Extracting prog: 1h47m39.532045368s Minimizing prog: 1h7m58.973849417s Simplifying prog options: 0s Extracting C: 34.391542429s Simplifying C: 24m2.663965937s extracting reproducer from 30 programs first checking the prog from the crash report single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-openat$tun-socket$tipc-bind$tipc-bind$tipc-close-ioctl$TUNSETIFF-syz_init_net_socket$llc-socket$netlink-setsockopt$netlink_NETLINK_LISTEN_ALL_NSID-syz_genetlink_get_family_id$nl80211-ioctl$TUNSETOFFLOAD-syz_genetlink_get_family_id$devlink-socket$nl_generic-sendmsg$DEVLINK_CMD_RATE_DEL-recvfrom$llc-socket$kcm-ioctl$SIOCSIFHWADDR-socket$packet-setsockopt$packet_int-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-syz_genetlink_get_family_id$devlink-sendmsg$DEVLINK_CMD_PORT_SET-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-sendto$packet-write$tun detailed listing: executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x12100, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0x158, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x158}}, 0x4c0c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc1400000047", 0xb, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash single: failed to extract reproducer bisect: bisecting 30 programs with base timeout 30s testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 8, 25, 28, 30, 17, 28, 17, 5, 14, 30, 26, 9, 5, 15, 5, 17, 12, 24, 3, 13, 20, 6, 20, 21, 15, 27, 30, 9, 17] detailed listing: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x4, 0x25dfdbfb, {0xa, 0x40, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x13}, [@FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000001000de390400"/21, @ANYRES32=0x0, @ANYBLOB="10000000001000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000214000200fc0200000000000000000000000000ff"], 0x5c}}, 0x0) executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) accept4(r0, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000100)=0x80, 0x800) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0x4}, {0x6}]}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r1) sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010027bd7000ffd9df250300080008000100b7"], 0x1c}, 0x1, 0x0, 0x0, 0x48810}, 0x0) executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000017c0)={0x118, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x108, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x1000000fac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x44, 0x0, 0x0, @uid}, @nested={0xd9, 0x66, 0x0, 0x1, [@nested={0x24, 0x132, 0x0, 0x1, [@typed={0x8, 0x141, 0x0, 0x0, @u32=0xb2}, @typed={0x8, 0xca, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x13d, 0x0, 0x0, @u32=0xfffffffc}, @nested={0x4, 0xc5}, @nested={0x4, 0x8a}]}, @nested={0x8, 0xa1, 0x0, 0x1, [@nested={0x4, 0xb}]}, @generic="c073bf8f025953f538087c2947af34d793a12e66cd988ba2df542272ddf8f3b0634ff9883b7914bc9c92aafa8bb7b0c0552ff62f4a9716d08229fbc0558c09235f84d6771d08666d8b337ac75c741e4e77f4a9bc443c6a07af22469f8689554aa0e81e897ed6146a5b6cb1adf5cecbe76fb27a1c2610d17b8d3c80cfe639ce824597e338c1bb6a7d118257e8e8ac7e1f1c03054e4ec9bce7dfd5f3620229ab929fb9ebb5658776ab26"]}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff07000d0001", 0x15}], 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x3, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x81}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r3, 0x0, 0xbf, 0xf6, &(0x7f0000000380)="c1a1d8d52a6c70bd2be0ceff229abebca7aabea5f1bfb616d3d1fced0116145122c946e48160281283e4a3b6f32d634869664b72dfea3f830d3a2f6a2d8ccae825c9bf215044d263228327a1a53f0438a099fec0439712baee8f471f5a6d1c6624d5fae12ff8e31d5e0f2770cea4616872e0489c017bf889bc57db6429ddb47f772364f181a0a9e08d60b6700c1ce3f9b5fa7409823a1c8fa3f030d8bbdb3628e0d0c22f71b73bfdf082d18a8c6f07c38ea00694f607d96febb97bdde501b6", &(0x7f0000000440)=""/246, 0x80000001, 0x0, 0x1b, 0x5d, &(0x7f0000000540)="f71f30037caf9242e9c44f7eb5b98463082e9015495894b120ef04", &(0x7f0000000600)="528c552b6f033593f913ee020d88702df142e194de8802b03394a4232c4c4341a0aa151ec053da7cde29f5def4959adf50b898e4a2bf0181a55df91927849ac3922cd1f6c189b5a4bd64992396c87988da429503bfb59816d61eebe6e5", 0x0, 0x0, 0x8}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b2b, &(0x7f0000000040)={'virt_wifi0\x00', @remote}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000b80)=ANY=[@ANYBLOB="1c0000001000ff05000000000000000009003c8004c937b184"], 0x1c}], 0x1}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000811}, 0x0) recvmmsg(r5, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r5}], 0x1, 0x0, 0x0, 0x0) ioctl(r4, 0x8b27, &(0x7f0000000040)) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000010000000000fddbdf2500000000", @ANYRES32=r7, @ANYBLOB="4000000010800000280012800e0001006970366772657461700000001400028006000e"], 0x48}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a"], 0x18}], 0x1}, 0x0) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) accept4$nfc_llcp(r9, &(0x7f0000000240), &(0x7f00000002c0)=0x60, 0x0) executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = accept(0xffffffffffffffff, &(0x7f0000000180)=@in, &(0x7f0000000200)=0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x4, 0xf8, 0x3, 0x7, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x7, 0x1, 0x2, 0x982}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020642500000000002020207b1ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'rose0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000680)={@rand_addr=' \x01\x00', @private2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x101, 0x2, 0x0, 0x0, 0x4020002, r4}) socket$kcm(0x10, 0x2, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110c23003f) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64=r5], 0xa) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) getpeername$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000540)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@newtclass={0x38, 0x28, 0x200, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xd, 0x4}, {0xfff2, 0xb}, {0xfff3, 0x2}}, [@tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x4, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) poll(&(0x7f0000000280)=[{r9}], 0x1, 0x5) r10 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@canfd={{0x0, 0x1, 0x1}, 0x24, 0x2, 0x0, 0x0, "e84966ca985d2f4cc3291bf183c22ae87c2556284425f51b9ef2de641a44ff1fa710519706f260184eac301d9bcad8028fc2d6070a3a881e47aeb8b2fca12529"}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000300)={r1, 0x1, 0x6, @broadcast}, 0x10) executing program 4: sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xc0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x270, 0x5c, 0x160, 0x0, 0x3e0, 0x270, 0x228, 0x25a, 0x270, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [0x0, 0x0, 0xff, 0xff], 'veth0_to_batadv\x00', 'pim6reg\x00', {}, {}, 0x3a, 0x1}, 0x5002, 0xf8, 0x160, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@connlabel={{0x28}, {0x0, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x1, 0x9, 0x10, '\x00', 'syz0\x00', {0x4}}}}, {{@ipv6={@local, @empty, [0xffffffff, 0x0, 0xffffffff], [0xffffff00], 'veth1_to_hsr\x00', 'dummy0\x00', {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x9f, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) bind$packet(r2, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x6, 0x6, @remote}, 0x14) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f00000005c0)={{r0, &(0x7f0000000400)='raw\x00', 0x0, &(0x7f0000000440)={@align=0x5d, {0x4, 0x7, 0x10000, 0x1}}, 0x59b, &(0x7f0000000480)={@_ha_fsid}, &(0x7f00000004c0)=0x1ff}, {[0x100, 0xae, 0x6, 0x6]}, 0xc, 0xac, &(0x7f0000000500)=""/172}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000480)="b7028d7a89a1a9e34b7acba3d9bff1ab77e1", 0x12}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r7, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0xe8, 0xe8, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1f}, @loopback, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {0xff}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xff000000, 0x1ffffff01], 'sit0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x34}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xffffffffffdfffff, 0x0, 0x10, r8, 0x0) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)='%pI4 \x00'}, 0x20) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES8, @ANYBLOB="00000000000000000000b3157232bdc9461000000025b8f3e8a05f1759f4ef78ae56e8899b5cb0b1320f94e028c0511bdde3ea3d712c8925a426a7971bec63ae7f4cdb8fc0e9866608d71c5e35b18cab88818a41b5829071143009027a07df9d94a6e332de6ec5ef7eca1fbf75dd9eb9c45b952c891493c018dab4c02e803ed5151e31", @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000006201000019000000bca900000000000035090100000000009500000000000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000006000000010000000000000000200100", @ANYRES32=0x1, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000200a7335e4c8feee7edfdab1681d2b3", @ANYRES32, @ANYBLOB], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800), 0x4) r14 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r14, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x6f, 0x0, 0x2}, 0xc) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x4be7e9b6085265c0, 0x9, &(0x7f0000000280)=@raw=[@alu={0x7, 0x1, 0x6, 0x6, 0x6, 0x80, 0x5d516d0d135709e5}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbd}}], &(0x7f0000000300)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x62, '\x00', r3, 0x0, r5, 0x8, &(0x7f0000000380)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x10, 0x2f4, 0xfffffc01}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000008c0)=[r6, r7, r8, r10, r11, r12, r1, r13, r8, r15], &(0x7f0000000900)=[{0x3, 0x2, 0xd, 0x7}], 0x10, 0x81}, 0x94) socket$igmp6(0xa, 0x3, 0x2) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000305fcffffff0000040000000000", @ANYRES32=0x0, @ANYBLOB="1111020031000000280012800b0001006d61637365630000180002800c0004000100000100028000860005000500000008000500", @ANYRES32=r4], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) (async) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r3) sendmsg$TIPC_NL_LINK_RESET_STATS(r8, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x1f4, r9, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x0, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x61, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller1\x00'}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'nr0\x00'}}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x32}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x70a1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0xbc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "c5e5cf4d152feec67fbc7811fdd806888a61b5a4cd8a16e4"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x56}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "2bba6507193576ece3bb0df779f79e076caff4d4f5911c9a3f65cda8483cf8586a178f"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x8d0}, 0x40) (async) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x800) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000003c0)={0x0, 0x2}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000440)={r3, @in6={{0xa, 0x4e21, 0x7d46, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}, 0xffffffff, 0x54, 0x6, 0xfffffff4, 0x1, 0xd, 0x97}, &(0x7f0000000500)=0x9c) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='xfrm0\x00', 0x10) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r6, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001e00)=""/229, 0xe5}, {&(0x7f0000000300)=""/127, 0x7f}, {&(0x7f0000000600)=""/117, 0x75}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000004c0)=""/15, 0xf}], 0x5}}], 0x2, 0x11, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000013c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000000)={0x40, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}]}, 0x40}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0x78, 0x30, 0xb, 0x70bd2c, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8, 0x10}, @TCA_CT_LABELS={0x14, 0x7, "296524f13eb7394549979c0db12f7a74"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b30, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$kcm(r8, &(0x7f0000001c80)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x80, &(0x7f00000017c0)=[{&(0x7f00000000c0)="8b07ae2a4e41b1b5a3d16f6382ed9f612b1a14d63002a324775a2223b46932974c0b288725e2958924513df719121e9e46ac0aa77a347f974702f49be64686d6fe8aa7c334207eaaaee580b4b316cc341a428b7a6cdbf1633eaae03351ff597f2d2acb7b78b3b87a9221ebf21ecd52cc8ce35e76dbae29b2b24a4a556d3b813ad18e61", 0x83}, {&(0x7f0000000180)="bf43b486540e3d4ace685a03fc523756afb12ac65e92af7c9fff393078fcf030ae29ce7f385e6f9c1392655966d2367ed347ea3116304b900a65341cc8d3842c57e765fef01455e02560789ba5c93fa8ceeead16a374", 0x56}, {&(0x7f0000000200)="047697de2073a28af41524d5", 0xc}, {&(0x7f00000007c0)="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", 0x1000}], 0x4, &(0x7f0000001800)=[{0x100, 0x101, 0x800000, "f99f9f9eccfd43eb1c127ae547a954d3f0e0b4909ba3e6b1fb4a01e0b2e3e2657f445dfb820fb254804b2b6458bb3d009de8441c9a72b7b7754dd2bb6490ed47be71cd384f388f773d13b4c78cb16e7fdd70c76ec581ac28f6a6960e2c3ea8a54ca3134ff3b89f74c10c627a5daaf083c0f80ca02ba00e648bbb98f0f964e6fbdcf56a8a128365d8fb290b5844f1a1e96c8017c6fe29d442a09a2beabf8a7ed3b431b07cc711f79ec4e611c434029a7119ecbb756aeef285bd8b9f7f9c51634f1d39d42f169699beff64f8606cde12525a4b2be70776a66a7ca3affc976a01f9b434e60814a4b6a8e83537bf5c3a9008"}, {0x108, 0x116, 0x2, "4f3468f3b5ed693ef94a392700a2b6b9245213601d63646203ab6fc6b47b9796b646fff29df433ce241b062d171931f28ddd03692a66d0e3e484ac41894e83e38e15970a0dcf3fd5ee6aa3a7ee23614179cc65555a79fd1c5b1d0d5049dd8d11169e02837d0394c4ff8884707eeadd13faa85d26b6dd11e8a0b25b9c222ee186cc8d9a6d456e0b905a311a4329e2ee75ceb60541b0ce18067b0c4bd0cacceee4e6d2598ba74fcd400c1912f7d94bb5c6e6d8aace73bcfb50d7913aab56442291e4253f492a7c61452d13d1347db14730dbe7af6d6fb74b2770f67f8de18af24452abd0f7da9b04501e5904cbcc829b758e"}, {0x10, 0x113, 0x3}, {0xd8, 0x10a, 0xfc10, "f5bf4cf8c2e77166c389242d2bd3938067e81e4a6ee2ce5d6a0a421a45c99d4d06b3e4ea20b13888ff7335ddc7fbb95068ceab15b6d0f1b897dc0fda0de808bb03bcf5dcb21b2d1fe94e244832ecb9e3b48e8a80e1b91fb4bd4554199cbb281b503c65ef07f65d4757576ee448549b2b6b217935dff3ac8c3f8c36226ee323c10ef1a2790deb2449d86de3564facf4a3d2fa9f30c1303246f3886f40e63eca45db4708dfa3ac7283c80b84bf95aed19bbe20d0f14cd413165274c05f0ea0cb4ad9201851840b41cf"}, {0x80, 0x10b, 0x4, "df20d44b9669cbacb5b28279e566ddb3fd9d979d72e1461c1c161c82d80d6d1cc6604e1b41ceca359fae657cb5c9a9f002f7ab137ef6acda12e478d8bb7a7cd7984284c2c812a75d025be92a1926e88342cf4ead70bc658d452dd013f4703087991d49a38af92869c3cf0f5e"}, {0xa0, 0x10b, 0x10, "73a6e044cf3466e62be78420d4d7b863417d25e1e3564444a433cd7fd120aab61c482aeecfcbd4fca64ef650e54c8b3d08645ac84384526bc3bdf616b6a65d1a06f390644b5d74860823822f57a7adb845b9509c92f65be1a98d9688a16d858c9c034c1b8eb8d419f641aff600cb9f48bf1d334219a9fde3ecf5313acd3085a800c1fb676c08029e1d12a6af159dd7"}, {0x50, 0x116, 0x1, "952515fc65825228c2fd5244b154c199cff72344c1ae87283529145c24c333039e0a1c8efec91a0c31e811d3faeb3ad52836f43efb57f20726b5"}], 0x460}, 0x8000) executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x80002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x700, 0x20}}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f00000003c0), 0x4) recvmsg$kcm(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0), 0x60}, 0x0) sendto$inet6(r0, &(0x7f0000000280)="02043c00ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x10, {{@in6=@mcast1, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x3d04c9a7, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {0x0, 0x2, 0x0, 0x3}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075d, 0x1000}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x31}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)=""/206, 0xce}], 0x1}, 0x6}], 0x1, 0x102, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "c8bf5d03ac85c25d", "9a5d38a17f00c500000000feff00", "a1c4776d", "3c84a3a3be2adbff"}, 0x28) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) syz_emit_ethernet(0x86, &(0x7f0000000340)={@link_local, @random="1704b45adbde", @val={@val={0x88a8, 0x7, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x2, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private, 0x1000000}, {@private}, {@broadcast}, {@dev}, {@private}, {@empty}, {@private}]}]}}}}}}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}]}, 0x44}}, 0x0) executing program 1: socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000009c0)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a00)=ANY=[@ANYBLOB="0100ff0f080b00210000000020000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000000000000ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18f14710a44213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"], 0x80}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000080800"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB='\x00\x00\x00\x00A'], 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="04005b"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000e6efbb8ffa25de5fa6ff7e27b0000000008000300", @ANYRES32=r11, @ANYBLOB="04005b000600650040000000"], 0x28}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x840) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r14, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r13, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYRESOCT=r5, @ANYRESDEC=r4, @ANYBLOB="05005bedbfa83cc6b633ebb6c1d4d31e9b6200de28a1d64450be334774d100000000000004f340e6168b0f2aabb7586a8f87cb4ce33d306e38e926aebc5162f01b3b7f1867b74d60a7918600000000b5d0f9f9a570e5ffe99cbe781d2fc81a6f9b9790663c963310f0cd8b320c092f0712d825d80a21c8a2fd2d82551ab125aaf76a95b04900781845a080d5a1e5b0bb3cb5759896fdbeb944b82a30aaee7cd68808b4098229cf5f291d337244c2eca49f36183cc7d23c6c07033731b31ee83eeffa3c4e2cf15fb40257b057ba3cd7d402b3257352be9f3fe4291ce6cc2ab1952610d1df2f28af59f1e8bb0000"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='xfrm0\x00', 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0x80}}, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) sendmmsg(r0, &(0x7f0000001a00)=[{{&(0x7f0000000180)=@nfc={0x27, r1, 0xffffffffffffffff, 0x5}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000200)="6d670152ae3206eaa7ec3dfbc8c8b90467ca2b2ccb2ce8804bfbb62cc4a67b4ed79339957516173e21f97a9217a3a261967e849cf856cdc12ad9cfa3f6c2dda4092ec1453d9c15ab29b0c423ec6b63d559386f3acc740732a03bfa1478ac7e9685c9f40ed67423c249f63ac1b6fc902dd12bdf7b5a3fb4c739e04c7af689e8", 0x7f}, {&(0x7f0000000300)="9c437ed9ce5604ba9c2f1a7932ac50d2743357d5eb4fff99f462e85f4fd8ccc7ac16ef0633344e975efd9db9e0a6905531ba1850b3965876b72b6ffbdc243157cb6131a7572db5136568fa6d033bd029709f2e4bdf11de4d7b41bbcf4b2e9abe0f31bbacca45c88baba9f9e143cba493545d0080e4825efd0bb34c365a2a57d32a2ab3e50d0fc5a196bb88d4b2222e7cb068f75865e5f244b12059422b14d8689d44f80d70630fa0f5d73fc1aef0c8f6d6847e139814062f176bc47f6a6bc4ee3899d594dbf160cdb05add80b458690441330fb26e39", 0xd6}, {&(0x7f0000000400)="07d7f783567ae45349434e842f1daf48c8386b5f73a4fa69dc1efba8e50f3a4c526f509598969c783e0fcaa20640348f58ad0143cc3fb5710f937d2df405af8a34a3d47733e9e14609486c0ac4498991494c1c53f8837c4e78267c637445b4dc221aa248189e63f8a56f823f6583f4a027eb25a7a7b23112c89ad29f4898fa7c314444052fd04516a302c1f5af8523adb43b7845623e51b747d91b6a5e0e3eb70facfc006ceb36314d2042b2cd80ab77b1", 0xb1}, {&(0x7f00000004c0)="4122d91afb62f73876c5144028c640d311f31ba5389c8e119494cb8f4bf79f411f68619b47fae57a4cd40d74a6a49fa559bd1fde90ad660e515e092454a3396d433ab70e808965a9cd3a1ceba112e0ff22c06b56ef66169c1526f2e579d091fc", 0x1d}], 0x4, &(0x7f0000000580)=[{0xc8, 0x102, 0xf, "ba3707de90def23539c9df8acc64f511b22b171b387094dc8cccdf0fd7851a8aa54dfa00fbaeaba82956a5cad3779f07aad16b581b137d509eab00439d0af6cbb2d8c2788a25ed493fac6b8075921eabd019437dde52e4244a7846cf6e96b1d494627e4f7490a26928a302342996aa76f0560245796e79ed11f549798695138b511229eb68a74e0c50b8f56c3c54c98da290c21cf0499ed4d80b4338d7e7ac1f579199ee3b4ba2ba24ee8a2b7d3b96c97ba33a"}, {0x20, 0x114, 0x8, "4b1a42cedbdd779256f3c52b42"}, {0x1010, 0x1, 0x7f, "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"}, {0xe8, 0x108, 0x9, "65d9e9f557896fa16cdf389d773386a86d380ac0cd33ac8a3c990ed4ddc90c9e4502840158c022bcc12fb314e89a9b553d84aa88264fa2db2b4613f7cf78efa9dd4f3b22162809e2d6b1293874e4a1561084ffe14ff0fd3521a6e8448a71c4c5bd800b4d5b2319062b804cb97e85c9f5fdf0caa3510e00fb3336b07f1acb49e1b8804bd14b048fd25b1d5cfd70ce8f3667b7f09b1474ae12ca97fde9068c05006e00806e6534d95cfd748882f00f461611e6280776a5df58696e7b7ff8c871aadefa193afa788c525117d6a6b20e7f3bf94f2226bb02b9cf"}, {0x90, 0x10c, 0x4, "254fd6fc681bd43e73e3bcaf4a09e142653ca7cc4ff9e25430a0841fb6e7121b9f61e8f67198ca38d5c6ce64e2bc444d2d68703f46d535a7267c567d35df3d8983be331d493d964f0097611fc0ea3e4bff455d990d84fb98b73a7023cc3c046f09c2bfa1c82daccd73a4280b66a3bfb3a6b71d7a5610ffd2bd469ac2ba4c10d1"}, {0xe8, 0x6, 0x9, "88becd60cc078eb7ab75895faf0a5d97eed8385b70bb6621ea616a2fc2a0342136587af5bcd4956196017511d5aa18c782bee1964eb8cca2a677bd1c9b562a327c91fb75acbf980db061b11d43c0ef14ef128ab6793fcc75d651237dfc31564273c837a95c5aadff7c58f977671e23a9b0144bb744e8f9dbed1c97dc7c1236915b7bd11e5db8068498d08ae2fb3135bd86ef7df9a95ec84d5584e5b96c1d26e8117e79c4239e9c36fbe88aabc78721db2e00c00a009772a1b29cda5244f23157eee06180a13247f7be2eb05794c62d3a25a3bf1da0"}, {0xc0, 0x111, 0x6, "67330a934053e4cb7ca8a9fd418d1cc2f0386f357a216a28851a92c9484cec90d45e5f4c9f945d13625008e678cd324a8e621f4531892e76df1b448c708d3c9676d697049a26025845f8f7ab8a9fe44bc2ffe28cab2415f11a4e991c93a4addfc2849bb5a34156b9f6b70cf331ca67dc9d8f7a6e99b90788a643e31d84d74d56b4adb1710ebca9ef2aa72cf9040c2b5595c31b94773f4bb36f34840e4f9b2f62747afb3c1d617b401edd"}, {0x38, 0x101, 0xffffffff, "cdcc068edfd2653ff335dd4e27e89d1eb0832857bf3cd896ae883adbc29e2dd3e9ae3cb95922"}], 0x1450}}], 0x1, 0x0) r3 = socket$inet6(0xa, 0x5, 0x5) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f0000fee000)=0x3fb, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c) socket$inet6(0xa, 0x5, 0x0) (async) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='xfrm0\x00', 0x10) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0x80}}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) (async) socket$netlink(0x10, 0x3, 0xc) (async) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) (async) sendmmsg(r0, &(0x7f0000001a00)=[{{&(0x7f0000000180)=@nfc={0x27, r1, 0xffffffffffffffff, 0x5}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000200)="6d670152ae3206eaa7ec3dfbc8c8b90467ca2b2ccb2ce8804bfbb62cc4a67b4ed79339957516173e21f97a9217a3a261967e849cf856cdc12ad9cfa3f6c2dda4092ec1453d9c15ab29b0c423ec6b63d559386f3acc740732a03bfa1478ac7e9685c9f40ed67423c249f63ac1b6fc902dd12bdf7b5a3fb4c739e04c7af689e8", 0x7f}, {&(0x7f0000000300)="9c437ed9ce5604ba9c2f1a7932ac50d2743357d5eb4fff99f462e85f4fd8ccc7ac16ef0633344e975efd9db9e0a6905531ba1850b3965876b72b6ffbdc243157cb6131a7572db5136568fa6d033bd029709f2e4bdf11de4d7b41bbcf4b2e9abe0f31bbacca45c88baba9f9e143cba493545d0080e4825efd0bb34c365a2a57d32a2ab3e50d0fc5a196bb88d4b2222e7cb068f75865e5f244b12059422b14d8689d44f80d70630fa0f5d73fc1aef0c8f6d6847e139814062f176bc47f6a6bc4ee3899d594dbf160cdb05add80b458690441330fb26e39", 0xd6}, {&(0x7f0000000400)="07d7f783567ae45349434e842f1daf48c8386b5f73a4fa69dc1efba8e50f3a4c526f509598969c783e0fcaa20640348f58ad0143cc3fb5710f937d2df405af8a34a3d47733e9e14609486c0ac4498991494c1c53f8837c4e78267c637445b4dc221aa248189e63f8a56f823f6583f4a027eb25a7a7b23112c89ad29f4898fa7c314444052fd04516a302c1f5af8523adb43b7845623e51b747d91b6a5e0e3eb70facfc006ceb36314d2042b2cd80ab77b1", 0xb1}, {&(0x7f00000004c0)="4122d91afb62f73876c5144028c640d311f31ba5389c8e119494cb8f4bf79f411f68619b47fae57a4cd40d74a6a49fa559bd1fde90ad660e515e092454a3396d433ab70e808965a9cd3a1ceba112e0ff22c06b56ef66169c1526f2e579d091fc", 0x1d}], 0x4, &(0x7f0000000580)=[{0xc8, 0x102, 0xf, "ba3707de90def23539c9df8acc64f511b22b171b387094dc8cccdf0fd7851a8aa54dfa00fbaeaba82956a5cad3779f07aad16b581b137d509eab00439d0af6cbb2d8c2788a25ed493fac6b8075921eabd019437dde52e4244a7846cf6e96b1d494627e4f7490a26928a302342996aa76f0560245796e79ed11f549798695138b511229eb68a74e0c50b8f56c3c54c98da290c21cf0499ed4d80b4338d7e7ac1f579199ee3b4ba2ba24ee8a2b7d3b96c97ba33a"}, {0x20, 