Extracting prog: 1h39m54.446636885s Minimizing prog: 1h27m11.173777982s Simplifying prog options: 14m48.347783928s Extracting C: 5m14.126638411s Simplifying C: 0s extracting reproducer from 30 programs testing a last program of every proc single: executing 5 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-openat$tun-ioctl$TUNSETQUEUE-bpf$BPF_BTF_GET_FD_BY_ID-bpf$PROG_LOAD_XDP-socket$rds-bind$rds-sendmsg$rds-socket$l2tp-socket$alg-socket$kcm-socketpair$unix-setsockopt$SO_ATTACH_FILTER-sendmmsg$inet-sendmsg$kcm-bind$alg-setsockopt$ALG_SET_KEY-sendmmsg$inet detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x40086602, &(0x7f00000002c0)={'ipvlan0\x00'}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80}, [@alu={0x4, 0x1, 0xb, 0x8, 0x4, 0x2, 0xfffffffffffffff0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x8, r2}, 0x94) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000000)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000001a00)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0xffffff63}], 0x1, 0x20}}], 0x48, 0x20000005}, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r7, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000100)="ad73364256", 0x5) sendmmsg$inet(r4, &(0x7f00000049c0)=[{{&(0x7f0000000dc0)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f00000019c0)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x2, 0x40090) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-setsockopt$inet_mreqn-socket$netlink-writev-sendmsg$unix-writev-socket$inet-setsockopt$inet_mreqn-ioctl$sock_SIOCGIFINDEX-accept$unix-gettid-getsockopt$inet6_IPV6_XFRM_POLICY-getgid-socket$inet6_sctp-getsockopt$inet_sctp6_SCTP_STATUS-openat$pidfd-bpf$BPF_LINK_CREATE_XDP-ioctl$sock_SIOCGPGRP-socket-getsockopt$sock_cred-sendmsg$nl_generic-getsockopt$sock_cred-openat$6lowpan_control-sendmsg$unix-setsockopt$inet_msfilter-setsockopt$inet_mreqsrc-socket$inet-getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS-setsockopt$inet_sctp6_SCTP_RESET_STREAMS-setsockopt$inet_mreqn detailed listing: executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2ac3c2d5fa4423c5ad1ddee97879c38bf8", 0x11}], 0x1, 0x0, 0xffffffffffffff12, 0x4000001}, 0x840) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) r3 = accept$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) r4 = gettid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@private0, @in6=@ipv4={""/10, ""/2, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f00000005c0)=0x37) r6 = getgid() r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0x83, 0x0, &(0x7f0000000080)=0xb0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000380), 0x6c000, 0x0) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a40)={0xffffffffffffffff, 0x0, 0x25, 0x18, @val=@iter={&(0x7f0000000400)=@cgroup={0x3, 0xffffffffffffffff, 0x4}, 0x10}}, 0x20) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000600)=0x0) r10 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r11}]}, 0x1c}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0, 0x0}, &(0x7f0000000680)=0xc) r13 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) sendmsg$unix(r3, &(0x7f00000008c0)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000200)="f6e5f28637d29c5da5da3e8c235180c55c3f3ebb3af842ba70012957b6a064365d2a26d357a78a16a6a153a142ffb3dcad59fdb22720fd874866134fd138710d683a5d85178c91bd1d740f5c9b0da5aa874661d2792c52c106f8c9b25005", 0x5e}, {&(0x7f0000000280)="b1ca34278ba3bd86e64ee728c091ddb9e24d205ab12d6af588edc2b71dede833779d4235b9a58840739315e6122ea992b0bfafcdc2b1acc772a1906094a2844e33bfd3491b59fc86c7fcea60b39f462d50eaa7231b794d51eb61a85626", 0x5d}], 0x2, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @rights={{0x1c, 0x1, 0x1, [r1, r1, r8]}}, @cred={{0x1c, 0x1, 0x2, {r9, r11, r12}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r1]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r13, r0, r2, r0, r0]}}], 0xe8}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r14 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000900)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x9, 0x2}, &(0x7f00000009c0)=0x90) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r10, 0x84, 0x77, &(0x7f0000000a00)={r15, 0x10, 0x2, [0x7fff, 0x6]}, 0xc) setsockopt$inet_mreqn(r14, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-openat$tun-socket$tipc-bind$tipc-socket$nl_generic-ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD-socket$nl_netfilter-socket$nl_rdma-sendmsg$RDMA_NLDEV_CMD_NEWLINK-ioctl$TUNSETIFF-getsockopt$IP_VS_SO_GET_VERSION-ioctl$TUNSETLINK-openat$tun-close-recvmmsg-socket$netlink-socket-sendmsg$nl_route-ioctl$SIOCSIFHWADDR detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007008b617400140004800800014000000000080002"], 0xa4}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x149e42, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x5, 0x4}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000140)={0x0, 'vlan0\x00', {0x4}}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x48, 0x41, 'rxe\x00'}, {0xfffffffffffffec7, 0x33, 'tunl0\x00'}}, {{0x0, 0x2, 'syz1\x00'}, {0x0, 0x41, 'siw\x00'}, {0x0, 0x33, 'veth1_vlan\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x40084) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000100)=0x40) ioctl$TUNSETLINK(r1, 0x400454cd, 0x20) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) recvmmsg(r4, &(0x7f00000033c0)=[{{&(0x7f0000000300)=@alg, 0x80, &(0x7f0000001600)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/153, 0x99}, {&(0x7f0000001500)=""/207, 0xcf}], 0x3, &(0x7f0000001640)=""/40, 0x28}}, {{&(0x7f0000001680)=@nfc, 0x80, &(0x7f0000003300)=[{&(0x7f0000001700)=""/164, 0xa4}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/33, 0x21}], 0x3, &(0x7f0000003340)=""/82, 0x52}, 0x6}], 0x2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ENCAP_TYPE={0x6}]}, 0x24}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$sock_SIOCGIFINDEX-ioctl$sock_inet6_SIOCSIFADDR-ioctl$sock_inet6_tcp_SIOCINQ detailed listing: executing program 0: r0 = socket(0xb, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@local, 0x78, r1}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-bpf$PROG_LOAD-openat$cgroup_ro-write$bt_hci-mmap-bpf$BPF_LINK_CREATE_XDP-socket$nl_netfilter-bpf$PROG_LOAD-sendmsg$IPSET_CMD_CREATE detailed listing: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$bt_hci(r1, &(0x7f0000000000)=ANY=[], 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000140)=[0x1, 0x0], &(0x7f0000000700), 0x0, 0x100000}}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYBLOB="b00000000206197900000000000000000000000005000100070000000900020073797a30000000001400078005001500fc00000008001240000000000d000300686173683a6e65740000000005000500020000000500040000000000050001000700000016000300686173683a6e65742c706f72742c6e6574"], 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 30 programs with base timeout 6m0s testing program (duration=6m7s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 16, 30, 13, 20, 7, 13, 40, 4, 4, 7, 6, 6, 12, 9, 10, 22, 11, 24, 19, 4, 6, 6, 16, 30, 4, 5, 20, 30, 19] detailed listing: executing program 4: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x2, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x100) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0xe2cf}]}}]}, 0x3c}}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008011) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_DELTABLE={0xff4e, 0x2, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x48, 0xe, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x90}}, 0x8020) executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x4, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) (async) r6 = socket(0x840000000002, 0x3, 0x102) getsockopt$inet_pktinfo(r6, 0x0, 0x34, 0x0, &(0x7f0000000100)=0x2) (async) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 32) write(r3, &(0x7f0000000080)="05000000010001", 0x7) (async, rerun: 32) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req={0x4, 0x6, 0x224, 0x1}, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') (async) r0 = socket$rds(0x15, 0x5, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x200, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x48}}}}, [@NL80211_ATTR_IE={0x3d, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x1}, 0x1, 0x2, @device_a, 0x7fff, 0x5, 0x1}}, @mic={0x8c, 0x18, {0xb58, "290b9b70f09d", @long="0982aa6e76db95826cb5ca6ca058a19e"}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x4}, @NL80211_ATTR_FILS_ERP_RRK={0x32, 0xfc, "5e6e56650a407d37f26183f75ffff7c565a0165c6bd3197b2f4285e202e64309c8db631ea5fcdc7ea6abbb3bcf7e"}, @NL80211_ATTR_FILS_ERP_RRK={0xfb, 0xfc, "c2aade73dd7e77893ae18548b82f8396250538e963bf85159ddf5e307000847ff5a085e7280aee6b65e6d50f3c608b40f2d1b97bd9607f64382668671f0768b160b3b7f6a0150beeae01a21e4c62fb46093662bf938772d21ee61a6cbda2ca65d5340c8972b20c9e3449883657a6a0ee66073969e175245184b0083d3ba69a7044d67f0bb0b0d89179ac00d8f9590246dcbdf5446b06c318b46529a1e04a5908242ae072c953cd4a069f1b21123c42238068010c26bb0801965bc29192efbcc3ea262a0b4025a4cea3ecc940ef3e3d44b2b896365919c9139f1755cb6476af38330e5df22dfba36f05819d7af1f3617d8073026f7b9dfb"}], @NL80211_ATTR_IE={0x62, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @broadcast}}, @channel_switch={0x25, 0x3, {0x1, 0xae, 0x9}}, @ssid={0x0, 0x6, @default_ap_ssid}, @ibss={0x6, 0x2, 0x876}, @mic={0x8c, 0x10, {0xacc, "dfeed822fc7c", @short="aa2b416aff46e94a"}}, @mesh_chsw={0x76, 0x6, {0x5, 0x20, 0x1d, 0x2969}}, @gcr_ga={0xbd, 0x6, @broadcast}, @rann={0x7e, 0x15, {{0x0, 0x4f}, 0x34, 0x3, @broadcast, 0xfffffffe, 0x5, 0xd}}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x4000080}, 0x8880) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'veth0_to_team\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x40, 0x20, 0x2, 0x9, {{0x8, 0x4, 0x0, 0x34, 0x20, 0x67, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010100, @multicast2, {[@timestamp={0x44, 0x8, 0x31, 0x0, 0x5, [0xfff]}, @noop]}}}}}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x40, 0x8020, 0x0, 0x3f, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x68, 0x0, 0x1, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0xcc, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x38}, 0xe}, {@private=0xa010100, 0x9}]}, @ssrr={0x89, 0xf, 0x57, [@loopback, @private=0xa010101, @multicast1]}, @noop, @timestamp_prespec={0x44, 0x14, 0x6b, 0x3, 0x0, [{@multicast1, 0x8}, {@empty, 0x4}]}, @ra={0x94, 0x4, 0x1}]}}}}}) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0xf, 0x45, 0x31, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x8, 0x6a79, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000600)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x3, 0x51, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x1, 0x8, 0x9}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xb0, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) (async, rerun: 64) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async, rerun: 64) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000840), 0x4) (async) socketpair(0x28, 0x800, 0x7fff, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r9, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r1, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c040}, 0x4042080) (async) socket$netlink(0x10, 0x3, 0xc) (async) ioctl$FIONCLEX(r10, 0x5450) (async, rerun: 64) socket$l2tp(0x2, 0x2, 0x73) (async, rerun: 64) r12 = socket$kcm(0x29, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(r10, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40010) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r12, 0x4058587a, &(0x7f0000000c40)={{r0, &(0x7f0000000b00)='syz_tun\x00', 0x400200, &(0x7f0000000b40)={@_ha_fsid={[0x9, 0x1]}, {0x40, 0x3b, 0x3, 0x800}}, 0x5, &(0x7f0000000b80), &(0x7f0000000bc0)=0x81}, {[0xdd8, 0x28, 0x7fffffff, 0x8]}, 0xfffffff9, 0x14, &(0x7f0000000c00)=""/20}) getsockopt$IP_SET_OP_VERSION(r13, 0x1, 0x53, &(0x7f0000000cc0), &(0x7f0000000d00)=0x8) (async) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r14, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x40, 0x1, 0x7, 0x101, 0x0, 0x0, {0x3}, [@NFACCT_FLAGS={0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x800}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2a3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x90) (async, rerun: 32) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000001140)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001100)={&(0x7f0000000e80)={0x27c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x14}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaa}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xa}, @NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xa}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0xd5}]}, @NL80211_ATTR_MESH_SETUP={0x1ec, 0x70, [@NL80211_MESH_SETUP_IE={0x102, 0x3, "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"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_IE={0xc5, 0x3, "94c2600320ee84451f553c63a694dc9c66f40d53bb97ced4b0e3156d50ecf894f393fe6081d02a3682fcd727c1261ea0eb91c0c2bb38017b22b119e7ee2ecb1f17a1d64cb76fef574cb21c9b4104c2038e4cb82b4e08df9091d2ad33b3619ad1d157d66a2b7521da1fbb399549584cb844452274998953996ca0dd993060ca0d3b5c079fad05038e14e1df814c01011b5748822f417d2cfae1211cc10945394e2aba4e5f36eb6e82bf028a5e50500f09956fabff1d83b5af15457bf28d6c472ccf"}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x16, 0x24, [{0x30}, {0x9, 0x1}, {0x24, 0x1}, {0x5, 0x1}, {0x60, 0x1}, {0x3, 0x1}, {0x16}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x48, 0x1}, {0x4, 0x1}, {0xfbf98154f554236, 0x1}, {0x32}, {0x18, 0x1}, {0xb}, {0x60, 0x1}, {0x4}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x20000041}, 0x40) (async, rerun: 32) r15 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r10) (rerun: 64) sendmsg$NL80211_CMD_FRAME(r15, &(0x7f0000001540)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001500)={&(0x7f0000001200)={0x2f0, r16, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9a6}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @NL80211_ATTR_FRAME={0x29d, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x1}, @broadcast, @broadcast, @random="204f2ead6478", {0x6, 0x33}}, 0x6014, 0x40, @random=0x101, @val={0x1, 0x5, [{0x1b}, {0x16}, {0x3, 0x1}, {0xc, 0x1}, {0x24, 0x1}]}, @val={0x2d, 0x1a, {0x80, 0x3, 0x1, 0x0, {0x48000, 0x6, 0x0, 0xd6, 0x0, 0x1}, 0x0, 0x2, 0x2}}, [{0xdd, 0xc0, "2fdf50652c1e1a9aa9cbf9b52ff0d093088783a638e72bee03de955ce2f493890e9d07379f308960b60054657e5d37222ba27099c76ee4834fe0b2af49e33595c3e3a650a5613deb987624c69ede93c4e398aca43c1a573b6b738d6fa74f085e87b3ba4300d530588a09cc1adf3f0a86ff98ba018b1df75e230ca3446f3ccfb137c1f82513f23426ad12416693b2a74610443b04ac41a4850e12dc266c4ab8e175e74c9ca361b1cc04819b1a1ab0179fee37078931826a888eb0de0bbd36fd85"}, {0xdd, 0x15, "a56c91280ee3cfb86fcc7c95991611171f2238388f"}, {0xdd, 0x82, "d4950ee24b50dad6373241497979447e8414bde0c32154b9a5e53e2dfcea6bf390774d78b5eea342d6d0b1e63992cde6c7c9f9d586a5c370305d2ba616741e72813540e8a40342e66768a8e62813fbf0efa5ca76156aa4be75eb611384ecab0f853ed424d5339ca206daa4509483905d196888ca92b6e793986f5ee9ec24435fda48"}, {0xdd, 0x12, "e853e5254d6b1cab72780572f99beffb66a1"}, {0xdd, 0xe5, "4b46b5b9621be2263288985572ed58028436e1947a5352dae11c597e6c7d82d61017facfe1c6e51927f9b502f8e1f7df9cb78d61cdf9695d8d011902c516fa011cbb247dae571d5958ba61839b69b662a44897e61241cb6f65b687f91b7c9825e536925031477e7fe904170176265bd2388695acbbd5f795960735431ee8d2be36308b2f8a8eec6d89fcad45d89d06f717f54bc48d413ec7e943965997dc4eead8abe4bfce1941cf09028ef0dea50af0e6bb00c081467aa38823374edea8bb6b0439a15fce3b5a95a6f63db9c0d368363990985b11d17f812566477ae4bba7a0a895122505"}]}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x395}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]]}, 0x2f0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048040}, 0x24008840) accept(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x40}}, 0x20) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000180)=ANY=[], 0x0) clock_gettime(0xfffffffb, 0x0) close(0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x804) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) (async) socket$l2tp(0x2, 0x2, 0x73) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) (async) syz_emit_ethernet(0x74, &(0x7f0000000180)=ANY=[], 0x0) (async) clock_gettime(0xfffffffb, 0x0) (async) close(0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x804) (async) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000010280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000000569c2b126b949c2e6219a9c9e7bf6cb709ebc77918fcff070000991149d5867fa961094c92b447b3859f9739747e4312904f83154ab340", @ANYRES32=0x0, @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000008000740000000015c000000160a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626ff96430000000001700000000d5001400010076657468305f746f5f7465616d00"], 0xec}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r2) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x84, r4, 0x8, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x529}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x25}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x4000005) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="b860eb49c54512c27512526da850d95309732bf316ed144e06ba56f95b910bd4372f8f2f4977dca084f5541d42fa424f2c4b4082c61d6e4279a8a3dfbd132a5376e5fa4e273756284fbc01bc8e8b0f0d51f965ea018db60ef203b323b3"], 0x38}}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f00000005c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x75f, 0x1, 0x8, 0x7, 0xb], 0x0, 0x0}, 0xba8) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x84000000, 0x25dfdbfe, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}}}}}]}, 0x48}}, 0x0) executing program 3: socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @broadcast}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x83, &(0x7f0000000000)={r3, 0x2}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4000200000000000000000f2f6c7494e65336740b71771acb5c1bb60170219fdd490f99e017d3bb2dca376c1cc6653223472411336892750fac506b79cbcbcc1722a60b25a6b339888ec589797112948bf3c3fe2fa7aa062c0230b67307122282c5582c793a02d2215a656eb51fea164db6a5e51d239f99edd3715a822a5f76628f573246f35c2b8422bddf242dd93505c9ce3bf3418e81fdcbe23c5411e2dd1f27733efc4ae4b0637e46b995ff6d3213cae3378eaa1b3236a116824aff4b28bb0fa14cac8ee1a42d6320a0913455048e8977a0a83b61a4e1b4f4282fd0326e8a6a20900da3e4c53e49da82ac4dffcd4e2a09fa951e9f6812e27d83a0000", @ANYRES32=r4, @ANYBLOB="0000000000000000200012800b0001006d61637365630000100002800c0004000000000000000000"], 0x40}}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmmsg(r6, &(0x7f0000006300), 0x24, 0x60, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=r7, @ANYRES32=r5, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0xa, 0x801, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r11 = socket$inet6_udp(0xa, 0x2, 0x0) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet(r12, &(0x7f0000003740)=[{{&(0x7f0000000280)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000540)=[{&(0x7f00000003c0)="6e3d0c67399566d5a37dd0a59f03fd814fbdb56abbfdb0cdc76d0181690c86974cf8b7bfd10d709e5c8e0c7a50e23e9bcb5c88d1c3d23c00", 0x38}, {&(0x7f0000000440)="96eccf17bb24e230f4765827666fef44c916a3dec6f15ba3fba205e86abe7befe64bf62a4f87fed29a1a968119412a3d49e3d5f7200626f57c48cec9c946a08b51f1426988685760b105b907448797d28e98dffe0a2f7d5cc7759d623a98693d6b6e689199cac1562b1afbbcac1db5058e8a93ccb9720dcda298852d0319ad63858891f87d7c1e1358686da63e62b707504c7d00f0", 0x95}, {&(0x7f00000001c0)}], 0x3}}, {{&(0x7f0000000600)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000680)="a2f679b6ed1db199df86fad76def949a03d32465d809f8ddd7ec661e5c3425767c69df69011e86c17e2ff2d7ba6b", 