000de0100"], 0x0, 0x36}, 0x28) r0 = socket(0xa, 0x3, 0x4) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r1, 0x104, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') bisect: trying to concatenate bisect: concatenate 1 entries testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_BTF_LOAD-socket-syz_init_net_socket$rose-setsockopt$rose-ioctl$sock_SIOCBRDELBR detailed listing: executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000002000000000000000000000f0300000063d038000000000000000f01000000de0100"], 0x0, 0x36}, 0x28) r0 = socket(0xa, 0x3, 0x4) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r1, 0x104, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') program crashed: INFO: task hung in corrupted bisect: concatenation succeeded found reproducer with 5 syscalls minimizing guilty program testing program (duration=6m22.070034914s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_BTF_LOAD-socket-syz_init_net_socket$rose-setsockopt$rose detailed listing: executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000002000000000000000000000f0300000063d038000000000000000f01000000de0100"], 0x0, 0x36}, 0x28) socket(0xa, 0x3, 0x4) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x0, 0x0, 0x0) (async) program did not crash testing program (duration=6m22.070034914s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_BTF_LOAD-socket-syz_init_net_socket$rose-ioctl$sock_SIOCBRDELBR detailed listing: executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000002000000000000000000000f0300000063d038000000000000000f01000000de0100"], 0x0, 0x36}, 0x28) r0 = socket(0xa, 0x3, 0x4) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') program crashed: INFO: task hung in corrupted testing program (duration=6m22.070034914s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_BTF_LOAD-socket-ioctl$sock_SIOCBRDELBR detailed listing: executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000002000000000000000000000f0300000063d038000000000000000f01000000de0100"], 0x0, 0x36}, 0x28) r0 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') program crashed: INFO: task hung in corrupted testing program (duration=6m22.070034914s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_BTF_LOAD-ioctl$sock_SIOCBRDELBR detailed listing: executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000002000000000000000000000f0300000063d038000000000000000f01000000de0100"], 0x0, 0x36}, 0x28) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') program did not crash testing program (duration=6m22.070034914s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$sock_SIOCBRDELBR detailed listing: executing program 0: r0 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') program did not crash testing program (duration=6m22.070034914s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_BTF_LOAD-socket-ioctl$sock_SIOCBRDELBR detailed listing: executing program 0: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') program did not crash testing program (duration=6m22.070034914s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_BTF_LOAD-socket-ioctl$sock_SIOCBRDELBR detailed listing: executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x36}, 0x28) r0 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') program did not crash testing program (duration=6m22.070034914s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_BTF_LOAD-socket-ioctl$sock_SIOCBRDELBR detailed listing: executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x36}, 0x28) r0 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') program did not crash testing program (duration=6m22.070034914s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_BTF_LOAD-socket-ioctl$sock_SIOCBRDELBR detailed listing: executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000002000000000000000000000f0300000063d038000000000000000f01000000de0100"], 0x0, 0x36}, 0x28) r0 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=6m22.070034914s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_BTF_LOAD-socket-ioctl$sock_SIOCBRDELBR program did not crash simplifying guilty program options testing program (duration=6m22.070034914s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_BTF_LOAD-socket-ioctl$sock_SIOCBRDELBR detailed listing: executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000002000000000000000000000f0300000063d038000000000000000f01000000de0100"], 0x0, 0x36}, 0x28) r0 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing program (duration=6m22.070034914s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_BTF_LOAD-socket-ioctl$sock_SIOCBRDELBR detailed listing: executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000002000000000000000000000f0300000063d038000000000000000f01000000de0100"], 0x0, 0x36}, 0x28) r0 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing program (duration=6m22.070034914s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_BTF_LOAD-socket-ioctl$sock_SIOCBRDELBR detailed listing: executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000002000000000000000000000f0300000063d038000000000000000f01000000de0100"], 0x0, 0x36}, 0x28) r0 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') program crashed: INFO: task hung in corrupted validation run: crashed=true testing program (duration=6m22.070034914s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_BTF_LOAD-socket-ioctl$sock_SIOCBRDELBR detailed listing: executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000002000000000000000000000f0300000063d038000000000000000f01000000de0100"], 0x0, 0x36}, 0x28) r0 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') program crashed: INFO: task hung in corrupted validation run: crashed=true testing program (duration=6m22.070034914s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_BTF_LOAD-socket-ioctl$sock_SIOCBRDELBR detailed listing: executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000002000000000000000000000f0300000063d038000000000000000f01000000de0100"], 0x0, 0x36}, 0x28) r0 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') program crashed: INFO: task hung in corrupted validation run: crashed=true reproducing took 2h55m49.011663327s repro crashed as (corrupted=true): INFO: task kworker/u8:2:36 blocked for more than 150 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:2 state:D stack:22288 pid:36 tgid:36 ppid:2 task_flags:0x4208060 flags:0x00004000 report is corrupted, running repro again testing program (duration=6m22.070034914s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_BTF_LOAD-socket-ioctl$sock_SIOCBRDELBR detailed listing: executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000002000000000000000000000f0300000063d038000000000000000f01000000de0100"], 0x0, 0x36}, 0x28) r0 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') program crashed: INFO: task hung in corrupted report is corrupted, running repro again testing program (duration=6m22.070034914s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_BTF_LOAD-socket-ioctl$sock_SIOCBRDELBR detailed listing: executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000002000000000000000000000f0300000063d038000000000000000f01000000de0100"], 0x0, 0x36}, 0x28) r0 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') program crashed: INFO: task hung in corrupted report is corrupted, running repro again testing program (duration=6m22.070034914s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_BTF_LOAD-socket-ioctl$sock_SIOCBRDELBR detailed listing: executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000002000000000000000000000f0300000063d038000000000000000f01000000de0100"], 0x0, 0x36}, 0x28) r0 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') program crashed: INFO: task hung in corrupted final repro crashed as (corrupted=true): INFO: task kworker/u8:8:3011 blocked for more than 153 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.