0x114, 0x8, "4b1a42cedbdd779256f3c52b42"}, {0x1010, 0x1, 0x7f, "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"}, {0xe8, 0x108, 0x9, "65d9e9f557896fa16cdf389d773386a86d380ac0cd33ac8a3c990ed4ddc90c9e4502840158c022bcc12fb314e89a9b553d84aa88264fa2db2b4613f7cf78efa9dd4f3b22162809e2d6b1293874e4a1561084ffe14ff0fd3521a6e8448a71c4c5bd800b4d5b2319062b804cb97e85c9f5fdf0caa3510e00fb3336b07f1acb49e1b8804bd14b048fd25b1d5cfd70ce8f3667b7f09b1474ae12ca97fde9068c05006e00806e6534d95cfd748882f00f461611e6280776a5df58696e7b7ff8c871aadefa193afa788c525117d6a6b20e7f3bf94f2226bb02b9cf"}, {0x90, 0x10c, 0x4, "254fd6fc681bd43e73e3bcaf4a09e142653ca7cc4ff9e25430a0841fb6e7121b9f61e8f67198ca38d5c6ce64e2bc444d2d68703f46d535a7267c567d35df3d8983be331d493d964f0097611fc0ea3e4bff455d990d84fb98b73a7023cc3c046f09c2bfa1c82daccd73a4280b66a3bfb3a6b71d7a5610ffd2bd469ac2ba4c10d1"}, {0xe8, 0x6, 0x9, "88becd60cc078eb7ab75895faf0a5d97eed8385b70bb6621ea616a2fc2a0342136587af5bcd4956196017511d5aa18c782bee1964eb8cca2a677bd1c9b562a327c91fb75acbf980db061b11d43c0ef14ef128ab6793fcc75d651237dfc31564273c837a95c5aadff7c58f977671e23a9b0144bb744e8f9dbed1c97dc7c1236915b7bd11e5db8068498d08ae2fb3135bd86ef7df9a95ec84d5584e5b96c1d26e8117e79c4239e9c36fbe88aabc78721db2e00c00a009772a1b29cda5244f23157eee06180a13247f7be2eb05794c62d3a25a3bf1da0"}, {0xc0, 0x111, 0x6, "67330a934053e4cb7ca8a9fd418d1cc2f0386f357a216a28851a92c9484cec90d45e5f4c9f945d13625008e678cd324a8e621f4531892e76df1b448c708d3c9676d697049a26025845f8f7ab8a9fe44bc2ffe28cab2415f11a4e991c93a4addfc2849bb5a34156b9f6b70cf331ca67dc9d8f7a6e99b90788a643e31d84d74d56b4adb1710ebca9ef2aa72cf9040c2b5595c31b94773f4bb36f34840e4f9b2f62747afb3c1d617b401edd"}, {0x38, 0x101, 0xffffffff, "cdcc068edfd2653ff335dd4e27e89d1eb0832857bf3cd896ae883adbc29e2dd3e9ae3cb95922"}], 0x1450}}], 0x1, 0x0) (async) socket$inet6(0xa, 0x5, 0x5) (async) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f0000fee000)=0x3fb, 0x4) (async) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c) (async) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) (async) r2 = socket$nl_crypto(0x10, 0x3, 0x15) (async, rerun: 64) r3 = socket(0x40000000015, 0x5, 0x0) (rerun: 64) bind$qrtr(r3, 0x0, 0x0) (async) getsockopt$sock_int(r2, 0x1, 0x12, 0x0, &(0x7f0000001ec0)) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000240)={0x44, r1, 0x201, 0x0, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x2a}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_4ADDR={0x5}]}, 0x44}}, 0x0) syz_emit_ethernet(0xc6, &(0x7f0000000080)={@remote, @random='dj[xgl', @val={@val={0x88a8, 0x3, 0x0, 0x3}, {0x8100, 0x2, 0x1, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "49e1721d162d232402327abfae4ca9a3014999b7669740c5e16164f47fa4252e", "5149df5c7d7ba66c129c2e57016a51b22a14e64dd54bae746005e30a73c250ed77dcd491a2f30f1500b0c0038204dd27", "2bbe989ad0e2f3700617a787d50efbd50fa8e13525882e4167de3fbd", {"3a620000008000000000489644aa2060", "5a0f02926e00"}}}}}}}, 0x0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x3d, &(0x7f0000000640)=""/140, &(0x7f0000000700)=0x8c) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000f5120a030000000000000000000000000a04000800080003400000000809000100735134285cab00"/64], 0x38}}, 0xc080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) executing program 2: socket$kcm(0x29, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="016f872801000000001214000bef21384089ad100000408490783fff0600ccf75785f9a62149ebcfffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0000009078001809c400050200000000000000000002d58838068b91000000"], 0xfd6c) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x4810) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) connect(r5, &(0x7f0000000180)=@pptp={0x18, 0x2, {0x3, @loopback}}, 0x98) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80c0}, 0x80) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xce22, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000340)={0x1, 0x12, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0x9a, 0x4, [0x4, 0x6, 0x7c1, 0x4f]}}, @calipso={0x7, 0x58, {0x6, 0x14, 0x1, 0x9, [0x1, 0x1ff, 0x5, 0x100000000, 0x0, 0x3, 0x9, 0xf, 0xb3f, 0xc]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}]}, 0xa0) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1_to_bridge\x00', 0x10) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00'}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x21, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000280)={r2, r3, 0x0, r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x4) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00005e001000012d00"/19, @ANYRES32=r2, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c0002800800030000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r4 = accept(r3, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r4) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="50001000", @ANYRES16=0x0, @ANYBLOB="00042abd7000ffdbdf25020000003c00018038000400200001000a004e200000bd78fe800000000000000000000000000024050000001400020002004e24ac1e01010000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x40) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000002c80), r2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002cc0)={0x84, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20000000) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x110, 0x6, 0x0, 0x4) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0x2, 0x2, 0x6, 0xd77, 0x9]}, &(0x7f0000000080)=0x78) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) socket$l2tp(0x2, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) socket$kcm(0x21, 0x2, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000002c80), r2) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002cc0)={0x84, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20000000) (async) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x110, 0x6, 0x0, 0x4) (async) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0x2, 0x2, 0x6, 0xd77, 0x9]}, &(0x7f0000000080)=0x78) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x2}]}}, 0x0, 0x2a}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000011080)=@gettaction={0x14, 0x32, 0x6dd711a25f4cb68b}, 0x14}}, 0x0) executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0xffffffff, @rand_addr=' \x01\x00', 0x9}, @in={0x2, 0x4e24, @empty}]}, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) socket$inet(0x2, 0x6, 0x8d) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg$inet(r2, &(0x7f0000002300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4c001) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000000050000001f08", 0x1d) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010102}, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x0, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x2000080) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0019"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x314, &(0x7f0000000cc0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x306, 0x1000, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo={0x8, 0x0, 0x0, 0x6, 0xfbff, "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"}}}}}, 0x0) executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0xb, 0x81, 0x6, 0xfff9, 0x10, 0x2, 0x8, 'syz0\x00'}) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) write(r0, &(0x7f0000000000)="3b000200", 0x4) executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32, @ANYBLOB="138000002b92010024001280090001"], 0x44}}, 0x8000) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r3, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000040000000160a01010000000000000000010000000900020073797a30000000000900010073797a30000000001400038008000240000000ab040001"], 0xc8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32, @ANYBLOB="138000002b92010024001280090001"], 0x44}}, 0x8000) (async) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r3, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000040000000160a01010000000000000000010000000900020073797a30000000000900010073797a30000000001400038008000240000000ab040001"], 0xc8}}, 0x0) (async) executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8ba4, 0x3, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x180, 0x41009}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x4, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x9}]}}]}]}, 0x34}}, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4000000, '\x00', 0x0, 0x0, 0x5}, 0x50) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f0000000800)={0x2, {{0x2, 0x2, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e21, @empty}}]}, 0x110) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf0200000000000085000000cc000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r10, &(0x7f00000000c0)='syz0\x00', 0x1ff) executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}]}], {0x14}}, 0x58}}, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10}, 0x47) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0x4, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r2, 0x1}, 0x14) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003"], 0x58}}, 0x0) (async) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x0) (async, rerun: 64) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = socket(0x400000000010, 0x3, 0x0) connect$inet6(r5, 0x0, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2400, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000340)={'bridge_slave_0\x00', 0x100}) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x12100, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0x158, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x158}}, 0x4c0c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc1400000047", 0xb, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e25, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x3) getsockopt$bt_hci(r2, 0x11a, 0x0, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x198, r1, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0xf8, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x345a0c3a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e468390}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8e7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x547ac294}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf5b5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x240fac27}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63ffe381}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d902680}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8442fc6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x79e9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb6c0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c9ab444}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c2a7dd5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6e50}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x199c}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ae34266}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9132}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4752137}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3ddb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d15}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x652aab04}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6ede}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x264}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb2c6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf042}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x111deb01}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf43c}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000804}, 0x40000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x68}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[], 0xb4}}, 0x40) (async, rerun: 64) r5 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e23, 0x3, 'dh\x00', 0xd, 0x7, 0x8}, 0x2c) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 64) shutdown(r5, 0x1) (rerun: 64) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) (async) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000600)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x55}}], 0x48}, 0x0) (async) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000e20800010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x22870, r8, 0x1bbb2000) (async) r9 = socket(0xa, 0x1, 0x0) close(r9) (async) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x56, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x48, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xd, 0x1, 0x8, 0x0, 0x1000, {[@mptcp=@syn={0x1e, 0xc, 0xb, 0x1, 0x0, 0x3, 0x2b43c763}, @generic={0x13, 0xe, "099f7786f6ce3c30eb72984b"}, @eol, @nop, @sack_perm={0x4, 0x2}]}}}}}}}, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x7a, 0x0, &(0x7f0000000180)=0x57) (rerun: 64) socket$rds(0x15, 0x5, 0x0) executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/153, 0x99}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b8d3d8e48974aae56e0046d828cd3b00000000008bdf0100d6b9aa5ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a090000ecffffff00b2e6b5397f7806b6ff846de37a34c8342bbac5a51eac662f717c429a2ee1d41f67235605e4f8a09cede8676044d4fd3d7935f90651aa2d9c57276322b82e8976f5a4d980eaeb3bd368c188df160da087aafd68dc", 0xa0}], 0x1, 0x0, 0x0, 0x84}, 0x24000081) (async) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b8d3d8e48974aae56e0046d828cd3b00000000008bdf0100d6b9aa5ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a090000ecffffff00b2e6b5397f7806b6ff846de37a34c8342bbac5a51eac662f717c429a2ee1d41f67235605e4f8a09cede8676044d4fd3d7935f90651aa2d9c57276322b82e8976f5a4d980eaeb3bd368c188df160da087aafd68dc", 0xa0}], 0x1, 0x0, 0x0, 0x84}, 0x24000081) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xfb83a000) close(r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@getspdinfo={0x14, 0x25, 0x400, 0x70bd27, 0x25dfdbfd, 0xfffffff8, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x88c0}, 0x40804) executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0xa8b41, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[], 0xfdef) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r3, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000540)="a0", 0x0}, 0x50) sendmmsg$inet6(r0, &(0x7f0000002cc0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x8, @private1, 0xe}, 0x1c, &(0x7f0000001640)=[{&(0x7f0000000040)="ae0bf2730cdc99f89dae8df90913c279365ad749023c15a8d56ba143af14ae", 0x1f}, {&(0x7f0000002d40)="4ab6933e37a45d7cb76f943c2c7872e348e04c471f22a4487686c14025b18c42dd9b7d9aa3b76d9b3f1cab4050fb04681799c00da2d0cfa55ec14970204854d9e3f182a562d49d637767ef673995bafbf4ff32f6f64374de03d3076badd692523cc8ff88fa0a3d70a38ddb0b725ea747a86ca6e641fbcc567b578360ca94b53b4a2ce6c7b898ff4544dd624ab839d2e8a38447f7763f44cd1dbb42aab9b73a519c8166329be2a9ece294af192dfac8c30b2116a6f7b7e1aababa9944325af7145f8ab1fe69dfe4340a8022cb7eff73c7293d2f36e6285cc739d6789b8fb45ee303bb77e094c80aa9192f1e1e5f082a64b193397892ee8f756c9d9a4bf091a00368a155d672214a83f6e150f86e0e4252d963d1ca6c76248586acbfb3fb1170285d365dacc77608c41445fbf47de76c55b95eda9fc0d0584644516b3d02ce22b552df8e944ef02afa2eb0b642965dd11be6797f7c01bd2a03b15678866dc96a6f5a073b8c6c724c8f0d06a0f5c164aa1eddfa2dbf829cb6703d574c83cf71ab43a24c5ab6f165ba0b69939f2e2b22e44ba2f4f19b81b68cd3f4f63e4839392b07e0d3e26d165aded2ea95cb13fc2e72666a76a2c046eb859e4bcb506fa6b2a8edc018f0948319d9adc2a036afca341b7c1d162f9098b8ecab324c6672a34624c775e27efa9aaaff007eded7fab783cfffa02fb664c549346ff27607cb88b383d0fdbe84c8ec0e10b3723455dd942db7664dee24331f8dd40e315f5b1484b255d9ef36bcd8139ea68210317616f172ed35d3e863f7492593c87e63c72c142bf25ec9c53b74985e7ee63f4d642eb73828f9fe541ca33d245ccb3eddc565ea72c91bd17ab8b7205e39e2724592a4fedfacb250a64e5baf11bac316ce46c5a64da687ba5b94d177f037f58ce9979d7ed4d9c3dd6259fc87c00b19ccb204c07680fbc83c259a546f1f19033ae35e77ddf434200713c9d9b18b39e2a6f20179e98e81ae2e69fe9dca835c282b26d7c2cd4df9515a67fe32904f6f550546010043807065a904dde72898fe318895971fab752ec84bbcdaf43ade771cbcc18990b1f2d46b81076151466e351603a28f34c651778ef113647c7fcdb8cb6d0c7888378c4116f0feed8e1204c2df8e542bda14f8797f161f6ca3006f65e05988cd06cb5056f1f14bc8f7c053cfacf79c8126353f8fa3f1023dce6328d3ea83d99954bf573b919a542b8ec587a752ac8ed633732cc4a37ea344242e45e3c08e31f88db66f080ae9ad5216d1b7d5ce0912c3c4ac12a25fe695fb55a1d0367b46f8269a6ba08a2ca26bf7a8edb1bb39c983f49a1d479be242bca19b119a22ca5ab36acb4148638f28429f364bfd1a46e846e7c2dd94ad5ea95b29813980f3998078aaa73379919c9db41df0984a5bd8e8a5742d2228cb135a9a9f5f9db56cf227c6ddd058d77d0e9c2e2af14f19b162b288d585be23583fe224c7a83ccc0d81e2531135e76e3f37a7e2a8e795597b7b6ca3bb43bd53095f2d208f8646ffaff42bf5c6cf2039bfee62951a074eff70e4bf308384899b50f721a7af8e40f4c2c122ff6709dab80f8d6176ca2adc74db461fd9b72d8277bd8980bf874b1c9995d9b208a35be6c905b4d93b7b57c2d5c8f4f10548ea00a3a4dbf24da59c3b65805332d03fd8ef9f716b25210993b31fb676c9ab26ddd3949a8881be0e34cc497df9178ee9de0ce6626d5cfa74c2f94a7c9510ec5868aaedfbb436779e4e4706c131152f0c8d0f841c67ba3d2da171707580821815297b0d3c6ffef7b0a5b1a364288bec65eaad1ef00838f5ef0f7fb7b9a6d6853ebac48df884226508dc7c89fb5754b301bf1440d286a8e0c1922b98f539a8b916de83e0bf999ea614383705ae80c16ea3fec32db9b2640b07b81e44303889c21472444e010bab3c8954e5c61b2ca549c034765e07d2ff83f8f6fd760ac664b2332e5b514701a0c6f34af7953f49529861eeb9c48dae886d4d9a50de78242ddde2b75360481cd346df7cc728b5217dbf0c143b56959626bb4565ef0b1278f0b3f674177f43636d63f06cbb870a3a5062ffe6350e2534ddad4dd4bb749c2a88edc25c0bd189e110a11ea208dd0a0bc7097a0ed7b2f7e462898d6f061dd5ca43d9f3b9a0b2e403fcb592ce71a8ecbc78a9b281ca0539dedaf69f9e566cdc2eac80878331490133c5da9000aaa182135a40517f03281d20c7c19c53d996d0e49e3c75de53c19f7be2d262fa121e3275b252604a57147d5d4dbc96ac8393de9725359bc6278e40134d036aa56e8a3758ff66936d49c25d9d39d62dd96e9729cdb47ace7f57cf9de9f6c62b35c30af7ec1a75e71a9c9a88efe349ae89a37310acec0edb1f42c324bacf18f3949a00d2a41af3ad02f1124faab1ed4d2e7b370c7551004495af8b4db63dd6498559b2cd357758bdd02d270ca5da388dcce097cd29130790825df398a6f465f8696d514d4e322c48a9251185631c8cf9e077d0d1fc100ff47ab27c8dea320725c9d58671079a82b1e358121e0924064946ee281fb6679f878515648ebb9de92a6ce8d366f4bc955e946a94b65e2d399d8a4b27379200b2a9fb6dfedc53976510e4599ac8e514aac984626f2859b90f73d46b889eb58dc87cdb5794837c54fe61474fe7bb6a848b1f49e5189779093c12e95c27310ede3d2157fa41467f0341b2aa6369ee7d80b639e2bf2a5546c9b75956ceb8449fa530546afb5c332795f781e68e52f3d11b900d9f4cfb7588c5d7d012d9ca385b672e65f151f21dfbe73b4233f49764b1be1235baf4b65d4c3936cd46fc637831e7aa8618217428ad6ccd82856120e020c175f64a46eaa2211342ff4847e6767b2c14e49b096e2d58aafc08c0082df24fbb1c232fd04712b4a6776c14d4e7ff61ba90f7c8639c758c6c157304cdf8636f196785bc943b996b68eabde6e084fdefe17ff16a65f475c7ff4bdca5685632fe9c7ac081ae65e23fdc25d517012f650bbf08636a374772250e4cdee57c5844175f3f4946e191725e72f49cb8b42c1567ea0c0e5093e64b5c54993dbd8bdf3b8b4f2fbd248018620e419f958c41334e8cb9f6948da45ea537192cb26b75012df7f2067bac7f78b980e32ba405796dea1906b657342e8d0ec28b307c3e9c112337c2fa9cafb4af9057d21515b0cb1d65192c8d918d8a929f5313656c9051f45093a7cec523b2aa630bf71a5626f871cdcc2f9d95380d6aa5713907d69a49198b916ed917d5ad5919df46f82a84f815a34450ffb2d3ba1efe508aeffdc5c6a11c76b9786124ef6f414fc4f9e1549c9b227777a9e9e2b02ce18ed060532b382ed2301b2928177bea579253f82c54763a52430e90f472fd3c50154601eeaa9e7236ff8e70ebbc7c5550972b5792cc0e9c0eacb6e6c45fab6f4c0f479d60858b1a20d2fc49a078e449447895f12489e4c3723b3df92b2b225d6bfa735184ef2709196237837bf7fdccb75f478d001df314b7babf6ee1d24003f40e7f4573f4ec35d76fa425003c4cc50717ff9e1ad966ce200175e35297f1fa2e949884bf781ab99be6cf657051b7dfd9690b6cbc3a489694f6c3fb39c17fe6d1f8037801e579eb42e85d3c3ce13483f26b490a19b0648174f2bfd4cb69c8cb54001b892c1f1b5cc7615685baa789176a38865736f9293fd3032140908398181dad1d477e43757cbce4ec6ef430cd534ef5d0d0a99a11afa9ff45ffc43285a943028e5cb9358169890e6032bfc4b910f0f68cb315c2919dd4f09085394e58f2e1bcac9e5c5fc5720b27133ba3599a44dbb4f90584400989090152eeb3056c5a1044c371978cdf16c10eb5fd7ad990059c471f4868851e8c14d96a9beeb23f6ff1c6ab25727d76382b16fa09b5c363b26167021cfd2820029dc17bb376932398215cb13d5ba6b9a2596f313207d3af530870342e1100ac694655dc64f314af5d17f295bdd8313c758d87fc3ea7b93a3967b524a87e7b536305499fb4716a6f42467e9bc549b6c288b837ed5c837f1859222616303af73d8076f3efe7124439296b7e9df2e888ee79d27ad2e663432efc2314c8746d76b44249eb8181a7029b73c587fca76af2b39c4018d95dd4728c9f8889fab9e0b14a25add90e12057ae3b7617ae58979dc64ae138d69f1a929be9a41a5b68ef3f9fbe7e983d1fd1e54857cd2ab154d30bc6edcba242b7a052eefc4ec643df0c50ec6325acf9ea9707815e01ae2490df307f8548ba24956586a078f071c1e3df1811984e4e1fcbf686033b0c2a90463a1894241d5990a1b2b5bdd6810b74ed6c63f692bdd97685c5e2a301a4d7cc1b81d3809c6cb7ed9575cf0e167bc5e7f96dbcb46f3304cf5dd11e8bc2f47e6fa989c6bb02bd3aa6fa0f1be2f775a451db69fb084e28a2d1a3ff3757a47edbbabd5a954b1d96645596038c924129277ea592d301e826f96750ca8e32900f5278dc959e662f72ba728bd63db858ede0e921557cf74288f00eca4c69c3de19fa41326d9fb0e1187035ec8ba8e924defe7d21c83a21c37b234cef9754241dc475fec35d16875b8ccd6f1c62deca7d471a37cbfe7426b18dcff24efad8bd832c67bc0f62547775040ba015e6e2a8905d6a6965fcf85a4cc451b2883a5b15de84cb4bb7b9db7f325acf71da01803a50e65bcaf88a3aa134c432788be2198b6eeacd428e562a5562a399295e336ef2fcc626cc52a3d3cc51e9f3619c8099b60d22e6883f214510471092b55aba1759b1e964a02f7c0bd6d4dec4e5de533145651d30c82785c5852dd51bb602213a2c883b721e9bdd555bdf82f42a94c74e8263c052835c38b69a6ab096bd51dc5e21c90b51acf0b44ac4a6841ca5b9a27d31ecc0c7ad4dbcb1a572d5f7c5c7023dff56007b5d44d1e167c840576eb710df3b8fdcc8ddabaa4711ceeb1841b313da33e65f110d35aac86aabfa44d5799c8c95f6c5b6d4ae6b29bdeac30b55cf862392a61bcc135a0a86f6d24294ecd06d851e1ea80bc300f3b3433b85aae0dd1ac644b9e8e0343ae74999fdca97df53cf49e7f78ba7a09df451287cd716ea28eed115ca352e9c4eef329d8b0fad83c055c4ccf4aafab79b831359151c1e98d7132112a67ef4ca575742dd6e85306eabe0bd4255dc79aada48103fe43e7f76a8941117d670821e249b8c6832f74ba18be4c43bd16ff79d907f6df1c8976089a053c554fe39a85bf108ed15cd7f8ff49e70581116477afb26c76f5d81d12b06a4d59574b79122a31748b50fce15a7abc4fe59e26e31bb38b7da2cff0e2c95ed6243a32064a75b6e608eac2f48c852790c31566a3338c7ed92c410e7ed566cc0abb744e573d7bee83a2b526c46eac1c592295a01aca05cfe80e9cb681f427881787956a9fd1d252d9b3b2576be5ed28a88313ed4193fd7b381416ea516bb29b4423289c72f01b363af121b12b63cc955e4f1ac544231e13e0ea366b79186afc36ab2fe552a6f1460a493dd602d66ce96c332290fa771cabc8432d675382e071a702c1b0e28a1a7723514e9450416a70b68c21f7ff2a3b310745ee0ff1bdc2099e4fae7b101f82c4a41743bbfdbcc090d0a3a09c287d4b1e77d362934366024daaeb5ca09fa7af79a77329e443c46c6f969e62afa81f8695a38eccdd2d4d9dbb9ccff2ae21de04057061d35fc71f2573ab4b0c616e0c73aa7a7271916efef85a4455a532f7594e5c8a1ed98b77bfa0c267328f931b64b84fc94fbc0d5323ea088d7d028b002280d91d0625183b866a13f9257b4d686b5eac0c7d25ce461d6a085ae527515332a3d0", 0x1000}, {&(0x7f0000001580)="c1a9f5b80a340dec8708ce5e651cec8c005d5b18298ec189452700e554b48859a38fa36738020ffc11cfd2632155467d718e5c857aba19976e2e887a5f593cdccc44fc00d5ad9ba040289c0524566864d661c1b00cfea39d7e9a52130020fb6ec7c0eb95fe0ffa9b7dc6c0cbfc7cd54cd50cbea54e0103b5cb0417caf194eb01387b976dec0cb6bf82fe67425d1d287627272bbcd7f9d7afdf17b1", 0x9b}], 0x3, &(0x7f0000000180), 0xf0}}, {{&(0x7f00000017c0)={0xa, 0x4e22, 0x7ff, @private1={0xfc, 0x1, '\x00', 0x11}, 0x7fffffff}, 0x1c, &(0x7f0000002c80)=[{&(0x7f0000000100)="e1a2b965f4ea5666e8df2ae7cca93edfed24b706d546baac4fac79a812812493af4220c29234c15355ba5c0814eecd67a10d18de65ae6caf0952e248aecd6b450ecfaca605286423ce47e5fbf451223dacaacdf8631985c9da902709590200000000000071f9bd00"/121, 