0x2e}, {&(0x7f0000000ac0)}], 0x2, &(0x7f0000001280)=ANY=[@ANYBLOB="88000000000000000000000007000000863c000000020004704e01067bac37b405020505d6f7960602050e764296b80eec0534227b9f110204cd5e061126a1f9628cd86bed882f37229f86a29404010044148f03ac1e0101000000ddac1414bb00000007442478d3ac1414aa000000040a010102000000060000000000000008ac1e0001000000081100000000000000000000000100000006000000000000005c0000000000000000000000070000009404000000830b78ac14143fac141433820cf9efe6a53eee7cf3eb37072b6cffffffff0a0101027f000001ac1414aa00000000000000000a010102ac1e00017f000001e00000010000000000000000001400000000000000000000000200000007000000000000001c000000000000000000000008000000", @ANYBLOB="ba0052c634847682b6f344399b1132a30734db3a94f416a84356275800000000000000", @ANYBLOB="0a0101000000000002"], 0xfffffffffffffe97}}, {{&(0x7f0000000c80)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000ec0)=[{0x0}, {&(0x7f0000000cc0)}, {0x0}, {&(0x7f0000000cc0)="9d95dc241f0492a02ce435d13bf664a5d857d0b92212d4c40967856e7076189dba9d2225384116b3c5cb9467db9ed51db106b6625fa496d9d5c7d3c9142cac9ec6b1df7c0e24cd635daafde510c50d707c3118fb341f0f01c60b245c3e47f9325d7d608b5c0d", 0x66}, {&(0x7f00000001c0)}], 0x5}}, {{&(0x7f0000000f40)={0x2, 0x4e23, @local}, 0x10, &(0x7f00000010c0)=[{&(0x7f0000000f80)="b42a47ee33372db9a50dddb310ac812af40493c54caf570ccd9e2c3470a710e87f61299516d2903c3e150ff6b7847d94eccfd0d812e2b96ee4e7a941b5bfc07193ce9faa13330f22270a853a13d030768893b2804ea025bf71d7e7e820250e112e2ddba3dcf9e5c50f89741b61ebcbc1c04b0089514dfcc955596f39e846f3", 0x7f}, {&(0x7f0000001000)}, {0x0}], 0x3}}, {{&(0x7f0000001180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, &(0x7f0000001200)}}, {{&(0x7f0000001240)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000003700)=[{&(0x7f0000003680)="587ce5e95e4cd9567748a6bfc1d1cc78b5eda56a9828eac894a8eaeb5e49995ff849cf3e418c434b82e0fc652add94574db0b35f9917fbc4b0841ce7d9ccb77450b98f8f16627b33beda78376ee8f1b89e8dc5d51e9951cbf9cf8fdfa4b7301c3e61a83a13b0ca256d", 0x69}], 0x1}}], 0x6, 0x200460c0) (async) sendmmsg$inet(r12, &(0x7f0000003740)=[{{&(0x7f0000000280)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000540)=[{&(0x7f00000003c0)="6e3d0c67399566d5a37dd0a59f03fd814fbdb56abbfdb0cdc76d0181690c86974cf8b7bfd10d709e5c8e0c7a50e23e9bcb5c88d1c3d23c00", 0x38}, {&(0x7f0000000440)="96eccf17bb24e230f4765827666fef44c916a3dec6f15ba3fba205e86abe7befe64bf62a4f87fed29a1a968119412a3d49e3d5f7200626f57c48cec9c946a08b51f1426988685760b105b907448797d28e98dffe0a2f7d5cc7759d623a98693d6b6e689199cac1562b1afbbcac1db5058e8a93ccb9720dcda298852d0319ad63858891f87d7c1e1358686da63e62b707504c7d00f0", 0x95}, {&(0x7f00000001c0)}], 0x3}}, {{&(0x7f0000000600)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000680)="a2f679b6ed1db199df86fad76def949a03d32465d809f8ddd7ec661e5c3425767c69df69011e86c17e2ff2d7ba6b", 0x2e}, {&(0x7f0000000ac0)}], 0x2, &(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYBLOB="ba0052c634847682b6f344399b1132a30734db3a94f416a84356275800000000000000", @ANYBLOB="0a0101000000000002"], 0xfffffffffffffe97}}, {{&(0x7f0000000c80)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000ec0)=[{0x0}, {&(0x7f0000000cc0)}, {0x0}, {&(0x7f0000000cc0)="9d95dc241f0492a02ce435d13bf664a5d857d0b92212d4c40967856e7076189dba9d2225384116b3c5cb9467db9ed51db106b6625fa496d9d5c7d3c9142cac9ec6b1df7c0e24cd635daafde510c50d707c3118fb341f0f01c60b245c3e47f9325d7d608b5c0d", 0x66}, {&(0x7f00000001c0)}], 0x5}}, {{&(0x7f0000000f40)={0x2, 0x4e23, @local}, 0x10, &(0x7f00000010c0)=[{&(0x7f0000000f80)="b42a47ee33372db9a50dddb310ac812af40493c54caf570ccd9e2c3470a710e87f61299516d2903c3e150ff6b7847d94eccfd0d812e2b96ee4e7a941b5bfc07193ce9faa13330f22270a853a13d030768893b2804ea025bf71d7e7e820250e112e2ddba3dcf9e5c50f89741b61ebcbc1c04b0089514dfcc955596f39e846f3", 0x7f}, {&(0x7f0000001000)}, {0x0}], 0x3}}, {{&(0x7f0000001180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, &(0x7f0000001200)}}, {{&(0x7f0000001240)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000003700)=[{&(0x7f0000003680)="587ce5e95e4cd9567748a6bfc1d1cc78b5eda56a9828eac894a8eaeb5e49995ff849cf3e418c434b82e0fc652add94574db0b35f9917fbc4b0841ce7d9ccb77450b98f8f16627b33beda78376ee8f1b89e8dc5d51e9951cbf9cf8fdfa4b7301c3e61a83a13b0ca256d", 0x69}], 0x1}}], 0x6, 0x200460c0) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a80)='cgroup.controllers\x00', 0x275a, 0x0) writev(r5, &(0x7f0000000500)=[{&(0x7f0000000d40)="904fa9047f30bb5bf529f4ac04a3bf851aebf4b0b1a03fd5f1c13e4496e125692576b4f620345c4fff801dcb9fe3efd9fb0cb760bae69e7e21cbc5b12927d524b616db277a4e6bf344a2ccb8c378322de0500730dd7590cc630fc76dc893ce51e4028d813e8a935f816e459a8ac03687891b8a241f9baf85bb86c754eae1affc859aa53de6b3191d75c1f90ff6cd2c40d3e9cfee5ea27d0ce993ac746b9dc6f025bd27", 0xa3}, {&(0x7f0000000400)="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", 0xfe}], 0x2) (async) writev(r5, &(0x7f0000000500)=[{&(0x7f0000000d40)="904fa9047f30bb5bf529f4ac04a3bf851aebf4b0b1a03fd5f1c13e4496e125692576b4f620345c4fff801dcb9fe3efd9fb0cb760bae69e7e21cbc5b12927d524b616db277a4e6bf344a2ccb8c378322de0500730dd7590cc630fc76dc893ce51e4028d813e8a935f816e459a8ac03687891b8a241f9baf85bb86c754eae1affc859aa53de6b3191d75c1f90ff6cd2c40d3e9cfee5ea27d0ce993ac746b9dc6f025bd27", 0xa3}, {&(0x7f0000000400)="4a028ade6804ae39a08807156617e2c2e57fa6f4e2b5d4f883a236d44565d82f304dd7b521ccea87e5547f1ffb932e06101b14e7380d383569b30ab90a6dfa2175dcd087ed81d00a6ad4aca285940727be451c9db8acf140ef500d71278d06b88a7936373c53ad44ed7609c0c94a6d194f72900e046a3a3b74e449be24c16002a8c56ab2230f693c3fb5aec8505e328918ce842b441862ea174de7c37369f38a2160d9b26f1997402ee56fe39fab02c7cf172981cd0b566c5d47fb13fdabc661f2a95a1b60f2fcd389bdc3f3817ec61b11e707e354cf9cd7fe0813683334a457103e43621c2972c3e0642e5b3bcce2270ba0b6443fadb578c1fc85aa60d6", 0xfe}], 0x2) ioctl$FS_IOC_RESVSP(r13, 0x40305828, &(0x7f00000003c0)={0x0, 0x4}) (async) ioctl$FS_IOC_RESVSP(r13, 0x40305828, &(0x7f00000003c0)={0x0, 0x4}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'hsr0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r11, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f00000005c0)=[0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7d, &(0x7f0000000840)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0xa5, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0x17}, {0x0, 0x6}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x3ff}}]}, 0x38}}, 0x0) getsockopt(r9, 0x0, 0x40, &(0x7f0000000000)=""/84, &(0x7f00000000c0)=0x54) (async) getsockopt(r9, 0x0, 0x40, &(0x7f0000000000)=""/84, &(0x7f00000000c0)=0x54) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r8) (async) r15 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r8) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000001780)=ANY=[@ANYBLOB="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", @ANYRES16=r15, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYRES16=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4084}, 0x4000) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000070000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c000240000000000000008108000340fffffffd0c0001400000000000000007"], 0xb8}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64}]}, 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0xa}, 0x8) shutdown(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xb}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000400), 0xe) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0x9, 0x8, 0x6, 0x0, 0x70bd2d, 0x5, [@sadb_lifetime={0x4, 0x3, 0x80, 0x7, 0x8, 0x6ebb}]}, 0x30}}, 0x4040800) listen(r0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000806910a0000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000100)='b', 0x1, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '!\x00', 0x1c, 0x3a, 0xff, @dev, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x4, 0x3, @loopback, 0x5, 0x1, 0x0, 0x5}}}}}}, 0x0) executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x5f}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) r0 = socket(0x2b, 0x1, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x1, 0x1, 0x0, [@mcast2]}, 0x18) executing program 2: r0 = socket$netlink(0x10, 0x3, 0x15) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x40, 0x14, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x4}, @NFTA_OBJ_USERDATA={0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_USERDATA={0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}}, @NFT_MSG_NEWOBJ={0x18, 0x12, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_DATA={0x4}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}], {0x14}}, 0xb4}, 0x1, 0x0, 0x0, 0x4050}, 0x40) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000340)={0x0, 0x2710}, 0x10) recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207f00000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$bt_hci(r1, &(0x7f0000000000)=ANY=[], 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000140)=[0x1, 0x0], &(0x7f0000000700), 0x0, 0x100000}}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYBLOB="b00000000206197900000000000000000000000005000100070000000900020073797a30000000001400078005001500fc00000008001240000000000d000300686173683a6e65740000000005000500020000000500040000000000050001000700000016000300686173683a6e65742c706f72742c6e6574"], 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/187, 0xbb}, {&(0x7f0000000280)=""/125, 0x7d}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000001700)=""/4090, 0xffa}], 0x4}, 0x2}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYRES32=0x0, @ANYBLOB="07a6000000"], 0x158}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2420000020008000000000030000000008000200ec1e0001", @ANYRES32=r2], 0x24}}, 0x0) executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b35, &(0x7f0000000000)={'wlan1\x00'}) r2 = accept4(r0, 0x0, 0x0, 0x800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x8, 0x0, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x7, 0xfffff214}}) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000300)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000600)={0x0, 0x100, 0xfffffff5, 0x4, 0x4, 0x6, 0x1, 0x80000000, {0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x4, 0x5, 0x4, 0xf8d1, 0x6}}, &(0x7f00000006c0)=0xb0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000700)={r4, @in={{0x2, 0x4e21, @multicast2}}, 0x8, 0xb8e0, 0x1, 0x18, 0xc, 0x259a, 0xb}, 0x9c) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000200)={@empty, 0x7, 0x0, 0xff, 0xc, 0x3ff, 0x3}, 0x20) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newsa={0x17c, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@private=0xa010101, 0x0, 0x0, 0x4e21}, {@in=@broadcast, 0x0, 0x33}, @in6=@remote, {}, {0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x40000, 0x10000}, 0x0, 0x0, 0xa}, [@algo_auth={0x89, 0x1, {{'sha256\x00'}, 0x208, "408b1465cc98145235faa3108e14d7b2fee081eb57514a4196af7d15b24d9eb526931a287b2e7c3c563ca407db93c418bddf98a2dbff0f1ac7fa6d079ef090fb51"}}]}, 0x17c}}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f00000007c0)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) executing program 2: socket(0x2, 0xa, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @remote}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00000001000071101a000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa029}, 0x94) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x4000) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000001200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000011c0)={&(0x7f0000000d00)={0x4bc, 0x0, 0x5, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [{{0x254, 0x1, {{0x0, 0x5}, 0xf, 0xb, 0x40, 0x100, 0x27, 'syz0\x00', "834c540db9eb285bce0fad657e851b1e011fabddfeb15fce98003ebfad5b2681", "b011f642811d02a4c1864269bc899c76e2c362fc3a6a8064de3e0ac510b2175a", [{0x6, 0x0, {0x0, 0x10}}, {0x2, 0x44, {0x3, 0x4}}, {0x4, 0x4, {0x0, 0x7fffffff}}, {0x1, 0x20, {0x1, 0x474}}, {0xfffa, 0x0, {0x3, 0x1}}, {0xffc0, 0x7ff, {0x1, 0x6}}, {0x3ff, 0x7f80, {0x0, 0x4}}, {0x31, 0x7, {0x2, 0x6}}, {0xbce6, 0x9, {0x3}}, {0x0, 0x5, {0x0, 0x4}}, {0xc97, 0x6, {0x1, 0xfffffff8}}, {0x200, 0x1ff, {0x0, 0x3}}, {0xc3f, 0x93d1, {0x3, 0x6}}, {0x1, 0x2, {0x1, 0x10001}}, {0x4, 0x43, {0x2, 0xe53}}, {0x200, 0x81, {0x1, 0x5}}, {0x1, 0x2, {0x1, 0x1000}}, {0x5af, 0x6, {0x3, 0x1}}, {0xbcdb, 0xecd, {0x1, 0xfffffff7}}, {0x4, 0x3, {0x2, 0x2}}, {0x8, 0xb2b3, {0x3, 0x2}}, {0x9, 0x3, {0x0, 0x3d96b109}}, {0x9, 0x4, {0x2, 0x2}}, {0x3, 0xe83, {0x1, 0x4}}, {0x9, 0x5, {0x0, 0xfffffffb}}, {0x4449, 0xfff8, {0x2, 0x6f17}}, {0x9, 0x6000, {0x0, 0x9}}, {0x40, 0x7, {0x2, 0x9}}, {0x5, 0x9, {0x0, 0xfef5}}, {0x9, 0x6, {0x0, 0x8001}}, {0x5, 0xf1e3, {0x0, 0x7}}, {0x3, 0xed7e, {0x3, 0xe5}}, {0x0, 0x3d, {0x0, 0x9}}, {0x4, 0x8, {0x2, 0x1}}, {0x5, 0x6, {0x2, 0xa}}, {0x2, 0x10, {0x2, 0x9}}, {0x5, 0x0, {0x3, 0x3}}, {0x0, 0x0, {0x3, 0x7}}, {0x8, 0x5, {0x3, 0x775}}, {0x4, 0x1, {0x2, 0x8000}}]}}}, {{0x254, 0x1, {{0x0, 0x4fb}, 0x7, 0x4, 0x2, 0xf, 0x25, 'syz1\x00', "662f357cf1f69d3387a433aab871c2ed72134f204cb291185a1eadff2e095472", "1e5777fb66eaf6df3e6fd9af6c911a8eb973a06ff4d4bf6753ddc9e3ac27af22", [{0xfff, 0x4, {0x0, 0x8}}, {0x8, 0x8, {0x3, 0x8}}, {0x1ff, 0x401, {0x3, 0x7f}}, {0x0, 0x9, {0x0, 0x6}}, {0x873, 0x9fd2, {0x0, 0x220}}, {0x5, 0x1, {0x3, 0xa268}}, {0x100, 0x6, {0x3, 0x25c}}, {0xbbd6, 0x4, {0x0, 0x80000000}}, {0x5, 0x1, {0x0, 0x1}}, {0x8, 0x0, {0x2, 0x10000}}, {0x13, 0x9, {0x0, 0x7}}, {0x5, 0x0, {0x0, 0x3ff}}, {0x2, 0x8000, {0x0, 0x6}}, {0x0, 0x7786, {0x2, 0x7fffffff}}, {0x10, 0x400, {0x2, 0x8}}, {0xb, 0x7, {0x0, 0x7}}, {0xed5, 0x9, {0x2, 0x8}}, {0xfff, 0x0, {0x2, 0x40}}, {0x1, 0x69e, {0x2, 0xfffffff8}}, {0x2, 0xa, {0x0, 0x7}}, {0x9, 0x0, {0x0, 0xace6}}, {0x8f, 0xfff, {0x3, 0xb6}}, {0x0, 0x7, {0x3, 0x1}}, {0x2, 0xb, {0x0, 0x5}}, {0x1, 0x0, {0x2, 0xe9}}, {0x9, 0x9, {0x2, 0x200}}, {0x2, 0x2b97, {0x2, 0xfe}}, {0x9, 0x4, {0x0, 0x8}}, {0x8, 0x6, {0x3, 0x800}}, {0x8, 0x0, {0x2, 0xe}}, {0x0, 0x4cdf, {0x0, 0x3}}, {0xc841, 0x8, {0x1, 0x24b}}, {0xf, 0x4, {0x2, 0x689d}}, {0x6, 0xff, {0x2, 0x4}}, {0x2, 0x8000, {0x0, 0x800}}, {0x34, 0x5, {0x0, 0x5}}, {0x2, 0x1, {0x1, 0x6}}, {0x2, 0x7, {0x3, 0x6}}, {0x6, 0x9bb, {0x0, 0x9}}, {0xac, 0xbf, {0x1, 0x7f}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x40811}, 0x20000004) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), r5) sendmsg$NFC_CMD_LLC_SET_PARAMS(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000fbdbdf25100000000500100083000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4c004}, 0x44000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe02}, {}, {0x18, 0x3, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5656d, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0x1, 0xb}, {0xfff1, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x8, 0x8, 0xfbee}, 0x1, 0x2, 0x3, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x4, {0x6, 0xc, 0xfffffffc, 0x0, 0xffffffff, 0x3}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r7, 0xd}, 0x94) executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_mreq(r1, 0x0, 0x4, &(0x7f0000000000)={@initdev, @broadcast}, &(0x7f0000000040)=0x8) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x41}, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r4, @ANYBLOB="0000000000000000040000000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d6feffffffffffffff537c4c3060c6a405106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x4938ddcf, @mcast1, 0x8}, 0x1c) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000300), 0x1c, 0x3b00, 0x0, 0xfffffffffffffdfd) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001940)={0x0, @multicast1, @private}, &(0x7f0000001980)=0xc) sendmmsg$inet6(r2, &(0x7f0000001f80)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x885, @local, 0x6}, 0x1c, &(0x7f00000018c0)=[{&(0x7f0000000140)="192781cd7f2b239b53b41e61dadd84bc0e71da318115676f02c3f6", 0x1b}, {&(0x7f0000000180)="c913aca5dc39aec4749f3c36f9d3fc8b6034de22ee761ea51b96dff81856df0a25f90ed273ff6e307a7970ee9e5d48d5ed2c", 0x32}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="2d3e1dd7cef11e306c71c822a7a203b4195fdd56e918c6fec6229234ee73a3eb491a3f60e6b73d7bfc28d864831137fcf1e4c1d89c84747b212b23f5f80d88fe9e3dad5f642150fdc19cd8ffbc8a6d0d81e496b2a9be1de8c6758497a55048e2907f3a8c413baef532ed73c16e5e2b57e4be968e51b0e8863da70867185fe8e1109cfe1610869d0587f56dcad4899d79347f4da64356501f0d40adc42d7550f7e9fa48275ecb10be2b2e0000ee58c0b23635695221544f8cf97e9ff5c3ab1a3c7740a2eba1b2a43860c0cd3a4325d94c8845e913cdbb9f4ea960f14c0ce602341dfb3b2712f36ca5ec096e2c0c276059", 0xf0}, {&(0x7f0000001800)="3cdcd761dbf428a42eec9f014796849e3fbec58e7e28452b79c6494f9c8149a565e3b541b2e40a9130eefea75a44c9d013b4d96db073754223450f071791ff6157fd5fda5557d584ac6988d29eb1151b8a1701c70e4749ca349ee9817fe1f07d1c685e30c8d9b883ad51fc0baffa5d407410eab3a083f63c711b6be84f161ea0b0236b32feaeb2c50dffce20a3514ce497e7532bb6aa19264b03f4d95b50cf65fd6cd19a2e65d64a5b", 0xa9}], 0x5, &(0x7f00000023c0)=[@hopopts={{0x268, 0x29, 0x36, {0x29, 0x4a, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x1}, @generic={0xff, 0x56, "9f289954aa63504fd5a09b32926887306d62fba253e2f522dc918b0f1a64ec1f77d4853277949d188a14b7fd8bf7bc3413ac6bf22e19007242b9773697afd47c7e7dcdd2d080f7bcaa3518569fe38acad43063281eb6"}, @hao={0xc9, 0x10, @private1}, @generic={0xf8, 0xe2, "14da0c8952ac47ff7efa734e0ea0ea6cae1e723b11ae53101a63282e5bc4eb6350ffaaee9b62b8b89c2aeb39125c4fabb119191fcf223c63bff82cbf531196748d3eaf461d242eb2e5a0126a973da8e0a5e869e9bf3c503bf46f81e7a6461090a3902e24b2c41abccf5e2a7aa143b132bebb04b5cc0216dde3a702552a3493fd1352939d6c53f2d9aebeffc74c0e878f9c3aa1db2a5054b1240fd8b32a8cd6e87ac2162b2be5bf563269567e876761e62e268717491e37ca11881325801c5bcf4de2ce0e1f598bf27899fd2ec91fbdce5bca3dd606e5584605799c5fd94771af6d8a"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x40, 0x9, [0x1, 0x0, 0xffffffffffffffff, 0x54c, 0x7b9, 0x5, 0x6]}}, @generic={0x1, 0xa7, "745f991ecf05477b66610b1262d3701a3420cfd50262085a7d85d9a4311cd070f9d36a0947d75ddc49c134fd471a9264f00a7aefcc376886ff4afa15ab508c27d4aa8e7f00abdcf3236aefd2943d5b67acdca530b80fe27a3d79db009b176006b6ced44d0be98a43fd7b3a2a8a263853dcf68a06d9b6f5a53e8559f0aaa9fa99b3b57dacff5a30da2573c58707675778a58d26e65f33a26b045e7368454213efc31126597e0d63"}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x2, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0xff}, @enc_lim={0x4, 0x1, 0x7}]}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x0, 0x10, 0x0, 0x1, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast1, @mcast2, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r5}}}, @dstopts_2292={{0x90, 0x29, 0x4, {0x8, 0xe, '\x00', [@pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private1}, @generic={0xa, 0x40, "53a2c19660dfc7e12dd06d5a0c05844b0ea488cabcca6e9eca1815f68d0505d2581de7e61b763634f0fe8af5f8dad6a01fb3a3864345ade0c185742ee9caa9e1"}, @hao={0xc9, 0x10, @local}, @pad1]}}}], 0x3f8}}], 0x1, 0x48810) executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e657665000020000280140007002001000000000000000000000000000008000100", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd6076b2af00072f00fc000000000000000000000000000000ff0200000000000000000000000000010000883e00"], 0x0) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x10, 0x80, 0x4, 0x9, {{0x13, 0x4, 0x0, 0x6, 0x4c, 0x65, 0x0, 0x7, 0x2f, 0x0, @empty, @private=0xa010100, {[@lsrr={0x83, 0x1b, 0x45, [@local, @loopback, @remote, @empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x1c, 0xde, 0x1, 0x3, [{@broadcast, 0xa757}, {@local, 0xca5e}, {@loopback, 0xfffffffa}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r1}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x10, 0x80, 0x4, 0x9, {{0x13, 0x4, 0x0, 0x6, 0x4c, 0x65, 0x0, 0x7, 0x2f, 0x0, @empty, @private=0xa010100, {[@lsrr={0x83, 0x1b, 0x45, [@local, @loopback, @remote, @empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x1c, 