0x69}, {&(0x7f0000001b80)="a92d9eea775e46e8b074f2e6567615f905a9727033f992c231779132cd068c6a3a764a203d077221476d2b1f9c342078908d4396c68e0b889cb82689ae185325885072a24424d33d3b9ad7a26ad837d329f6553c77a87dd48532c4e06774591205ef4eaf61c79006edd488687a6103ca25a53ae6e208414e32bafad6e406c184e01424205a0ba4fdda970f32d123f102cc51e55d40e090a9ef2ca27977ea5257e6d0e65d90e2870d1a7c44faf68b4763eadca64fafc088d85b1cc42b3aac31f4632b1993c238bc801ccf118e9851bb32b6af8f0e903e123c35ce13431e891a9e9a1600996a011d5302441d942b31a4cdbba0a1a62ae39a4462d141262ffc51f8cffc19e489e0a482bcf50755171ea257c05fed20e8dfa1a306d9eb1a0e8233ecf2dd585187e43afba08dcce13f700e43e42289f9e55e5f502eaead1b08da5ce0f1782e9fdbcf1f3e43a5fcf5f214169667d2282938b32dd4063dae894cf44842e3ea803048a4366798dbd27dcf1512006b780b771e7e9e9c5eaca99d638046440159fcbc7fc02a87032afa1431af4abc505061efa63abc21fbf18a29c9e1e5b4c874ad2922c49d73b2c23ff2e88163c4a30a318b6dbdb355716abc1f92adb7c7228356433251e5c5ad63baae82b63160f13132f294ef3c6ef48cf63fc690e9ff2b8ce7a13fd4115252aee7a27c4ce029fbb27fe23b2367113e59ab067456197077fa808fcbe1ea6f8a1c7d91d2a8a4637af490c826aaa337b77d485c107427b6468dc68e2d00be06527396b283a01da6500dac075bdac683aa6ef811f00e1db5490d86acc82c435b457fd0ebc7b2a755440bfef7796cf628446041832a5dc8bfc305bc9f887e9bdd49f82405ff61ed4deb555ab42ada6768df290da0845c804c76b698497e919fe50a89cb46d284f8d7d144f0c24a8b48c63f2ab3a82d85d5d30cc3f2a5147977f8bcd293f50201b40fab1eb125d1a09923a577a2a767429468b4f1ba9352fec3a029f9d337819577dc6c5c6a394b749f177fa8399eb4433b117516518cfd39ec160504bfc762b792b55111e92782d07e017ef4285f8dcfa3c7f9e1100fc5c331818e8354a191bcb9044c1e4a2f4f54ba458c4f48b83d049c088e93875300e22bbf06c80ce1aecba6dd66d59b56cd403df4d465b6b43b9e3fb7bc51a61609782ec9c8c802234294dcd955eab3b1906270a62c87a500e719ab77525def87d81eeeb21d4cb659a2ccb5891fb125a57f2922a1b734123287334edf2b44a7e29865d608f5ab0b4d11929f646effb07ea7dee1ce94b7a4d4202e65ea50ffe4cb9269c98c6c3b1fa6bc431b3ca535ec2b58414e7d356b5be0e94a4498fa2c4ff9c9080831fe78f471bd7942ffe0c068d811f09b224dd29737b7c8da79366919e9f975fba34179bc6a4dffff8b61d606f7c7ba5ae807902d89a9486c5a2afe3a0cec204330c4bee710e0f09446d12b6c7dcd7818a2ec4ba3e64f4883db87a2627c80351967a946fdcb6f6e648e39c0861b423d511f4cfd08d27197cbd1694d77db2bdf928fa2bc0832001cc73a6a3c33e23a708a6c2273ce767a5c0454d3d57a7e927ad2fbc2aa1878a88c7c256be22616327b56a53066a8c7cdc983fc16e54053a63d3074144de696d3a5d99fecd74c02bc5fe98076eebcfb5b2e48e871f5ab78abeb39274e65a26c87c884aaf54ef75e3888920eedaebf49038503df4262d575aaf41f977559705b41d69830ed55e079d43170e75a0c1878ce3dc5b8b57909e769b1d6a5ab181969bcaf9facbe262c6374423c3bcdf522e9ef22d20c4f547b1a713fb217ba9b85308a5e581779db230cad8543e9a766654e53745948378cbebf7c9018429cbf82247cc625ef38f1dcadf0204c990fe2e4b20eaa80d9a58b4d84552f5357240cc46b8a034d1ce25375faaba9e11183ca1b9602a3e3c11c7b4cf8a56cf218ef76145f32336051721e05cad34cc05e4b0b63557c45940bb9f23526f95d3b5d6e3d47579373a7ead2b23c0d93e33104dacb012234125d96f092ee567aea28b1497812ff8f38089dd325a63bdb1c9166aef4658a85323fd608e5d6cf7d263baf5aa3076116b90e22906708549ecc96d6cc888cf88e90b6c374943779dfaa3966926659290b6da134b766f7b1c64b806a5c50ed3a98219af0aca3f2becd3dcfa976ec9bdf2d0b5f78413c7fd45cc0bce882167b6e7bcef65244c8d4ed15b5b742619cd823c895743909a065d0b017b3651533f739ec57405c5951dad523ecc38e13cc4d31b20e36e2afab83143eb0175be752956db3f75e771b1d60621aefd9a5d06adbfc8796eab5ec89f81970be0fde63925d64a8b60fe7f4d59a86ffecb469a449d6d2c4e0d4cecc400e78644a7d885a760fb9ef5e4511384a8d67ed2673d4c1e2fd023efb4dc8d2237529c705574b2517ef8c5c948cdb734ea439b6ae185411c66c0e170258abb92efb084bd3cc6c16036ad52b9ab52508d0bbae92ce40ab23b21e5f9e682fa29bc197f4d8c82baf554f61b4585356132a63dfa29cff72cecfffbd74021ccb8f3ea3012a475f4cbc5736369f6531eba1db17b129c87b573242f372bd4513fee4a72442a91e869c124e7915a6608e4e2ab31388cf8187bc5e7e2e9db3e98c03fe8285b54f186027918335b63c54841a85362bc6f554f1c7d2f76c821fcc0c0fd7533f290de85ed8810c36b92f71e0df2241aa4975aa8900ab9ee6b7da2bcea648d9d0828ba64b86c44b89fbe57d44ba795919c463a7b8a1a1941fe29abc3c7b2764ad443911ce38f69fdd7800a622bd6a431e1c1a95b91d47c23a7722c0bce6fffa79187786760d635f751be854ac0d119eee55f46686303ba95d5afe49d38487d845de4f92c4d31a7625d55272fbfe20358a1711df007a7527674ff1ed60f12a39d19fbabe2d6620c2348a42a742f3d37414727e51820ea65f5f984d5873547b09e36c4ff55f5124bbceeb004efbd77378de9d225457ec2f78a7a3211402c20690abc44e1a02f119af6b6835d4837cafa17543828de7099e7d1f14e448b3fd5cc1b50022b511da4ae973dbfdeec25e53a0282d3fc29fa03a1ee55981c4e51ae8c3a77bf98c5dee15df961fa3316b2aff99b4a6a6786ada999198bbaef3b3266a25dd2e0313bf1388f3298d96911bb49645c5105f29eb7309617bd9009690d7a9f33c378dd9a59881da1f9e20d8cfa4dad495ff17643bdfb1ac3647dfc9287bd951ac67b93fe30f8ab2b917495c8ee4bcd165adcb76059895fd7427144ebfc4d143aab3de16364c9f8c17f4ab85793c6578dd0a5569d68177e72e43a244ffeeac02701dbd521eef24aaca35c3e70e995c4cc492fe1e360a75d6d92e8a697e9e73340fd375eb8007417fd95cfb756b16ed696f4d614e8dd0c1196cdf6b52a013bb53a39f8ae1d9a361d4b4be7a153355d97372dfc99e0d441c3d5b312011eda60578e3d14cc55fb1eeb4338cb90f1210cdfc4b76fd8049bc6d447c490830356aad854e03bf069ffb5ece47d50f320e385d96ecd282f4db910bf5764959a2a1f307d66ed2f8be016c80401baa4ae075b219543cb1e216d951376791fac9ee7e187dab5720a563eaff2b3ba81bc52484a2d4f316100f71e185a3a99454d486d7b6496a169fbe99aefc38727674cd360b2a07ef60c54998347e0ed90339b4676b7836df905491cc763ae1ec0217974e52118c9b586484448259988205c87e966c9671a22a1324c2f251809aac2ca086679ed4fd4c21b27665f52fa9ceca495b67954fbe092a0c8eb4ae93f6a3af86ae457488cfc622f10df08003c16c0116ed69af5ebddfc2d428f031ffeb295b801ce9611fe4150525a4b28f29955755a0bcd218a078c09a90ff72626bd8acb11e8cace50b22c8d190a6103d797de32c1ec3306afa12970f8894cf257a7fd074381b00f4942f03ad94975f3b8a65999c6f30fb5e75c1cf363d3f05ef30cd87352c34187eb13251fd98103d8391c4f6560f784beec8b2221923ce856978cd362be6ef3a6efb0e7b76c8a90db85eb34c760a5d0eb51d4327ed9eee30b6592e772311840b464dcbdea7b9ccac28e71734e2e0bfca2b63390211a467530d0c52994e250d7b2967d74ff68a2a5b874ef5c1c07a604a38e27fb12a38e9c20581469d7a50c297cd0e2cc85f93e3102c95c23946f4869cf176f8ed83740ffc142acef630e92587c6fb234fdee10b336508d81ab3c5febb5d962fb78bf0a5abf40e03f153ca0cd2c08210c622e81ecf337bd8b81804be9f6738afc253b26a4a71122e3b5d4151180ade6cf260ad95d8eb63d6b0f18526c1066c77014f73f4494defbef153ac8140c85ac137ccb786fb7233ac168f66619ec50300351003380c9b52d99905891db1a885b484a50eff60915fef178fcd87e342446ae07334ca168df8795e9757801028095af50903783f681eea284112909c89f1a4ec840aa3ccd7639033fa0764629e1f7949118385edf7b7a1a66dd5fcc4c4947e770e90382693f9c4698ef7868a52284244fac26d67d1de857f52e1bb3bcdac9e815a2b091ef11998d9d0954697288dce5d72c8f76995972f9675c755bbf968263674a1d35cb4ffb405bb3a2c9d8f5ae2516a02569ada9ddcce3bae32a1217e8b3bd3b09dcc62291f873fc649322837fed1b360a2ea4e337f2f524bab0177c7be2fc6899dc7d7d78c32300e6f88e1eb827d26f3258372e34714910f7f9ae1411b5bc8cc29e9674be05e341c1246aae8ccd1c6b7147685183605b7c9ba88abbb1cc30d39de24db10306350abce7b77714718750b9306a1f29216cdc752df86e9d991334809677035a52054752a0e4ebb43a1859448265d9b59e6427252532a5141936de009ef66c4eecc8c5d0f6ac0d20ff43fb79df18547463b74ec053ba8964f30e3e9f324c0ff56a991d6ed0189998a463a26d73205094e7bba905f72fb628fe001da1b0475e8317ebc82427f23d0b81dc19efc5aaaa9c1757f1b84657f0e0c0d8953c55b1c213b571efd46ffb04e47eaceb7c1ca612463657cc6623ba920258246c35db7151c29b01877d371fd9a169c10d2bc03cfb0f140f72fc9cc1e10a30e6dcc9e199176d59ade9de23f1df2083d44e69c5d643f04f862f3bc7a7f5aaa1f8430028589b353944609e2c46618ad7d71a211c987b1c121e9776dd5e8ee73968b6a54e1f660e3e5c24e081b394820a648ba447b9a1c4c3587b614f0114ff154a5bda0e37836355e706024fad9ded6e7a26c409a4e55dc7e99134051ae2bb383290ace2be9fea5dd92f5fc2e45038b59335b295b42ab2797bb217377f32d850e51ddf2af95953c48821ef2fe9175aba16487c712bc168e9e54b8470713a147c6adf9c590546f12506c06a6d68dc25307d0f7bb9639a1a08d39da3914ab4ecfa116d8d6b2e3f9fe33fac25e8bc8787e974a3d2cf34e45b39e776e32ccda24d18b3de32e700384b5ac7a23cc592701610d10c36779b76e441049113f03bda92ddbeee1b2ff8684c744beac26e4b27e2b5d80261b50b808e3a6e0f20a598b244774060e69e9a114e3f23058ff4ec06a6b9989b1edc7c53d7475f542e9ea5c55a3e97272a3abc77a7b815199fdbfd8dd21b70bb93426fcaf3bed282ae8d0b5f5a2e32080901bab7eb82d29678fb7c3f544288ebd106f1d7b1572a5e5d483171e95bea23dc39a91e8cc7c0de630c13236cf0aa39904504bee7c7fbbd4721c4fd30818816d762dd7aae21bfc632307d92296877e4aeb4ad89aaa873c72424f6dddf237f1c41b7c96904b316326dcc2ad36", 0x1000}, {&(0x7f0000002b80)="ee0bdbbc3274b8c4593459ed585980716542a1db7fc46f21baed559c924192293a3ed91ac4fa35c8ff894b68330eeb61d61e839af2c5620e8f10f0510594fc93b0ac1324eae9430a21e7cf04d7007120dedd306ce2b9fc1db36308f4a2c05846c31239999254da21f9251d5e6378d96628ca7f3d9ad85313d88106dc6593e7cf0ecf08ebcc73dd740e147c1983fda5e80e3fbdda504382f60aef4ee863721386324a18cd6ca0a1a4973d78a6368cd092e39e06cf0161d8c1ae000dcb38c5dd79e7b85eb6de1d5332", 0xc8}], 0x3}}], 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettaction={0x2c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x2c}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000001b40)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000340)="d5", 0x1}], 0x1}}], 0x1, 0x40) program did not crash replaying the whole log did not cause a kernel crash single: executing 1 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-openat$tun-socket$tipc-bind$tipc-bind$tipc-close-ioctl$TUNSETIFF-syz_init_net_socket$llc-socket$netlink-setsockopt$netlink_NETLINK_LISTEN_ALL_NSID-syz_genetlink_get_family_id$nl80211-ioctl$TUNSETOFFLOAD-syz_genetlink_get_family_id$devlink-socket$nl_generic-sendmsg$DEVLINK_CMD_RATE_DEL-recvfrom$llc-socket$kcm-ioctl$SIOCSIFHWADDR-socket$packet-setsockopt$packet_int-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-syz_genetlink_get_family_id$devlink-sendmsg$DEVLINK_CMD_PORT_SET-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-sendto$packet-write$tun detailed listing: executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x12100, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0x158, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x158}}, 0x4c0c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc1400000047", 0xb, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash single: failed to extract reproducer bisect: bisecting 30 programs with base timeout 1m40s testing program (duration=1m47s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 8, 25, 28, 30, 17, 28, 17, 5, 14, 30, 26, 9, 5, 15, 5, 17, 12, 24, 3, 13, 20, 6, 20, 21, 15, 27, 30, 9, 17] detailed listing: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x4, 0x25dfdbfb, {0xa, 0x40, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x13}, [@FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000001000de390400"/21, @ANYRES32=0x0, @ANYBLOB="10000000001000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000214000200fc0200000000000000000000000000ff"], 0x5c}}, 0x0) executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) accept4(r0, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000100)=0x80, 0x800) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0x4}, {0x6}]}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r1) sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010027bd7000ffd9df250300080008000100b7"], 0x1c}, 0x1, 0x0, 0x0, 0x48810}, 0x0) executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000017c0)={0x118, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x108, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x1000000fac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x44, 0x0, 0x0, @uid}, @nested={0xd9, 0x66, 0x0, 0x1, [@nested={0x24, 0x132, 0x0, 0x1, [@typed={0x8, 0x141, 0x0, 0x0, @u32=0xb2}, @typed={0x8, 0xca, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x13d, 0x0, 0x0, @u32=0xfffffffc}, @nested={0x4, 0xc5}, @nested={0x4, 0x8a}]}, @nested={0x8, 0xa1, 0x0, 0x1, [@nested={0x4, 0xb}]}, @generic="c073bf8f025953f538087c2947af34d793a12e66cd988ba2df542272ddf8f3b0634ff9883b7914bc9c92aafa8bb7b0c0552ff62f4a9716d08229fbc0558c09235f84d6771d08666d8b337ac75c741e4e77f4a9bc443c6a07af22469f8689554aa0e81e897ed6146a5b6cb1adf5cecbe76fb27a1c2610d17b8d3c80cfe639ce824597e338c1bb6a7d118257e8e8ac7e1f1c03054e4ec9bce7dfd5f3620229ab929fb9ebb5658776ab26"]}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff07000d0001", 0x15}], 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x3, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x81}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r3, 0x0, 0xbf, 0xf6, &(0x7f0000000380)="c1a1d8d52a6c70bd2be0ceff229abebca7aabea5f1bfb616d3d1fced0116145122c946e48160281283e4a3b6f32d634869664b72dfea3f830d3a2f6a2d8ccae825c9bf215044d263228327a1a53f0438a099fec0439712baee8f471f5a6d1c6624d5fae12ff8e31d5e0f2770cea4616872e0489c017bf889bc57db6429ddb47f772364f181a0a9e08d60b6700c1ce3f9b5fa7409823a1c8fa3f030d8bbdb3628e0d0c22f71b73bfdf082d18a8c6f07c38ea00694f607d96febb97bdde501b6", &(0x7f0000000440)=""/246, 0x80000001, 0x0, 0x1b, 0x5d, &(0x7f0000000540)="f71f30037caf9242e9c44f7eb5b98463082e9015495894b120ef04", &(0x7f0000000600)="528c552b6f033593f913ee020d88702df142e194de8802b03394a4232c4c4341a0aa151ec053da7cde29f5def4959adf50b898e4a2bf0181a55df91927849ac3922cd1f6c189b5a4bd64992396c87988da429503bfb59816d61eebe6e5", 0x0, 0x0, 0x8}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b2b, &(0x7f0000000040)={'virt_wifi0\x00', @remote}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000b80)=ANY=[@ANYBLOB="1c0000001000ff05000000000000000009003c8004c937b184"], 0x1c}], 0x1}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000811}, 0x0) recvmmsg(r5, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r5}], 0x1, 0x0, 0x0, 0x0) ioctl(r4, 0x8b27, &(0x7f0000000040)) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000010000000000fddbdf2500000000", @ANYRES32=r7, @ANYBLOB="4000000010800000280012800e0001006970366772657461700000001400028006000e"], 0x48}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a"], 0x18}], 0x1}, 0x0) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) accept4$nfc_llcp(r9, &(0x7f0000000240), &(0x7f00000002c0)=0x60, 0x0) executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = accept(0xffffffffffffffff, &(0x7f0000000180)=@in, &(0x7f0000000200)=0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x4, 0xf8, 0x3, 0x7, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x7, 0x1, 0x2, 0x982}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020642500000000002020207b1ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'rose0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000680)={@rand_addr=' \x01\x00', @private2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x101, 0x2, 0x0, 0x0, 0x4020002, r4}) socket$kcm(0x10, 0x2, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110c23003f) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64=r5], 0xa) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) getpeername$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000540)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@newtclass={0x38, 0x28, 0x200, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xd, 0x4}, {0xfff2, 0xb}, {0xfff3, 0x2}}, [@tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x4, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) poll(&(0x7f0000000280)=[{r9}], 0x1, 0x5) r10 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@canfd={{0x0, 0x1, 0x1}, 0x24, 0x2, 0x0, 0x0, "e84966ca985d2f4cc3291bf183c22ae87c2556284425f51b9ef2de641a44ff1fa710519706f260184eac301d9bcad8028fc2d6070a3a881e47aeb8b2fca12529"}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000300)={r1, 0x1, 0x6, @broadcast}, 0x10) executing program 4: sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xc0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x270, 0x5c, 0x160, 0x0, 0x3e0, 0x270, 0x228, 0x25a, 0x270, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [0x0, 0x0, 0xff, 0xff], 'veth0_to_batadv\x00', 'pim6reg\x00', {}, {}, 0x3a, 0x1}, 0x5002, 0xf8, 0x160, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@connlabel={{0x28}, {0x0, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x1, 0x9, 0x10, '\x00', 'syz0\x00', {0x4}}}}, {{@ipv6={@local, @empty, [0xffffffff, 0x0, 0xffffffff], [0xffffff00], 'veth1_to_hsr\x00', 'dummy0\x00', {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x9f, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) bind$packet(r2, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x6, 0x6, @remote}, 0x14) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f00000005c0)={{r0, &(0x7f0000000400)='raw\x00', 0x0, &(0x7f0000000440)={@align=0x5d, {0x4, 0x7, 0x10000, 0x1}}, 0x59b, &(0x7f0000000480)={@_ha_fsid}, &(0x7f00000004c0)=0x1ff}, {[0x100, 0xae, 0x6, 0x6]}, 0xc, 0xac, &(0x7f0000000500)=""/172}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000480)="b7028d7a89a1a9e34b7acba3d9bff1ab77e1", 0x12}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r7, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0xe8, 0xe8, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1f}, @loopback, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {0xff}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xff000000, 0x1ffffff01], 'sit0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x34}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xffffffffffdfffff, 0x0, 0x10, r8, 0x0) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)='%pI4 \x00'}, 0x20) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES8, @ANYBLOB="00000000000000000000b3157232bdc9461000000025b8f3e8a05f1759f4ef78ae56e8899b5cb0b1320f94e028c0511bdde3ea3d712c8925a426a7971bec63ae7f4cdb8fc0e9866608d71c5e35b18cab88818a41b5829071143009027a07df9d94a6e332de6ec5ef7eca1fbf75dd9eb9c45b952c891493c018dab4c02e803ed5151e31", @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000006201000019000000bca900000000000035090100000000009500000000000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000006000000010000000000000000200100", @ANYRES32=0x1, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000200a7335e4c8feee7edfdab1681d2b3", @ANYRES32, @ANYBLOB], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800), 0x4) r14 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r14, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x6f, 0x0, 0x2}, 0xc) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x4be7e9b6085265c0, 0x9, &(0x7f0000000280)=@raw=[@alu={0x7, 0x1, 0x6, 0x6, 0x6, 0x80, 0x5d516d0d135709e5}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbd}}], &(0x7f0000000300)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x62, '\x00', r3, 0x0, r5, 0x8, &(0x7f0000000380)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x10, 0x2f4, 0xfffffc01}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000008c0)=[r6, r7, r8, r10, r11, r12, r1, r13, r8, r15], &(0x7f0000000900)=[{0x3, 0x2, 0xd, 0x7}], 0x10, 0x81}, 0x94) socket$igmp6(0xa, 0x3, 0x2) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000305fcffffff0000040000000000", @ANYRES32=0x0, @ANYBLOB="1111020031000000280012800b0001006d61637365630000180002800c0004000100000100028000860005000500000008000500", @ANYRES32=r4], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) (async) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r3) sendmsg$TIPC_NL_LINK_RESET_STATS(r8, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x1f4, r9, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x0, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x61, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller1\x00'}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'nr0\x00'}}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x32}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x70a1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0xbc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "c5e5cf4d152feec67fbc7811fdd806888a61b5a4cd8a16e4"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x56}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "2bba6507193576ece3bb0df779f79e076caff4d4f5911c9a3f65cda8483cf8586a178f"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x8d0}, 0x40) (async) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x800) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000003c0)={0x0, 0x2}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000440)={r3, @in6={{0xa, 0x4e21, 0x7d46, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}, 0xffffffff, 0x54, 0x6, 0xfffffff4, 0x1, 0xd, 0x97}, &(0x7f0000000500)=0x9c) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='xfrm0\x00', 0x10) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r6, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001e00)=""/229, 0xe5}, {&(0x7f0000000300)=""/127, 0x7f}, {&(0x7f0000000600)=""/117, 0x75}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000004c0)=""/15, 0xf}], 0x5}}], 0x2, 0x11, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000013c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000000)={0x40, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}]}, 0x40}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0x78, 0x30, 0xb, 0x70bd2c, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8, 0x10}, @TCA_CT_LABELS={0x14, 0x7, "296524f13eb7394549979c0db12f7a74"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b30, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$kcm(r8, &(0x7f0000001c80)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x80, &(0x7f00000017c0)=[{&(0x7f00000000c0)="8b07ae2a4e41b1b5a3d16f6382ed9f612b1a14d63002a324775a2223b46932974c0b288725e2958924513df719121e9e46ac0aa77a347f974702f49be64686d6fe8aa7c334207eaaaee580b4b316cc341a428b7a6cdbf1633eaae03351ff597f2d2acb7b78b3b87a9221ebf21ecd52cc8ce35e76dbae29b2b24a4a556d3b813ad18e61", 0x83}, {&(0x7f0000000180)="bf43b486540e3d4ace685a03fc523756afb12ac65e92af7c9fff393078fcf030ae29ce7f385e6f9c1392655966d2367ed347ea3116304b900a65341cc8d3842c57e765fef01455e02560789ba5c93fa8ceeead16a374", 0x56}, {&(0x7f0000000200)="047697de2073a28af41524d5", 0xc}, {&(0x7f00000007c0)="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", 0x1000}], 0x4, &(0x7f0000001800)=[{0x100, 0x101, 0x800000, "f99f9f9eccfd43eb1c127ae547a954d3f0e0b4909ba3e6b1fb4a01e0b2e3e2657f445dfb820fb254804b2b6458bb3d009de8441c9a72b7b7754dd2bb6490ed47be71cd384f388f773d13b4c78cb16e7fdd70c76ec581ac28f6a6960e2c3ea8a54ca3134ff3b89f74c10c627a5daaf083c0f80ca02ba00e648bbb98f0f964e6fbdcf56a8a128365d8fb290b5844f1a1e96c8017c6fe29d442a09a2beabf8a7ed3b431b07cc711f79ec4e611c434029a7119ecbb756aeef285bd8b9f7f9c51634f1d39d42f169699beff64f8606cde12525a4b2be70776a66a7ca3affc976a01f9b434e60814a4b6a8e83537bf5c3a9008"}, {0x108, 0x116, 0x2, "4f3468f3b5ed693ef94a392700a2b6b9245213601d63646203ab6fc6b47b9796b646fff29df433ce241b062d171931f28ddd03692a66d0e3e484ac41894e83e38e15970a0dcf3fd5ee6aa3a7ee23614179cc65555a79fd1c5b1d0d5049dd8d11169e02837d0394c4ff8884707eeadd13faa85d26b6dd11e8a0b25b9c222ee186cc8d9a6d456e0b905a311a4329e2ee75ceb60541b0ce18067b0c4bd0cacceee4e6d2598ba74fcd400c1912f7d94bb5c6e6d8aace73bcfb50d7913aab56442291e4253f492a7c61452d13d1347db14730dbe7af6d6fb74b2770f67f8de18af24452abd0f7da9b04501e5904cbcc829b758e"}, {0x10, 0x113, 0x3}, {0xd8, 0x10a, 0xfc10, "f5bf4cf8c2e77166c389242d2bd3938067e81e4a6ee2ce5d6a0a421a45c99d4d06b3e4ea20b13888ff7335ddc7fbb95068ceab15b6d0f1b897dc0fda0de808bb03bcf5dcb21b2d1fe94e244832ecb9e3b48e8a80e1b91fb4bd4554199cbb281b503c65ef07f65d4757576ee448549b2b6b217935dff3ac8c3f8c36226ee323c10ef1a2790deb2449d86de3564facf4a3d2fa9f30c1303246f3886f40e63eca45db4708dfa3ac7283c80b84bf95aed19bbe20d0f14cd413165274c05f0ea0cb4ad9201851840b41cf"}, {0x80, 0x10b, 0x4, "df20d44b9669cbacb5b28279e566ddb3fd9d979d72e1461c1c161c82d80d6d1cc6604e1b41ceca359fae657cb5c9a9f002f7ab137ef6acda12e478d8bb7a7cd7984284c2c812a75d025be92a1926e88342cf4ead70bc658d452dd013f4703087991d49a38af92869c3cf0f5e"}, {0xa0, 0x10b, 0x10, "73a6e044cf3466e62be78420d4d7b863417d25e1e3564444a433cd7fd120aab61c482aeecfcbd4fca64ef650e54c8b3d08645ac84384526bc3bdf616b6a65d1a06f390644b5d74860823822f57a7adb845b9509c92f65be1a98d9688a16d858c9c034c1b8eb8d419f641aff600cb9f48bf1d334219a9fde3ecf5313acd3085a800c1fb676c08029e1d12a6af159dd7"}, {0x50, 0x116, 0x1, "952515fc65825228c2fd5244b154c199cff72344c1ae87283529145c24c333039e0a1c8efec91a0c31e811d3faeb3ad52836f43efb57f20726b5"}], 0x460}, 0x8000) executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x80002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x700, 0x20}}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f00000003c0), 0x4) recvmsg$kcm(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0), 0x60}, 0x0) sendto$inet6(r0, &(0x7f0000000280)="02043c00ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x10, {{@in6=@mcast1, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x3d04c9a7, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {0x0, 0x2, 0x0, 0x3}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075d, 0x1000}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x31}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)=""/206, 0xce}], 0x1}, 0x6}], 0x1, 0x102, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "c8bf5d03ac85c25d", "9a5d38a17f00c500000000feff00", "a1c4776d", "3c84a3a3be2adbff"}, 0x28) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) syz_emit_ethernet(0x86, &(0x7f0000000340)={@link_local, @random="1704b45adbde", @val={@val={0x88a8, 