0xde, 0x1, 0x3, [{@broadcast, 0xa757}, {@local, 0xca5e}, {@loopback, 0xfffffffa}]}]}}}}}) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r1}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="260a00009109000000116c0000000000180000000000000040000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x701, 0x0, 0x0, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="f48372d4", 0x4) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="f48372d4", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x1) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r3, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000340)=""/209, 0xd1}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000001700)=""/4090, 0xffa}], 0x4}, 0x2}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@can_delroute={0x50, 0x19, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@CGW_MOD_AND={0x15, 0x1, {{{0x4, 0x1, 0x1, 0x1}, 0x7, 0x0, 0x0, 0x0, "6839434d024c2456"}, 0x5}}, @CGW_FILTER={0xc, 0xb, {{0x3, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "22aa923fb01b029e"}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, &(0x7f0000000400)=0x10, 0x800) setsockopt$inet_buf(r1, 0x0, 0x25, &(0x7f0000000500)="3f8bc43df0cacb49bc043f1d0ac8933dd7a65186ad1e0a7b33ffa3924100eff15abf00908143a8767903825d09dc60475ae0b6fd58dd09ae993c930ed00f28ff0ddbac0d10b21b67ccc7c0cc402fa5494333a0fa2b8221f9fdbe241339a70aeb07985551119da51b8c1c46ab15a471cbbc036881c5c58e9122c921ab25a9a5b5d77ac50fb3418af7d3ceb55b83f3d25ca41c90b19927da58d917b8ae9198c7db5dac4995d93b2ce807993894ea488afb19d2debfd293ea9c5cad85f7f41335f9df800339ceb1c887dbd8102b3a80d0", 0xcf) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async, rerun: 64) r2 = socket(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x52, 0x3ab3666c4349b199, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async, rerun: 64) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) (async, rerun: 64) poll(&(0x7f0000000280)=[{r0, 0x82}], 0x1, 0xfffffffa) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="19746bff0300000004000000040000006637cf2c00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 32) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r4) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x802000e0}, 0xc, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8c9500"/12, @ANYRES16=r3, @ANYBLOB="000428bd7000fedbdf2519000000200001801400020064756d6d793000000000000000000000020003000200000058000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000000800030000000000080003000100000008000100", @ANYRES32=r7, @ANYBLOB="140002007665746831000000000000000000000008000300000000000800030001000000"], 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x5) sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '*[}](/\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x240408c2}, 0x850) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000040122000b00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r9}, 0x38) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r8) sendmsg$NL80211_CMD_GET_REG(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r10, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x30}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000844}, 0x4) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r6) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r11) sendmsg$ETHTOOL_MSG_DEBUG_SET(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0003000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) socket$igmp6(0xa, 0x3, 0x2) executing program 4: r0 = socket(0xb, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@local, 0x78, r1}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@alu={0x3, 0x1, 0xd, 0x0, 0x5}]}, &(0x7f0000000500)='syzkaller\x00', 0x4}, 0x94) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007008b617400140004800800014000000000080002"], 0xa4}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x149e42, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x5, 0x4}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000140)={0x0, 'vlan0\x00', {0x4}}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x48, 0x41, 'rxe\x00'}, {0xfffffffffffffec7, 0x33, 'tunl0\x00'}}, {{0x0, 0x2, 'syz1\x00'}, {0x0, 0x41, 'siw\x00'}, {0x0, 0x33, 'veth1_vlan\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x40084) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000100)=0x40) ioctl$TUNSETLINK(r1, 0x400454cd, 0x20) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) recvmmsg(r4, &(0x7f00000033c0)=[{{&(0x7f0000000300)=@alg, 0x80, &(0x7f0000001600)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/153, 0x99}, {&(0x7f0000001500)=""/207, 0xcf}], 0x3, &(0x7f0000001640)=""/40, 0x28}}, {{&(0x7f0000001680)=@nfc, 0x80, &(0x7f0000003300)=[{&(0x7f0000001700)=""/164, 0xa4}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/33, 0x21}], 0x3, &(0x7f0000003340)=""/82, 0x52}, 0x6}], 0x2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ENCAP_TYPE={0x6}]}, 0x24}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2ac3c2d5fa4423c5ad1ddee97879c38bf8", 0x11}], 0x1, 0x0, 0xffffffffffffff12, 0x4000001}, 0x840) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) r3 = accept$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) r4 = gettid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@private0, @in6=@ipv4={""/10, ""/2, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f00000005c0)=0x37) r6 = getgid() r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0x83, 0x0, &(0x7f0000000080)=0xb0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000380), 0x6c000, 0x0) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a40)={0xffffffffffffffff, 0x0, 0x25, 0x18, @val=@iter={&(0x7f0000000400)=@cgroup={0x3, 0xffffffffffffffff, 0x4}, 0x10}}, 0x20) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000600)=0x0) r10 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r11}]}, 0x1c}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0, 0x0}, &(0x7f0000000680)=0xc) r13 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) sendmsg$unix(r3, &(0x7f00000008c0)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000200)="f6e5f28637d29c5da5da3e8c235180c55c3f3ebb3af842ba70012957b6a064365d2a26d357a78a16a6a153a142ffb3dcad59fdb22720fd874866134fd138710d683a5d85178c91bd1d740f5c9b0da5aa874661d2792c52c106f8c9b25005", 0x5e}, {&(0x7f0000000280)="b1ca34278ba3bd86e64ee728c091ddb9e24d205ab12d6af588edc2b71dede833779d4235b9a58840739315e6122ea992b0bfafcdc2b1acc772a1906094a2844e33bfd3491b59fc86c7fcea60b39f462d50eaa7231b794d51eb61a85626", 0x5d}], 0x2, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @rights={{0x1c, 0x1, 0x1, [r1, r1, r8]}}, @cred={{0x1c, 0x1, 0x2, {r9, r11, r12}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r1]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r13, r0, r2, r0, r0]}}], 0xe8}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r14 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000900)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x9, 0x2}, &(0x7f00000009c0)=0x90) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r10, 0x84, 0x77, &(0x7f0000000a00)={r15, 0x10, 0x2, [0x7fff, 0x6]}, 0xc) setsockopt$inet_mreqn(r14, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x40086602, &(0x7f00000002c0)={'ipvlan0\x00'}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80}, [@alu={0x4, 0x1, 0xb, 0x8, 0x4, 0x2, 0xfffffffffffffff0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x8, r2}, 0x94) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000000)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000001a00)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0xffffff63}], 0x1, 0x20}}], 0x48, 0x20000005}, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r7, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000100)="ad73364256", 0x5) sendmmsg$inet(r4, &(0x7f00000049c0)=[{{&(0x7f0000000dc0)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f00000019c0)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x2, 0x40090) program crashed: KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings bisect: bisecting 30 programs bisect: split chunks (needed=false): <30> bisect: split chunk #0 of len 30 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=6m5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 6, 6, 12, 9, 10, 22, 11, 24, 19, 4, 6, 6, 16, 30, 4, 5, 20, 30, 19] detailed listing: executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000400), 0xe) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0x9, 0x8, 0x6, 0x0, 0x70bd2d, 0x5, [@sadb_lifetime={0x4, 0x3, 0x80, 0x7, 0x8, 0x6ebb}]}, 0x30}}, 0x4040800) listen(r0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000806910a0000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61123000000000006113340000000000bf3000000000000015000200091b00003d030100000000008701000000000000bc26000000000000bf67000000000000560300000ee600f06702000014000000160300000ee600f0bf050000000000000f610000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586e3f640f9f7e9a73b761ad4f0952a70046270d2b6436fdeecd791614ed46de741eb8cf91c046ef9beca574b350021c7ec6ef130f53748068ca432dae4e248b22b9ad8b2811f67916a1764578cba4b069037bfb3362d5691ac397f7e207145d970f0d97867552629b146645c785fb77dbeca38e49a9d5221f1f45f0a25890d04d91a15a05ae7e7ed6252c3d6c1973fb858de1da70d67317e7872b0603ce47ed2c1520e71b527bb42aa2e20e1e85df73736ed0a782ab7e7278dd54358cfdf6313d40f926332623625b49626481054787ab2dff85a9bebd6b317f26c691a65aa97bb3d1506a3a565e9c7ea5ad4611d2d77ee8a5c1b23814a26b6a20061fbb65bdd03770fa849f2a29ba69f90625f42592a70ba890f7a92878ae73574c3a233ee5954119931a1905210715fa77a8795f2fbec3797cb90f59fe8a4abec25f40c87bf25b750bbaa"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000100)='b', 0x1, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '!\x00', 0x1c, 0x3a, 0xff, @dev, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x4, 0x3, @loopback, 0x5, 0x1, 0x0, 0x5}}}}}}, 0x0) executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x5f}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) r0 = socket(0x2b, 0x1, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x1, 0x1, 0x0, [@mcast2]}, 0x18) executing program 2: r0 = socket$netlink(0x10, 0x3, 0x15) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x40, 0x14, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x4}, @NFTA_OBJ_USERDATA={0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_USERDATA={0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}}, @NFT_MSG_NEWOBJ={0x18, 0x12, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_DATA={0x4}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}], {0x14}}, 0xb4}, 0x1, 0x0, 0x0, 0x4050}, 0x40) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000340)={0x0, 0x2710}, 0x10) recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207f00000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$bt_hci(r1, &(0x7f0000000000)=ANY=[], 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000140)=[0x1, 0x0], &(0x7f0000000700), 0x0, 0x100000}}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYBLOB="b00000000206197900000000000000000000000005000100070000000900020073797a30000000001400078005001500fc00000008001240000000000d000300686173683a6e65740000000005000500020000000500040000000000050001000700000016000300686173683a6e65742c706f72742c6e6574"], 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/187, 0xbb}, {&(0x7f0000000280)=""/125, 0x7d}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000001700)=""/4090, 0xffa}], 0x4}, 0x2}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYRES32=0x0, @ANYBLOB="07a6000000"], 0x158}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2420000020008000000000030000000008000200ec1e0001", @ANYRES32=r2], 0x24}}, 0x0) executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b35, &(0x7f0000000000)={'wlan1\x00'}) r2 = accept4(r0, 0x0, 0x0, 0x800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x8, 0x0, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x7, 0xfffff214}}) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000300)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000600)={0x0, 0x100, 0xfffffff5, 0x4, 0x4, 0x6, 0x1, 0x80000000, {0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x4, 0x5, 0x4, 0xf8d1, 0x6}}, &(0x7f00000006c0)=0xb0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000700)={r4, @in={{0x2, 0x4e21, @multicast2}}, 0x8, 0xb8e0, 0x1, 0x18, 0xc, 0x259a, 0xb}, 0x9c) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000200)={@empty, 0x7, 0x0, 0xff, 0xc, 0x3ff, 0x3}, 0x20) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newsa={0x17c, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@private=0xa010101, 0x0, 0x0, 0x4e21}, {@in=@broadcast, 0x0, 0x33}, @in6=@remote, {}, {0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x40000, 0x10000}, 0x0, 0x0, 0xa}, [@algo_auth={0x89, 0x1, {{'sha256\x00'}, 0x208, "408b1465cc98145235faa3108e14d7b2fee081eb57514a4196af7d15b24d9eb526931a287b2e7c3c563ca407db93c418bddf98a2dbff0f1ac7fa6d079ef090fb51"}}]}, 0x17c}}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f00000007c0)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) executing program 2: socket(0x2, 0xa, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @remote}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00000001000071101a000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa029}, 0x94) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x4000) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000001200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000011c0)={&(0x7f0000000d00)={0x4bc, 0x0, 0x5, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [{{0x254, 0x1, {{0x0, 0x5}, 0xf, 0xb, 0x40, 0x100, 0x27, 'syz0\x00', "834c540db9eb285bce0fad657e851b1e011fabddfeb15fce98003ebfad5b2681", "b011f642811d02a4c1864269bc899c76e2c362fc3a6a8064de3e0ac510b2175a", [{0x6, 0x0, {0x0, 0x10}}, {0x2, 0x44, {0x3, 0x4}}, {0x4, 0x4, {0x0, 0x7fffffff}}, {0x1, 0x20, {0x1, 0x474}}, {0xfffa, 0x0, {0x3, 0x1}}, {0xffc0, 0x7ff, {0x1, 0x6}}, {0x3ff, 0x7f80, {0x0, 0x4}}, {0x31, 0x7, {0x2, 0x6}}, {0xbce6, 0x9, {0x3}}, {0x0, 0x5, {0x0, 0x4}}, {0xc97, 0x6, {0x1, 0xfffffff8}}, {0x200, 0x1ff, {0x0, 0x3}}, {0xc3f, 0x93d1, {0x3, 0x6}}, {0x1, 0x2, {0x1, 0x10001}}, {0x4, 0x43, {0x2, 0xe53}}, {0x200, 0x81, {0x1, 0x5}}, {0x1, 0x2, {0x1, 0x1000}}, {0x5af, 0x6, {0x3, 0x1}}, {0xbcdb, 0xecd, {0x1, 0xfffffff7}}, {0x4, 0x3, {0x2, 0x2}}, {0x8, 0xb2b3, {0x3, 0x2}}, {0x9, 0x3, {0x0, 0x3d96b109}}, {0x9, 0x4, {0x2, 0x2}}, {0x3, 0xe83, {0x1, 0x4}}, {0x9, 0x5, {0x0, 0xfffffffb}}, {0x4449, 0xfff8, {0x2, 0x6f17}}, {0x9, 0x6000, {0x0, 0x9}}, {0x40, 0x7, {0x2, 0x9}}, {0x5, 0x9, {0x0, 0xfef5}}, {0x9, 0x6, {0x0, 0x8001}}, {0x5, 0xf1e3, {0x0, 0x7}}, {0x3, 0xed7e, {0x3, 0xe5}}, {0x0, 0x3d, {0x0, 0x9}}, {0x4, 0x8, {0x2, 0x1}}, {0x5, 0x6, {0x2, 0xa}}, {0x2, 0x10, {0x2, 0x9}}, {0x5, 0x0, {0x3, 0x3}}, {0x0, 0x0, {0x3, 0x7}}, {0x8, 0x5, {0x3, 0x775}}, {0x4, 0x1, {0x2, 0x8000}}]}}}, {{0x254, 0x1, {{0x0, 0x4fb}, 0x7, 0x4, 0x2, 0xf, 0x25, 'syz1\x00', "662f357cf1f69d3387a433aab871c2ed72134f204cb291185a1eadff2e095472", "1e5777fb66eaf6df3e6fd9af6c911a8eb973a06ff4d4bf6753ddc9e3ac27af22", [{0xfff, 0x4, {0x0, 0x8}}, {0x8, 0x8, {0x3, 0x8}}, {0x1ff, 0x401, {0x3, 0x7f}}, {0x0, 0x9, {0x0, 0x6}}, {0x873, 0x9fd2, {0x0, 0x220}}, {0x5, 0x1, {0x3, 0xa268}}, {0x100, 0x6, {0x3, 0x25c}}, {0xbbd6, 0x4, {0x0, 0x80000000}}, {0x5, 0x1, {0x0, 0x1}}, {0x8, 0x0, {0x2, 0x10000}}, {0x13, 0x9, {0x0, 0x7}}, {0x5, 0x0, {0x0, 0x3ff}}, {0x2, 0x8000, {0x0, 0x6}}, {0x0, 0x7786, {0x2, 0x7fffffff}}, {0x10, 0x400, {0x2, 0x8}}, {0xb, 0x7, {0x0, 0x7}}, {0xed5, 0x9, {0x2, 0x8}}, {0xfff, 0x0, {0x2, 0x40}}, {0x1, 0x69e, {0x2, 0xfffffff8}}, {0x2, 0xa, {0x0, 0x7}}, {0x9, 0x0, {0x0, 0xace6}}, {0x8f, 0xfff, {0x3, 0xb6}}, {0x0, 0x7, {0x3, 0x1}}, {0x2, 0xb, {0x0, 0x5}}, {0x1, 0x0, {0x2, 0xe9}}, {0x9, 0x9, {0x2, 0x200}}, {0x2, 0x2b97, {0x2, 0xfe}}, {0x9, 0x4, {0x0, 0x8}}, {0x8, 0x6, {0x3, 0x800}}, {0x8, 0x0, {0x2, 0xe}}, {0x0, 0x4cdf, {0x0, 0x3}}, {0xc841, 0x8, {0x1, 0x24b}}, {0xf, 0x4, {0x2, 0x689d}}, {0x6, 0xff, {0x2, 0x4}}, {0x2, 0x8000, {0x0, 0x800}}, {0x34, 0x5, {0x0, 0x5}}, {0x2, 0x1, {0x1, 0x6}}, {0x2, 0x7, {0x3, 0x6}}, {0x6, 0x9bb, {0x0, 0x9}}, {0xac, 0xbf, {0x1, 0x7f}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x40811}, 0x20000004) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), r5) sendmsg$NFC_CMD_LLC_SET_PARAMS(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000fbdbdf25100000000500100083000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4c004}, 0x44000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe02}, {}, {0x18, 0x3, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5656d, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0x1, 0xb}, {0xfff1, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x8, 0x8, 0xfbee}, 0x1, 0x2, 0x3, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x4, {0x6, 0xc, 0xfffffffc, 0x0, 0xffffffff, 0x3}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r7, 0xd}, 0x94) executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_mreq(r1, 0x0, 0x4, &(0x7f0000000000)={@initdev, @broadcast}, &(0x7f0000000040)=0x8) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x41}, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r4, @ANYBLOB="0000000000000000040000000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d6feffffffffffffff537c4c3060c6a405106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x4938ddcf, @mcast1, 0x8}, 0x1c) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000300), 0x1c, 0x3b00, 0x0, 0xfffffffffffffdfd) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001940)={0x0, @multicast1, @private}, &(0x7f0000001980)=0xc) sendmmsg$inet6(r2, &(0x7f0000001f80)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x885, @local, 0x6}, 0x1c, &(0x7f00000018c0)=[{&(0x7f0000000140)="192781cd7f2b239b53b41e61dadd84bc0e71da318115676f02c3f6", 0x1b}, {&(0x7f0000000180)="c913aca5dc39aec4749f3c36f9d3fc8b6034de22ee761ea51b96dff81856df0a25f90ed273ff6e307a7970ee9e5d48d5ed2c", 0x32}, {&(0x7f0000000700)="fee3941e5c6ea0f24c6071444037c0842d418053c16068766597d65bef5392c4f42ad2ceb8848c20fb7d40d1541fd10aaa8967440aeca503c9a6e62c7c9aa1c2e7b2573ac3aa1d92cd754bc500aad44d7be7ba092033b8807e51e80d62e1d3ad9f4ede3467c47d64f622a099e5f5377f97fd2164ec9bc021f775d63896ee1b1c9e7be0e6b72215798b0c5a0ef0c091fe65db9280c065ba2deb58a5ce577b27fbbdd00f24f21165857df767206d2c6f6befa65e61b91316cb3d4aea5adbaaac8a8ff43fc0838021c7c37f72fe5a77e2e1c53d09cfda6d4ef8448d95c110137cb65fce0d75f74cbb60ff99a9d0113667e8d95258a9eb358a888a0771739f90a639873bc692e589f01fe2f6cfa29481d08f1660ca3088489060abdc042bf180c2c9562a1aec15cf5d775deb2e42153315eded3cab0099f5b334c9ba80aa86f1758b633bd32d4c7284492830dff22063e03f12f577d3142b1956f3cc1bb7410a82b34a1cbd093a3d35cb42045198ae17b084119fc8d254529332314c3a2ab4b1939ee0c6ede8895b524e68b939b4fcebee2233a7a16b72232e15e610c5670834b9582845b869088545d65372ceb04d9d5a5be4345a556bd7005a71ccfd79e41e7accc9255cf79ef7821cb158991ad4f8649583bb3e5e68f22612d16eca849a3845614d4789bf435f7b483eceaa526f56a5212e96ff4fc4660b780990ef254b25b4a9c075f68c59e9d454f683908d8cc71273b8b35e61e599a752fac07b8cb0065b01112cc839334c3ebc9edea518d8965cfb781a9fba294bc93174e84b632137218c0b935842e0910e0913d4e079b8596474fa94b54d9e3a11e292fe1d0c079e22de22a613d342b41e66b664105bee018fb0f5ca707e69a2b39a63195f41eb41dba4aee46d8156e1738fb0711e8f4986bc3d27470bf7d52f5e1cf54fe6b64e9eadd5d48ae164168fb5fc8b31d6c511dc823440e34fd99cc105c4283b7f3192204af9a9c269c219e93bf67c1266e36e1c9d11c9eb8948935f18799287912f08f014021063a2f6807e6bb11f2b7cba442c36aa3de0c84a25fe8d66a0e49d02cd965163f23ebaf16129ec897070b15d51bb91a4501ed7b09f70b4129fe1dd6c383952a268f873e2e207606bd16cbfd50393e8213f1afca2a781448349339fb52c544dbcca85909706e4abc8ca1db85d9a8920fbdf643d43786a1a98118547800a5f92ecb0c0279ad68e59f4d962a0b28dd82e393fedd69c1bd215c942bb9001dcb1cbe6db10b7854ec61a1086925c7474012ec9e15ae406760a163c4a301ca480be112078fb75576a5a79874cd54207192eddc0ca4c5ef59030e5a9c8a7e817d09490cd51fdec8916d28d48c879d42d4842a55c997295bd15ad1c6d43b63d1a9501ba7ed8b6d413a4e6ad8133cb3c8e1bf61248a9b2cf141aae9451c1e49284effd855feff54ad1d06ad5e0d96f95ea9f28f135974c9426c861845e556ee9967bcb875bc9ac1675a8228c666a38fbb2659cced55da756dcd4081a31d99cf15a0d48f43668c9da400222c98352f4850e0bd2757c52c9d454fd125db459b94304834e32e070d5f1962c4cbf111ca212d4471dd34b9f0f220c347ee054b454ee51b9e9da3f66072609e85a8eb3a7e7d4689838ac43007acae0d017f88ff8d2f67eac968d3a5c399dc49885142a102aaad5fde4330cb42e4813917b3c0b856ae149a53b0d0066de1fa0aaae969c0dd803d71860458698c17c562bc96df16228bbbf6f24e7534006f3ec9e883dccde614587a1513fe1c6e3aea9420202a3d019828a2cc9cce7d38b17e5a3cfab1f8397aaa4617132c5423fcfe792d62ffd1c58a0280ae9229bf8000fad1004580071bb5158b219dd514753f4aad5c19b1feefc6803a27a9edf39009ed75a40ba395d5656368644f231173014ff3e8f886a68eff653a55d3567ba0dba367ee99bce250a1694bf14f383fe47869107e15f5ef2f90f4a0d99bf3c4412f2041495e9b2c17329f1e4a10a1a5a62aacd8b2dded8e7479d00bce6f577c89011d1c57ce0c2adb12f9008cc916c9e9a7c152fb31e25af58aab53490d1e4ccdbc91fa1eb6f156d261d6f22d4754cee3d7a3b72c078d8579ddadf88e34620964f47cb1d46daf383be9d30c19dedc8ae240d6af6b5c588fdfa06c646b371b8dd3b3a1904bb894f7812209bb90a8997333281a715897873c76baf7a38f13e84c22fc8e5b9201ef877f186e96aaf45bb0e8dbe255b2c719bb7aed6e65a6c98b6081c6699908342cfeb2a8a84fab5c348920814b886ee917c1ef0da46340ba4e2276102e46a137061d9fed9967c9792cdb44e3483970248f13c0fa09260476fbd2f14bd2eb39448c997edab74e7dc6f1de49befc70d2ec7c24eb2ce3739d9d873e334a3acef54b030cd6d55a8d3326348409de50fe323313a7cf0b6b3df3aac02429031a962eec43ac7c22cf2d208dc70f3eee8fe9d823f24695c78d659fc14db5414476396017320c02c0672183527469b602f17e315d6d3c5793c4ac64fd74a024be9a6ef0adfd6b2a7d003ab79bf25e6264fcc9440c70fba5a5cc6d7c60bf07553d32b56ac25864bca42c8db7e77d7463f85f4af2611812032b1f50d520385c201795dad99f84ffdfc367738994e5e99b6c5a99b932613e86db5b64ec79d97d3a9eeb888310e1414c8943bb866d0e621f64894bb99118dba7926e47f9e338acdc4fc4487f003b9ad8d6853ac3e99b71124be92ef4fb337c600f14eef85bca81d82724a07c8682418a5e8547b2c0aefa4f734e13c78be1920c4c0fb0608991d55fbd464f97ff15644938576c7d2bdab49c921388bc14db633d70d3a8c92442083e5f3fc9387340098924d5d7864176e3efee2d29074d95b675d2dc2590eacf0d7ad31f593c4d78384f509441658bb76e47e6119590d308e2e5d5c04947c5d8b01b045f0b704553536d7ca7f9b4c13f92df08e45ebcf847d2426aacbab219e0d268d0ba33a891a943fbe637293fa1ab2aad06c6f127321f54a03c37c2ba9512b9ad4cfc96525e29f2609086ec0d75fd1c95451044201a4d680c343cd2df7eb9316e9db02b5da92887e41639093c45a41188ce95871f88bba688474c3bf45f4a1d377bd4f16321e9e615084ec03b2cd4eb1323bf93899448614f3eb1c601f0f3150a6dc9ff5acda9817fa5a3d9298d54e6c897e6b6641702d66e525e5bd3790edc007f7d5cdd38be5a4de4bf416fbb029bb72ac012b5a4a82b266ca873650d7faa3e1abd22741a5a7c8bc0600f4bc56ed8ebdbc1518c5fe53743ba8e97fc35afe061628c3081d47f8515b502f0d71ed517ae9aee372f628bf91aead247caf28670d745425475fef44aa2a99c201d368396e56a5eeb8105ce00e7c0829c16a441cfe94765b7af149d49d1a076ef6eacf3851e9a0640a2d359cfa83cfdf34cbc8d5259c80a8b06888f0a0c38b1e4ba5ce31d39cde8b29c65bb2bb2f3770e3974a1d4391e997f1694888b79efcac5c0ea38d58992159e23c45070b1706d3b3a149a0f89febc42a47ae584ea82fa38330063127993b9739063a95123dded9dcc523a31269ce065c69fa1ebacf38d22356eea1117f9ae724800a51e5952d3b79d3a4cdab2ebcb4c9937e63289bbb46b4403f7cf2d7c3e74be65ac56b89b80c098edaabe86221b594091b42e6f9b170bc3d6ea4c7284fb38555d37bcf5e95dcc1519170366de6416aa7f7c152df0b2588931d6766f047e49921bb56a2d7edf2d0adc340e6a04b38b29094e1d518c11e827de1299b5fadd069ab807831fa1f9ceb5475d0e897d957695f626b74c4026a2c47c4f5c5b4e26c7735e6ac164b8f373fe9b3f4bfde3f1814435b9a711ea2ca6bfd49f4edaf01fb0a135f938c7a1a2756ae393d622763867ec5dc6c101385c7aa127313f549a42dc5cf1d2e1c92765d9a6ec41c1b039bf071cb8eb8d675ce729e37073b2ffcc13ffee72362a22f92f81718f7c119ceceb019431e6ca16a8230ee47215500e727f54d0e19935613b81b65c3729022cf77b894257e72bfc5c64aa4dfdd473567ce88f7053682280cde6ea84c2b2eabbffd1c87103b78591b52acd8727a4de3e36f119bb42aaa271c674276608dc04811c26e263ec88313a8d8e2af279a51fda2b563fdb0e3081c7d0141e2dc7be840c323b5edb0a4d1d3822a2c0dd8a5f0ba977a4c4e921ef31921e87e1954afd26a19d929cb677a90d7b00d900aa723214a64ccf72971236a1779486335b01a4788640b7cec54e7fdae93e9101125e78b26028c6db3b362d6efdff3b99273e798af75f255964ec0bef2a7b0c10268a097b9f98ec4b7cd7e4ae80ee5b109e8544acc1993b3a94770db009fdcee06bba64f5b3a28b1ed5f4a2a84a83d36d238e81af5ecab523dfb67683c86b73b4b6cf599295d67b0bfcebb90af9e9ea210c883f0b0036d2af2f124f15161df02c596ee3cae45a6229c9262200e8656cc7f7c40267b9f9738a41a175245e2621b82b6dc80980cf80e548104330dcbb4e17089d283b31f584a6c19f3ca02ceeebd7f518042108f77a80bc12b7330685eec7e9e49dc5da0d8e4f4455370d32547711137bb15c3b1fe724b87bd1c68c4a2de3ecee709c1969d7f88be53f982d998cae016d9b5a7363474276dcc19f8cd2fd56587f6d022005af5cd161ed69af14a1f015768ad4c91e1698a7cfad70981dff0abb55d5f75f812a3081368ef688ad851af53dc42f9ce149dc709dafd551bc6329d40f80877bec1a677c9cb5a3e096fe849454bdd649a1a71225b2a83fab2e352aa0f89109dc54ed97b4d8792057d103cd91703b2ec72436c111654c720e35af71abd58070b7cf6c065bbff048b90b74514a1d2400da395e547bead6e65fdfec8dff546ff500fc48d34d2f3c4f8d31659c04ed108ea81a84f4fa39c1cd7e13c960aaa802c010eabffb94639858f8315365ef9ec2cbfccb274981eef7b8d3a67bed19ff70427851f25b1130bd1c441a65105d920e5ac77f99b306cc77077841a7aa65cff1979caec2225cb3ea09b22fa3cad0a77b0679c4da887eb0a38f883706374b02ad2c725bbadd0050dd2871711ea97ced7a8c342f03b142c7d7f68b0ed0d01c99b65a7044a01f2af0788903f2cd85884cb1f0a042b755ad9a0bb3931c3025b30ddfb5356efb0bfe21a1c2baa74e6bb4aa742092b8a06a6f9976fa0eb2f19252e61d0cc8026edb382f15566fdd260b2c10db342332ee31fafe683adc8c68a7dfcbbc72db9f6d3e0ae26eaf41d394934d48f705db7c0835bef63a26297762621443e810c58ac9a417394ee7db7e3022df9e62e72a83048911c67470ce64f94b39e1f68cc5705568faf70355eef55ea74ae209010209473a6b647189d792317dbd85cd30404c166b52336c93e65429acb279f10a9f173f7e3513f6e09fa0e78dbf6e7d551408041eddb5cdd5e40f4829b30c6ed84c59806348e21769629f64fb87fd7993e60c178fa68250059017ace24db7f429cdc79726ebec8ff56c01491604e54ee2064faf88c79b03aad8451c45ac4de2a8c34bf7a2cbab9239d0b9a1f9c18aa1c3a1bcf92190ee900fa783cde6d01715b9ee01eedf68d7f47702c2f70a1abc9857204daa5adeb09248c1cb10fcfc9da1f61472a182e0b32209cd86fe359bee42c36ac903bd1e281682072d44f3e25f72af44fc4bdb1963ab5d1d7aefebf8600f2aa686895039020f2d8c42b643585df2d0c613c4c153d1ed6335cb735dfbbae70a0d5adc846997a40ebb4d2e465ace04755ac54110951400eaa7bfb4c444b54a1", 0x1000}, {&(0x7f0000001700)="2d3e1dd7cef11e306c71c822a7a203b4195fdd56e918c6fec6229234ee73a3eb491a3f60e6b73d7bfc28d864831137fcf1e4c1d89c84747b212b23f5f80d88fe9e3dad5f642150fdc19cd8ffbc8a6d0d81e496b2a9be1de8c6758497a55048e2907f3a8c413baef532ed73c16e5e2b57e4be968e51b0e8863da70867185fe8e1109cfe1610869d0587f56dcad4899d79347f4da64356501f0d40adc42d7550f7e9fa48275ecb10be2b2e0000ee58c0b23635695221544f8cf97e9ff5c3ab1a3c7740a2eba1b2a43860c0cd3a4325d94c8845e913cdbb9f4ea960f14c0ce602341dfb3b2712f36ca5ec096e2c0c276059", 0xf0}, {&(0x7f0000001800)="3cdcd761dbf428a42eec9f014796849e3fbec58e7e28452b79c6494f9c8149a565e3b541b2e40a9130eefea75a44c9d013b4d96db073754223450f071791ff6157fd5fda5557d584ac6988d29eb1151b8a1701c70e4749ca349ee9817fe1f07d1c685e30c8d9b883ad51fc0baffa5d407410eab3a083f63c711b6be84f161ea0b0236b32feaeb2c50dffce20a3514ce497e7532bb6aa19264b03f4d95b50cf65fd6cd19a2e65d64a5b", 0xa9}], 0x5, &(0x7f00000023c0)=[@hopopts={{0x268, 0x29, 0x36, {0x29, 0x4a, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x1}, @generic={0xff, 0x56, "9f289954aa63504fd5a09b32926887306d62fba253e2f522dc918b0f1a64ec1f77d4853277949d188a14b7fd8bf7bc3413ac6bf22e19007242b9773697afd47c7e7dcdd2d080f7bcaa3518569fe38acad43063281eb6"}, @hao={0xc9, 0x10, @private1}, @generic={0xf8, 0xe2, "14da0c8952ac47ff7efa734e0ea0ea6cae1e723b11ae53101a63282e5bc4eb6350ffaaee9b62b8b89c2aeb39125c4fabb119191fcf223c63bff82cbf531196748d3eaf461d242eb2e5a0126a973da8e0a5e869e9bf3c503bf46f81e7a6461090a3902e24b2c41abccf5e2a7aa143b132bebb04b5cc0216dde3a702552a3493fd1352939d6c53f2d9aebeffc74c0e878f9c3aa1db2a5054b1240fd8b32a8cd6e87ac2162b2be5bf563269567e876761e62e268717491e37ca11881325801c5bcf4de2ce0e1f598bf27899fd2ec91fbdce5bca3dd606e5584605799c5fd94771af6d8a"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x40, 0x9, [0x1, 0x0, 0xffffffffffffffff, 0x54c, 0x7b9, 0x5, 0x6]}}, @generic={0x1, 0xa7, "745f991ecf05477b66610b1262d3701a3420cfd50262085a7d85d9a4311cd070f9d36a0947d75ddc49c134fd471a9264f00a7aefcc376886ff4afa15ab508c27d4aa8e7f00abdcf3236aefd2943d5b67acdca530b80fe27a3d79db009b176006b6ced44d0be98a43fd7b3a2a8a263853dcf68a06d9b6f5a53e8559f0aaa9fa99b3b57dacff5a30da2573c58707675778a58d26e65f33a26b045e7368454213efc31126597e0d63"}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x2, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0xff}, @enc_lim={0x4, 0x1, 0x7}]}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x0, 0x10, 0x0, 0x1, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast1, @mcast2, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r5}}}, @dstopts_2292={{0x90, 0x29, 0x4, {0x8, 0xe, '\x00', [@pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private1}, @generic={0xa, 0x40, "53a2c19660dfc7e12dd06d5a0c05844b0ea488cabcca6e9eca1815f68d0505d2581de7e61b763634f0fe8af5f8dad6a01fb3a3864345ade0c185742ee9caa9e1"}, @hao={0xc9, 0x10, @local}, @pad1]}}}], 0x3f8}}], 0x1, 0x48810) executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e657665000020000280140007002001000000000000000000000000000008000100", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd6076b2af00072f00fc000000000000000000000000000000ff0200000000000000000000000000010000883e00"], 0x0) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x10, 0x80, 0x4, 0x9, {{0x13, 0x4, 0x0, 0x6, 0x4c, 0x65, 0x0, 0x7, 0x2f, 0x0, @empty, @private=0xa010100, {[@lsrr={0x83, 0x1b, 0x45, [@local, @loopback, @remote, @empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x1c, 0xde, 0x1, 0x3, [{@broadcast, 0xa757}, {@local, 0xca5e}, {@loopback, 0xfffffffa}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r1}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x10, 0x80, 0x4, 0x9, {{0x13, 0x4, 0x0, 0x6, 0x4c, 0x65, 0x0, 0x7, 0x2f, 0x0, @empty, @private=0xa010100, {[@lsrr={0x83, 0x1b, 0x45, [@local, @loopback, @remote, @empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x1c, 0xde, 0x1, 0x3, [{@broadcast, 0xa757}, {@local, 0xca5e}, {@loopback, 0xfffffffa}]}]}}}}}) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r1}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="260a00009109000000116c0000000000180000000000000040000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x701, 0x0, 0x0, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="f48372d4", 0x4) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="f48372d4", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x1) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r3, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000340)=""/209, 0xd1}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000001700)=""/4090, 0xffa}], 0x4}, 0x2}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@can_delroute={0x50, 0x19, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@CGW_MOD_AND={0x15, 0x1, {{{0x4, 0x1, 0x1, 0x1}, 0x7, 0x0, 0x0, 0x0, "6839434d024c2456"}, 0x5}}, @CGW_FILTER={0xc, 0xb, {{0x3, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "22aa923fb01b029e"}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, &(0x7f0000000400)=0x10, 0x800) setsockopt$inet_buf(r1, 0x0, 0x25, &(0x7f0000000500)="3f8bc43df0cacb49bc043f1d0ac8933dd7a65186ad1e0a7b33ffa3924100eff15abf00908143a8767903825d09dc60475ae0b6fd58dd09ae993c930ed00f28ff0ddbac0d10b21b67ccc7c0cc402fa5494333a0fa2b8221f9fdbe241339a70aeb07985551119da51b8c1c46ab15a471cbbc036881c5c58e9122c921ab25a9a5b5d77ac50fb3418af7d3ceb55b83f3d25ca41c90b19927da58d917b8ae9198c7db5dac4995d93b2ce807993894ea488afb19d2debfd293ea9c5cad85f7f41335f9df800339ceb1c887dbd8102b3a80d0", 0xcf) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async, rerun: 64) r2 = socket(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x52, 0x3ab3666c4349b199, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async, rerun: 64) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) (async, rerun: 64) poll(&(0x7f0000000280)=[{r0, 0x82}], 0x1, 0xfffffffa) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="19746bff0300000004000000040000006637cf2c00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 32) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r4) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x802000e0}, 0xc, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8c9500"/12, @ANYRES16=r3, @ANYBLOB="000428bd7000fedbdf2519000000200001801400020064756d6d793000000000000000000000020003000200000058000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000000800030000000000080003000100000008000100", @ANYRES32=r7, @ANYBLOB="140002007665746831000000000000000000000008000300000000000800030001000000"], 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x5) sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '*[}](/\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x240408c2}, 0x850) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000040122000b00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r9}, 0x38) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r8) sendmsg$NL80211_CMD_GET_REG(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r10, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x30}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000844}, 0x4) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r6) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r11) sendmsg$ETHTOOL_MSG_DEBUG_SET(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0003000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) socket$igmp6(0xa, 0x3, 0x2) executing program 4: r0 = socket(0xb, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@local, 0x78, r1}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@alu={0x3, 0x1, 0xd, 0x0, 0x5}]}, &(0x7f0000000500)='syzkaller\x00', 0x4}, 0x94) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007008b617400140004800800014000000000080002"], 0xa4}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x149e42, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x5, 0x4}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000140)={0x0, 'vlan0\x00', {0x4}}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x48, 0x41, 'rxe\x00'}, {0xfffffffffffffec7, 0x33, 'tunl0\x00'}}, {{0x0, 0x2, 'syz1\x00'}, {0x0, 0x41, 'siw\x00'}, {0x0, 0x33, 'veth1_vlan\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x40084) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000100)=0x40) ioctl$TUNSETLINK(r1, 0x400454cd, 0x20) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) recvmmsg(r4, &(0x7f00000033c0)=[{{&(0x7f0000000300)=@alg, 0x80, &(0x7f0000001600)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/153, 0x99}, {&(0x7f0000001500)=""/207, 0xcf}], 0x3, &(0x7f0000001640)=""/40, 0x28}}, {{&(0x7f0000001680)=@nfc, 0x80, &(0x7f0000003300)=[{&(0x7f0000001700)=""/164, 0xa4}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/33, 0x21}], 0x3, &(0x7f0000003340)=""/82, 0x52}, 0x6}], 0x2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ENCAP_TYPE={0x6}]}, 0x24}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2ac3c2d5fa4423c5ad1ddee97879c38bf8", 0x11}], 0x1, 0x0, 0xffffffffffffff12, 0x4000001}, 0x840) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) r3 = accept$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) r4 = gettid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@private0, @in6=@ipv4={""/10, ""/2, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f00000005c0)=0x37) r6 = getgid() r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0x83, 0x0, &(0x7f0000000080)=0xb0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000380), 0x6c000, 0x0) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a40)={0xffffffffffffffff, 0x0, 0x25, 0x18, @val=@iter={&(0x7f0000000400)=@cgroup={0x3, 0xffffffffffffffff, 0x4}, 0x10}}, 0x20) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000600)=0x0) r10 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r11}]}, 0x1c}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0, 0x0}, &(0x7f0000000680)=0xc) r13 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) sendmsg$unix(r3, &(0x7f00000008c0)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000200)="f6e5f28637d29c5da5da3e8c235180c55c3f3ebb3af842ba70012957b6a064365d2a26d357a78a16a6a153a142ffb3dcad59fdb22720fd874866134fd138710d683a5d85178c91bd1d740f5c9b0da5aa874661d2792c52c106f8c9b25005", 0x5e}, {&(0x7f0000000280)="b1ca34278ba3bd86e64ee728c091ddb9e24d205ab12d6af588edc2b71dede833779d4235b9a58840739315e6122ea992b0bfafcdc2b1acc772a1906094a2844e33bfd3491b59fc86c7fcea60b39f462d50eaa7231b794d51eb61a85626", 0x5d}], 0x2, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @rights={{0x1c, 0x1, 0x1, [r1, r1, r8]}}, @cred={{0x1c, 0x1, 0x2, {r9, r11, r12}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r1]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r13, r0, r2, r0, r0]}}], 0xe8}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r14 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000900)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x9, 0x2}, &(0x7f00000009c0)=0x90) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r10, 0x84, 0x77, &(0x7f0000000a00)={r15, 0x10, 0x2, [0x7fff, 0x6]}, 0xc) setsockopt$inet_mreqn(r14, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x40086602, &(0x7f00000002c0)={'ipvlan0\x00'}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80}, [@alu={0x4, 0x1, 0xb, 0x8, 0x4, 0x2, 0xfffffffffffffff0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x8, r2}, 0x94) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000000)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000001a00)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0xffffff63}], 0x1, 0x20}}], 0x48, 0x20000005}, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r7, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000100)="ad73364256", 0x5) sendmmsg$inet(r4, &(0x7f00000049c0)=[{{&(0x7f0000000dc0)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f00000019c0)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x2, 0x40090) program did not crash bisect: testing without sub-chunk 2/3 testing program (duration=6m5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 16, 30, 13, 20, 7, 13, 40, 4, 4, 4, 6, 6, 16, 30, 4, 5, 20, 30, 19] detailed listing: executing program 4: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x2, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x100) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0xe2cf}]}}]}, 0x3c}}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008011) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_DELTABLE={0xff4e, 0x2, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x48, 0xe, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x90}}, 0x8020) executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x4, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) (async) r6 = socket(0x840000000002, 0x3, 0x102) getsockopt$inet_pktinfo(r6, 0x0, 0x34, 0x0, &(0x7f0000000100)=0x2) (async) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 32) write(r3, &(0x7f0000000080)="05000000010001", 0x7) (async, rerun: 32) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req={0x4, 0x6, 0x224, 0x1}, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') (async) r0 = socket$rds(0x15, 0x5, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x200, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x48}}}}, [@NL80211_ATTR_IE={0x3d, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x1}, 0x1, 0x2, @device_a, 0x7fff, 0x5, 0x1}}, @mic={0x8c, 