0x7, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x2, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private, 0x1000000}, {@private}, {@broadcast}, {@dev}, {@private}, {@empty}, {@private}]}]}}}}}}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}]}, 0x44}}, 0x0) executing program 1: socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000009c0)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a00)=ANY=[@ANYBLOB="0100ff0f080b00210000000020000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000000000000ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18f14710a44213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"], 0x80}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000080800"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB='\x00\x00\x00\x00A'], 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="04005b"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000e6efbb8ffa25de5fa6ff7e27b0000000008000300", @ANYRES32=r11, @ANYBLOB="04005b000600650040000000"], 0x28}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x840) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r14, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r13, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYRESOCT=r5, @ANYRESDEC=r4, @ANYBLOB="05005bedbfa83cc6b633ebb6c1d4d31e9b6200de28a1d64450be334774d100000000000004f340e6168b0f2aabb7586a8f87cb4ce33d306e38e926aebc5162f01b3b7f1867b74d60a7918600000000b5d0f9f9a570e5ffe99cbe781d2fc81a6f9b9790663c963310f0cd8b320c092f0712d825d80a21c8a2fd2d82551ab125aaf76a95b04900781845a080d5a1e5b0bb3cb5759896fdbeb944b82a30aaee7cd68808b4098229cf5f291d337244c2eca49f36183cc7d23c6c07033731b31ee83eeffa3c4e2cf15fb40257b057ba3cd7d402b3257352be9f3fe4291ce6cc2ab1952610d1df2f28af59f1e8bb0000"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='xfrm0\x00', 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0x80}}, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) sendmmsg(r0, &(0x7f0000001a00)=[{{&(0x7f0000000180)=@nfc={0x27, r1, 0xffffffffffffffff, 0x5}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000200)="6d670152ae3206eaa7ec3dfbc8c8b90467ca2b2ccb2ce8804bfbb62cc4a67b4ed79339957516173e21f97a9217a3a261967e849cf856cdc12ad9cfa3f6c2dda4092ec1453d9c15ab29b0c423ec6b63d559386f3acc740732a03bfa1478ac7e9685c9f40ed67423c249f63ac1b6fc902dd12bdf7b5a3fb4c739e04c7af689e8", 0x7f}, {&(0x7f0000000300)="9c437ed9ce5604ba9c2f1a7932ac50d2743357d5eb4fff99f462e85f4fd8ccc7ac16ef0633344e975efd9db9e0a6905531ba1850b3965876b72b6ffbdc243157cb6131a7572db5136568fa6d033bd029709f2e4bdf11de4d7b41bbcf4b2e9abe0f31bbacca45c88baba9f9e143cba493545d0080e4825efd0bb34c365a2a57d32a2ab3e50d0fc5a196bb88d4b2222e7cb068f75865e5f244b12059422b14d8689d44f80d70630fa0f5d73fc1aef0c8f6d6847e139814062f176bc47f6a6bc4ee3899d594dbf160cdb05add80b458690441330fb26e39", 0xd6}, {&(0x7f0000000400)="07d7f783567ae45349434e842f1daf48c8386b5f73a4fa69dc1efba8e50f3a4c526f509598969c783e0fcaa20640348f58ad0143cc3fb5710f937d2df405af8a34a3d47733e9e14609486c0ac4498991494c1c53f8837c4e78267c637445b4dc221aa248189e63f8a56f823f6583f4a027eb25a7a7b23112c89ad29f4898fa7c314444052fd04516a302c1f5af8523adb43b7845623e51b747d91b6a5e0e3eb70facfc006ceb36314d2042b2cd80ab77b1", 0xb1}, {&(0x7f00000004c0)="4122d91afb62f73876c5144028c640d311f31ba5389c8e119494cb8f4bf79f411f68619b47fae57a4cd40d74a6a49fa559bd1fde90ad660e515e092454a3396d433ab70e808965a9cd3a1ceba112e0ff22c06b56ef66169c1526f2e579d091fc", 0x1d}], 0x4, &(0x7f0000000580)=[{0xc8, 0x102, 0xf, "ba3707de90def23539c9df8acc64f511b22b171b387094dc8cccdf0fd7851a8aa54dfa00fbaeaba82956a5cad3779f07aad16b581b137d509eab00439d0af6cbb2d8c2788a25ed493fac6b8075921eabd019437dde52e4244a7846cf6e96b1d494627e4f7490a26928a302342996aa76f0560245796e79ed11f549798695138b511229eb68a74e0c50b8f56c3c54c98da290c21cf0499ed4d80b4338d7e7ac1f579199ee3b4ba2ba24ee8a2b7d3b96c97ba33a"}, {0x20, 0x114, 0x8, "4b1a42cedbdd779256f3c52b42"}, {0x1010, 0x1, 0x7f, "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"}, {0xe8, 0x108, 0x9, "65d9e9f557896fa16cdf389d773386a86d380ac0cd33ac8a3c990ed4ddc90c9e4502840158c022bcc12fb314e89a9b553d84aa88264fa2db2b4613f7cf78efa9dd4f3b22162809e2d6b1293874e4a1561084ffe14ff0fd3521a6e8448a71c4c5bd800b4d5b2319062b804cb97e85c9f5fdf0caa3510e00fb3336b07f1acb49e1b8804bd14b048fd25b1d5cfd70ce8f3667b7f09b1474ae12ca97fde9068c05006e00806e6534d95cfd748882f00f461611e6280776a5df58696e7b7ff8c871aadefa193afa788c525117d6a6b20e7f3bf94f2226bb02b9cf"}, {0x90, 0x10c, 0x4, "254fd6fc681bd43e73e3bcaf4a09e142653ca7cc4ff9e25430a0841fb6e7121b9f61e8f67198ca38d5c6ce64e2bc444d2d68703f46d535a7267c567d35df3d8983be331d493d964f0097611fc0ea3e4bff455d990d84fb98b73a7023cc3c046f09c2bfa1c82daccd73a4280b66a3bfb3a6b71d7a5610ffd2bd469ac2ba4c10d1"}, {0xe8, 0x6, 0x9, "88becd60cc078eb7ab75895faf0a5d97eed8385b70bb6621ea616a2fc2a0342136587af5bcd4956196017511d5aa18c782bee1964eb8cca2a677bd1c9b562a327c91fb75acbf980db061b11d43c0ef14ef128ab6793fcc75d651237dfc31564273c837a95c5aadff7c58f977671e23a9b0144bb744e8f9dbed1c97dc7c1236915b7bd11e5db8068498d08ae2fb3135bd86ef7df9a95ec84d5584e5b96c1d26e8117e79c4239e9c36fbe88aabc78721db2e00c00a009772a1b29cda5244f23157eee06180a13247f7be2eb05794c62d3a25a3bf1da0"}, {0xc0, 0x111, 0x6, "67330a934053e4cb7ca8a9fd418d1cc2f0386f357a216a28851a92c9484cec90d45e5f4c9f945d13625008e678cd324a8e621f4531892e76df1b448c708d3c9676d697049a26025845f8f7ab8a9fe44bc2ffe28cab2415f11a4e991c93a4addfc2849bb5a34156b9f6b70cf331ca67dc9d8f7a6e99b90788a643e31d84d74d56b4adb1710ebca9ef2aa72cf9040c2b5595c31b94773f4bb36f34840e4f9b2f62747afb3c1d617b401edd"}, {0x38, 0x101, 0xffffffff, "cdcc068edfd2653ff335dd4e27e89d1eb0832857bf3cd896ae883adbc29e2dd3e9ae3cb95922"}], 0x1450}}], 0x1, 0x0) r3 = socket$inet6(0xa, 0x5, 0x5) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f0000fee000)=0x3fb, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c) socket$inet6(0xa, 0x5, 0x0) (async) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='xfrm0\x00', 0x10) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0x80}}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) (async) socket$netlink(0x10, 0x3, 0xc) (async) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) (async) sendmmsg(r0, &(0x7f0000001a00)=[{{&(0x7f0000000180)=@nfc={0x27, r1, 0xffffffffffffffff, 0x5}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000200)="6d670152ae3206eaa7ec3dfbc8c8b90467ca2b2ccb2ce8804bfbb62cc4a67b4ed79339957516173e21f97a9217a3a261967e849cf856cdc12ad9cfa3f6c2dda4092ec1453d9c15ab29b0c423ec6b63d559386f3acc740732a03bfa1478ac7e9685c9f40ed67423c249f63ac1b6fc902dd12bdf7b5a3fb4c739e04c7af689e8", 0x7f}, {&(0x7f0000000300)="9c437ed9ce5604ba9c2f1a7932ac50d2743357d5eb4fff99f462e85f4fd8ccc7ac16ef0633344e975efd9db9e0a6905531ba1850b3965876b72b6ffbdc243157cb6131a7572db5136568fa6d033bd029709f2e4bdf11de4d7b41bbcf4b2e9abe0f31bbacca45c88baba9f9e143cba493545d0080e4825efd0bb34c365a2a57d32a2ab3e50d0fc5a196bb88d4b2222e7cb068f75865e5f244b12059422b14d8689d44f80d70630fa0f5d73fc1aef0c8f6d6847e139814062f176bc47f6a6bc4ee3899d594dbf160cdb05add80b458690441330fb26e39", 0xd6}, {&(0x7f0000000400)="07d7f783567ae45349434e842f1daf48c8386b5f73a4fa69dc1efba8e50f3a4c526f509598969c783e0fcaa20640348f58ad0143cc3fb5710f937d2df405af8a34a3d47733e9e14609486c0ac4498991494c1c53f8837c4e78267c637445b4dc221aa248189e63f8a56f823f6583f4a027eb25a7a7b23112c89ad29f4898fa7c314444052fd04516a302c1f5af8523adb43b7845623e51b747d91b6a5e0e3eb70facfc006ceb36314d2042b2cd80ab77b1", 0xb1}, {&(0x7f00000004c0)="4122d91afb62f73876c5144028c640d311f31ba5389c8e119494cb8f4bf79f411f68619b47fae57a4cd40d74a6a49fa559bd1fde90ad660e515e092454a3396d433ab70e808965a9cd3a1ceba112e0ff22c06b56ef66169c1526f2e579d091fc", 0x1d}], 0x4, &(0x7f0000000580)=[{0xc8, 0x102, 0xf, "ba3707de90def23539c9df8acc64f511b22b171b387094dc8cccdf0fd7851a8aa54dfa00fbaeaba82956a5cad3779f07aad16b581b137d509eab00439d0af6cbb2d8c2788a25ed493fac6b8075921eabd019437dde52e4244a7846cf6e96b1d494627e4f7490a26928a302342996aa76f0560245796e79ed11f549798695138b511229eb68a74e0c50b8f56c3c54c98da290c21cf0499ed4d80b4338d7e7ac1f579199ee3b4ba2ba24ee8a2b7d3b96c97ba33a"}, {0x20, 0x114, 0x8, "4b1a42cedbdd779256f3c52b42"}, {0x1010, 0x1, 0x7f, "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"}, {0xe8, 0x108, 0x9, "65d9e9f557896fa16cdf389d773386a86d380ac0cd33ac8a3c990ed4ddc90c9e4502840158c022bcc12fb314e89a9b553d84aa88264fa2db2b4613f7cf78efa9dd4f3b22162809e2d6b1293874e4a1561084ffe14ff0fd3521a6e8448a71c4c5bd800b4d5b2319062b804cb97e85c9f5fdf0caa3510e00fb3336b07f1acb49e1b8804bd14b048fd25b1d5cfd70ce8f3667b7f09b1474ae12ca97fde9068c05006e00806e6534d95cfd748882f00f461611e6280776a5df58696e7b7ff8c871aadefa193afa788c525117d6a6b20e7f3bf94f2226bb02b9cf"}, {0x90, 0x10c, 0x4, "254fd6fc681bd43e73e3bcaf4a09e142653ca7cc4ff9e25430a0841fb6e7121b9f61e8f67198ca38d5c6ce64e2bc444d2d68703f46d535a7267c567d35df3d8983be331d493d964f0097611fc0ea3e4bff455d990d84fb98b73a7023cc3c046f09c2bfa1c82daccd73a4280b66a3bfb3a6b71d7a5610ffd2bd469ac2ba4c10d1"}, {0xe8, 0x6, 0x9, "88becd60cc078eb7ab75895faf0a5d97eed8385b70bb6621ea616a2fc2a0342136587af5bcd4956196017511d5aa18c782bee1964eb8cca2a677bd1c9b562a327c91fb75acbf980db061b11d43c0ef14ef128ab6793fcc75d651237dfc31564273c837a95c5aadff7c58f977671e23a9b0144bb744e8f9dbed1c97dc7c1236915b7bd11e5db8068498d08ae2fb3135bd86ef7df9a95ec84d5584e5b96c1d26e8117e79c4239e9c36fbe88aabc78721db2e00c00a009772a1b29cda5244f23157eee06180a13247f7be2eb05794c62d3a25a3bf1da0"}, {0xc0, 0x111, 0x6, "67330a934053e4cb7ca8a9fd418d1cc2f0386f357a216a28851a92c9484cec90d45e5f4c9f945d13625008e678cd324a8e621f4531892e76df1b448c708d3c9676d697049a26025845f8f7ab8a9fe44bc2ffe28cab2415f11a4e991c93a4addfc2849bb5a34156b9f6b70cf331ca67dc9d8f7a6e99b90788a643e31d84d74d56b4adb1710ebca9ef2aa72cf9040c2b5595c31b94773f4bb36f34840e4f9b2f62747afb3c1d617b401edd"}, {0x38, 0x101, 0xffffffff, "cdcc068edfd2653ff335dd4e27e89d1eb0832857bf3cd896ae883adbc29e2dd3e9ae3cb95922"}], 0x1450}}], 0x1, 0x0) (async) socket$inet6(0xa, 0x5, 0x5) (async) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f0000fee000)=0x3fb, 0x4) (async) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c) (async) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) (async) r2 = socket$nl_crypto(0x10, 0x3, 0x15) (async, rerun: 64) r3 = socket(0x40000000015, 0x5, 0x0) (rerun: 64) bind$qrtr(r3, 0x0, 0x0) (async) getsockopt$sock_int(r2, 0x1, 0x12, 0x0, &(0x7f0000001ec0)) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000240)={0x44, r1, 0x201, 0x0, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x2a}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_4ADDR={0x5}]}, 0x44}}, 0x0) syz_emit_ethernet(0xc6, &(0x7f0000000080)={@remote, @random='dj[xgl', @val={@val={0x88a8, 0x3, 0x0, 0x3}, {0x8100, 0x2, 0x1, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "49e1721d162d232402327abfae4ca9a3014999b7669740c5e16164f47fa4252e", "5149df5c7d7ba66c129c2e57016a51b22a14e64dd54bae746005e30a73c250ed77dcd491a2f30f1500b0c0038204dd27", "2bbe989ad0e2f3700617a787d50efbd50fa8e13525882e4167de3fbd", {"3a620000008000000000489644aa2060", "5a0f02926e00"}}}}}}}, 0x0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x3d, &(0x7f0000000640)=""/140, &(0x7f0000000700)=0x8c) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000f5120a030000000000000000000000000a04000800080003400000000809000100735134285cab00"/64], 0x38}}, 0xc080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) executing program 2: socket$kcm(0x29, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="016f872801000000001214000bef21384089ad100000408490783fff0600ccf75785f9a62149ebcfffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0000009078001809c400050200000000000000000002d58838068b91000000"], 0xfd6c) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x4810) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) connect(r5, &(0x7f0000000180)=@pptp={0x18, 0x2, {0x3, @loopback}}, 0x98) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80c0}, 0x80) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xce22, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000340)={0x1, 0x12, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0x9a, 0x4, [0x4, 0x6, 0x7c1, 0x4f]}}, @calipso={0x7, 0x58, {0x6, 0x14, 0x1, 0x9, [0x1, 0x1ff, 0x5, 0x100000000, 0x0, 0x3, 0x9, 0xf, 0xb3f, 0xc]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}]}, 0xa0) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1_to_bridge\x00', 0x10) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00'}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x21, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000280)={r2, r3, 0x0, r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x4) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00005e001000012d00"/19, @ANYRES32=r2, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c0002800800030000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r4 = accept(r3, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r4) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="50001000", @ANYRES16=0x0, @ANYBLOB="00042abd7000ffdbdf25020000003c00018038000400200001000a004e200000bd78fe800000000000000000000000000024050000001400020002004e24ac1e01010000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x40) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000002c80), r2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002cc0)={0x84, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20000000) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x110, 0x6, 0x0, 0x4) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0x2, 0x2, 0x6, 0xd77, 0x9]}, &(0x7f0000000080)=0x78) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) socket$l2tp(0x2, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) socket$kcm(0x21, 0x2, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000002c80), r2) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002cc0)={0x84, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20000000) (async) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x110, 0x6, 0x0, 0x4) (async) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0x2, 0x2, 0x6, 0xd77, 0x9]}, &(0x7f0000000080)=0x78) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x2}]}}, 0x0, 0x2a}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000011080)=@gettaction={0x14, 0x32, 0x6dd711a25f4cb68b}, 0x14}}, 0x0) executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0xffffffff, @rand_addr=' \x01\x00', 0x9}, @in={0x2, 0x4e24, @empty}]}, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) socket$inet(0x2, 0x6, 0x8d) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg$inet(r2, &(0x7f0000002300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4c001) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000000050000001f08", 0x1d) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010102}, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x0, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x2000080) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0019"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x314, &(0x7f0000000cc0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x306, 0x1000, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo={0x8, 0x0, 0x0, 0x6, 0xfbff, "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"}}}}}, 0x0) executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0xb, 0x81, 0x6, 0xfff9, 0x10, 0x2, 0x8, 'syz0\x00'}) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) write(r0, &(0x7f0000000000)="3b000200", 0x4) executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32, @ANYBLOB="138000002b92010024001280090001"], 0x44}}, 0x8000) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r3, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000040000000160a01010000000000000000010000000900020073797a30000000000900010073797a30000000001400038008000240000000ab040001"], 0xc8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32, @ANYBLOB="138000002b92010024001280090001"], 0x44}}, 0x8000) (async) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r3, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000040000000160a01010000000000000000010000000900020073797a30000000000900010073797a30000000001400038008000240000000ab040001"], 0xc8}}, 0x0) (async) executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8ba4, 0x3, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x180, 0x41009}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x4, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x9}]}}]}]}, 0x34}}, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4000000, '\x00', 0x0, 0x0, 0x5}, 0x50) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f0000000800)={0x2, {{0x2, 0x2, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e21, @empty}}]}, 0x110) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf0200000000000085000000cc000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r10, &(0x7f00000000c0)='syz0\x00', 0x1ff) executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}]}], {0x14}}, 0x58}}, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10}, 0x47) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0x4, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r2, 0x1}, 0x14) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003"], 0x58}}, 0x0) (async) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x0) (async, rerun: 64) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = socket(0x400000000010, 0x3, 0x0) connect$inet6(r5, 0x0, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2400, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000340)={'bridge_slave_0\x00', 0x100}) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x12100, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0x158, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x158}}, 0x4c0c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc1400000047", 0xb, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e25, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x3) getsockopt$bt_hci(r2, 0x11a, 0x0, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x198, r1, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0xf8, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x345a0c3a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e468390}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8e7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x547ac294}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf5b5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x240fac27}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63ffe381}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d902680}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8442fc6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x79e9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb6c0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c9ab444}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c2a7dd5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6e50}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x199c}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ae34266}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9132}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4752137}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3ddb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d15}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x652aab04}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6ede}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x264}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb2c6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf042}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x111deb01}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf43c}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000804}, 0x40000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x68}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[], 0xb4}}, 0x40) (async, rerun: 64) r5 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e23, 0x3, 'dh\x00', 0xd, 0x7, 0x8}, 0x2c) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 64) shutdown(r5, 0x1) (rerun: 64) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) (async) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000600)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x55}}], 0x48}, 0x0) (async) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000e20800010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x22870, r8, 0x1bbb2000) (async) r9 = socket(0xa, 0x1, 0x0) close(r9) (async) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x56, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x48, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xd, 0x1, 0x8, 0x0, 0x1000, {[@mptcp=@syn={0x1e, 0xc, 0xb, 0x1, 0x0, 0x3, 0x2b43c763}, @generic={0x13, 0xe, "099f7786f6ce3c30eb72984b"}, @eol, @nop, @sack_perm={0x4, 0x2}]}}}}}}}, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x7a, 0x0, &(0x7f0000000180)=0x57) (rerun: 64) socket$rds(0x15, 0x5, 0x0) executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/153, 0x99}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b8d3d8e48974aae56e0046d828cd3b00000000008bdf0100d6b9aa5ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a090000ecffffff00b2e6b5397f7806b6ff846de37a34c8342bbac5a51eac662f717c429a2ee1d41f67235605e4f8a09cede8676044d4fd3d7935f90651aa2d9c57276322b82e8976f5a4d980eaeb3bd368c188df160da087aafd68dc", 0xa0}], 0x1, 0x0, 0x0, 0x84}, 0x24000081) (async) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b8d3d8e48974aae56e0046d828cd3b00000000008bdf0100d6b9aa5ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a090000ecffffff00b2e6b5397f7806b6ff846de37a34c8342bbac5a51eac662f717c429a2ee1d41f67235605e4f8a09cede8676044d4fd3d7935f90651aa2d9c57276322b82e8976f5a4d980eaeb3bd368c188df160da087aafd68dc", 0xa0}], 0x1, 0x0, 0x0, 0x84}, 0x24000081) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xfb83a000) close(r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@getspdinfo={0x14, 0x25, 0x400, 0x70bd27, 0x25dfdbfd, 0xfffffff8, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x88c0}, 0x40804) executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0xa8b41, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[], 0xfdef) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r3, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000540)="a0", 0x0}, 0x50) sendmmsg$inet6(r0, &(0x7f0000002cc0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x8, @private1, 0xe}, 0x1c, &(0x7f0000001640)=[{&(0x7f0000000040)="ae0bf2730cdc99f89dae8df90913c279365ad749023c15a8d56ba143af14ae", 0x1f}, {&(0x7f0000002d40)="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", 0x1000}, {&(0x7f0000001580)="c1a9f5b80a340dec8708ce5e651cec8c005d5b18298ec189452700e554b48859a38fa36738020ffc11cfd2632155467d718e5c857aba19976e2e887a5f593cdccc44fc00d5ad9ba040289c0524566864d661c1b00cfea39d7e9a52130020fb6ec7c0eb95fe0ffa9b7dc6c0cbfc7cd54cd50cbea54e0103b5cb0417caf194eb01387b976dec0cb6bf82fe67425d1d287627272bbcd7f9d7afdf17b1", 0x9b}], 0x3, &(0x7f0000000180), 0xf0}}, {{&(0x7f00000017c0)={0xa, 0x4e22, 0x7ff, @private1={0xfc, 0x1, '\x00', 0x11}, 0x7fffffff}, 0x1c, &(0x7f0000002c80)=[{&(0x7f0000000100)="e1a2b965f4ea5666e8df2ae7cca93edfed24b706d546baac4fac79a812812493af4220c29234c15355ba5c0814eecd67a10d18de65ae6caf0952e248aecd6b450ecfaca605286423ce47e5fbf451223dacaacdf8631985c9da902709590200000000000071f9bd00"/121, 0x69}, {&(0x7f0000001b80)="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", 0x1000}, {&(0x7f0000002b80)="ee0bdbbc3274b8c4593459ed585980716542a1db7fc46f21baed559c924192293a3ed91ac4fa35c8ff894b68330eeb61d61e839af2c5620e8f10f0510594fc93b0ac1324eae9430a21e7cf04d7007120dedd306ce2b9fc1db36308f4a2c05846c31239999254da21f9251d5e6378d96628ca7f3d9ad85313d88106dc6593e7cf0ecf08ebcc73dd740e147c1983fda5e80e3fbdda504382f60aef4ee863721386324a18cd6ca0a1a4973d78a6368cd092e39e06cf0161d8c1ae000dcb38c5dd79e7b85eb6de1d5332", 0xc8}], 0x3}}], 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettaction={0x2c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x2c}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000001b40)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000340)="d5", 0x1}], 0x1}}], 0x1, 0x40) program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init bisect: bisecting 30 programs bisect: split chunks (needed=false): <29> bisect: split chunk #0 of len 29 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=1m45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 26, 9, 5, 15, 5, 17, 12, 24, 3, 13, 20, 6, 20, 21, 15, 27, 30, 9, 17] detailed listing: executing program 1: socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000009c0)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a00)=ANY=[@ANYBLOB="0100ff0f080b00210000000020000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000000000000ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18f14710a44213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"], 0x80}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000080800"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB='\x00\x00\x00\x00A'], 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="04005b"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000e6efbb8ffa25de5fa6ff7e27b0000000008000300", @ANYRES32=r11, @ANYBLOB="04005b000600650040000000"], 0x28}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x840) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r14, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r13, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYRESOCT=r5, @ANYRESDEC=r4, @ANYBLOB="05005bedbfa83cc6b633ebb6c1d4d31e9b6200de28a1d64450be334774d100000000000004f340e6168b0f2aabb7586a8f87cb4ce33d306e38e926aebc5162f01b3b7f1867b74d60a7918600000000b5d0f9f9a570e5ffe99cbe781d2fc81a6f9b9790663c963310f0cd8b320c092f0712d825d80a21c8a2fd2d82551ab125aaf76a95b04900781845a080d5a1e5b0bb3cb5759896fdbeb944b82a30aaee7cd68808b4098229cf5f291d337244c2eca49f36183cc7d23c6c07033731b31ee83eeffa3c4e2cf15fb40257b057ba3cd7d402b3257352be9f3fe4291ce6cc2ab1952610d1df2f28af59f1e8bb0000"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='xfrm0\x00', 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0x80}}, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) sendmmsg(r0, &(0x7f0000001a00)=[{{&(0x7f0000000180)=@nfc={0x27, r1, 0xffffffffffffffff, 0x5}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000200)="6d670152ae3206eaa7ec3dfbc8c8b90467ca2b2ccb2ce8804bfbb62cc4a67b4ed79339957516173e21f97a9217a3a261967e849cf856cdc12ad9cfa3f6c2dda4092ec1453d9c15ab29b0c423ec6b63d559386f3acc740732a03bfa1478ac7e9685c9f40ed67423c249f63ac1b6fc902dd12bdf7b5a3fb4c739e04c7af689e8", 0x7f}, {&(0x7f0000000300)="9c437ed9ce5604ba9c2f1a7932ac50d2743357d5eb4fff99f462e85f4fd8ccc7ac16ef0633344e975efd9db9e0a6905531ba1850b3965876b72b6ffbdc243157cb6131a7572db5136568fa6d033bd029709f2e4bdf11de4d7b41bbcf4b2e9abe0f31bbacca45c88baba9f9e143cba493545d0080e4825efd0bb34c365a2a57d32a2ab3e50d0fc5a196bb88d4b2222e7cb068f75865e5f244b12059422b14d8689d44f80d70630fa0f5d73fc1aef0c8f6d6847e139814062f176bc47f6a6bc4ee3899d594dbf160cdb05add80b458690441330fb26e39", 0xd6}, {&(0x7f0000000400)="07d7f783567ae45349434e842f1daf48c8386b5f73a4fa69dc1efba8e50f3a4c526f509598969c783e0fcaa20640348f58ad0143cc3fb5710f937d2df405af8a34a3d47733e9e14609486c0ac4498991494c1c53f8837c4e78267c637445b4dc221aa248189e63f8a56f823f6583f4a027eb25a7a7b23112c89ad29f4898fa7c314444052fd04516a302c1f5af8523adb43b7845623e51b747d91b6a5e0e3eb70facfc006ceb36314d2042b2cd80ab77b1", 0xb1}, {&(0x7f00000004c0)="4122d91afb62f73876c5144028c640d311f31ba5389c8e119494cb8f4bf79f411f68619b47fae57a4cd40d74a6a49fa559bd1fde90ad660e515e092454a3396d433ab70e808965a9cd3a1ceba112e0ff22c06b56ef66169c1526f2e579d091fc", 0x1d}], 0x4, &(0x7f0000000580)=[{0xc8, 0x102, 0xf, "ba3707de90def23539c9df8acc64f511b22b171b387094dc8cccdf0fd7851a8aa54dfa00fbaeaba82956a5cad3779f07aad16b581b137d509eab00439d0af6cbb2d8c2788a25ed493fac6b8075921eabd019437dde52e4244a7846cf6e96b1d494627e4f7490a26928a302342996aa76f0560245796e79ed11f549798695138b511229eb68a74e0c50b8f56c3c54c98da290c21cf0499ed4d80b4338d7e7ac1f579199ee3b4ba2ba24ee8a2b7d3b96c97ba33a"}, {0x20, 0x114, 0x8, "4b1a42cedbdd779256f3c52b42"}, {0x1010, 0x1, 0x7f, "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"}, {0xe8, 0x108, 0x9, "65d9e9f557896fa16cdf389d773386a86d380ac0cd33ac8a3c990ed4ddc90c9e4502840158c022bcc12fb314e89a9b553d84aa88264fa2db2b4613f7cf78efa9dd4f3b22162809e2d6b1293874e4a1561084ffe14ff0fd3521a6e8448a71c4c5bd800b4d5b2319062b804cb97e85c9f5fdf0caa3510e00fb3336b07f1acb49e1b8804bd14b048fd25b1d5cfd70ce8f3667b7f09b1474ae12ca97fde9068c05006e00806e6534d95cfd748882f00f461611e6280776a5df58696e7b7ff8c871aadefa193afa788c525117d6a6b20e7f3bf94f2226bb02b9cf"}, {0x90, 0x10c, 0x4, "254fd6fc681bd43e73e3bcaf4a09e142653ca7cc4ff9e25430a0841fb6e7121b9f61e8f67198ca38d5c6ce64e2bc444d2d68703f46d535a7267c567d35df3d8983be331d493d964f0097611fc0ea3e4bff455d990d84fb98b73a7023cc3c046f09c2bfa1c82daccd73a4280b66a3bfb3a6b71d7a5610ffd2bd469ac2ba4c10d1"}, {0xe8, 0x6, 0x9, "88becd60cc078eb7ab75895faf0a5d97eed8385b70bb6621ea616a2fc2a0342136587af5bcd4956196017511d5aa18c782bee1964eb8cca2a677bd1c9b562a327c91fb75acbf980db061b11d43c0ef14ef128ab6793fcc75d651237dfc31564273c837a95c5aadff7c58f977671e23a9b0144bb744e8f9dbed1c97dc7c1236915b7bd11e5db8068498d08ae2fb3135bd86ef7df9a95ec84d5584e5b96c1d26e8117e79c4239e9c36fbe88aabc78721db2e00c00a009772a1b29cda5244f23157eee06180a13247f7be2eb05794c62d3a25a3bf1da0"}, {0xc0, 0x111, 0x6, "67330a934053e4cb7ca8a9fd418d1cc2f0386f357a216a28851a92c9484cec90d45e5f4c9f945d13625008e678cd324a8e621f4531892e76df1b448c708d3c9676d697049a26025845f8f7ab8a9fe44bc2ffe28cab2415f11a4e991c93a4addfc2849bb5a34156b9f6b70cf331ca67dc9d8f7a6e99b90788a643e31d84d74d56b4adb1710ebca9ef2aa72cf9040c2b5595c31b94773f4bb36f34840e4f9b2f62747afb3c1d617b401edd"}, {0x38, 0x101, 0xffffffff, "cdcc068edfd2653ff335dd4e27e89d1eb0832857bf3cd896ae883adbc29e2dd3e9ae3cb95922"}], 0x1450}}], 0x1, 0x0) r3 = socket$inet6(0xa, 0x5, 0x5) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f0000fee000)=0x3fb, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c) socket$inet6(0xa, 0x5, 0x0) (async) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='xfrm0\x00', 0x10) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0x80}}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) (async) socket$netlink(0x10, 0x3, 0xc) (async) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) (async) sendmmsg(r0, &(0x7f0000001a00)=[{{&(0x7f0000000180)=@nfc={0x27, r1, 0xffffffffffffffff, 0x5}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000200)="6d670152ae3206eaa7ec3dfbc8c8b90467ca2b2ccb2ce8804bfbb62cc4a67b4ed79339957516173e21f97a9217a3a261967e849cf856cdc12ad9cfa3f6c2dda4092ec1453d9c15ab29b0c423ec6b63d559386f3acc740732a03bfa1478ac7e9685c9f40ed67423c249f63ac1b6fc902dd12bdf7b5a3fb4c739e04c7af689e8", 0x7f}, {&(0x7f0000000300)="9c437ed9ce5604ba9c2f1a7932ac50d2743357d5eb4fff99f462e85f4fd8ccc7ac16ef0633344e975efd9db9e0a6905531ba1850b3965876b72b6ffbdc243157cb6131a7572db5136568fa6d033bd029709f2e4bdf11de4d7b41bbcf4b2e9abe0f31bbacca45c88baba9f9e143cba493545d0080e4825efd0bb34c365a2a57d32a2ab3e50d0fc5a196bb88d4b2222e7cb068f75865e5f244b12059422b14d8689d44f80d70630fa0f5d73fc1aef0c8f6d6847e139814062f176bc47f6a6bc4ee3899d594dbf160cdb05add80b458690441330fb26e39", 0xd6}, {&(0x7f0000000400)="07d7f783567ae45349434e842f1daf48c8386b5f73a4fa69dc1efba8e50f3a4c526f509598969c783e0fcaa20640348f58ad0143cc3fb5710f937d2df405af8a34a3d47733e9e14609486c0ac4498991494c1c53f8837c4e78267c637445b4dc221aa248189e63f8a56f823f6583f4a027eb25a7a7b23112c89ad29f4898fa7c314444052fd04516a302c1f5af8523adb43b7845623e51b747d91b6a5e0e3eb70facfc006ceb36314d2042b2cd80ab77b1", 0xb1}, {&(0x7f00000004c0)="4122d91afb62f73876c5144028c640d311f31ba5389c8e119494cb8f4bf79f411f68619b47fae57a4cd40d74a6a49fa559bd1fde90ad660e515e092454a3396d433ab70e808965a9cd3a1ceba112e0ff22c06b56ef66169c1526f2e579d091fc", 0x1d}], 0x4, &(0x7f0000000580)=[{0xc8, 0x102, 0xf, "ba3707de90def23539c9df8acc64f511b22b171b387094dc8cccdf0fd7851a8aa54dfa00fbaeaba82956a5cad3779f07aad16b581b137d509eab00439d0af6cbb2d8c2788a25ed493fac6b8075921eabd019437dde52e4244a7846cf6e96b1d494627e4f7490a26928a302342996aa76f0560245796e79ed11f549798695138b511229eb68a74e0c50b8f56c3c54c98da290c21cf0499ed4d80b4338d7e7ac1f579199ee3b4ba2ba24ee8a2b7d3b96c97ba33a"}, {0x20, 0x114, 0x8, "4b1a42cedbdd779256f3c52b42"}, {0x1010, 0x1, 0x7f, "1092e96c4e6abd718bfd63c41665e2c26696756e6fd1d77375c5032d9e71d44e47cbfc8f59d8123fbcfba6d553bfea092ce68fde701fab1bce1ea4822ede630ef28a4940f9f6f690e3607d761a4fb40d0570ceec99906ab505cfe30f513b330a6119e2de4156d2aa6e235e24b5bfa15f61017fbc5a480cd576563e57d32b54a820952f4fe7b7d2e4e3b44367b5bcbced1d872b8aadd5271b98f4a0d317ef5e070ecf5d2e538d69cd6b22a9d937494fc1da83b25a7edbc3d2b26783d48e78648e24b181956dd18e56f711a541f4bac160cbdd395cffe35fc20c53c70ac3abb6d61e4202bde8065cc17f9bf94ce95107bd95792c25128fc448c35fa40c2d95be6c725d2339818f8e626a895456811e5f9d21c35f6a17c61bffa4eb3f869e316044b99e0d3a83b0f99eb448d7f64943a970dd585f915ae92309defd1b0e36ef07e4efa73264ebe5c64fba737761a10d6e117400dba8491e4b99ca51a4b82e29cf3d73ae3e090885317d9505f1a47aa82b9920fd2f09d026cfa23c6b0e80cac7df178a30d2a98f36557b89308d4536630a47de5a5f0ed9b31bc8f696e05a82ed2c51caa9530a99855a42a63e429ad4129e09b0382503f8260409d415f41531535ccc12792eb29e1be6b99d6540464d189e51d8645eed15e264ad01c72ae9bfd20da68515567f2b6e7a1096a0b64559373c583f47e504f1129d07386ff2fb9263bf81aba66e759f9824d8d41471cef7953d0d79c21618a6bde458f00d1916737267fe71facea3a2eeadc81ffb7cd874da7d03fede8c976600eb90682fec125a05172ded7d4741a167343d4cadd9f886c946faa91aea0ae4a1534f3625bd64731eec7ea45e6d2a120790d6962e16bb1d10eb35d4e81daedae0f9a74398338f154ef772651c8c88e2e3658c9ee2406240b5d00cfd1a0e42c93a5124992db2bb239a72fcd2279a5905d044ff28740cfbaa37fb31c29996ed9b043a60118a4d94d6071dff2393166759cbd1732c333aaad5d3b2bece913589fbabf15c0fdcbd1471a2c1bee707b345a4e8c74862452fdfa57bc02a2db0a00354538a13053674cd35b73f4a289d7539925ae0092ae2492944e1259a055d01ec50626bd73f58e900475c2462befb5884ea3513db69954f0dd134d233dcab56cd8702b1b91ce6063f832bb09b45019b759ec2c26a2c627cd56362c2aca619a25ad066b0f89df1b9068e4536b858cd536b9a7304bed88a7c3e82d2bb0e4203c885f02e0634c1d6b4b4ec7d55a4d4e223a05ed47fadef1b8f7cd2bfbfd4cac5aee67205ed4489b9f177514799bfb3307ef927908a0c97118e54c991ace7fdadd0e47750690f50cc2c3b247a756ee000a29f72cc82d065022ec83c01a13efc529de78d296d0ede3bb30571b5ea3defa03ac5bf51267b8d9d21f3787ce99f1946158df9c0b0bede42a0b1cdd2cc8ad381bb3a88af95305147d148e0d4c1ef824ea06e609763b51e1ef77b7da1ae37133410a008361c083c7f9e3719e5adfcc61de86e664ee315a3937e0ee0dfdb5848322a823b0213475ad22c5f77bf84f0e22b068c883bc9fada1e5e0e3823e36e53158e42f3f53e850c0fc0b19bcc52af7b6fe5f9297ecbf5cbf2a0efb0e9d12d0810a66b749df626303eae288e69805482617989a14964e7dddb2dea82eaecac5112064f4ea64339f162b27740984243da9d3b629b7adfc03255750172b51050456bd8e3eb0826003d66874a4b0fb04a57fdaf7d7f6c73c669989143163474065a89db7fcaf3b50bf01e9df3ba41c1e857fde204001175c0a94058458eea78bbc7b39f1a5d3ebfd933eb3d4ae9c9038f23696e563ec310a7ba9edca850fdd4e58399b5fa39310a90e859c8cd4e2f607cc849bd0c4bfa932be4f9940fd9daa4940379638d572e97455ad273248aa0090909e9367fd6c615187ecfa06117b60aac8d576498e76844f3dc2448a3f05ebde8cc5502dfa45ecc7eddf610080dc02e10aad4f3d02e3d5a348a1aff7224831cadd85edd2e6e2557130c367d32543f04c6551dd7184c63b4904a59b1914d459793c6f46dd7b5ff9ee12bab6840bc76519b102d09d5d6a038b84aae94f8d42ec352530ef1c811f23de8d6f11b74c7a1b4842c7b9e0d52ff1a63e1f8156402d6083fcc09704d85b7383ec4e196ef3b54017418d6f709948a1e0cd2389421d73ad176699798176bc64d10a6602661c45e37e48fc608e123c19375a9e96618a9f23bd13720804323a73fe9cc9c5e3982396d4f1d030f7d5d727621c806ed0c8cc379bddb19065d4d08ed7587fb8440f6572bdd8ac423be2f6cf6666050188036d9a68dfa2ec6c42f4b1d6312d49fc5449e95d11cdcf50a16c06708fe7b2d29eebbbcf52e93435a1f1252fdc70929e051ffdc65df03e11930816db2e63896f4f2d82fe7f15baa5f53155e8fafa868eab430b3eaa9553760ccf484abf1eb5d040c0e26cc0af6273254a19504aaeb9d45e2a55ccc63fa79656608186d26851aaadd48f537e6a6053f57b7e7f73e0ee2974eef825a51d358bef4c9f12aa17658d6887d97db1254399384744b5062483a07d7e88a17e2417a841f91c78a762eaa727175a88fe13f43884d9687fc0e3a2c7d4d1ef9965a12a04b37d8b230086a8f197b4321c54d00070f8fd2331f61214c7bf6047f40717a34639b0de12160c4466d09fae64f47f81b61823f13b1053cf8687e0abe2927b028fff63adc06bddaa2eef5a51b5d1adae84005a9ec4c02928b07039250c06e91209a89b657add03a2db3815b09e54e1682b7e0459aec82869aaeabfc85bd3f56f492c898093ab3f74b584871197f40ab34dcbf997361a201f36bc43b1fd1a1fdc6566faed5201faa5ec1c9ff53352b4028e88bbe1b25a4a3b76ee9e20e4b54bebe51a20c483151f09f2fdde583494fbfaa0ebe92aa1cd60ab7154dd918a8091b290f34bd2c95fef6400e369b3bde25d30a8c765c799e7c92a2711325fad40a7f4c958767f968f5249e2f53555dc59fca602503701777129e5acb6d7db83a9b450a9c9aaddf0557f64324b6c87be9d80992a02ae81e888187260bcb41de76154fd93e2215b5bc9a6c55a25bb9dbf64aa8f34ba63623a8a21c14242762f53860295746b27bcab553ef9e17cb7c502bda75ee6da2762cdea8547b230aac3893a971d5b123d6acfb3c9a07d087518a80ec051b24dee6fc1b0f53bd90f7dd42365c35b64a9d27a172ddcf2ae12681304d64e458e568c2ac9d2a498aafc1a56432380c5a586af971015d3b98aa4718c9ffa7ff1e1266009bf7d9bada536090d02c9e861f7703423e9c08330ec42374a6239f314e7eb0cac2d7819c3b22b492679ed99f3971948fcaa023973c80ba095de07b0fbfa44c6e5f3877d7bced1fd6b0af98f88954eef49ab9ee6a74e2490559ca8ed5d88e10e5fd424e91fe1a0c41df5d2b538eb131f17395b62cf9978074d1c0b559d827d4aa11c3f7c7eaa2c054503508ebf32a2459672b1332359068492742386839e619e59a2cd69f6b951c4abdc1a60fd98a7b84988da3eec2851df0fc7f8cc5d357f13688b238340385da457bb1301405115fbaecbaf6b141b236123b5d104575bbf48973a40468d72d7477419fdf847ee19cbf6f7dd858fc0b0bcb8ab349bbc43a9e04e5f388f7e943a6ccd609559b91e6ab703b4fef251323c57a1010d8d362df1076a4e09dfb9fd300434547216687be2c86ebe281df5e042107c793df0287c42fb0b46f43db062562c854b19f396061b094a0b029160799d3a31fff6e430647e7991171c3a67fc2bb62ad63e6b8e40d4c3d7bfc388ea034b6471f053035df040eab8ff027599e0dbd7a49db4001ee608ece1207e896f73ef81d1aef006910f79b3bd179c96dfda20e2084c3874204d394f9ebf22319c3225d973396cb38af0372990c1914c9f98dc6fc6612cf6603f66ca6f2231f8ed75e3fb53bc6592460ac4882638ed60ad569152b4b9c87688b2836bf3ec793a380a2aac4a21c15cdf22058c89e18d2537c07b8435e34251e6de7114a00218d8fc87095314cc20e71c06fcda88b4aa2acb60a0008b16c468e1eff06b2e881b0c8ddc5543190a92b794cf080d923152b0c8f1faa863a009f395af2bea1b212abdc854d3e2cc7fbb1bd4cc7624c8c7a6a036a6829a3cfbe868eba098a253519a5d26aa33661854d94353695d70e14fc9874b155c61de5f9a469a67494d94bb38763da58161a5bc4ebffa53bceee0789dea4831614a9cdb2e889bdffec35f4c0e43e4f47a767eb129860d115b8913b39832134d0633df55ee959e9e1f5e62ec3460e61790298bc1b6ba78dd8a07e6ae9eb093197b38feb44b14d4f8506afae76c00b9a3eb23d6e8404c04fa50dd1eb1566ff399ded6886482bee576da5f055410794d99af7b5c3ebf9f9755e1d9afc39569114a2b611e27dd714821f2ab96281fce45eec1d3c66c1b1bb4912897956edea87f6523d96d0702eaa5ae8b0f056fb6e27179aeb343a83bb6374f9f6a3943b0a94202c1a15351d9742a4f7379e9b7b9f7e2630e239b4a891e86dca802e06d31544a66be67ba8a6b31cf3631bc2f095dbf679d35c8eb0c4fb2c2ed62549488f8f8e893d206accfafe4c6156d06f9e30a0e63d56ba34a83bf5eed1a499fda7b86663010aa955cbd1cb7d6d1d52338d74c82455ea1783422694c95ef88d85d7551de41b1ff34b73fd1d5a071ca7b3855280e24729b5cd7febaec245eac0d72878e3beaea95e3600f5c60994e39ef9c30f2f2a21973520fe5281daf2ca07b10a6a0a01229f965ec79251fcefe20510be1bc72def5358f2d73ca138c0cba28d47388cd24d731768d8ed2a3de480d1c840ea916b2aa016dfb2e53e20cbb2b14e09294fea2ed0dd496960a2294b8643f7c522cad205b65e67d7448f57b2719fc3e93e275588273893a6fa36afe8737c69b0b69bf20afa9c7725d41f000d743c3ed81ba16b16235a978e50fe561eed77d85cf46c15dcc869e8667db74a14c4a25ce909340a4e66fa8af32fc9b0f85bcacf174c8ad107376c2fa35f070112452c663026e979791c08fd7ce7903b3ef3d1d9395fb9f73c313a4e105ffcc395d60aae3c64f703f95cd2828067756bc23120b5970cb63305561049499956981e4d75da32463063fb84d42a7fe8ab6abbe8b1357550786b7a2437537a333adfd5906170faa925f8c5a2e34337898af0bdc67b50040844271000b185ecddae7ae2f151bddda7e9ca0817099d28ded4968e70a2068f10bd28842685a13462591888692140301cb3df75bcc740e4af581177dc2b0145e5238541a5639e5558b67fc271edd2569a3e914447916ce7537e7ae8bd65933a4643b9050158951b4ab4734f15910c1367888c41f6dd9f06fdc05c414c623ed788875b3b31a0af328417377a798ad1a22c90303ceeb315d5567cfa642d071dfb0c1d624dd6aab9c17714bf12633d1a68c8ed43345c9b06490eac5e1a6546a9dfdd4b345ab3917bbe765646105c2fc76dfe70b73daeacdb1b1416c4b67081024efa6b854e1307175014b20a63486d898b9334938b6e70ab50988d42fb7c43e7c27a8b6d227a70622ee54ccfdb7e9ea3c8e7c6f3d06f37b17bb3e6425d81eb15cc0cd20a623d3808efa9b8c6609522ad719a11e0c81b854d33865f49fa8d79df5cf74aa332cdae9f7d86e818dd196a733ad1b771f9590e3c8c80969a0093392ebce80568325b2743522574492c9a0b6ebd8a317289e34bc2f5be74fffa930d562fdd3a8e42a05db5e4955572cee00f4b7dfede108373c547aa68"}, {0xe8, 0x108, 0x9, "65d9e9f557896fa16cdf389d773386a86d380ac0cd33ac8a3c990ed4ddc90c9e4502840158c022bcc12fb314e89a9b553d84aa88264fa2db2b4613f7cf78efa9dd4f3b22162809e2d6b1293874e4a1561084ffe14ff0fd3521a6e8448a71c4c5bd800b4d5b2319062b804cb97e85c9f5fdf0caa3510e00fb3336b07f1acb49e1b8804bd14b048fd25b1d5cfd70ce8f3667b7f09b1474ae12ca97fde9068c05006e00806e6534d95cfd748882f00f461611e6280776a5df58696e7b7ff8c871aadefa193afa788c525117d6a6b20e7f3bf94f2226bb02b9cf"}, {0x90, 0x10c, 0x4, "254fd6fc681bd43e73e3bcaf4a09e142653ca7cc4ff9e25430a0841fb6e7121b9f61e8f67198ca38d5c6ce64e2bc444d2d68703f46d535a7267c567d35df3d8983be331d493d964f0097611fc0ea3e4bff455d990d84fb98b73a7023cc3c046f09c2bfa1c82daccd73a4280b66a3bfb3a6b71d7a5610ffd2bd469ac2ba4c10d1"}, {0xe8, 0x6, 0x9, "88becd60cc078eb7ab75895faf0a5d97eed8385b70bb6621ea616a2fc2a0342136587af5bcd4956196017511d5aa18c782bee1964eb8cca2a677bd1c9b562a327c91fb75acbf980db061b11d43c0ef14ef128ab6793fcc75d651237dfc31564273c837a95c5aadff7c58f977671e23a9b0144bb744e8f9dbed1c97dc7c1236915b7bd11e5db8068498d08ae2fb3135bd86ef7df9a95ec84d5584e5b96c1d26e8117e79c4239e9c36fbe88aabc78721db2e00c00a009772a1b29cda5244f23157eee06180a13247f7be2eb05794c62d3a25a3bf1da0"}, {0xc0, 0x111, 0x6, "67330a934053e4cb7ca8a9fd418d1cc2f0386f357a216a28851a92c9484cec90d45e5f4c9f945d13625008e678cd324a8e621f4531892e76df1b448c708d3c9676d697049a26025845f8f7ab8a9fe44bc2ffe28cab2415f11a4e991c93a4addfc2849bb5a34156b9f6b70cf331ca67dc9d8f7a6e99b90788a643e31d84d74d56b4adb1710ebca9ef2aa72cf9040c2b5595c31b94773f4bb36f34840e4f9b2f62747afb3c1d617b401edd"}, {0x38, 0x101, 0xffffffff, "cdcc068edfd2653ff335dd4e27e89d1eb0832857bf3cd896ae883adbc29e2dd3e9ae3cb95922"}], 0x1450}}], 0x1, 0x0) (async) socket$inet6(0xa, 0x5, 0x5) (async) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f0000fee000)=0x3fb, 0x4) (async) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c) (async) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) (async) r2 = socket$nl_crypto(0x10, 0x3, 0x15) (async, rerun: 64) r3 = socket(0x40000000015, 0x5, 0x0) (rerun: 64) bind$qrtr(r3, 0x0, 0x0) (async) getsockopt$sock_int(r2, 0x1, 0x12, 0x0, &(0x7f0000001ec0)) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000240)={0x44, r1, 0x201, 0x0, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x2a}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_4ADDR={0x5}]}, 0x44}}, 0x0) syz_emit_ethernet(0xc6, &(0x7f0000000080)={@remote, @random='dj[xgl', @val={@val={0x88a8, 0x3, 0x0, 0x3}, {0x8100, 0x2, 0x1, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "49e1721d162d232402327abfae4ca9a3014999b7669740c5e16164f47fa4252e", "5149df5c7d7ba66c129c2e57016a51b22a14e64dd54bae746005e30a73c250ed77dcd491a2f30f1500b0c0038204dd27", "2bbe989ad0e2f3700617a787d50efbd50fa8e13525882e4167de3fbd", {"3a620000008000000000489644aa2060", "5a0f02926e00"}}}}}}}, 0x0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x3d, &(0x7f0000000640)=""/140, &(0x7f0000000700)=0x8c) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000f5120a030000000000000000000000000a04000800080003400000000809000100735134285cab00"/64], 0x38}}, 0xc080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) executing program 2: socket$kcm(0x29, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="016f872801000000001214000bef21384089ad100000408490783fff0600ccf75785f9a62149ebcfffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0000009078001809c400050200000000000000000002d58838068b91000000"], 0xfd6c) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x4810) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) connect(r5, &(0x7f0000000180)=@pptp={0x18, 0x2, {0x3, @loopback}}, 0x98) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80c0}, 0x80) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xce22, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000340)={0x1, 0x12, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0x9a, 0x4, [0x4, 0x6, 0x7c1, 0x4f]}}, @calipso={0x7, 0x58, {0x6, 0x14, 0x1, 0x9, [0x1, 0x1ff, 0x5, 0x100000000, 0x0, 0x3, 0x9, 0xf, 0xb3f, 0xc]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}]}, 0xa0) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1_to_bridge\x00', 0x10) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00'}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x21, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000280)={r2, r3, 0x0, r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x4) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00005e001000012d00"/19, @ANYRES32=r2, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c0002800800030000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r4 = accept(r3, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r4) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="50001000", @ANYRES16=0x0, @ANYBLOB="00042abd7000ffdbdf25020000003c00018038000400200001000a004e200000bd78fe800000000000000000000000000024050000001400020002004e24ac1e01010000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x40) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000002c80), r2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002cc0)={0x84, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20000000) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x110, 0x6, 0x0, 0x4) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0x2, 0x2, 0x6, 0xd77, 0x9]}, &(0x7f0000000080)=0x78) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) socket$l2tp(0x2, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) socket$kcm(0x21, 0x2, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000002c80), r2) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002cc0)={0x84, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20000000) (async) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x110, 0x6, 0x0, 0x4) (async) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0x2, 0x2, 0x6, 0xd77, 0x9]}, &(0x7f0000000080)=0x78) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x2}]}}, 0x0, 0x2a}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000011080)=@gettaction={0x14, 0x32, 0x6dd711a25f4cb68b}, 0x14}}, 0x0) executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0xffffffff, @rand_addr=' \x01\x00', 0x9}, @in={0x2, 0x4e24, @empty}]}, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) socket$inet(0x2, 0x6, 0x8d) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg$inet(r2, &(0x7f0000002300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4c001) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000000050000001f08", 0x1d) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010102}, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x0, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x2000080) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0019"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x314, &(0x7f0000000cc0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x306, 0x1000, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo={0x8, 0x0, 0x0, 0x6, 0xfbff, "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"}}}}}, 0x0) executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0xb, 0x81, 0x6, 0xfff9, 0x10, 0x2, 0x8, 'syz0\x00'}) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) write(r0, &(0x7f0000000000)="3b000200", 0x4) executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32, @ANYBLOB="138000002b92010024001280090001"], 0x44}}, 0x8000) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r3, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000040000000160a01010000000000000000010000000900020073797a30000000000900010073797a30000000001400038008000240000000ab040001"], 0xc8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32, @ANYBLOB="138000002b92010024001280090001"], 0x44}}, 0x8000) (async) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r3, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000040000000160a01010000000000000000010000000900020073797a30000000000900010073797a30000000001400038008000240000000ab040001"], 0xc8}}, 