0x18, {0xb58, "290b9b70f09d", @long="0982aa6e76db95826cb5ca6ca058a19e"}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x4}, @NL80211_ATTR_FILS_ERP_RRK={0x32, 0xfc, "5e6e56650a407d37f26183f75ffff7c565a0165c6bd3197b2f4285e202e64309c8db631ea5fcdc7ea6abbb3bcf7e"}, @NL80211_ATTR_FILS_ERP_RRK={0xfb, 0xfc, "c2aade73dd7e77893ae18548b82f8396250538e963bf85159ddf5e307000847ff5a085e7280aee6b65e6d50f3c608b40f2d1b97bd9607f64382668671f0768b160b3b7f6a0150beeae01a21e4c62fb46093662bf938772d21ee61a6cbda2ca65d5340c8972b20c9e3449883657a6a0ee66073969e175245184b0083d3ba69a7044d67f0bb0b0d89179ac00d8f9590246dcbdf5446b06c318b46529a1e04a5908242ae072c953cd4a069f1b21123c42238068010c26bb0801965bc29192efbcc3ea262a0b4025a4cea3ecc940ef3e3d44b2b896365919c9139f1755cb6476af38330e5df22dfba36f05819d7af1f3617d8073026f7b9dfb"}], @NL80211_ATTR_IE={0x62, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @broadcast}}, @channel_switch={0x25, 0x3, {0x1, 0xae, 0x9}}, @ssid={0x0, 0x6, @default_ap_ssid}, @ibss={0x6, 0x2, 0x876}, @mic={0x8c, 0x10, {0xacc, "dfeed822fc7c", @short="aa2b416aff46e94a"}}, @mesh_chsw={0x76, 0x6, {0x5, 0x20, 0x1d, 0x2969}}, @gcr_ga={0xbd, 0x6, @broadcast}, @rann={0x7e, 0x15, {{0x0, 0x4f}, 0x34, 0x3, @broadcast, 0xfffffffe, 0x5, 0xd}}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x4000080}, 0x8880) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'veth0_to_team\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x40, 0x20, 0x2, 0x9, {{0x8, 0x4, 0x0, 0x34, 0x20, 0x67, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010100, @multicast2, {[@timestamp={0x44, 0x8, 0x31, 0x0, 0x5, [0xfff]}, @noop]}}}}}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x40, 0x8020, 0x0, 0x3f, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x68, 0x0, 0x1, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0xcc, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x38}, 0xe}, {@private=0xa010100, 0x9}]}, @ssrr={0x89, 0xf, 0x57, [@loopback, @private=0xa010101, @multicast1]}, @noop, @timestamp_prespec={0x44, 0x14, 0x6b, 0x3, 0x0, [{@multicast1, 0x8}, {@empty, 0x4}]}, @ra={0x94, 0x4, 0x1}]}}}}}) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0xf, 0x45, 0x31, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x8, 0x6a79, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000600)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x3, 0x51, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x1, 0x8, 0x9}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xb0, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) (async, rerun: 64) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async, rerun: 64) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000840), 0x4) (async) socketpair(0x28, 0x800, 0x7fff, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r9, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r1, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c040}, 0x4042080) (async) socket$netlink(0x10, 0x3, 0xc) (async) ioctl$FIONCLEX(r10, 0x5450) (async, rerun: 64) socket$l2tp(0x2, 0x2, 0x73) (async, rerun: 64) r12 = socket$kcm(0x29, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(r10, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40010) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r12, 0x4058587a, &(0x7f0000000c40)={{r0, &(0x7f0000000b00)='syz_tun\x00', 0x400200, &(0x7f0000000b40)={@_ha_fsid={[0x9, 0x1]}, {0x40, 0x3b, 0x3, 0x800}}, 0x5, &(0x7f0000000b80), &(0x7f0000000bc0)=0x81}, {[0xdd8, 0x28, 0x7fffffff, 0x8]}, 0xfffffff9, 0x14, &(0x7f0000000c00)=""/20}) getsockopt$IP_SET_OP_VERSION(r13, 0x1, 0x53, &(0x7f0000000cc0), &(0x7f0000000d00)=0x8) (async) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r14, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x40, 0x1, 0x7, 0x101, 0x0, 0x0, {0x3}, [@NFACCT_FLAGS={0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x800}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2a3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x90) (async, rerun: 32) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000001140)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001100)={&(0x7f0000000e80)={0x27c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x14}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaa}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xa}, @NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xa}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0xd5}]}, @NL80211_ATTR_MESH_SETUP={0x1ec, 0x70, [@NL80211_MESH_SETUP_IE={0x102, 0x3, "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"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_IE={0xc5, 0x3, "94c2600320ee84451f553c63a694dc9c66f40d53bb97ced4b0e3156d50ecf894f393fe6081d02a3682fcd727c1261ea0eb91c0c2bb38017b22b119e7ee2ecb1f17a1d64cb76fef574cb21c9b4104c2038e4cb82b4e08df9091d2ad33b3619ad1d157d66a2b7521da1fbb399549584cb844452274998953996ca0dd993060ca0d3b5c079fad05038e14e1df814c01011b5748822f417d2cfae1211cc10945394e2aba4e5f36eb6e82bf028a5e50500f09956fabff1d83b5af15457bf28d6c472ccf"}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x16, 0x24, [{0x30}, {0x9, 0x1}, {0x24, 0x1}, {0x5, 0x1}, {0x60, 0x1}, {0x3, 0x1}, {0x16}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x48, 0x1}, {0x4, 0x1}, {0xfbf98154f554236, 0x1}, {0x32}, {0x18, 0x1}, {0xb}, {0x60, 0x1}, {0x4}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x20000041}, 0x40) (async, rerun: 32) r15 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r10) (rerun: 64) sendmsg$NL80211_CMD_FRAME(r15, &(0x7f0000001540)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001500)={&(0x7f0000001200)={0x2f0, r16, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9a6}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @NL80211_ATTR_FRAME={0x29d, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x1}, @broadcast, @broadcast, @random="204f2ead6478", {0x6, 0x33}}, 0x6014, 0x40, @random=0x101, @val={0x1, 0x5, [{0x1b}, {0x16}, {0x3, 0x1}, {0xc, 0x1}, {0x24, 0x1}]}, @val={0x2d, 0x1a, {0x80, 0x3, 0x1, 0x0, {0x48000, 0x6, 0x0, 0xd6, 0x0, 0x1}, 0x0, 0x2, 0x2}}, [{0xdd, 0xc0, "2fdf50652c1e1a9aa9cbf9b52ff0d093088783a638e72bee03de955ce2f493890e9d07379f308960b60054657e5d37222ba27099c76ee4834fe0b2af49e33595c3e3a650a5613deb987624c69ede93c4e398aca43c1a573b6b738d6fa74f085e87b3ba4300d530588a09cc1adf3f0a86ff98ba018b1df75e230ca3446f3ccfb137c1f82513f23426ad12416693b2a74610443b04ac41a4850e12dc266c4ab8e175e74c9ca361b1cc04819b1a1ab0179fee37078931826a888eb0de0bbd36fd85"}, {0xdd, 0x15, "a56c91280ee3cfb86fcc7c95991611171f2238388f"}, {0xdd, 0x82, "d4950ee24b50dad6373241497979447e8414bde0c32154b9a5e53e2dfcea6bf390774d78b5eea342d6d0b1e63992cde6c7c9f9d586a5c370305d2ba616741e72813540e8a40342e66768a8e62813fbf0efa5ca76156aa4be75eb611384ecab0f853ed424d5339ca206daa4509483905d196888ca92b6e793986f5ee9ec24435fda48"}, {0xdd, 0x12, "e853e5254d6b1cab72780572f99beffb66a1"}, {0xdd, 0xe5, "4b46b5b9621be2263288985572ed58028436e1947a5352dae11c597e6c7d82d61017facfe1c6e51927f9b502f8e1f7df9cb78d61cdf9695d8d011902c516fa011cbb247dae571d5958ba61839b69b662a44897e61241cb6f65b687f91b7c9825e536925031477e7fe904170176265bd2388695acbbd5f795960735431ee8d2be36308b2f8a8eec6d89fcad45d89d06f717f54bc48d413ec7e943965997dc4eead8abe4bfce1941cf09028ef0dea50af0e6bb00c081467aa38823374edea8bb6b0439a15fce3b5a95a6f63db9c0d368363990985b11d17f812566477ae4bba7a0a895122505"}]}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x395}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]]}, 0x2f0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048040}, 0x24008840) accept(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x40}}, 0x20) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000180)=ANY=[], 0x0) clock_gettime(0xfffffffb, 0x0) close(0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x804) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) (async) socket$l2tp(0x2, 0x2, 0x73) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) (async) syz_emit_ethernet(0x74, &(0x7f0000000180)=ANY=[], 0x0) (async) clock_gettime(0xfffffffb, 0x0) (async) close(0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x804) (async) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000010280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000000569c2b126b949c2e6219a9c9e7bf6cb709ebc77918fcff070000991149d5867fa961094c92b447b3859f9739747e4312904f83154ab340", @ANYRES32=0x0, @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000008000740000000015c000000160a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626ff96430000000001700000000d5001400010076657468305f746f5f7465616d00"], 0xec}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r2) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x84, r4, 0x8, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x529}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x25}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x4000005) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="b860eb49c54512c27512526da850d95309732bf316ed144e06ba56f95b910bd4372f8f2f4977dca084f5541d42fa424f2c4b4082c61d6e4279a8a3dfbd132a5376e5fa4e273756284fbc01bc8e8b0f0d51f965ea018db60ef203b323b3"], 0x38}}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f00000005c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x75f, 0x1, 0x8, 0x7, 0xb], 0x0, 0x0}, 0xba8) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x84000000, 0x25dfdbfe, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}}}}}]}, 0x48}}, 0x0) executing program 3: socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @broadcast}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x83, &(0x7f0000000000)={r3, 0x2}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0000000000000000200012800b0001006d61637365630000100002800c0004000000000000000000"], 0x40}}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmmsg(r6, &(0x7f0000006300), 0x24, 0x60, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=r7, @ANYRES32=r5, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0xa, 0x801, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r11 = socket$inet6_udp(0xa, 0x2, 0x0) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet(r12, &(0x7f0000003740)=[{{&(0x7f0000000280)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000540)=[{&(0x7f00000003c0)="6e3d0c67399566d5a37dd0a59f03fd814fbdb56abbfdb0cdc76d0181690c86974cf8b7bfd10d709e5c8e0c7a50e23e9bcb5c88d1c3d23c00", 0x38}, {&(0x7f0000000440)="96eccf17bb24e230f4765827666fef44c916a3dec6f15ba3fba205e86abe7befe64bf62a4f87fed29a1a968119412a3d49e3d5f7200626f57c48cec9c946a08b51f1426988685760b105b907448797d28e98dffe0a2f7d5cc7759d623a98693d6b6e689199cac1562b1afbbcac1db5058e8a93ccb9720dcda298852d0319ad63858891f87d7c1e1358686da63e62b707504c7d00f0", 0x95}, {&(0x7f00000001c0)}], 0x3}}, {{&(0x7f0000000600)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000680)="a2f679b6ed1db199df86fad76def949a03d32465d809f8ddd7ec661e5c3425767c69df69011e86c17e2ff2d7ba6b", 0x2e}, {&(0x7f0000000ac0)}], 0x2, &(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYBLOB="ba0052c634847682b6f344399b1132a30734db3a94f416a84356275800000000000000", @ANYBLOB="0a0101000000000002"], 0xfffffffffffffe97}}, {{&(0x7f0000000c80)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000ec0)=[{0x0}, {&(0x7f0000000cc0)}, {0x0}, {&(0x7f0000000cc0)="9d95dc241f0492a02ce435d13bf664a5d857d0b92212d4c40967856e7076189dba9d2225384116b3c5cb9467db9ed51db106b6625fa496d9d5c7d3c9142cac9ec6b1df7c0e24cd635daafde510c50d707c3118fb341f0f01c60b245c3e47f9325d7d608b5c0d", 0x66}, {&(0x7f00000001c0)}], 0x5}}, {{&(0x7f0000000f40)={0x2, 0x4e23, @local}, 0x10, &(0x7f00000010c0)=[{&(0x7f0000000f80)="b42a47ee33372db9a50dddb310ac812af40493c54caf570ccd9e2c3470a710e87f61299516d2903c3e150ff6b7847d94eccfd0d812e2b96ee4e7a941b5bfc07193ce9faa13330f22270a853a13d030768893b2804ea025bf71d7e7e820250e112e2ddba3dcf9e5c50f89741b61ebcbc1c04b0089514dfcc955596f39e846f3", 0x7f}, {&(0x7f0000001000)}, {0x0}], 0x3}}, {{&(0x7f0000001180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, &(0x7f0000001200)}}, {{&(0x7f0000001240)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000003700)=[{&(0x7f0000003680)="587ce5e95e4cd9567748a6bfc1d1cc78b5eda56a9828eac894a8eaeb5e49995ff849cf3e418c434b82e0fc652add94574db0b35f9917fbc4b0841ce7d9ccb77450b98f8f16627b33beda78376ee8f1b89e8dc5d51e9951cbf9cf8fdfa4b7301c3e61a83a13b0ca256d", 0x69}], 0x1}}], 0x6, 0x200460c0) (async) sendmmsg$inet(r12, &(0x7f0000003740)=[{{&(0x7f0000000280)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000540)=[{&(0x7f00000003c0)="6e3d0c67399566d5a37dd0a59f03fd814fbdb56abbfdb0cdc76d0181690c86974cf8b7bfd10d709e5c8e0c7a50e23e9bcb5c88d1c3d23c00", 0x38}, {&(0x7f0000000440)="96eccf17bb24e230f4765827666fef44c916a3dec6f15ba3fba205e86abe7befe64bf62a4f87fed29a1a968119412a3d49e3d5f7200626f57c48cec9c946a08b51f1426988685760b105b907448797d28e98dffe0a2f7d5cc7759d623a98693d6b6e689199cac1562b1afbbcac1db5058e8a93ccb9720dcda298852d0319ad63858891f87d7c1e1358686da63e62b707504c7d00f0", 0x95}, {&(0x7f00000001c0)}], 0x3}}, {{&(0x7f0000000600)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000680)="a2f679b6ed1db199df86fad76def949a03d32465d809f8ddd7ec661e5c3425767c69df69011e86c17e2ff2d7ba6b", 0x2e}, {&(0x7f0000000ac0)}], 0x2, &(0x7f0000001280)=ANY=[@ANYBLOB="88000000000000000000000007000000863c000000020004704e01067bac37b405020505d6f7960602050e764296b80eec0534227b9f110204cd5e061126a1f9628cd86bed882f37229f86a29404010044148f03ac1e0101000000ddac1414bb00000007442478d3ac1414aa000000040a010102000000060000000000000008ac1e0001000000081100000000000000000000000100000006000000000000005c0000000000000000000000070000009404000000830b78ac14143fac141433820cf9efe6a53eee7cf3eb37072b6cffffffff0a0101027f000001ac1414aa00000000000000000a010102ac1e00017f000001e00000010000000000000000001400000000000000000000000200000007000000000000001c000000000000000000000008000000", @ANYBLOB="ba0052c634847682b6f344399b1132a30734db3a94f416a84356275800000000000000", @ANYBLOB="0a0101000000000002"], 0xfffffffffffffe97}}, {{&(0x7f0000000c80)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000ec0)=[{0x0}, {&(0x7f0000000cc0)}, {0x0}, {&(0x7f0000000cc0)="9d95dc241f0492a02ce435d13bf664a5d857d0b92212d4c40967856e7076189dba9d2225384116b3c5cb9467db9ed51db106b6625fa496d9d5c7d3c9142cac9ec6b1df7c0e24cd635daafde510c50d707c3118fb341f0f01c60b245c3e47f9325d7d608b5c0d", 0x66}, {&(0x7f00000001c0)}], 0x5}}, {{&(0x7f0000000f40)={0x2, 0x4e23, @local}, 0x10, &(0x7f00000010c0)=[{&(0x7f0000000f80)="b42a47ee33372db9a50dddb310ac812af40493c54caf570ccd9e2c3470a710e87f61299516d2903c3e150ff6b7847d94eccfd0d812e2b96ee4e7a941b5bfc07193ce9faa13330f22270a853a13d030768893b2804ea025bf71d7e7e820250e112e2ddba3dcf9e5c50f89741b61ebcbc1c04b0089514dfcc955596f39e846f3", 0x7f}, {&(0x7f0000001000)}, {0x0}], 0x3}}, {{&(0x7f0000001180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, &(0x7f0000001200)}}, {{&(0x7f0000001240)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000003700)=[{&(0x7f0000003680)="587ce5e95e4cd9567748a6bfc1d1cc78b5eda56a9828eac894a8eaeb5e49995ff849cf3e418c434b82e0fc652add94574db0b35f9917fbc4b0841ce7d9ccb77450b98f8f16627b33beda78376ee8f1b89e8dc5d51e9951cbf9cf8fdfa4b7301c3e61a83a13b0ca256d", 0x69}], 0x1}}], 0x6, 0x200460c0) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a80)='cgroup.controllers\x00', 0x275a, 0x0) writev(r5, &(0x7f0000000500)=[{&(0x7f0000000d40)="904fa9047f30bb5bf529f4ac04a3bf851aebf4b0b1a03fd5f1c13e4496e125692576b4f620345c4fff801dcb9fe3efd9fb0cb760bae69e7e21cbc5b12927d524b616db277a4e6bf344a2ccb8c378322de0500730dd7590cc630fc76dc893ce51e4028d813e8a935f816e459a8ac03687891b8a241f9baf85bb86c754eae1affc859aa53de6b3191d75c1f90ff6cd2c40d3e9cfee5ea27d0ce993ac746b9dc6f025bd27", 0xa3}, {&(0x7f0000000400)="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", 0xfe}], 0x2) (async) writev(r5, &(0x7f0000000500)=[{&(0x7f0000000d40)="904fa9047f30bb5bf529f4ac04a3bf851aebf4b0b1a03fd5f1c13e4496e125692576b4f620345c4fff801dcb9fe3efd9fb0cb760bae69e7e21cbc5b12927d524b616db277a4e6bf344a2ccb8c378322de0500730dd7590cc630fc76dc893ce51e4028d813e8a935f816e459a8ac03687891b8a241f9baf85bb86c754eae1affc859aa53de6b3191d75c1f90ff6cd2c40d3e9cfee5ea27d0ce993ac746b9dc6f025bd27", 0xa3}, {&(0x7f0000000400)="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", 0xfe}], 0x2) ioctl$FS_IOC_RESVSP(r13, 0x40305828, &(0x7f00000003c0)={0x0, 0x4}) (async) ioctl$FS_IOC_RESVSP(r13, 0x40305828, &(0x7f00000003c0)={0x0, 0x4}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'hsr0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r11, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f00000005c0)=[0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7d, &(0x7f0000000840)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0xa5, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0x17}, {0x0, 0x6}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x3ff}}]}, 0x38}}, 0x0) getsockopt(r9, 0x0, 0x40, &(0x7f0000000000)=""/84, &(0x7f00000000c0)=0x54) (async) getsockopt(r9, 0x0, 0x40, &(0x7f0000000000)=""/84, &(0x7f00000000c0)=0x54) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r8) (async) r15 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r8) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000001780)=ANY=[@ANYBLOB="3c00000044a1aea663fee03c6962fb62917afa84a7d72368d718fff0e3ef34c51d7fc2db3c6f19d05bba21bc7f52a6e2e045fa40fcd665ee44dc896f2e3b5daf8efa38d1415f89de9430a62e1c81dc694820d23a698ce0fe511dfabe049fb663cd486c87bb36c52a331a25b434d04ef6ae759a33e8be15c3d8c3501ca148b02e6ed6e3aeb69bf7e86130b7de660441fa57330eb5518b71ce123115308ed1ffbb974e8d642471c8f5d5e3ffdb37920e4a96d2c0b5f3f28267a3325b0f7107e9dbf58fc28758cc20e8f7f0d32645c20bbd9ffe71a90455c7902eb501bcb69c5ef3d40a13bd775a2e814858c92c6234237bee5e191c264d40a1df6a1d5c83df8f4ab2438c6a2444b973bc745483eceb66ec5f649e32ba429fac787379baf680e23203bad9aa4af49deea72e5e567c98cd018658ea646a1401737c9e87496867870fef5b92d8ca447fb6baa6a45aed218316b14c2393b481c2718066cb9a076fdeac4395454a85f4617190246c", @ANYRES16=r15, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYRES16=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4084}, 0x4000) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000070000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c000240000000000000008108000340fffffffd0c0001400000000000000007"], 0xb8}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64}]}, 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0xa}, 0x8) shutdown(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xb}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e657665000020000280140007002001000000000000000000000000000008000100", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd6076b2af00072f00fc000000000000000000000000000000ff0200000000000000000000000000010000883e00"], 0x0) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x10, 0x80, 0x4, 0x9, {{0x13, 0x4, 0x0, 0x6, 0x4c, 0x65, 0x0, 0x7, 0x2f, 0x0, @empty, @private=0xa010100, {[@lsrr={0x83, 0x1b, 0x45, [@local, @loopback, @remote, @empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x1c, 0xde, 0x1, 0x3, [{@broadcast, 0xa757}, {@local, 0xca5e}, {@loopback, 0xfffffffa}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r1}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x10, 0x80, 0x4, 0x9, {{0x13, 0x4, 0x0, 0x6, 0x4c, 0x65, 0x0, 0x7, 0x2f, 0x0, @empty, @private=0xa010100, {[@lsrr={0x83, 0x1b, 0x45, [@local, @loopback, @remote, @empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x1c, 0xde, 0x1, 0x3, [{@broadcast, 0xa757}, {@local, 0xca5e}, {@loopback, 0xfffffffa}]}]}}}}}) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r1}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="260a00009109000000116c0000000000180000000000000040000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x701, 0x0, 0x0, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="f48372d4", 