0x0) (async) executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8ba4, 0x3, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x180, 0x41009}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x4, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x9}]}}]}]}, 0x34}}, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4000000, '\x00', 0x0, 0x0, 0x5}, 0x50) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f0000000800)={0x2, {{0x2, 0x2, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e21, @empty}}]}, 0x110) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf0200000000000085000000cc000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r10, &(0x7f00000000c0)='syz0\x00', 0x1ff) executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}]}], {0x14}}, 0x58}}, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10}, 0x47) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0x4, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r2, 0x1}, 0x14) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003"], 0x58}}, 0x0) (async) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x0) (async, rerun: 64) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = socket(0x400000000010, 0x3, 0x0) connect$inet6(r5, 0x0, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2400, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000340)={'bridge_slave_0\x00', 0x100}) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x12100, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0x158, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x158}}, 0x4c0c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc1400000047", 0xb, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e25, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x3) getsockopt$bt_hci(r2, 0x11a, 0x0, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x198, r1, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0xf8, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x345a0c3a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e468390}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8e7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x547ac294}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf5b5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x240fac27}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63ffe381}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d902680}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8442fc6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x79e9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb6c0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c9ab444}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c2a7dd5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6e50}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x199c}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ae34266}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9132}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4752137}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3ddb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d15}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x652aab04}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6ede}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x264}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb2c6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf042}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x111deb01}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf43c}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000804}, 0x40000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x68}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[], 0xb4}}, 0x40) (async, rerun: 64) r5 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e23, 0x3, 'dh\x00', 0xd, 0x7, 0x8}, 0x2c) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 64) shutdown(r5, 0x1) (rerun: 64) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) (async) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000600)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x55}}], 0x48}, 0x0) (async) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000e20800010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x22870, r8, 0x1bbb2000) (async) r9 = socket(0xa, 0x1, 0x0) close(r9) (async) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x56, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x48, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xd, 0x1, 0x8, 0x0, 0x1000, {[@mptcp=@syn={0x1e, 0xc, 0xb, 0x1, 0x0, 0x3, 0x2b43c763}, @generic={0x13, 0xe, "099f7786f6ce3c30eb72984b"}, @eol, @nop, @sack_perm={0x4, 0x2}]}}}}}}}, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x7a, 0x0, &(0x7f0000000180)=0x57) (rerun: 64) socket$rds(0x15, 0x5, 0x0) executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/153, 0x99}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b8d3d8e48974aae56e0046d828cd3b00000000008bdf0100d6b9aa5ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a090000ecffffff00b2e6b5397f7806b6ff846de37a34c8342bbac5a51eac662f717c429a2ee1d41f67235605e4f8a09cede8676044d4fd3d7935f90651aa2d9c57276322b82e8976f5a4d980eaeb3bd368c188df160da087aafd68dc", 0xa0}], 0x1, 0x0, 0x0, 0x84}, 0x24000081) (async) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b8d3d8e48974aae56e0046d828cd3b00000000008bdf0100d6b9aa5ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a090000ecffffff00b2e6b5397f7806b6ff846de37a34c8342bbac5a51eac662f717c429a2ee1d41f67235605e4f8a09cede8676044d4fd3d7935f90651aa2d9c57276322b82e8976f5a4d980eaeb3bd368c188df160da087aafd68dc", 0xa0}], 0x1, 0x0, 0x0, 0x84}, 0x24000081) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xfb83a000) close(r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@getspdinfo={0x14, 0x25, 0x400, 0x70bd27, 0x25dfdbfd, 0xfffffff8, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x88c0}, 0x40804) executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0xa8b41, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[], 0xfdef) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r3, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000540)="a0", 0x0}, 0x50) sendmmsg$inet6(r0, &(0x7f0000002cc0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x8, @private1, 0xe}, 0x1c, &(0x7f0000001640)=[{&(0x7f0000000040)="ae0bf2730cdc99f89dae8df90913c279365ad749023c15a8d56ba143af14ae", 0x1f}, {&(0x7f0000002d40)="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", 0x1000}, {&(0x7f0000001580)="c1a9f5b80a340dec8708ce5e651cec8c005d5b18298ec189452700e554b48859a38fa36738020ffc11cfd2632155467d718e5c857aba19976e2e887a5f593cdccc44fc00d5ad9ba040289c0524566864d661c1b00cfea39d7e9a52130020fb6ec7c0eb95fe0ffa9b7dc6c0cbfc7cd54cd50cbea54e0103b5cb0417caf194eb01387b976dec0cb6bf82fe67425d1d287627272bbcd7f9d7afdf17b1", 0x9b}], 0x3, &(0x7f0000000180), 0xf0}}, {{&(0x7f00000017c0)={0xa, 0x4e22, 0x7ff, @private1={0xfc, 0x1, '\x00', 0x11}, 0x7fffffff}, 0x1c, &(0x7f0000002c80)=[{&(0x7f0000000100)="e1a2b965f4ea5666e8df2ae7cca93edfed24b706d546baac4fac79a812812493af4220c29234c15355ba5c0814eecd67a10d18de65ae6caf0952e248aecd6b450ecfaca605286423ce47e5fbf451223dacaacdf8631985c9da902709590200000000000071f9bd00"/121, 0x69}, {&(0x7f0000001b80)="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", 0x1000}, {&(0x7f0000002b80)="ee0bdbbc3274b8c4593459ed585980716542a1db7fc46f21baed559c924192293a3ed91ac4fa35c8ff894b68330eeb61d61e839af2c5620e8f10f0510594fc93b0ac1324eae9430a21e7cf04d7007120dedd306ce2b9fc1db36308f4a2c05846c31239999254da21f9251d5e6378d96628ca7f3d9ad85313d88106dc6593e7cf0ecf08ebcc73dd740e147c1983fda5e80e3fbdda504382f60aef4ee863721386324a18cd6ca0a1a4973d78a6368cd092e39e06cf0161d8c1ae000dcb38c5dd79e7b85eb6de1d5332", 0xc8}], 0x3}}], 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettaction={0x2c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x2c}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000001b40)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000340)="d5", 0x1}], 0x1}}], 0x1, 0x40) program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 20, 6, 20, 21, 15, 27, 30, 9, 17] detailed listing: executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0xffffffff, @rand_addr=' \x01\x00', 0x9}, @in={0x2, 0x4e24, @empty}]}, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) socket$inet(0x2, 0x6, 0x8d) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg$inet(r2, &(0x7f0000002300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4c001) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000000050000001f08", 0x1d) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010102}, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x0, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x2000080) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0019"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x314, &(0x7f0000000cc0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x306, 0x1000, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo={0x8, 0x0, 0x0, 0x6, 0xfbff, "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"}}}}}, 0x0) executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0xb, 0x81, 0x6, 0xfff9, 0x10, 0x2, 0x8, 'syz0\x00'}) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) write(r0, &(0x7f0000000000)="3b000200", 0x4) executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32, @ANYBLOB="138000002b92010024001280090001"], 0x44}}, 0x8000) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r3, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000040000000160a01010000000000000000010000000900020073797a30000000000900010073797a30000000001400038008000240000000ab040001"], 0xc8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32, @ANYBLOB="138000002b92010024001280090001"], 0x44}}, 0x8000) (async) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r3, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000040000000160a01010000000000000000010000000900020073797a30000000000900010073797a30000000001400038008000240000000ab040001"], 0xc8}}, 0x0) (async) executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8ba4, 0x3, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x180, 0x41009}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x4, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x9}]}}]}]}, 0x34}}, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4000000, '\x00', 0x0, 0x0, 0x5}, 0x50) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f0000000800)={0x2, {{0x2, 0x2, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e21, @empty}}]}, 0x110) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf0200000000000085000000cc000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r10, &(0x7f00000000c0)='syz0\x00', 0x1ff) executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}]}], {0x14}}, 0x58}}, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10}, 0x47) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0x4, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r2, 0x1}, 0x14) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003"], 0x58}}, 0x0) (async) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x0) (async, rerun: 64) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = socket(0x400000000010, 0x3, 0x0) connect$inet6(r5, 0x0, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2400, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000340)={'bridge_slave_0\x00', 0x100}) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x12100, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0x158, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x158}}, 0x4c0c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc1400000047", 0xb, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e25, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x3) getsockopt$bt_hci(r2, 0x11a, 0x0, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x198, r1, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0xf8, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x345a0c3a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e468390}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8e7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x547ac294}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf5b5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x240fac27}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63ffe381}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d902680}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8442fc6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x79e9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb6c0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c9ab444}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c2a7dd5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6e50}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x199c}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ae34266}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9132}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4752137}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3ddb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d15}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x652aab04}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6ede}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x264}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb2c6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf042}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x111deb01}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf43c}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000804}, 0x40000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x68}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[], 0xb4}}, 0x40) (async, rerun: 64) r5 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e23, 0x3, 'dh\x00', 0xd, 0x7, 0x8}, 0x2c) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 64) shutdown(r5, 0x1) (rerun: 64) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) (async) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000600)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x55}}], 0x48}, 0x0) (async) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000e20800010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x22870, r8, 0x1bbb2000) (async) r9 = socket(0xa, 0x1, 0x0) close(r9) (async) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x56, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x48, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xd, 0x1, 0x8, 0x0, 0x1000, {[@mptcp=@syn={0x1e, 0xc, 0xb, 0x1, 0x0, 0x3, 0x2b43c763}, @generic={0x13, 0xe, "099f7786f6ce3c30eb72984b"}, @eol, @nop, @sack_perm={0x4, 0x2}]}}}}}}}, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x7a, 0x0, &(0x7f0000000180)=0x57) (rerun: 64) socket$rds(0x15, 0x5, 0x0) executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/153, 0x99}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b8d3d8e48974aae56e0046d828cd3b00000000008bdf0100d6b9aa5ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a090000ecffffff00b2e6b5397f7806b6ff846de37a34c8342bbac5a51eac662f717c429a2ee1d41f67235605e4f8a09cede8676044d4fd3d7935f90651aa2d9c57276322b82e8976f5a4d980eaeb3bd368c188df160da087aafd68dc", 0xa0}], 0x1, 0x0, 0x0, 0x84}, 0x24000081) (async) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b8d3d8e48974aae56e0046d828cd3b00000000008bdf0100d6b9aa5ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a090000ecffffff00b2e6b5397f7806b6ff846de37a34c8342bbac5a51eac662f717c429a2ee1d41f67235605e4f8a09cede8676044d4fd3d7935f90651aa2d9c57276322b82e8976f5a4d980eaeb3bd368c188df160da087aafd68dc", 0xa0}], 0x1, 0x0, 0x0, 0x84}, 0x24000081) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xfb83a000) close(r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@getspdinfo={0x14, 0x25, 0x400, 0x70bd27, 0x25dfdbfd, 0xfffffff8, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x88c0}, 0x40804) executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0xa8b41, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[], 0xfdef) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r3, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000540)="a0", 0x0}, 0x50) sendmmsg$inet6(r0, &(0x7f0000002cc0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x8, @private1, 0xe}, 0x1c, &(0x7f0000001640)=[{&(0x7f0000000040)="ae0bf2730cdc99f89dae8df90913c279365ad749023c15a8d56ba143af14ae", 0x1f}, {&(0x7f0000002d40)="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", 0x1000}, {&(0x7f0000001580)="c1a9f5b80a340dec8708ce5e651cec8c005d5b18298ec189452700e554b48859a38fa36738020ffc11cfd2632155467d718e5c857aba19976e2e887a5f593cdccc44fc00d5ad9ba040289c0524566864d661c1b00cfea39d7e9a52130020fb6ec7c0eb95fe0ffa9b7dc6c0cbfc7cd54cd50cbea54e0103b5cb0417caf194eb01387b976dec0cb6bf82fe67425d1d287627272bbcd7f9d7afdf17b1", 0x9b}], 0x3, &(0x7f0000000180), 0xf0}}, {{&(0x7f00000017c0)={0xa, 0x4e22, 0x7ff, @private1={0xfc, 0x1, '\x00', 0x11}, 0x7fffffff}, 0x1c, &(0x7f0000002c80)=[{&(0x7f0000000100)="e1a2b965f4ea5666e8df2ae7cca93edfed24b706d546baac4fac79a812812493af4220c29234c15355ba5c0814eecd67a10d18de65ae6caf0952e248aecd6b450ecfaca605286423ce47e5fbf451223dacaacdf8631985c9da902709590200000000000071f9bd00"/121, 0x69}, {&(0x7f0000001b80)="a92d9eea775e46e8b074f2e6567615f905a9727033f992c231779132cd068c6a3a764a203d077221476d2b1f9c342078908d4396c68e0b889cb82689ae185325885072a24424d33d3b9ad7a26ad837d329f6553c77a87dd48532c4e06774591205ef4eaf61c79006edd488687a6103ca25a53ae6e208414e32bafad6e406c184e01424205a0ba4fdda970f32d123f102cc51e55d40e090a9ef2ca27977ea5257e6d0e65d90e2870d1a7c44faf68b4763eadca64fafc088d85b1cc42b3aac31f4632b1993c238bc801ccf118e9851bb32b6af8f0e903e123c35ce13431e891a9e9a1600996a011d5302441d942b31a4cdbba0a1a62ae39a4462d141262ffc51f8cffc19e489e0a482bcf50755171ea257c05fed20e8dfa1a306d9eb1a0e8233ecf2dd585187e43afba08dcce13f700e43e42289f9e55e5f502eaead1b08da5ce0f1782e9fdbcf1f3e43a5fcf5f214169667d2282938b32dd4063dae894cf44842e3ea803048a4366798dbd27dcf1512006b780b771e7e9e9c5eaca99d638046440159fcbc7fc02a87032afa1431af4abc505061efa63abc21fbf18a29c9e1e5b4c874ad2922c49d73b2c23ff2e88163c4a30a318b6dbdb355716abc1f92adb7c7228356433251e5c5ad63baae82b63160f13132f294ef3c6ef48cf63fc690e9ff2b8ce7a13fd4115252aee7a27c4ce029fbb27fe23b2367113e59ab067456197077fa808fcbe1ea6f8a1c7d91d2a8a4637af490c826aaa337b77d485c107427b6468dc68e2d00be06527396b283a01da6500dac075bdac683aa6ef811f00e1db5490d86acc82c435b457fd0ebc7b2a755440bfef7796cf628446041832a5dc8bfc305bc9f887e9bdd49f82405ff61ed4deb555ab42ada6768df290da0845c804c76b698497e919fe50a89cb46d284f8d7d144f0c24a8b48c63f2ab3a82d85d5d30cc3f2a5147977f8bcd293f50201b40fab1eb125d1a09923a577a2a767429468b4f1ba9352fec3a029f9d337819577dc6c5c6a394b749f177fa8399eb4433b117516518cfd39ec160504bfc762b792b55111e92782d07e017ef4285f8dcfa3c7f9e1100fc5c331818e8354a191bcb9044c1e4a2f4f54ba458c4f48b83d049c088e93875300e22bbf06c80ce1aecba6dd66d59b56cd403df4d465b6b43b9e3fb7bc51a61609782ec9c8c802234294dcd955eab3b1906270a62c87a500e719ab77525def87d81eeeb21d4cb659a2ccb5891fb125a57f2922a1b734123287334edf2b44a7e29865d608f5ab0b4d11929f646effb07ea7dee1ce94b7a4d4202e65ea50ffe4cb9269c98c6c3b1fa6bc431b3ca535ec2b58414e7d356b5be0e94a4498fa2c4ff9c9080831fe78f471bd7942ffe0c068d811f09b224dd29737b7c8da79366919e9f975fba34179bc6a4dffff8b61d606f7c7ba5ae807902d89a9486c5a2afe3a0cec204330c4bee710e0f09446d12b6c7dcd7818a2ec4ba3e64f4883db87a2627c80351967a946fdcb6f6e648e39c0861b423d511f4cfd08d27197cbd1694d77db2bdf928fa2bc0832001cc73a6a3c33e23a708a6c2273ce767a5c0454d3d57a7e927ad2fbc2aa1878a88c7c256be22616327b56a53066a8c7cdc983fc16e54053a63d3074144de696d3a5d99fecd74c02bc5fe98076eebcfb5b2e48e871f5ab78abeb39274e65a26c87c884aaf54ef75e3888920eedaebf49038503df4262d575aaf41f977559705b41d69830ed55e079d43170e75a0c1878ce3dc5b8b57909e769b1d6a5ab181969bcaf9facbe262c6374423c3bcdf522e9ef22d20c4f547b1a713fb217ba9b85308a5e581779db230cad8543e9a766654e53745948378cbebf7c9018429cbf82247cc625ef38f1dcadf0204c990fe2e4b20eaa80d9a58b4d84552f5357240cc46b8a034d1ce25375faaba9e11183ca1b9602a3e3c11c7b4cf8a56cf218ef76145f32336051721e05cad34cc05e4b0b63557c45940bb9f23526f95d3b5d6e3d47579373a7ead2b23c0d93e33104dacb012234125d96f092ee567aea28b1497812ff8f38089dd325a63bdb1c9166aef4658a85323fd608e5d6cf7d263baf5aa3076116b90e22906708549ecc96d6cc888cf88e90b6c374943779dfaa3966926659290b6da134b766f7b1c64b806a5c50ed3a98219af0aca3f2becd3dcfa976ec9bdf2d0b5f78413c7fd45cc0bce882167b6e7bcef65244c8d4ed15b5b742619cd823c895743909a065d0b017b3651533f739ec57405c5951dad523ecc38e13cc4d31b20e36e2afab83143eb0175be752956db3f75e771b1d60621aefd9a5d06adbfc8796eab5ec89f81970be0fde63925d64a8b60fe7f4d59a86ffecb469a449d6d2c4e0d4cecc400e78644a7d885a760fb9ef5e4511384a8d67ed2673d4c1e2fd023efb4dc8d2237529c705574b2517ef8c5c948cdb734ea439b6ae185411c66c0e170258abb92efb084bd3cc6c16036ad52b9ab52508d0bbae92ce40ab23b21e5f9e682fa29bc197f4d8c82baf554f61b4585356132a63dfa29cff72cecfffbd74021ccb8f3ea3012a475f4cbc5736369f6531eba1db17b129c87b573242f372bd4513fee4a72442a91e869c124e7915a6608e4e2ab31388cf8187bc5e7e2e9db3e98c03fe8285b54f186027918335b63c54841a85362bc6f554f1c7d2f76c821fcc0c0fd7533f290de85ed8810c36b92f71e0df2241aa4975aa8900ab9ee6b7da2bcea648d9d0828ba64b86c44b89fbe57d44ba795919c463a7b8a1a1941fe29abc3c7b2764ad443911ce38f69fdd7800a622bd6a431e1c1a95b91d47c23a7722c0bce6fffa79187786760d635f751be854ac0d119eee55f46686303ba95d5afe49d38487d845de4f92c4d31a7625d55272fbfe20358a1711df007a7527674ff1ed60f12a39d19fbabe2d6620c2348a42a742f3d37414727e51820ea65f5f984d5873547b09e36c4ff55f5124bbceeb004efbd77378de9d225457ec2f78a7a3211402c20690abc44e1a02f119af6b6835d4837cafa17543828de7099e7d1f14e448b3fd5cc1b50022b511da4ae973dbfdeec25e53a0282d3fc29fa03a1ee55981c4e51ae8c3a77bf98c5dee15df961fa3316b2aff99b4a6a6786ada999198bbaef3b3266a25dd2e0313bf1388f3298d96911bb49645c5105f29eb7309617bd9009690d7a9f33c378dd9a59881da1f9e20d8cfa4dad495ff17643bdfb1ac3647dfc9287bd951ac67b93fe30f8ab2b917495c8ee4bcd165adcb76059895fd7427144ebfc4d143aab3de16364c9f8c17f4ab85793c6578dd0a5569d68177e72e43a244ffeeac02701dbd521eef24aaca35c3e70e995c4cc492fe1e360a75d6d92e8a697e9e73340fd375eb8007417fd95cfb756b16ed696f4d614e8dd0c1196cdf6b52a013bb53a39f8ae1d9a361d4b4be7a153355d97372dfc99e0d441c3d5b312011eda60578e3d14cc55fb1eeb4338cb90f1210cdfc4b76fd8049bc6d447c490830356aad854e03bf069ffb5ece47d50f320e385d96ecd282f4db910bf5764959a2a1f307d66ed2f8be016c80401baa4ae075b219543cb1e216d951376791fac9ee7e187dab5720a563eaff2b3ba81bc52484a2d4f316100f71e185a3a99454d486d7b6496a169fbe99aefc38727674cd360b2a07ef60c54998347e0ed90339b4676b7836df905491cc763ae1ec0217974e52118c9b586484448259988205c87e966c9671a22a1324c2f251809aac2ca086679ed4fd4c21b27665f52fa9ceca495b67954fbe092a0c8eb4ae93f6a3af86ae457488cfc622f10df08003c16c0116ed69af5ebddfc2d428f031ffeb295b801ce9611fe4150525a4b28f29955755a0bcd218a078c09a90ff72626bd8acb11e8cace50b22c8d190a6103d797de32c1ec3306afa12970f8894cf257a7fd074381b00f4942f03ad94975f3b8a65999c6f30fb5e75c1cf363d3f05ef30cd87352c34187eb13251fd98103d8391c4f6560f784beec8b2221923ce856978cd362be6ef3a6efb0e7b76c8a90db85eb34c760a5d0eb51d4327ed9eee30b6592e772311840b464dcbdea7b9ccac28e71734e2e0bfca2b63390211a467530d0c52994e250d7b2967d74ff68a2a5b874ef5c1c07a604a38e27fb12a38e9c20581469d7a50c297cd0e2cc85f93e3102c95c23946f4869cf176f8ed83740ffc142acef630e92587c6fb234fdee10b336508d81ab3c5febb5d962fb78bf0a5abf40e03f153ca0cd2c08210c622e81ecf337bd8b81804be9f6738afc253b26a4a71122e3b5d4151180ade6cf260ad95d8eb63d6b0f18526c1066c77014f73f4494defbef153ac8140c85ac137ccb786fb7233ac168f66619ec50300351003380c9b52d99905891db1a885b484a50eff60915fef178fcd87e342446ae07334ca168df8795e9757801028095af50903783f681eea284112909c89f1a4ec840aa3ccd7639033fa0764629e1f7949118385edf7b7a1a66dd5fcc4c4947e770e90382693f9c4698ef7868a52284244fac26d67d1de857f52e1bb3bcdac9e815a2b091ef11998d9d0954697288dce5d72c8f76995972f9675c755bbf968263674a1d35cb4ffb405bb3a2c9d8f5ae2516a02569ada9ddcce3bae32a1217e8b3bd3b09dcc62291f873fc649322837fed1b360a2ea4e337f2f524bab0177c7be2fc6899dc7d7d78c32300e6f88e1eb827d26f3258372e34714910f7f9ae1411b5bc8cc29e9674be05e341c1246aae8ccd1c6b7147685183605b7c9ba88abbb1cc30d39de24db10306350abce7b77714718750b9306a1f29216cdc752df86e9d991334809677035a52054752a0e4ebb43a1859448265d9b59e6427252532a5141936de009ef66c4eecc8c5d0f6ac0d20ff43fb79df18547463b74ec053ba8964f30e3e9f324c0ff56a991d6ed0189998a463a26d73205094e7bba905f72fb628fe001da1b0475e8317ebc82427f23d0b81dc19efc5aaaa9c1757f1b84657f0e0c0d8953c55b1c213b571efd46ffb04e47eaceb7c1ca612463657cc6623ba920258246c35db7151c29b01877d371fd9a169c10d2bc03cfb0f140f72fc9cc1e10a30e6dcc9e199176d59ade9de23f1df2083d44e69c5d643f04f862f3bc7a7f5aaa1f8430028589b353944609e2c46618ad7d71a211c987b1c121e9776dd5e8ee73968b6a54e1f660e3e5c24e081b394820a648ba447b9a1c4c3587b614f0114ff154a5bda0e37836355e706024fad9ded6e7a26c409a4e55dc7e99134051ae2bb383290ace2be9fea5dd92f5fc2e45038b59335b295b42ab2797bb217377f32d850e51ddf2af95953c48821ef2fe9175aba16487c712bc168e9e54b8470713a147c6adf9c590546f12506c06a6d68dc25307d0f7bb9639a1a08d39da3914ab4ecfa116d8d6b2e3f9fe33fac25e8bc8787e974a3d2cf34e45b39e776e32ccda24d18b3de32e700384b5ac7a23cc592701610d10c36779b76e441049113f03bda92ddbeee1b2ff8684c744beac26e4b27e2b5d80261b50b808e3a6e0f20a598b244774060e69e9a114e3f23058ff4ec06a6b9989b1edc7c53d7475f542e9ea5c55a3e97272a3abc77a7b815199fdbfd8dd21b70bb93426fcaf3bed282ae8d0b5f5a2e32080901bab7eb82d29678fb7c3f544288ebd106f1d7b1572a5e5d483171e95bea23dc39a91e8cc7c0de630c13236cf0aa39904504bee7c7fbbd4721c4fd30818816d762dd7aae21bfc632307d92296877e4aeb4ad89aaa873c72424f6dddf237f1c41b7c96904b316326dcc2ad36", 0x1000}, {&(0x7f0000002b80)="ee0bdbbc3274b8c4593459ed585980716542a1db7fc46f21baed559c924192293a3ed91ac4fa35c8ff894b68330eeb61d61e839af2c5620e8f10f0510594fc93b0ac1324eae9430a21e7cf04d7007120dedd306ce2b9fc1db36308f4a2c05846c31239999254da21f9251d5e6378d96628ca7f3d9ad85313d88106dc6593e7cf0ecf08ebcc73dd740e147c1983fda5e80e3fbdda504382f60aef4ee863721386324a18cd6ca0a1a4973d78a6368cd092e39e06cf0161d8c1ae000dcb38c5dd79e7b85eb6de1d5332", 0xc8}], 0x3}}], 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettaction={0x2c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x2c}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000001b40)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000340)="d5", 0x1}], 0x1}}], 0x1, 0x40) program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init bisect: the chunk can be dropped bisect: testing without sub-chunk 3/3 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-openat$tun-socket$tipc-bind$tipc-bind$tipc-close-ioctl$TUNSETIFF-syz_init_net_socket$llc-socket$netlink-setsockopt$netlink_NETLINK_LISTEN_ALL_NSID-syz_genetlink_get_family_id$nl80211-ioctl$TUNSETOFFLOAD-syz_genetlink_get_family_id$devlink-socket$nl_generic-sendmsg$DEVLINK_CMD_RATE_DEL-recvfrom$llc-socket$kcm-ioctl$SIOCSIFHWADDR-socket$packet-setsockopt$packet_int-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-syz_genetlink_get_family_id$devlink-sendmsg$DEVLINK_CMD_PORT_SET-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-sendto$packet-write$tun detailed listing: executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x12100, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0x158, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x158}}, 0x4c0c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc1400000047", 0xb, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash bisect: split chunks (needed=true): <9> bisect: split chunk #0 of len 9 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 27, 30, 9, 17] detailed listing: executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}]}], {0x14}}, 0x58}}, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10}, 0x47) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0x4, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r2, 0x1}, 0x14) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003"], 0x58}}, 0x0) (async) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x0) (async, rerun: 64) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = socket(0x400000000010, 0x3, 0x0) connect$inet6(r5, 0x0, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2400, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000340)={'bridge_slave_0\x00', 0x100}) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x12100, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0x158, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x158}}, 0x4c0c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc1400000047", 0xb, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e25, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x3) getsockopt$bt_hci(r2, 0x11a, 0x0, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x198, r1, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0xf8, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x345a0c3a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e468390}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8e7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x547ac294}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf5b5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x240fac27}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63ffe381}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d902680}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8442fc6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x79e9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb6c0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c9ab444}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c2a7dd5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6e50}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x199c}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ae34266}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9132}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4752137}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3ddb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d15}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x652aab04}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6ede}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x264}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb2c6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf042}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x111deb01}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf43c}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000804}, 0x40000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x68}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[], 0xb4}}, 0x40) (async, rerun: 64) r5 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e23, 0x3, 'dh\x00', 0xd, 0x7, 0x8}, 0x2c) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 64) shutdown(r5, 0x1) (rerun: 64) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) (async) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000600)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x55}}], 0x48}, 0x0) (async) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000e20800010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x22870, r8, 0x1bbb2000) (async) r9 = socket(0xa, 0x1, 0x0) close(r9) (async) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x56, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x48, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xd, 0x1, 0x8, 0x0, 0x1000, {[@mptcp=@syn={0x1e, 0xc, 0xb, 0x1, 0x0, 0x3, 0x2b43c763}, @generic={0x13, 0xe, "099f7786f6ce3c30eb72984b"}, @eol, @nop, @sack_perm={0x4, 0x2}]}}}}}}}, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x7a, 0x0, &(0x7f0000000180)=0x57) (rerun: 64) socket$rds(0x15, 0x5, 0x0) executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/153, 0x99}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b8d3d8e48974aae56e0046d828cd3b00000000008bdf0100d6b9aa5ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a090000ecffffff00b2e6b5397f7806b6ff846de37a34c8342bbac5a51eac662f717c429a2ee1d41f67235605e4f8a09cede8676044d4fd3d7935f90651aa2d9c57276322b82e8976f5a4d980eaeb3bd368c188df160da087aafd68dc", 0xa0}], 0x1, 0x0, 0x0, 0x84}, 0x24000081) (async) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b8d3d8e48974aae56e0046d828cd3b00000000008bdf0100d6b9aa5ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a090000ecffffff00b2e6b5397f7806b6ff846de37a34c8342bbac5a51eac662f717c429a2ee1d41f67235605e4f8a09cede8676044d4fd3d7935f90651aa2d9c57276322b82e8976f5a4d980eaeb3bd368c188df160da087aafd68dc", 0xa0}], 0x1, 0x0, 0x0, 0x84}, 0x24000081) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xfb83a000) close(r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@getspdinfo={0x14, 0x25, 0x400, 0x70bd27, 0x25dfdbfd, 0xfffffff8, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x88c0}, 0x40804) executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0xa8b41, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[], 0xfdef) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r3, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000540)="a0", 0x0}, 0x50) sendmmsg$inet6(r0, &(0x7f0000002cc0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x8, @private1, 0xe}, 0x1c, &(0x7f0000001640)=[{&(0x7f0000000040)="ae0bf2730cdc99f89dae8df90913c279365ad749023c15a8d56ba143af14ae", 0x1f}, {&(0x7f0000002d40)="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", 0x1000}, {&(0x7f0000001580)="c1a9f5b80a340dec8708ce5e651cec8c005d5b18298ec189452700e554b48859a38fa36738020ffc11cfd2632155467d718e5c857aba19976e2e887a5f593cdccc44fc00d5ad9ba040289c0524566864d661c1b00cfea39d7e9a52130020fb6ec7c0eb95fe0ffa9b7dc6c0cbfc7cd54cd50cbea54e0103b5cb0417caf194eb01387b976dec0cb6bf82fe67425d1d287627272bbcd7f9d7afdf17b1", 0x9b}], 0x3, &(0x7f0000000180), 0xf0}}, {{&(0x7f00000017c0)={0xa, 0x4e22, 0x7ff, @private1={0xfc, 0x1, '\x00', 0x11}, 0x7fffffff}, 0x1c, &(0x7f0000002c80)=[{&(0x7f0000000100)="e1a2b965f4ea5666e8df2ae7cca93edfed24b706d546baac4fac79a812812493af4220c29234c15355ba5c0814eecd67a10d18de65ae6caf0952e248aecd6b450ecfaca605286423ce47e5fbf451223dacaacdf8631985c9da902709590200000000000071f9bd00"/121, 0x69}, {&(0x7f0000001b80)="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", 0x1000}, {&(0x7f0000002b80)="ee0bdbbc3274b8c4593459ed585980716542a1db7fc46f21baed559c924192293a3ed91ac4fa35c8ff894b68330eeb61d61e839af2c5620e8f10f0510594fc93b0ac1324eae9430a21e7cf04d7007120dedd306ce2b9fc1db36308f4a2c05846c31239999254da21f9251d5e6378d96628ca7f3d9ad85313d88106dc6593e7cf0ecf08ebcc73dd740e147c1983fda5e80e3fbdda504382f60aef4ee863721386324a18cd6ca0a1a4973d78a6368cd092e39e06cf0161d8c1ae000dcb38c5dd79e7b85eb6de1d5332", 0xc8}], 0x3}}], 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettaction={0x2c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x2c}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000001b40)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000340)="d5", 0x1}], 0x1}}], 0x1, 0x40) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 20, 6, 20, 21, 27] detailed listing: executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0xffffffff, @rand_addr=' \x01\x00', 0x9}, @in={0x2, 0x4e24, @empty}]}, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) socket$inet(0x2, 0x6, 0x8d) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg$inet(r2, &(0x7f0000002300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4c001) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000000050000001f08", 0x1d) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010102}, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x0, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x2000080) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0019"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x314, &(0x7f0000000cc0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x306, 0x1000, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo={0x8, 0x0, 0x0, 0x6, 0xfbff, "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"}}}}}, 0x0) executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0xb, 0x81, 0x6, 0xfff9, 0x10, 0x2, 0x8, 'syz0\x00'}) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) write(r0, &(0x7f0000000000)="3b000200", 0x4) executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32, @ANYBLOB="138000002b92010024001280090001"], 0x44}}, 0x8000) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r3, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000040000000160a01010000000000000000010000000900020073797a30000000000900010073797a30000000001400038008000240000000ab040001"], 0xc8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32, @ANYBLOB="138000002b92010024001280090001"], 0x44}}, 0x8000) (async) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r3, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000040000000160a01010000000000000000010000000900020073797a30000000000900010073797a30000000001400038008000240000000ab040001"], 0xc8}}, 0x0) (async) executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8ba4, 0x3, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x180, 0x41009}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x4, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x9}]}}]}]}, 0x34}}, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4000000, '\x00', 0x0, 0x0, 0x5}, 0x50) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f0000000800)={0x2, {{0x2, 0x2, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e21, @empty}}]}, 0x110) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf0200000000000085000000cc000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r10, &(0x7f00000000c0)='syz0\x00', 0x1ff) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x12100, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0x158, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x158}}, 0x4c0c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc1400000047", 0xb, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init bisect: the chunk can be dropped bisect: split chunks (needed=true): <5> bisect: split chunk #0 of len 5 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 21, 27] detailed listing: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32, @ANYBLOB="138000002b92010024001280090001"], 0x44}}, 0x8000) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r3, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000040000000160a01010000000000000000010000000900020073797a30000000000900010073797a30000000001400038008000240000000ab040001"], 0xc8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32, @ANYBLOB="138000002b92010024001280090001"], 0x44}}, 0x8000) (async) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r3, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000040000000160a01010000000000000000010000000900020073797a30000000000900010073797a30000000001400038008000240000000ab040001"], 0xc8}}, 0x0) (async) executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8ba4, 0x3, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x180, 0x41009}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x4, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x9}]}}]}]}, 0x34}}, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4000000, '\x00', 0x0, 0x0, 0x5}, 0x50) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f0000000800)={0x2, {{0x2, 0x2, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e21, @empty}}]}, 0x110) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf0200000000000085000000cc000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r10, &(0x7f00000000c0)='syz0\x00', 0x1ff) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x12100, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0x158, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x158}}, 0x4c0c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc1400000047", 0xb, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 20, 6, 27] detailed listing: executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0xffffffff, @rand_addr=' \x01\x00', 0x9}, @in={0x2, 0x4e24, @empty}]}, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) socket$inet(0x2, 0x6, 0x8d) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg$inet(r2, &(0x7f0000002300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4c001) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000000050000001f08", 0x1d) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010102}, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x0, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x2000080) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0019"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x314, &(0x7f0000000cc0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x306, 0x1000, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo={0x8, 0x0, 0x0, 0x6, 0xfbff, "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"}}}}}, 0x0) executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0xb, 0x81, 0x6, 0xfff9, 0x10, 0x2, 0x8, 'syz0\x00'}) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) write(r0, &(0x7f0000000000)="3b000200", 0x4) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x12100, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0x158, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x158}}, 0x4c0c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc1400000047", 0xb, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init bisect: the chunk can be dropped bisect: split chunks (needed=true): <3> bisect: split chunk #0 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 27] detailed listing: executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0xb, 0x81, 0x6, 0xfff9, 0x10, 0x2, 0x8, 'syz0\x00'}) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) write(r0, &(0x7f0000000000)="3b000200", 0x4) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x12100, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0x158, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x158}}, 0x4c0c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc1400000047", 0xb, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 20, 27] detailed listing: executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0xffffffff, @rand_addr=' \x01\x00', 0x9}, @in={0x2, 0x4e24, @empty}]}, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) socket$inet(0x2, 0x6, 0x8d) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg$inet(r2, &(0x7f0000002300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4c001) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000000050000001f08", 0x1d) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010102}, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x0, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x2000080) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0019"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x314, &(0x7f0000000cc0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x306, 0x1000, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo={0x8, 0x0, 0x0, 0x6, 0xfbff, "69f3e8b59b5259b900ec504b5e1ee5c150cbebfa40406831c788d7d76094e583483aa311f12d5458b8cc4e29b5eb6dead441404e6801fab976038fbd30ae77f9fcc6ab5334ee32a07fcb3bc0da28f8170f616a6b66158932e8188cec6c0e99360ea36fe8687b8557764470ce90591edaff50ae0b95f0ac636ad77f9297fec41d49bca237f3bce7545860cf0b3066e8e1f86bc5e095830cbf7b39b9b6b02adbeb6afeb24bae041957df3f7f5889a60dda85c21de3aee4d22b983928d814d49a827ae2addf90e4c1fba595b860ad9008e09d8fd9744e9dc8b6f2bde006f534d639209f0fd455f748d14a21531abb22648069bdb2de5b3516f9119877c299e33d08170fdc890d399914916711a9b56a757a9f0498d84d81f53f34dd27cc51f6368934cd25736724b74e1280f5babde7bb0ab82f2f86106d594c4f8661a497e9ce87ddec264d6b4c5aee4d6de14efb59aab25f132e128e7c00bd95e6f50b8f462135aea619c48b52a1c397b6b86861bdd70ea5c996f57624dc2dc3fa208abcc53def02d40342646c0abbe5495f48ea9aed7852dc0cd966d2522c54f1bb5f05dd60d69b9ed38bc1b8f03edacb8637f3e33a57521900d39dee948c51a30ec9904f536b6cb9d9c726538500f694d8fdb07cf3f31192f26127caab294d4a4f88dce05e630c62b217c89e8483460be00be85dba965f62a2c2b914dae81c2c4f77202411d3b78918d45b604fe57251013cf36665adcc993428ecf69c098dc38e15ad224bd806ba5d797bc18c3b9086f244a7ba548cad49620e8b0c55320773544e60be874b9079e3c55702a30737070097cf7bd3073be9505221260b01dc1d6d79d6eed414a548c9c964e73601aae5325329750771019aa05905f384694c6e8d18fc4641204848da8823cb7c94fa1224d5752aaf113042236c435f2580be740690f66194ea3efe3041c79872d1f88fb19588fdf47038050939a04aead85667b8f2458c1948fbc102684e23450bd1c2729e22af2a52bc1ac46fb8d2b7f0d875266ffb75993dafb4c9e51d0f1e04891c"}}}}}, 0x0) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x12100, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0x158, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x158}}, 0x4c0c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc1400000047", 0xb, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init bisect: the chunk can be dropped bisect: split chunks (needed=true): <2> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 27] detailed listing: executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) socket$inet(0x2, 0x6, 0x8d) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg$inet(r2, &(0x7f0000002300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4c001) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000000050000001f08", 0x1d) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010102}, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x0, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x2000080) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0019"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x314, &(0x7f0000000cc0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x306, 0x1000, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo={0x8, 0x0, 0x0, 0x6, 0xfbff, "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"}}}}}, 0x0) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x12100, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0x158, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x158}}, 0x4c0c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc1400000047", 0xb, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 27] detailed listing: executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0xffffffff, @rand_addr=' \x01\x00', 0x9}, @in={0x2, 0x4e24, @empty}]}, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x12100, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0x158, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x158}}, 0x4c0c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc1400000047", 0xb, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init bisect: the chunk can be dropped bisect: split chunks (needed=true): <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 2 programs left: executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0xffffffff, @rand_addr=' \x01\x00', 0x9}, @in={0x2, 0x4e24, @empty}]}, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x12100, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0x158, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x158}}, 0x4c0c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc1400000047", 0xb, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) bisect: trying to concatenate bisect: concatenate 2 entries minimizing program #0 before concatenation testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 27] detailed listing: executing program 0: socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0xffffffff, @rand_addr=' \x01\x00', 0x9}, @in={0x2, 0x4e24, @empty}]}, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00'}) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x12100, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0x158, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x158}}, 0x4c0c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc1400000047", 0xb, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 27] detailed listing: executing program 0: socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0xffffffff, @rand_addr=' \x01\x00', 0x9}, @in={0x2, 0x4e24, @empty}]}, 0x0) socket$kcm(0x1e, 0x4, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x12100, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0x158, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x158}}, 0x4c0c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc1400000047", 0xb, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program crashed: lost connection to test machine suppressed program crash: lost connection to test machine testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 27] detailed listing: executing program 0: socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0xffffffff, @rand_addr=' \x01\x00', 0x9}, @in={0x2, 