0x4) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="f48372d4", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x1) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r3, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000340)=""/209, 0xd1}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000001700)=""/4090, 0xffa}], 0x4}, 0x2}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@can_delroute={0x50, 0x19, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@CGW_MOD_AND={0x15, 0x1, {{{0x4, 0x1, 0x1, 0x1}, 0x7, 0x0, 0x0, 0x0, "6839434d024c2456"}, 0x5}}, @CGW_FILTER={0xc, 0xb, {{0x3, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "22aa923fb01b029e"}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, &(0x7f0000000400)=0x10, 0x800) setsockopt$inet_buf(r1, 0x0, 0x25, &(0x7f0000000500)="3f8bc43df0cacb49bc043f1d0ac8933dd7a65186ad1e0a7b33ffa3924100eff15abf00908143a8767903825d09dc60475ae0b6fd58dd09ae993c930ed00f28ff0ddbac0d10b21b67ccc7c0cc402fa5494333a0fa2b8221f9fdbe241339a70aeb07985551119da51b8c1c46ab15a471cbbc036881c5c58e9122c921ab25a9a5b5d77ac50fb3418af7d3ceb55b83f3d25ca41c90b19927da58d917b8ae9198c7db5dac4995d93b2ce807993894ea488afb19d2debfd293ea9c5cad85f7f41335f9df800339ceb1c887dbd8102b3a80d0", 0xcf) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async, rerun: 64) r2 = socket(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x52, 0x3ab3666c4349b199, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async, rerun: 64) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) (async, rerun: 64) poll(&(0x7f0000000280)=[{r0, 0x82}], 0x1, 0xfffffffa) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="19746bff0300000004000000040000006637cf2c00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 32) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r4) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x802000e0}, 0xc, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8c9500"/12, @ANYRES16=r3, @ANYBLOB="000428bd7000fedbdf2519000000200001801400020064756d6d793000000000000000000000020003000200000058000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000000800030000000000080003000100000008000100", @ANYRES32=r7, @ANYBLOB="140002007665746831000000000000000000000008000300000000000800030001000000"], 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x5) sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '*[}](/\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x240408c2}, 0x850) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000040122000b00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r9}, 0x38) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r8) sendmsg$NL80211_CMD_GET_REG(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r10, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x30}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000844}, 0x4) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r6) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r11) sendmsg$ETHTOOL_MSG_DEBUG_SET(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0003000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) socket$igmp6(0xa, 0x3, 0x2) executing program 4: r0 = socket(0xb, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@local, 0x78, r1}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@alu={0x3, 0x1, 0xd, 0x0, 0x5}]}, &(0x7f0000000500)='syzkaller\x00', 0x4}, 0x94) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007008b617400140004800800014000000000080002"], 0xa4}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x149e42, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x5, 0x4}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000140)={0x0, 'vlan0\x00', {0x4}}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x48, 0x41, 'rxe\x00'}, {0xfffffffffffffec7, 0x33, 'tunl0\x00'}}, {{0x0, 0x2, 'syz1\x00'}, {0x0, 0x41, 'siw\x00'}, {0x0, 0x33, 'veth1_vlan\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x40084) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000100)=0x40) ioctl$TUNSETLINK(r1, 0x400454cd, 0x20) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) recvmmsg(r4, &(0x7f00000033c0)=[{{&(0x7f0000000300)=@alg, 0x80, &(0x7f0000001600)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/153, 0x99}, {&(0x7f0000001500)=""/207, 0xcf}], 0x3, &(0x7f0000001640)=""/40, 0x28}}, {{&(0x7f0000001680)=@nfc, 0x80, &(0x7f0000003300)=[{&(0x7f0000001700)=""/164, 0xa4}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/33, 0x21}], 0x3, &(0x7f0000003340)=""/82, 0x52}, 0x6}], 0x2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ENCAP_TYPE={0x6}]}, 0x24}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2ac3c2d5fa4423c5ad1ddee97879c38bf8", 0x11}], 0x1, 0x0, 0xffffffffffffff12, 0x4000001}, 0x840) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) r3 = accept$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) r4 = gettid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@private0, @in6=@ipv4={""/10, ""/2, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f00000005c0)=0x37) r6 = getgid() r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0x83, 0x0, &(0x7f0000000080)=0xb0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000380), 0x6c000, 0x0) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a40)={0xffffffffffffffff, 0x0, 0x25, 0x18, @val=@iter={&(0x7f0000000400)=@cgroup={0x3, 0xffffffffffffffff, 0x4}, 0x10}}, 0x20) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000600)=0x0) r10 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r11}]}, 0x1c}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0, 0x0}, &(0x7f0000000680)=0xc) r13 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) sendmsg$unix(r3, &(0x7f00000008c0)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000200)="f6e5f28637d29c5da5da3e8c235180c55c3f3ebb3af842ba70012957b6a064365d2a26d357a78a16a6a153a142ffb3dcad59fdb22720fd874866134fd138710d683a5d85178c91bd1d740f5c9b0da5aa874661d2792c52c106f8c9b25005", 0x5e}, {&(0x7f0000000280)="b1ca34278ba3bd86e64ee728c091ddb9e24d205ab12d6af588edc2b71dede833779d4235b9a58840739315e6122ea992b0bfafcdc2b1acc772a1906094a2844e33bfd3491b59fc86c7fcea60b39f462d50eaa7231b794d51eb61a85626", 0x5d}], 0x2, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @rights={{0x1c, 0x1, 0x1, [r1, r1, r8]}}, @cred={{0x1c, 0x1, 0x2, {r9, r11, r12}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r1]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r13, r0, r2, r0, r0]}}], 0xe8}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r14 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000900)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x9, 0x2}, &(0x7f00000009c0)=0x90) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r10, 0x84, 0x77, &(0x7f0000000a00)={r15, 0x10, 0x2, [0x7fff, 0x6]}, 0xc) setsockopt$inet_mreqn(r14, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x40086602, &(0x7f00000002c0)={'ipvlan0\x00'}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80}, [@alu={0x4, 0x1, 0xb, 0x8, 0x4, 0x2, 0xfffffffffffffff0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x8, r2}, 0x94) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000000)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000001a00)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0xffffff63}], 0x1, 0x20}}], 0x48, 0x20000005}, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r7, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000100)="ad73364256", 0x5) sendmmsg$inet(r4, &(0x7f00000049c0)=[{{&(0x7f0000000dc0)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f00000019c0)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x2, 0x40090) program crashed: KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings bisect: the chunk can be dropped bisect: testing without sub-chunk 3/3 testing program (duration=6m2s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 16, 30, 13, 20, 7, 13, 40, 4, 4] detailed listing: executing program 4: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x2, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x100) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0xe2cf}]}}]}, 0x3c}}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008011) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_DELTABLE={0xff4e, 0x2, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x48, 0xe, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x90}}, 0x8020) executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x4, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) (async) r6 = socket(0x840000000002, 0x3, 0x102) getsockopt$inet_pktinfo(r6, 0x0, 0x34, 0x0, &(0x7f0000000100)=0x2) (async) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 32) write(r3, &(0x7f0000000080)="05000000010001", 0x7) (async, rerun: 32) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req={0x4, 0x6, 0x224, 0x1}, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') (async) r0 = socket$rds(0x15, 0x5, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x200, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x48}}}}, [@NL80211_ATTR_IE={0x3d, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x1}, 0x1, 0x2, @device_a, 0x7fff, 0x5, 0x1}}, @mic={0x8c, 0x18, {0xb58, "290b9b70f09d", @long="0982aa6e76db95826cb5ca6ca058a19e"}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x4}, @NL80211_ATTR_FILS_ERP_RRK={0x32, 0xfc, "5e6e56650a407d37f26183f75ffff7c565a0165c6bd3197b2f4285e202e64309c8db631ea5fcdc7ea6abbb3bcf7e"}, @NL80211_ATTR_FILS_ERP_RRK={0xfb, 0xfc, "c2aade73dd7e77893ae18548b82f8396250538e963bf85159ddf5e307000847ff5a085e7280aee6b65e6d50f3c608b40f2d1b97bd9607f64382668671f0768b160b3b7f6a0150beeae01a21e4c62fb46093662bf938772d21ee61a6cbda2ca65d5340c8972b20c9e3449883657a6a0ee66073969e175245184b0083d3ba69a7044d67f0bb0b0d89179ac00d8f9590246dcbdf5446b06c318b46529a1e04a5908242ae072c953cd4a069f1b21123c42238068010c26bb0801965bc29192efbcc3ea262a0b4025a4cea3ecc940ef3e3d44b2b896365919c9139f1755cb6476af38330e5df22dfba36f05819d7af1f3617d8073026f7b9dfb"}], @NL80211_ATTR_IE={0x62, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @broadcast}}, @channel_switch={0x25, 0x3, {0x1, 0xae, 0x9}}, @ssid={0x0, 0x6, @default_ap_ssid}, @ibss={0x6, 0x2, 0x876}, @mic={0x8c, 0x10, {0xacc, "dfeed822fc7c", @short="aa2b416aff46e94a"}}, @mesh_chsw={0x76, 0x6, {0x5, 0x20, 0x1d, 0x2969}}, @gcr_ga={0xbd, 0x6, @broadcast}, @rann={0x7e, 0x15, {{0x0, 0x4f}, 0x34, 0x3, @broadcast, 0xfffffffe, 0x5, 0xd}}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x4000080}, 0x8880) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'veth0_to_team\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x40, 0x20, 0x2, 0x9, {{0x8, 0x4, 0x0, 0x34, 0x20, 0x67, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010100, @multicast2, {[@timestamp={0x44, 0x8, 0x31, 0x0, 0x5, [0xfff]}, @noop]}}}}}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x40, 0x8020, 0x0, 0x3f, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x68, 0x0, 0x1, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0xcc, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x38}, 0xe}, {@private=0xa010100, 0x9}]}, @ssrr={0x89, 0xf, 0x57, [@loopback, @private=0xa010101, @multicast1]}, @noop, @timestamp_prespec={0x44, 0x14, 0x6b, 0x3, 0x0, [{@multicast1, 0x8}, {@empty, 0x4}]}, @ra={0x94, 0x4, 0x1}]}}}}}) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0xf, 0x45, 0x31, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x8, 0x6a79, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000600)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x3, 0x51, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x1, 0x8, 0x9}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xb0, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) (async, rerun: 64) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async, rerun: 64) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000840), 0x4) (async) socketpair(0x28, 0x800, 0x7fff, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r9, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r1, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c040}, 0x4042080) (async) socket$netlink(0x10, 0x3, 0xc) (async) ioctl$FIONCLEX(r10, 0x5450) (async, rerun: 64) socket$l2tp(0x2, 0x2, 0x73) (async, rerun: 64) r12 = socket$kcm(0x29, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(r10, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40010) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r12, 0x4058587a, &(0x7f0000000c40)={{r0, &(0x7f0000000b00)='syz_tun\x00', 0x400200, &(0x7f0000000b40)={@_ha_fsid={[0x9, 0x1]}, {0x40, 0x3b, 0x3, 0x800}}, 0x5, &(0x7f0000000b80), &(0x7f0000000bc0)=0x81}, {[0xdd8, 0x28, 0x7fffffff, 0x8]}, 0xfffffff9, 0x14, &(0x7f0000000c00)=""/20}) getsockopt$IP_SET_OP_VERSION(r13, 0x1, 0x53, &(0x7f0000000cc0), &(0x7f0000000d00)=0x8) (async) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r14, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x40, 0x1, 0x7, 0x101, 0x0, 0x0, {0x3}, [@NFACCT_FLAGS={0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x800}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2a3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x90) (async, rerun: 32) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000001140)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001100)={&(0x7f0000000e80)={0x27c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x14}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaa}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xa}, @NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xa}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0xd5}]}, @NL80211_ATTR_MESH_SETUP={0x1ec, 0x70, [@NL80211_MESH_SETUP_IE={0x102, 0x3, "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"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_IE={0xc5, 0x3, "94c2600320ee84451f553c63a694dc9c66f40d53bb97ced4b0e3156d50ecf894f393fe6081d02a3682fcd727c1261ea0eb91c0c2bb38017b22b119e7ee2ecb1f17a1d64cb76fef574cb21c9b4104c2038e4cb82b4e08df9091d2ad33b3619ad1d157d66a2b7521da1fbb399549584cb844452274998953996ca0dd993060ca0d3b5c079fad05038e14e1df814c01011b5748822f417d2cfae1211cc10945394e2aba4e5f36eb6e82bf028a5e50500f09956fabff1d83b5af15457bf28d6c472ccf"}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x16, 0x24, [{0x30}, {0x9, 0x1}, {0x24, 0x1}, {0x5, 0x1}, {0x60, 0x1}, {0x3, 0x1}, {0x16}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x48, 0x1}, {0x4, 0x1}, {0xfbf98154f554236, 0x1}, {0x32}, {0x18, 0x1}, {0xb}, {0x60, 0x1}, {0x4}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x20000041}, 0x40) (async, rerun: 32) r15 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r10) (rerun: 64) sendmsg$NL80211_CMD_FRAME(r15, &(0x7f0000001540)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001500)={&(0x7f0000001200)={0x2f0, r16, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9a6}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @NL80211_ATTR_FRAME={0x29d, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x1}, @broadcast, @broadcast, @random="204f2ead6478", {0x6, 0x33}}, 0x6014, 0x40, @random=0x101, @val={0x1, 0x5, [{0x1b}, {0x16}, {0x3, 0x1}, {0xc, 0x1}, {0x24, 0x1}]}, @val={0x2d, 0x1a, {0x80, 0x3, 0x1, 0x0, {0x48000, 0x6, 0x0, 0xd6, 0x0, 0x1}, 0x0, 0x2, 0x2}}, [{0xdd, 0xc0, "2fdf50652c1e1a9aa9cbf9b52ff0d093088783a638e72bee03de955ce2f493890e9d07379f308960b60054657e5d37222ba27099c76ee4834fe0b2af49e33595c3e3a650a5613deb987624c69ede93c4e398aca43c1a573b6b738d6fa74f085e87b3ba4300d530588a09cc1adf3f0a86ff98ba018b1df75e230ca3446f3ccfb137c1f82513f23426ad12416693b2a74610443b04ac41a4850e12dc266c4ab8e175e74c9ca361b1cc04819b1a1ab0179fee37078931826a888eb0de0bbd36fd85"}, {0xdd, 0x15, "a56c91280ee3cfb86fcc7c95991611171f2238388f"}, {0xdd, 0x82, "d4950ee24b50dad6373241497979447e8414bde0c32154b9a5e53e2dfcea6bf390774d78b5eea342d6d0b1e63992cde6c7c9f9d586a5c370305d2ba616741e72813540e8a40342e66768a8e62813fbf0efa5ca76156aa4be75eb611384ecab0f853ed424d5339ca206daa4509483905d196888ca92b6e793986f5ee9ec24435fda48"}, {0xdd, 0x12, "e853e5254d6b1cab72780572f99beffb66a1"}, {0xdd, 0xe5, "4b46b5b9621be2263288985572ed58028436e1947a5352dae11c597e6c7d82d61017facfe1c6e51927f9b502f8e1f7df9cb78d61cdf9695d8d011902c516fa011cbb247dae571d5958ba61839b69b662a44897e61241cb6f65b687f91b7c9825e536925031477e7fe904170176265bd2388695acbbd5f795960735431ee8d2be36308b2f8a8eec6d89fcad45d89d06f717f54bc48d413ec7e943965997dc4eead8abe4bfce1941cf09028ef0dea50af0e6bb00c081467aa38823374edea8bb6b0439a15fce3b5a95a6f63db9c0d368363990985b11d17f812566477ae4bba7a0a895122505"}]}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x395}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]]}, 0x2f0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048040}, 0x24008840) accept(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x40}}, 0x20) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000180)=ANY=[], 0x0) clock_gettime(0xfffffffb, 0x0) close(0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x804) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) (async) socket$l2tp(0x2, 0x2, 0x73) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) (async) syz_emit_ethernet(0x74, &(0x7f0000000180)=ANY=[], 0x0) (async) clock_gettime(0xfffffffb, 0x0) (async) close(0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x804) (async) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000010280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000000569c2b126b949c2e6219a9c9e7bf6cb709ebc77918fcff070000991149d5867fa961094c92b447b3859f9739747e4312904f83154ab340", @ANYRES32=0x0, @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000008000740000000015c000000160a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626ff96430000000001700000000d5001400010076657468305f746f5f7465616d00"], 0xec}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r2) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x84, r4, 0x8, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x529}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x25}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x4000005) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="b860eb49c54512c27512526da850d95309732bf316ed144e06ba56f95b910bd4372f8f2f4977dca084f5541d42fa424f2c4b4082c61d6e4279a8a3dfbd132a5376e5fa4e273756284fbc01bc8e8b0f0d51f965ea018db60ef203b323b3"], 0x38}}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f00000005c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x75f, 0x1, 0x8, 0x7, 0xb], 0x0, 0x0}, 0xba8) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x84000000, 0x25dfdbfe, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}}}}}]}, 0x48}}, 0x0) executing program 3: socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @broadcast}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x83, &(0x7f0000000000)={r3, 0x2}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0000000000000000200012800b0001006d61637365630000100002800c0004000000000000000000"], 0x40}}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmmsg(r6, &(0x7f0000006300), 0x24, 0x60, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=r7, @ANYRES32=r5, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0xa, 0x801, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r11 = socket$inet6_udp(0xa, 0x2, 0x0) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet(r12, &(0x7f0000003740)=[{{&(0x7f0000000280)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000540)=[{&(0x7f00000003c0)="6e3d0c67399566d5a37dd0a59f03fd814fbdb56abbfdb0cdc76d0181690c86974cf8b7bfd10d709e5c8e0c7a50e23e9bcb5c88d1c3d23c00", 0x38}, {&(0x7f0000000440)="96eccf17bb24e230f4765827666fef44c916a3dec6f15ba3fba205e86abe7befe64bf62a4f87fed29a1a968119412a3d49e3d5f7200626f57c48cec9c946a08b51f1426988685760b105b907448797d28e98dffe0a2f7d5cc7759d623a98693d6b6e689199cac1562b1afbbcac1db5058e8a93ccb9720dcda298852d0319ad63858891f87d7c1e1358686da63e62b707504c7d00f0", 0x95}, {&(0x7f00000001c0)}], 