0x4e24, @empty}]}, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x12100, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0x158, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x158}}, 0x4c0c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc1400000047", 0xb, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 27] detailed listing: executing program 0: socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0xffffffff, @rand_addr=' \x01\x00', 0x9}, @in={0x2, 0x4e24, @empty}]}, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x12100, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0x158, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x158}}, 0x4c0c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc1400000047", 0xb, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 27] detailed listing: executing program 0: socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0xffffffff, @rand_addr=' \x01\x00', 0x9}, @in={0x2, 0x4e24, @empty}]}, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x12100, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0x158, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x158}}, 0x4c0c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc1400000047", 0xb, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 27] detailed listing: executing program 0: socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0xffffffff, @rand_addr=' \x01\x00', 0x9}, @in={0x2, 0x4e24, @empty}]}, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x12100, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0x158, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x158}}, 0x4c0c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc1400000047", 0xb, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 27] detailed listing: executing program 0: socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0xffffffff, @rand_addr=' \x01\x00', 0x9}, @in={0x2, 0x4e24, @empty}]}, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x12100, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0x158, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x158}}, 0x4c0c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc1400000047", 0xb, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 27] detailed listing: executing program 0: socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0xffffffff, @rand_addr=' \x01\x00', 0x9}, @in={0x2, 0x4e24, @empty}]}, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x12100, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0x158, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x158}}, 0x4c0c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc1400000047", 0xb, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 27] detailed listing: executing program 0: socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0xffffffff, @rand_addr=' \x01\x00', 0x9}, @in={0x2, 0x4e24, @empty}]}, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x5}, 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x12100, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0x158, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x158}}, 0x4c0c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc1400000047", 0xb, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 27] detailed listing: executing program 0: socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0xffffffff, @rand_addr=' \x01\x00', 0x9}, @in={0x2, 0x4e24, @empty}]}, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x12100, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0x158, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x158}}, 0x4c0c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc1400000047", 0xb, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 27] detailed listing: executing program 0: socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0xffffffff, @rand_addr=' \x01\x00', 0x9}, @in={0x2, 0x4e24, @empty}]}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x12100, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0x158, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x158}}, 0x4c0c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc1400000047", 0xb, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 27] detailed listing: executing program 0: socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x12100, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0x158, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x158}}, 0x4c0c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc1400000047", 0xb, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 27] detailed listing: executing program 0: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x12100, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0x158, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x158}}, 0x4c0c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc1400000047", 0xb, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init minimized 13 calls -> 7 calls minimizing program #1 before concatenation testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 26] detailed listing: executing program 2: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x12100, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0x158, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x158}}, 0x4c0c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc1400000047", 0xb, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 26] detailed listing: executing program 2: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x12100, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'tunl0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) sendmsg$DEVLINK_CMD_PORT_SET(r8, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0x158, r9, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x158}}, 0x4c0c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 25] detailed listing: executing program 2: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x12100, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'tunl0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) sendmsg$DEVLINK_CMD_PORT_SET(r8, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0x158, r9, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x158}}, 0x4c0c0) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 24] detailed listing: executing program 2: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x12100, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'tunl0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 23] detailed listing: executing program 2: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x12100, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'tunl0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 22] detailed listing: executing program 2: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x12100, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'tunl0\x00'}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 21] detailed listing: executing program 2: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x12100, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 20] detailed listing: executing program 2: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x12100, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$packet(0x11, 0x2, 0x300) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 19] detailed listing: executing program 2: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x12100, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18] detailed listing: executing program 2: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x12100, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18] detailed listing: executing program 2: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x12100, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18] detailed listing: executing program 2: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r3, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 17] detailed listing: executing program 2: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 16] detailed listing: executing program 2: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 15] detailed listing: executing program 2: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 14] detailed listing: executing program 2: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 13] detailed listing: executing program 2: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 12] detailed listing: executing program 2: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x10) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 11] detailed listing: executing program 2: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 10] detailed listing: executing program 2: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 9] detailed listing: executing program 2: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r1) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 9] detailed listing: executing program 2: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 8] detailed listing: executing program 2: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 7] detailed listing: executing program 2: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$tipc(0x1e, 0x5, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 6] detailed listing: executing program 2: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 5] detailed listing: executing program 2: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(0xffffffffffffffff, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 5] detailed listing: executing program 2: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init minimized 27 calls -> 5 calls testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r4, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init bisect: concatenation succeeded found reproducer with 12 syscalls minimizing guilty program testing program (duration=1m25.491546724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR detailed listing: executing program 0: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) program did not crash testing program (duration=1m25.491546724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-write$tun detailed listing: executing program 0: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r4, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash testing program (duration=1m25.491546724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r4, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash testing program (duration=1m25.491546724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r4, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash testing program (duration=1m25.491546724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(0xffffffffffffffff, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash testing program (duration=1m25.491546724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash testing program (duration=1m25.491546724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash testing program (duration=1m25.491546724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r3, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash testing program (duration=1m25.491546724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r3, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash testing program (duration=1m25.491546724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r4, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash testing program (duration=1m25.491546724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: r0 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r4, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash testing program (duration=1m25.491546724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r3, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash testing program (duration=1m25.491546724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r4, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash testing program (duration=1m25.491546724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r4, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init testing program (duration=1m25.491546724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r4, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash testing program (duration=1m25.491546724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r4, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash testing program (duration=1m25.491546724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0, 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r4, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash testing program (duration=1m25.491546724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r4, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash testing program (duration=1m25.491546724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r4, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash testing program (duration=1m25.491546724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r4, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash testing program (duration=1m25.491546724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r3, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash testing program (duration=1m25.491546724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r3, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash testing program (duration=1m25.491546724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00'}) sendmsg$nl_route(r1, 0x0, 0x8000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash testing program (duration=1m25.491546724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00'}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash testing program (duration=1m25.491546724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00'}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash testing program (duration=1m25.491546724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00'}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash testing program (duration=1m25.491546724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r4, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash testing program (duration=1m25.491546724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r4, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash testing program (duration=1m25.491546724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r4, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash testing program (duration=1m25.491546724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r4, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash testing program (duration=1m25.491546724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r4, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash testing program (duration=1m25.491546724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) write$tun(r4, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program did not crash testing program (duration=1m25.491546724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r4, 0x0, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=1m25.491546724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init simplifying C reproducer testing compiled C program (duration=1m25.491546724s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init testing compiled C program (duration=1m25.491546724s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init testing compiled C program (duration=1m25.491546724s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun program did not crash testing compiled C program (duration=1m25.491546724s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun program did not crash testing compiled C program (duration=1m25.491546724s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun program did not crash testing compiled C program (duration=1m25.491546724s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init testing compiled C program (duration=1m25.491546724s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init testing compiled C program (duration=1m25.491546724s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init testing compiled C program (duration=1m25.491546724s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init testing compiled C program (duration=1m25.491546724s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init testing compiled C program (duration=1m25.491546724s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init testing compiled C program (duration=1m25.491546724s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init testing compiled C program (duration=1m25.491546724s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init testing compiled C program (duration=1m25.491546724s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init testing compiled C program (duration=1m25.491546724s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init testing compiled C program (duration=1m25.491546724s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init testing program (duration=1m25.491546724s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r4, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init validation run: crashed=true testing program (duration=1m25.491546724s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r4, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init validation run: crashed=true testing program (duration=1m25.491546724s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-sendmsg$nl_xfrm-socket$nl_route-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r4, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8e}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) program crashed: KASAN: use-after-free Read in qdisc_pkt_len_segs_init validation run: crashed=true reproducing took 3h25m19.04741722s repro crashed as (corrupted=false): ================================================================== BUG: KASAN: use-after-free in __tcp_hdrlen include/linux/tcp.h:31 [inline] BUG: KASAN: use-after-free in qdisc_pkt_len_segs_init+0x7f8/0xa30 net/core/dev.c:4140 Read of size 2 at addr ffff88817cd41734 by task syz.0.17/5856 CPU: 0 UID: 0 PID: 5856 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 print_address_description+0x55/0x1e0 mm/kasan/report.c:378 print_report+0x58/0x70 mm/kasan/report.c:482 kasan_report+0x117/0x150 mm/kasan/report.c:595 __tcp_hdrlen include/linux/tcp.h:31 [inline] qdisc_pkt_len_segs_init+0x7f8/0xa30 net/core/dev.c:4140 __dev_queue_xmit+0x29a/0x3950 net/core/dev.c:4782 dev_queue_xmit include/linux/netdevice.h:3418 [inline] hsr_xmit net/hsr/hsr_forward.c:440 [inline] hsr_forward_do net/hsr/hsr_forward.c:581 [inline] hsr_forward_skb+0x167e/0x2ab0 net/hsr/hsr_forward.c:743 hsr_handle_frame+0x6b8/0xa50 net/hsr/hsr_slave.c:81 __netif_receive_skb_core+0x98f/0x3170 net/core/dev.c:6089 __netif_receive_skb_list_core+0x24d/0x810 net/core/dev.c:6277 __netif_receive_skb_list net/core/dev.c:6344 [inline] netif_receive_skb_list_internal+0x995/0xcf0 net/core/dev.c:6435 gro_normal_list include/net/gro.h:523 [inline] gro_flush_normal include/net/gro.h:531 [inline] napi_complete_done+0x299/0x730 net/core/dev.c:6803 gro_cell_poll+0x5a9/0x5d0 net/core/gro_cells.c:74 __napi_poll+0xae/0x340 net/core/dev.c:7733 napi_poll net/core/dev.c:7796 [inline] net_rx_action+0x627/0xf70 net/core/dev.c:7953 handle_softirqs+0x22a/0x840 kernel/softirq.c:622 do_softirq+0x76/0xd0 kernel/softirq.c:523 __local_bh_enable_ip+0xf8/0x130 kernel/softirq.c:450 local_bh_enable include/linux/bottom_half.h:33 [inline] tun_rx_batched+0x617/0x790 drivers/net/tun.c:-1 tun_get_user+0x2bbc/0x43e0 drivers/net/tun.c:1955 tun_chr_write_iter+0x113/0x200 drivers/net/tun.c:2001 new_sync_write fs/read_write.c:595 [inline] vfs_write+0x61d/0xb90 fs/read_write.c:688 ksys_write+0x150/0x270 fs/read_write.c:740 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe91fb9ce59 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffda826a2e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007fe91fe15fa0 RCX: 00007fe91fb9ce59 RDX: 000000000000007a RSI: 00002000000002c0 RDI: 0000000000000005 RBP: 00007fe91fc32d6f R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fe91fe15fac R14: 00007fe91fe15fa0 R15: 00007fe91fe15fa0 The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x17cd41 flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) raw: 057ff00000000000 ffffea0005f35048 ffffea0005f35048 0000000000000000 raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 page dumped because: kasan: bad access detected page_owner info is not present (never set?) Memory state around the buggy address: ffff88817cd41600: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ffff88817cd41680: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff >ffff88817cd41700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ^ ffff88817cd41780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ffff88817cd41800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ================================================================== final repro crashed as (corrupted=false): ================================================================== BUG: KASAN: use-after-free in __tcp_hdrlen include/linux/tcp.h:31 [inline] BUG: KASAN: use-after-free in qdisc_pkt_len_segs_init+0x7f8/0xa30 net/core/dev.c:4140 Read of size 2 at addr ffff88817cd41734 by task syz.0.17/5856 CPU: 0 UID: 0 PID: 5856 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 print_address_description+0x55/0x1e0 mm/kasan/report.c:378 print_report+0x58/0x70 mm/kasan/report.c:482 kasan_report+0x117/0x150 mm/kasan/report.c:595 __tcp_hdrlen include/linux/tcp.h:31 [inline] qdisc_pkt_len_segs_init+0x7f8/0xa30 net/core/dev.c:4140 __dev_queue_xmit+0x29a/0x3950 net/core/dev.c:4782 dev_queue_xmit include/linux/netdevice.h:3418 [inline] hsr_xmit net/hsr/hsr_forward.c:440 [inline] hsr_forward_do net/hsr/hsr_forward.c:581 [inline] hsr_forward_skb+0x167e/0x2ab0 net/hsr/hsr_forward.c:743 hsr_handle_frame+0x6b8/0xa50 net/hsr/hsr_slave.c:81 __netif_receive_skb_core+0x98f/0x3170 net/core/dev.c:6089 __netif_receive_skb_list_core+0x24d/0x810 net/core/dev.c:6277 __netif_receive_skb_list net/core/dev.c:6344 [inline] netif_receive_skb_list_internal+0x995/0xcf0 net/core/dev.c:6435 gro_normal_list include/net/gro.h:523 [inline] gro_flush_normal include/net/gro.h:531 [inline] napi_complete_done+0x299/0x730 net/core/dev.c:6803 gro_cell_poll+0x5a9/0x5d0 net/core/gro_cells.c:74 __napi_poll+0xae/0x340 net/core/dev.c:7733 napi_poll net/core/dev.c:7796 [inline] net_rx_action+0x627/0xf70 net/core/dev.c:7953 handle_softirqs+0x22a/0x840 kernel/softirq.c:622 do_softirq+0x76/0xd0 kernel/softirq.c:523 __local_bh_enable_ip+0xf8/0x130 kernel/softirq.c:450 local_bh_enable include/linux/bottom_half.h:33 [inline] tun_rx_batched+0x617/0x790 drivers/net/tun.c:-1 tun_get_user+0x2bbc/0x43e0 drivers/net/tun.c:1955 tun_chr_write_iter+0x113/0x200 drivers/net/tun.c:2001 new_sync_write fs/read_write.c:595 [inline] vfs_write+0x61d/0xb90 fs/read_write.c:688 ksys_write+0x150/0x270 fs/read_write.c:740 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe91fb9ce59 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffda826a2e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007fe91fe15fa0 RCX: 00007fe91fb9ce59 RDX: 000000000000007a RSI: 00002000000002c0 RDI: 0000000000000005 RBP: 00007fe91fc32d6f R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fe91fe15fac R14: 00007fe91fe15fa0 R15: 00007fe91fe15fa0 The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x17cd41 flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) raw: 057ff00000000000 ffffea0005f35048 ffffea0005f35048 0000000000000000 raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 page dumped because: kasan: bad access detected page_owner info is not present (never set?) Memory state around the buggy address: ffff88817cd41600: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ffff88817cd41680: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff >ffff88817cd41700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ^ ffff88817cd41780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ffff88817cd41800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ==================================================================