0x3}}, {{&(0x7f0000000600)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000680)="a2f679b6ed1db199df86fad76def949a03d32465d809f8ddd7ec661e5c3425767c69df69011e86c17e2ff2d7ba6b", 0x2e}, {&(0x7f0000000ac0)}], 0x2, &(0x7f0000001280)=ANY=[@ANYBLOB="88000000000000000000000007000000863c000000020004704e01067bac37b405020505d6f7960602050e764296b80eec0534227b9f110204cd5e061126a1f9628cd86bed882f37229f86a29404010044148f03ac1e0101000000ddac1414bb00000007442478d3ac1414aa000000040a010102000000060000000000000008ac1e0001000000081100000000000000000000000100000006000000000000005c0000000000000000000000070000009404000000830b78ac14143fac141433820cf9efe6a53eee7cf3eb37072b6cffffffff0a0101027f000001ac1414aa00000000000000000a010102ac1e00017f000001e00000010000000000000000001400000000000000000000000200000007000000000000001c000000000000000000000008000000", @ANYBLOB="ba0052c634847682b6f344399b1132a30734db3a94f416a84356275800000000000000", @ANYBLOB="0a0101000000000002"], 0xfffffffffffffe97}}, {{&(0x7f0000000c80)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000ec0)=[{0x0}, {&(0x7f0000000cc0)}, {0x0}, {&(0x7f0000000cc0)="9d95dc241f0492a02ce435d13bf664a5d857d0b92212d4c40967856e7076189dba9d2225384116b3c5cb9467db9ed51db106b6625fa496d9d5c7d3c9142cac9ec6b1df7c0e24cd635daafde510c50d707c3118fb341f0f01c60b245c3e47f9325d7d608b5c0d", 0x66}, {&(0x7f00000001c0)}], 0x5}}, {{&(0x7f0000000f40)={0x2, 0x4e23, @local}, 0x10, &(0x7f00000010c0)=[{&(0x7f0000000f80)="b42a47ee33372db9a50dddb310ac812af40493c54caf570ccd9e2c3470a710e87f61299516d2903c3e150ff6b7847d94eccfd0d812e2b96ee4e7a941b5bfc07193ce9faa13330f22270a853a13d030768893b2804ea025bf71d7e7e820250e112e2ddba3dcf9e5c50f89741b61ebcbc1c04b0089514dfcc955596f39e846f3", 0x7f}, {&(0x7f0000001000)}, {0x0}], 0x3}}, {{&(0x7f0000001180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, &(0x7f0000001200)}}, {{&(0x7f0000001240)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000003700)=[{&(0x7f0000003680)="587ce5e95e4cd9567748a6bfc1d1cc78b5eda56a9828eac894a8eaeb5e49995ff849cf3e418c434b82e0fc652add94574db0b35f9917fbc4b0841ce7d9ccb77450b98f8f16627b33beda78376ee8f1b89e8dc5d51e9951cbf9cf8fdfa4b7301c3e61a83a13b0ca256d", 0x69}], 0x1}}], 0x6, 0x200460c0) (async) sendmmsg$inet(r12, &(0x7f0000003740)=[{{&(0x7f0000000280)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000540)=[{&(0x7f00000003c0)="6e3d0c67399566d5a37dd0a59f03fd814fbdb56abbfdb0cdc76d0181690c86974cf8b7bfd10d709e5c8e0c7a50e23e9bcb5c88d1c3d23c00", 0x38}, {&(0x7f0000000440)="96eccf17bb24e230f4765827666fef44c916a3dec6f15ba3fba205e86abe7befe64bf62a4f87fed29a1a968119412a3d49e3d5f7200626f57c48cec9c946a08b51f1426988685760b105b907448797d28e98dffe0a2f7d5cc7759d623a98693d6b6e689199cac1562b1afbbcac1db5058e8a93ccb9720dcda298852d0319ad63858891f87d7c1e1358686da63e62b707504c7d00f0", 0x95}, {&(0x7f00000001c0)}], 0x3}}, {{&(0x7f0000000600)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000680)="a2f679b6ed1db199df86fad76def949a03d32465d809f8ddd7ec661e5c3425767c69df69011e86c17e2ff2d7ba6b", 0x2e}, {&(0x7f0000000ac0)}], 0x2, &(0x7f0000001280)=ANY=[@ANYBLOB="88000000000000000000000007000000863c000000020004704e01067bac37b405020505d6f7960602050e764296b80eec0534227b9f110204cd5e061126a1f9628cd86bed882f37229f86a29404010044148f03ac1e0101000000ddac1414bb00000007442478d3ac1414aa000000040a010102000000060000000000000008ac1e0001000000081100000000000000000000000100000006000000000000005c0000000000000000000000070000009404000000830b78ac14143fac141433820cf9efe6a53eee7cf3eb37072b6cffffffff0a0101027f000001ac1414aa00000000000000000a010102ac1e00017f000001e00000010000000000000000001400000000000000000000000200000007000000000000001c000000000000000000000008000000", @ANYBLOB="ba0052c634847682b6f344399b1132a30734db3a94f416a84356275800000000000000", @ANYBLOB="0a0101000000000002"], 0xfffffffffffffe97}}, {{&(0x7f0000000c80)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000ec0)=[{0x0}, {&(0x7f0000000cc0)}, {0x0}, {&(0x7f0000000cc0)="9d95dc241f0492a02ce435d13bf664a5d857d0b92212d4c40967856e7076189dba9d2225384116b3c5cb9467db9ed51db106b6625fa496d9d5c7d3c9142cac9ec6b1df7c0e24cd635daafde510c50d707c3118fb341f0f01c60b245c3e47f9325d7d608b5c0d", 0x66}, {&(0x7f00000001c0)}], 0x5}}, {{&(0x7f0000000f40)={0x2, 0x4e23, @local}, 0x10, &(0x7f00000010c0)=[{&(0x7f0000000f80)="b42a47ee33372db9a50dddb310ac812af40493c54caf570ccd9e2c3470a710e87f61299516d2903c3e150ff6b7847d94eccfd0d812e2b96ee4e7a941b5bfc07193ce9faa13330f22270a853a13d030768893b2804ea025bf71d7e7e820250e112e2ddba3dcf9e5c50f89741b61ebcbc1c04b0089514dfcc955596f39e846f3", 0x7f}, {&(0x7f0000001000)}, {0x0}], 0x3}}, {{&(0x7f0000001180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, &(0x7f0000001200)}}, {{&(0x7f0000001240)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000003700)=[{&(0x7f0000003680)="587ce5e95e4cd9567748a6bfc1d1cc78b5eda56a9828eac894a8eaeb5e49995ff849cf3e418c434b82e0fc652add94574db0b35f9917fbc4b0841ce7d9ccb77450b98f8f16627b33beda78376ee8f1b89e8dc5d51e9951cbf9cf8fdfa4b7301c3e61a83a13b0ca256d", 0x69}], 0x1}}], 0x6, 0x200460c0) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a80)='cgroup.controllers\x00', 0x275a, 0x0) writev(r5, &(0x7f0000000500)=[{&(0x7f0000000d40)="904fa9047f30bb5bf529f4ac04a3bf851aebf4b0b1a03fd5f1c13e4496e125692576b4f620345c4fff801dcb9fe3efd9fb0cb760bae69e7e21cbc5b12927d524b616db277a4e6bf344a2ccb8c378322de0500730dd7590cc630fc76dc893ce51e4028d813e8a935f816e459a8ac03687891b8a241f9baf85bb86c754eae1affc859aa53de6b3191d75c1f90ff6cd2c40d3e9cfee5ea27d0ce993ac746b9dc6f025bd27", 0xa3}, {&(0x7f0000000400)="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", 0xfe}], 0x2) (async) writev(r5, &(0x7f0000000500)=[{&(0x7f0000000d40)="904fa9047f30bb5bf529f4ac04a3bf851aebf4b0b1a03fd5f1c13e4496e125692576b4f620345c4fff801dcb9fe3efd9fb0cb760bae69e7e21cbc5b12927d524b616db277a4e6bf344a2ccb8c378322de0500730dd7590cc630fc76dc893ce51e4028d813e8a935f816e459a8ac03687891b8a241f9baf85bb86c754eae1affc859aa53de6b3191d75c1f90ff6cd2c40d3e9cfee5ea27d0ce993ac746b9dc6f025bd27", 0xa3}, {&(0x7f0000000400)="4a028ade6804ae39a08807156617e2c2e57fa6f4e2b5d4f883a236d44565d82f304dd7b521ccea87e5547f1ffb932e06101b14e7380d383569b30ab90a6dfa2175dcd087ed81d00a6ad4aca285940727be451c9db8acf140ef500d71278d06b88a7936373c53ad44ed7609c0c94a6d194f72900e046a3a3b74e449be24c16002a8c56ab2230f693c3fb5aec8505e328918ce842b441862ea174de7c37369f38a2160d9b26f1997402ee56fe39fab02c7cf172981cd0b566c5d47fb13fdabc661f2a95a1b60f2fcd389bdc3f3817ec61b11e707e354cf9cd7fe0813683334a457103e43621c2972c3e0642e5b3bcce2270ba0b6443fadb578c1fc85aa60d6", 0xfe}], 0x2) ioctl$FS_IOC_RESVSP(r13, 0x40305828, &(0x7f00000003c0)={0x0, 0x4}) (async) ioctl$FS_IOC_RESVSP(r13, 0x40305828, &(0x7f00000003c0)={0x0, 0x4}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'hsr0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r11, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f00000005c0)=[0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7d, &(0x7f0000000840)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0xa5, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0x17}, {0x0, 0x6}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x3ff}}]}, 0x38}}, 0x0) getsockopt(r9, 0x0, 0x40, &(0x7f0000000000)=""/84, &(0x7f00000000c0)=0x54) (async) getsockopt(r9, 0x0, 0x40, &(0x7f0000000000)=""/84, &(0x7f00000000c0)=0x54) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r8) (async) r15 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r8) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000001780)=ANY=[@ANYBLOB="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", @ANYRES16=r15, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYRES16=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4084}, 0x4000) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000070000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c000240000000000000008108000340fffffffd0c0001400000000000000007"], 0xb8}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64}]}, 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0xa}, 0x8) shutdown(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xb}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) program crashed: KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings bisect: the chunk can be dropped bisect: split chunks (needed=true): <10> bisect: split chunk #0 of len 10 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 13, 40, 4, 4] detailed listing: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000010280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000000569c2b126b949c2e6219a9c9e7bf6cb709ebc77918fcff070000991149d5867fa961094c92b447b3859f9739747e4312904f83154ab340", @ANYRES32=0x0, @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000008000740000000015c000000160a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626ff96430000000001700000000d5001400010076657468305f746f5f7465616d00"], 0xec}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r2) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x84, r4, 0x8, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x529}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x25}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x4000005) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="b860eb49c54512c27512526da850d95309732bf316ed144e06ba56f95b910bd4372f8f2f4977dca084f5541d42fa424f2c4b4082c61d6e4279a8a3dfbd132a5376e5fa4e273756284fbc01bc8e8b0f0d51f965ea018db60ef203b323b3"], 0x38}}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f00000005c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x75f, 0x1, 0x8, 0x7, 0xb], 0x0, 0x0}, 0xba8) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x84000000, 0x25dfdbfe, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}}}}}]}, 0x48}}, 0x0) executing program 3: socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @broadcast}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x83, &(0x7f0000000000)={r3, 0x2}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0000000000000000200012800b0001006d61637365630000100002800c0004000000000000000000"], 0x40}}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmmsg(r6, &(0x7f0000006300), 0x24, 0x60, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=r7, @ANYRES32=r5, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0xa, 0x801, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r11 = socket$inet6_udp(0xa, 0x2, 0x0) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet(r12, &(0x7f0000003740)=[{{&(0x7f0000000280)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000540)=[{&(0x7f00000003c0)="6e3d0c67399566d5a37dd0a59f03fd814fbdb56abbfdb0cdc76d0181690c86974cf8b7bfd10d709e5c8e0c7a50e23e9bcb5c88d1c3d23c00", 0x38}, {&(0x7f0000000440)="96eccf17bb24e230f4765827666fef44c916a3dec6f15ba3fba205e86abe7befe64bf62a4f87fed29a1a968119412a3d49e3d5f7200626f57c48cec9c946a08b51f1426988685760b105b907448797d28e98dffe0a2f7d5cc7759d623a98693d6b6e689199cac1562b1afbbcac1db5058e8a93ccb9720dcda298852d0319ad63858891f87d7c1e1358686da63e62b707504c7d00f0", 0x95}, {&(0x7f00000001c0)}], 0x3}}, {{&(0x7f0000000600)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000680)="a2f679b6ed1db199df86fad76def949a03d32465d809f8ddd7ec661e5c3425767c69df69011e86c17e2ff2d7ba6b", 0x2e}, {&(0x7f0000000ac0)}], 0x2, &(0x7f0000001280)=ANY=[@ANYBLOB="88000000000000000000000007000000863c000000020004704e01067bac37b405020505d6f7960602050e764296b80eec0534227b9f110204cd5e061126a1f9628cd86bed882f37229f86a29404010044148f03ac1e0101000000ddac1414bb00000007442478d3ac1414aa000000040a010102000000060000000000000008ac1e0001000000081100000000000000000000000100000006000000000000005c0000000000000000000000070000009404000000830b78ac14143fac141433820cf9efe6a53eee7cf3eb37072b6cffffffff0a0101027f000001ac1414aa00000000000000000a010102ac1e00017f000001e00000010000000000000000001400000000000000000000000200000007000000000000001c000000000000000000000008000000", @ANYBLOB="ba0052c634847682b6f344399b1132a30734db3a94f416a84356275800000000000000", @ANYBLOB="0a0101000000000002"], 0xfffffffffffffe97}}, {{&(0x7f0000000c80)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000ec0)=[{0x0}, {&(0x7f0000000cc0)}, {0x0}, {&(0x7f0000000cc0)="9d95dc241f0492a02ce435d13bf664a5d857d0b92212d4c40967856e7076189dba9d2225384116b3c5cb9467db9ed51db106b6625fa496d9d5c7d3c9142cac9ec6b1df7c0e24cd635daafde510c50d707c3118fb341f0f01c60b245c3e47f9325d7d608b5c0d", 0x66}, {&(0x7f00000001c0)}], 0x5}}, {{&(0x7f0000000f40)={0x2, 0x4e23, @local}, 0x10, &(0x7f00000010c0)=[{&(0x7f0000000f80)="b42a47ee33372db9a50dddb310ac812af40493c54caf570ccd9e2c3470a710e87f61299516d2903c3e150ff6b7847d94eccfd0d812e2b96ee4e7a941b5bfc07193ce9faa13330f22270a853a13d030768893b2804ea025bf71d7e7e820250e112e2ddba3dcf9e5c50f89741b61ebcbc1c04b0089514dfcc955596f39e846f3", 0x7f}, {&(0x7f0000001000)}, {0x0}], 0x3}}, {{&(0x7f0000001180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, &(0x7f0000001200)}}, {{&(0x7f0000001240)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000003700)=[{&(0x7f0000003680)="587ce5e95e4cd9567748a6bfc1d1cc78b5eda56a9828eac894a8eaeb5e49995ff849cf3e418c434b82e0fc652add94574db0b35f9917fbc4b0841ce7d9ccb77450b98f8f16627b33beda78376ee8f1b89e8dc5d51e9951cbf9cf8fdfa4b7301c3e61a83a13b0ca256d", 0x69}], 0x1}}], 0x6, 0x200460c0) (async) sendmmsg$inet(r12, &(0x7f0000003740)=[{{&(0x7f0000000280)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000540)=[{&(0x7f00000003c0)="6e3d0c67399566d5a37dd0a59f03fd814fbdb56abbfdb0cdc76d0181690c86974cf8b7bfd10d709e5c8e0c7a50e23e9bcb5c88d1c3d23c00", 0x38}, {&(0x7f0000000440)="96eccf17bb24e230f4765827666fef44c916a3dec6f15ba3fba205e86abe7befe64bf62a4f87fed29a1a968119412a3d49e3d5f7200626f57c48cec9c946a08b51f1426988685760b105b907448797d28e98dffe0a2f7d5cc7759d623a98693d6b6e689199cac1562b1afbbcac1db5058e8a93ccb9720dcda298852d0319ad63858891f87d7c1e1358686da63e62b707504c7d00f0", 0x95}, {&(0x7f00000001c0)}], 0x3}}, {{&(0x7f0000000600)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000680)="a2f679b6ed1db199df86fad76def949a03d32465d809f8ddd7ec661e5c3425767c69df69011e86c17e2ff2d7ba6b", 0x2e}, {&(0x7f0000000ac0)}], 0x2, &(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYBLOB="ba0052c634847682b6f344399b1132a30734db3a94f416a84356275800000000000000", @ANYBLOB="0a0101000000000002"], 0xfffffffffffffe97}}, {{&(0x7f0000000c80)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000ec0)=[{0x0}, {&(0x7f0000000cc0)}, {0x0}, {&(0x7f0000000cc0)="9d95dc241f0492a02ce435d13bf664a5d857d0b92212d4c40967856e7076189dba9d2225384116b3c5cb9467db9ed51db106b6625fa496d9d5c7d3c9142cac9ec6b1df7c0e24cd635daafde510c50d707c3118fb341f0f01c60b245c3e47f9325d7d608b5c0d", 0x66}, {&(0x7f00000001c0)}], 0x5}}, {{&(0x7f0000000f40)={0x2, 0x4e23, @local}, 0x10, &(0x7f00000010c0)=[{&(0x7f0000000f80)="b42a47ee33372db9a50dddb310ac812af40493c54caf570ccd9e2c3470a710e87f61299516d2903c3e150ff6b7847d94eccfd0d812e2b96ee4e7a941b5bfc07193ce9faa13330f22270a853a13d030768893b2804ea025bf71d7e7e820250e112e2ddba3dcf9e5c50f89741b61ebcbc1c04b0089514dfcc955596f39e846f3", 0x7f}, {&(0x7f0000001000)}, {0x0}], 0x3}}, {{&(0x7f0000001180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, &(0x7f0000001200)}}, {{&(0x7f0000001240)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000003700)=[{&(0x7f0000003680)="587ce5e95e4cd9567748a6bfc1d1cc78b5eda56a9828eac894a8eaeb5e49995ff849cf3e418c434b82e0fc652add94574db0b35f9917fbc4b0841ce7d9ccb77450b98f8f16627b33beda78376ee8f1b89e8dc5d51e9951cbf9cf8fdfa4b7301c3e61a83a13b0ca256d", 0x69}], 0x1}}], 0x6, 0x200460c0) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a80)='cgroup.controllers\x00', 0x275a, 0x0) writev(r5, &(0x7f0000000500)=[{&(0x7f0000000d40)="904fa9047f30bb5bf529f4ac04a3bf851aebf4b0b1a03fd5f1c13e4496e125692576b4f620345c4fff801dcb9fe3efd9fb0cb760bae69e7e21cbc5b12927d524b616db277a4e6bf344a2ccb8c378322de0500730dd7590cc630fc76dc893ce51e4028d813e8a935f816e459a8ac03687891b8a241f9baf85bb86c754eae1affc859aa53de6b3191d75c1f90ff6cd2c40d3e9cfee5ea27d0ce993ac746b9dc6f025bd27", 0xa3}, {&(0x7f0000000400)="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", 0xfe}], 0x2) (async) writev(r5, &(0x7f0000000500)=[{&(0x7f0000000d40)="904fa9047f30bb5bf529f4ac04a3bf851aebf4b0b1a03fd5f1c13e4496e125692576b4f620345c4fff801dcb9fe3efd9fb0cb760bae69e7e21cbc5b12927d524b616db277a4e6bf344a2ccb8c378322de0500730dd7590cc630fc76dc893ce51e4028d813e8a935f816e459a8ac03687891b8a241f9baf85bb86c754eae1affc859aa53de6b3191d75c1f90ff6cd2c40d3e9cfee5ea27d0ce993ac746b9dc6f025bd27", 0xa3}, {&(0x7f0000000400)="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", 0xfe}], 0x2) ioctl$FS_IOC_RESVSP(r13, 0x40305828, &(0x7f00000003c0)={0x0, 0x4}) (async) ioctl$FS_IOC_RESVSP(r13, 0x40305828, &(0x7f00000003c0)={0x0, 0x4}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'hsr0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r11, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f00000005c0)=[0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7d, &(0x7f0000000840)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0xa5, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0x17}, {0x0, 0x6}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x3ff}}]}, 0x38}}, 0x0) getsockopt(r9, 0x0, 0x40, &(0x7f0000000000)=""/84, &(0x7f00000000c0)=0x54) (async) getsockopt(r9, 0x0, 0x40, &(0x7f0000000000)=""/84, &(0x7f00000000c0)=0x54) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r8) (async) r15 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r8) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000001780)=ANY=[@ANYBLOB="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", @ANYRES16=r15, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYRES16=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4084}, 0x4000) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000070000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c000240000000000000008108000340fffffffd0c0001400000000000000007"], 0xb8}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64}]}, 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0xa}, 0x8) shutdown(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xb}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 16, 30, 13, 20] detailed listing: executing program 4: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x2, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x100) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0xe2cf}]}}]}, 0x3c}}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008011) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_DELTABLE={0xff4e, 0x2, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x48, 0xe, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x90}}, 0x8020) executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x4, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) (async) r6 = socket(0x840000000002, 0x3, 0x102) getsockopt$inet_pktinfo(r6, 0x0, 0x34, 0x0, &(0x7f0000000100)=0x2) (async) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 32) write(r3, &(0x7f0000000080)="05000000010001", 0x7) (async, rerun: 32) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req={0x4, 0x6, 0x224, 0x1}, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') (async) r0 = socket$rds(0x15, 0x5, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x200, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x48}}}}, [@NL80211_ATTR_IE={0x3d, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x1}, 0x1, 0x2, @device_a, 0x7fff, 0x5, 0x1}}, @mic={0x8c, 0x18, {0xb58, "290b9b70f09d", @long="0982aa6e76db95826cb5ca6ca058a19e"}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x4}, @NL80211_ATTR_FILS_ERP_RRK={0x32, 0xfc, "5e6e56650a407d37f26183f75ffff7c565a0165c6bd3197b2f4285e202e64309c8db631ea5fcdc7ea6abbb3bcf7e"}, @NL80211_ATTR_FILS_ERP_RRK={0xfb, 0xfc, "c2aade73dd7e77893ae18548b82f8396250538e963bf85159ddf5e307000847ff5a085e7280aee6b65e6d50f3c608b40f2d1b97bd9607f64382668671f0768b160b3b7f6a0150beeae01a21e4c62fb46093662bf938772d21ee61a6cbda2ca65d5340c8972b20c9e3449883657a6a0ee66073969e175245184b0083d3ba69a7044d67f0bb0b0d89179ac00d8f9590246dcbdf5446b06c318b46529a1e04a5908242ae072c953cd4a069f1b21123c42238068010c26bb0801965bc29192efbcc3ea262a0b4025a4cea3ecc940ef3e3d44b2b896365919c9139f1755cb6476af38330e5df22dfba36f05819d7af1f3617d8073026f7b9dfb"}], @NL80211_ATTR_IE={0x62, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @broadcast}}, @channel_switch={0x25, 0x3, {0x1, 0xae, 0x9}}, @ssid={0x0, 0x6, @default_ap_ssid}, @ibss={0x6, 0x2, 0x876}, @mic={0x8c, 0x10, {0xacc, "dfeed822fc7c", @short="aa2b416aff46e94a"}}, @mesh_chsw={0x76, 0x6, {0x5, 0x20, 0x1d, 0x2969}}, @gcr_ga={0xbd, 0x6, @broadcast}, @rann={0x7e, 0x15, {{0x0, 0x4f}, 0x34, 0x3, @broadcast, 0xfffffffe, 0x5, 0xd}}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x4000080}, 0x8880) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'veth0_to_team\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x40, 0x20, 0x2, 0x9, {{0x8, 0x4, 0x0, 0x34, 0x20, 0x67, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010100, @multicast2, {[@timestamp={0x44, 0x8, 0x31, 0x0, 0x5, [0xfff]}, @noop]}}}}}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x40, 0x8020, 0x0, 0x3f, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x68, 0x0, 0x1, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0xcc, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x38}, 0xe}, {@private=0xa010100, 0x9}]}, @ssrr={0x89, 0xf, 0x57, [@loopback, @private=0xa010101, @multicast1]}, @noop, @timestamp_prespec={0x44, 0x14, 0x6b, 0x3, 0x0, [{@multicast1, 0x8}, {@empty, 0x4}]}, @ra={0x94, 0x4, 0x1}]}}}}}) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0xf, 0x45, 0x31, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x8, 0x6a79, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000600)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x3, 0x51, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x1, 0x8, 0x9}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xb0, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) (async, rerun: 64) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async, rerun: 64) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000840), 0x4) (async) socketpair(0x28, 0x800, 0x7fff, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r9, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r1, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c040}, 0x4042080) (async) socket$netlink(0x10, 0x3, 0xc) (async) ioctl$FIONCLEX(r10, 0x5450) (async, rerun: 64) socket$l2tp(0x2, 0x2, 0x73) (async, rerun: 64) r12 = socket$kcm(0x29, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(r10, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40010) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r12, 0x4058587a, &(0x7f0000000c40)={{r0, &(0x7f0000000b00)='syz_tun\x00', 0x400200, &(0x7f0000000b40)={@_ha_fsid={[0x9, 0x1]}, {0x40, 0x3b, 0x3, 0x800}}, 0x5, &(0x7f0000000b80), &(0x7f0000000bc0)=0x81}, {[0xdd8, 0x28, 0x7fffffff, 0x8]}, 0xfffffff9, 0x14, &(0x7f0000000c00)=""/20}) getsockopt$IP_SET_OP_VERSION(r13, 0x1, 0x53, &(0x7f0000000cc0), &(0x7f0000000d00)=0x8) (async) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r14, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x40, 0x1, 0x7, 0x101, 0x0, 0x0, {0x3}, [@NFACCT_FLAGS={0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x800}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2a3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x90) (async, rerun: 32) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000001140)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001100)={&(0x7f0000000e80)={0x27c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x14}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaa}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xa}, @NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xa}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0xd5}]}, @NL80211_ATTR_MESH_SETUP={0x1ec, 0x70, [@NL80211_MESH_SETUP_IE={0x102, 0x3, "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"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_IE={0xc5, 0x3, "94c2600320ee84451f553c63a694dc9c66f40d53bb97ced4b0e3156d50ecf894f393fe6081d02a3682fcd727c1261ea0eb91c0c2bb38017b22b119e7ee2ecb1f17a1d64cb76fef574cb21c9b4104c2038e4cb82b4e08df9091d2ad33b3619ad1d157d66a2b7521da1fbb399549584cb844452274998953996ca0dd993060ca0d3b5c079fad05038e14e1df814c01011b5748822f417d2cfae1211cc10945394e2aba4e5f36eb6e82bf028a5e50500f09956fabff1d83b5af15457bf28d6c472ccf"}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x16, 0x24, [{0x30}, {0x9, 0x1}, {0x24, 0x1}, {0x5, 0x1}, {0x60, 0x1}, {0x3, 0x1}, {0x16}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x48, 0x1}, {0x4, 0x1}, {0xfbf98154f554236, 0x1}, {0x32}, {0x18, 0x1}, {0xb}, {0x60, 0x1}, {0x4}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x20000041}, 0x40) (async, rerun: 32) r15 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r10) (rerun: 64) sendmsg$NL80211_CMD_FRAME(r15, &(0x7f0000001540)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001500)={&(0x7f0000001200)={0x2f0, r16, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9a6}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @NL80211_ATTR_FRAME={0x29d, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x1}, @broadcast, @broadcast, @random="204f2ead6478", {0x6, 0x33}}, 0x6014, 0x40, @random=0x101, @val={0x1, 0x5, [{0x1b}, {0x16}, {0x3, 0x1}, {0xc, 0x1}, {0x24, 0x1}]}, @val={0x2d, 0x1a, {0x80, 0x3, 0x1, 0x0, {0x48000, 0x6, 0x0, 0xd6, 0x0, 0x1}, 0x0, 0x2, 0x2}}, [{0xdd, 0xc0, "2fdf50652c1e1a9aa9cbf9b52ff0d093088783a638e72bee03de955ce2f493890e9d07379f308960b60054657e5d37222ba27099c76ee4834fe0b2af49e33595c3e3a650a5613deb987624c69ede93c4e398aca43c1a573b6b738d6fa74f085e87b3ba4300d530588a09cc1adf3f0a86ff98ba018b1df75e230ca3446f3ccfb137c1f82513f23426ad12416693b2a74610443b04ac41a4850e12dc266c4ab8e175e74c9ca361b1cc04819b1a1ab0179fee37078931826a888eb0de0bbd36fd85"}, {0xdd, 0x15, "a56c91280ee3cfb86fcc7c95991611171f2238388f"}, {0xdd, 0x82, "d4950ee24b50dad6373241497979447e8414bde0c32154b9a5e53e2dfcea6bf390774d78b5eea342d6d0b1e63992cde6c7c9f9d586a5c370305d2ba616741e72813540e8a40342e66768a8e62813fbf0efa5ca76156aa4be75eb611384ecab0f853ed424d5339ca206daa4509483905d196888ca92b6e793986f5ee9ec24435fda48"}, {0xdd, 0x12, "e853e5254d6b1cab72780572f99beffb66a1"}, {0xdd, 0xe5, "4b46b5b9621be2263288985572ed58028436e1947a5352dae11c597e6c7d82d61017facfe1c6e51927f9b502f8e1f7df9cb78d61cdf9695d8d011902c516fa011cbb247dae571d5958ba61839b69b662a44897e61241cb6f65b687f91b7c9825e536925031477e7fe904170176265bd2388695acbbd5f795960735431ee8d2be36308b2f8a8eec6d89fcad45d89d06f717f54bc48d413ec7e943965997dc4eead8abe4bfce1941cf09028ef0dea50af0e6bb00c081467aa38823374edea8bb6b0439a15fce3b5a95a6f63db9c0d368363990985b11d17f812566477ae4bba7a0a895122505"}]}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x395}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]]}, 0x2f0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048040}, 0x24008840) accept(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x40}}, 0x20) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000180)=ANY=[], 0x0) clock_gettime(0xfffffffb, 0x0) close(0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x804) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) (async) socket$l2tp(0x2, 0x2, 0x73) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) (async) syz_emit_ethernet(0x74, &(0x7f0000000180)=ANY=[], 0x0) (async) clock_gettime(0xfffffffb, 0x0) (async) close(0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x804) (async) program crashed: KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings bisect: the chunk can be dropped bisect: split chunks (needed=true): <5> bisect: split chunk #0 of len 5 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 20] detailed listing: executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048040}, 0x24008840) accept(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x40}}, 0x20) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000180)=ANY=[], 0x0) clock_gettime(0xfffffffb, 0x0) close(0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x804) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) (async) socket$l2tp(0x2, 0x2, 0x73) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) (async) syz_emit_ethernet(0x74, &(0x7f0000000180)=ANY=[], 0x0) (async) clock_gettime(0xfffffffb, 0x0) (async) close(0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x804) (async) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 16, 30] detailed listing: executing program 4: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x2, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x100) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0xe2cf}]}}]}, 0x3c}}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008011) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_DELTABLE={0xff4e, 0x2, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x48, 0xe, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x90}}, 0x8020) executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x4, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) (async) r6 = socket(0x840000000002, 0x3, 0x102) getsockopt$inet_pktinfo(r6, 0x0, 0x34, 0x0, &(0x7f0000000100)=0x2) (async) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 32) write(r3, &(0x7f0000000080)="05000000010001", 0x7) (async, rerun: 32) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req={0x4, 0x6, 0x224, 0x1}, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') (async) r0 = socket$rds(0x15, 0x5, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x200, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x48}}}}, [@NL80211_ATTR_IE={0x3d, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x1}, 0x1, 0x2, @device_a, 0x7fff, 0x5, 0x1}}, @mic={0x8c, 0x18, {0xb58, "290b9b70f09d", @long="0982aa6e76db95826cb5ca6ca058a19e"}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x4}, @NL80211_ATTR_FILS_ERP_RRK={0x32, 0xfc, "5e6e56650a407d37f26183f75ffff7c565a0165c6bd3197b2f4285e202e64309c8db631ea5fcdc7ea6abbb3bcf7e"}, @NL80211_ATTR_FILS_ERP_RRK={0xfb, 0xfc, "c2aade73dd7e77893ae18548b82f8396250538e963bf85159ddf5e307000847ff5a085e7280aee6b65e6d50f3c608b40f2d1b97bd9607f64382668671f0768b160b3b7f6a0150beeae01a21e4c62fb46093662bf938772d21ee61a6cbda2ca65d5340c8972b20c9e3449883657a6a0ee66073969e175245184b0083d3ba69a7044d67f0bb0b0d89179ac00d8f9590246dcbdf5446b06c318b46529a1e04a5908242ae072c953cd4a069f1b21123c42238068010c26bb0801965bc29192efbcc3ea262a0b4025a4cea3ecc940ef3e3d44b2b896365919c9139f1755cb6476af38330e5df22dfba36f05819d7af1f3617d8073026f7b9dfb"}], @NL80211_ATTR_IE={0x62, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @broadcast}}, @channel_switch={0x25, 0x3, {0x1, 0xae, 0x9}}, @ssid={0x0, 0x6, @default_ap_ssid}, @ibss={0x6, 0x2, 0x876}, @mic={0x8c, 0x10, {0xacc, "dfeed822fc7c", @short="aa2b416aff46e94a"}}, @mesh_chsw={0x76, 0x6, {0x5, 0x20, 0x1d, 0x2969}}, @gcr_ga={0xbd, 0x6, @broadcast}, @rann={0x7e, 0x15, {{0x0, 0x4f}, 0x34, 0x3, @broadcast, 0xfffffffe, 0x5, 0xd}}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x4000080}, 0x8880) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'veth0_to_team\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x40, 0x20, 0x2, 0x9, {{0x8, 0x4, 0x0, 0x34, 0x20, 0x67, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010100, @multicast2, {[@timestamp={0x44, 0x8, 0x31, 0x0, 0x5, [0xfff]}, @noop]}}}}}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x40, 0x8020, 0x0, 0x3f, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x68, 0x0, 0x1, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0xcc, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x38}, 0xe}, {@private=0xa010100, 0x9}]}, @ssrr={0x89, 0xf, 0x57, [@loopback, @private=0xa010101, @multicast1]}, @noop, @timestamp_prespec={0x44, 0x14, 0x6b, 0x3, 0x0, [{@multicast1, 0x8}, {@empty, 0x4}]}, @ra={0x94, 0x4, 0x1}]}}}}}) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0xf, 0x45, 0x31, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x8, 0x6a79, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000600)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x3, 0x51, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x1, 0x8, 0x9}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xb0, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) (async, rerun: 64) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async, rerun: 64) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000840), 0x4) (async) socketpair(0x28, 0x800, 0x7fff, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r9, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r1, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c040}, 0x4042080) (async) socket$netlink(0x10, 0x3, 0xc) (async) ioctl$FIONCLEX(r10, 0x5450) (async, rerun: 64) socket$l2tp(0x2, 0x2, 0x73) (async, rerun: 64) r12 = socket$kcm(0x29, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(r10, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40010) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r12, 0x4058587a, &(0x7f0000000c40)={{r0, &(0x7f0000000b00)='syz_tun\x00', 0x400200, &(0x7f0000000b40)={@_ha_fsid={[0x9, 0x1]}, {0x40, 0x3b, 0x3, 0x800}}, 0x5, &(0x7f0000000b80), &(0x7f0000000bc0)=0x81}, {[0xdd8, 0x28, 0x7fffffff, 0x8]}, 0xfffffff9, 0x14, &(0x7f0000000c00)=""/20}) getsockopt$IP_SET_OP_VERSION(r13, 0x1, 0x53, &(0x7f0000000cc0), &(0x7f0000000d00)=0x8) (async) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r14, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x40, 0x1, 0x7, 0x101, 0x0, 0x0, {0x3}, [@NFACCT_FLAGS={0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x800}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2a3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x90) (async, rerun: 32) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000001140)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001100)={&(0x7f0000000e80)={0x27c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x14}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaa}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xa}, @NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xa}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0xd5}]}, @NL80211_ATTR_MESH_SETUP={0x1ec, 0x70, [@NL80211_MESH_SETUP_IE={0x102, 0x3, "4c8800566c1494ff9192420ee10e1b108ac3d9c40f2dfc17dbb4e1fc81f8bdfbf4f97c2caf7c1624ae9d1e15983e1dca567e0cf4baf1959975cdc28294b9a426279b3455f2a2f72303c9ce0d348afaee0ab047f1db1d0a19154e463fd1217db2c02024958503a749db8c2976c3f0786a96b74b0eb0b6815a01f85389c677cbbe85468010838b84907a64f587faf89672784c26756e973e2e4a76af933e4ce97f71418febf4186911cd740b87eb603bb3bdfc40561704cfb0214937383aee7e1358f4d3c287ec8ea2d8ec170832d933dc21ca49c8e1e67848b881a77cfb9b498bc3857c05c7ac9eaacb49f96669d692901fc27d84059f282311fa2b0ba59a"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_IE={0xc5, 0x3, "94c2600320ee84451f553c63a694dc9c66f40d53bb97ced4b0e3156d50ecf894f393fe6081d02a3682fcd727c1261ea0eb91c0c2bb38017b22b119e7ee2ecb1f17a1d64cb76fef574cb21c9b4104c2038e4cb82b4e08df9091d2ad33b3619ad1d157d66a2b7521da1fbb399549584cb844452274998953996ca0dd993060ca0d3b5c079fad05038e14e1df814c01011b5748822f417d2cfae1211cc10945394e2aba4e5f36eb6e82bf028a5e50500f09956fabff1d83b5af15457bf28d6c472ccf"}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x16, 0x24, [{0x30}, {0x9, 0x1}, {0x24, 0x1}, {0x5, 0x1}, {0x60, 0x1}, {0x3, 0x1}, {0x16}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x48, 0x1}, {0x4, 0x1}, {0xfbf98154f554236, 0x1}, {0x32}, {0x18, 0x1}, {0xb}, {0x60, 0x1}, {0x4}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x20000041}, 0x40) (async, rerun: 32) r15 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r10) (rerun: 64) sendmsg$NL80211_CMD_FRAME(r15, &(0x7f0000001540)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001500)={&(0x7f0000001200)={0x2f0, r16, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9a6}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @NL80211_ATTR_FRAME={0x29d, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x1}, @broadcast, @broadcast, @random="204f2ead6478", {0x6, 0x33}}, 0x6014, 0x40, @random=0x101, @val={0x1, 0x5, [{0x1b}, {0x16}, {0x3, 0x1}, {0xc, 0x1}, {0x24, 0x1}]}, @val={0x2d, 0x1a, {0x80, 0x3, 0x1, 0x0, {0x48000, 0x6, 0x0, 0xd6, 0x0, 0x1}, 0x0, 0x2, 0x2}}, [{0xdd, 0xc0, "2fdf50652c1e1a9aa9cbf9b52ff0d093088783a638e72bee03de955ce2f493890e9d07379f308960b60054657e5d37222ba27099c76ee4834fe0b2af49e33595c3e3a650a5613deb987624c69ede93c4e398aca43c1a573b6b738d6fa74f085e87b3ba4300d530588a09cc1adf3f0a86ff98ba018b1df75e230ca3446f3ccfb137c1f82513f23426ad12416693b2a74610443b04ac41a4850e12dc266c4ab8e175e74c9ca361b1cc04819b1a1ab0179fee37078931826a888eb0de0bbd36fd85"}, {0xdd, 0x15, "a56c91280ee3cfb86fcc7c95991611171f2238388f"}, {0xdd, 0x82, "d4950ee24b50dad6373241497979447e8414bde0c32154b9a5e53e2dfcea6bf390774d78b5eea342d6d0b1e63992cde6c7c9f9d586a5c370305d2ba616741e72813540e8a40342e66768a8e62813fbf0efa5ca76156aa4be75eb611384ecab0f853ed424d5339ca206daa4509483905d196888ca92b6e793986f5ee9ec24435fda48"}, {0xdd, 0x12, "e853e5254d6b1cab72780572f99beffb66a1"}, {0xdd, 0xe5, "4b46b5b9621be2263288985572ed58028436e1947a5352dae11c597e6c7d82d61017facfe1c6e51927f9b502f8e1f7df9cb78d61cdf9695d8d011902c516fa011cbb247dae571d5958ba61839b69b662a44897e61241cb6f65b687f91b7c9825e536925031477e7fe904170176265bd2388695acbbd5f795960735431ee8d2be36308b2f8a8eec6d89fcad45d89d06f717f54bc48d413ec7e943965997dc4eead8abe4bfce1941cf09028ef0dea50af0e6bb00c081467aa38823374edea8bb6b0439a15fce3b5a95a6f63db9c0d368363990985b11d17f812566477ae4bba7a0a895122505"}]}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x395}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]]}, 0x2f0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) program crashed: KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings bisect: the chunk can be dropped bisect: split chunks (needed=true): <3> bisect: split chunk #0 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-socket$rds-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS-ioctl$ifreq_SIOCGIFINDEX_batadv_mesh-ioctl$sock_SIOCGIFINDEX-ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL-ioctl$ifreq_SIOCGIFINDEX_vcan-sendmsg$ETHTOOL_MSG_PAUSE_GET-syz_init_net_socket$802154_dgram-setsockopt$RDS_CONG_MONITOR-socketpair-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_PROBE_MESH_LINK-socket$netlink-ioctl$FIONCLEX-socket$l2tp-socket$kcm-sendmsg$TEAM_CMD_NOOP-ioctl$XFS_IOC_ATTRLIST_BY_HANDLE-getsockopt$IP_SET_OP_VERSION-socket$nl_netfilter-sendmsg$NFNL_MSG_ACCT_GET-sendmsg$NL80211_CMD_JOIN_MESH-socket$nl_generic-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_FRAME detailed listing: executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') (async) r0 = socket$rds(0x15, 0x5, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x200, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x48}}}}, [@NL80211_ATTR_IE={0x3d, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x1}, 0x1, 0x2, @device_a, 0x7fff, 0x5, 0x1}}, @mic={0x8c, 0x18, {0xb58, "290b9b70f09d", @long="0982aa6e76db95826cb5ca6ca058a19e"}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x4}, @NL80211_ATTR_FILS_ERP_RRK={0x32, 0xfc, "5e6e56650a407d37f26183f75ffff7c565a0165c6bd3197b2f4285e202e64309c8db631ea5fcdc7ea6abbb3bcf7e"}, @NL80211_ATTR_FILS_ERP_RRK={0xfb, 0xfc, "c2aade73dd7e77893ae18548b82f8396250538e963bf85159ddf5e307000847ff5a085e7280aee6b65e6d50f3c608b40f2d1b97bd9607f64382668671f0768b160b3b7f6a0150beeae01a21e4c62fb46093662bf938772d21ee61a6cbda2ca65d5340c8972b20c9e3449883657a6a0ee66073969e175245184b0083d3ba69a7044d67f0bb0b0d89179ac00d8f9590246dcbdf5446b06c318b46529a1e04a5908242ae072c953cd4a069f1b21123c42238068010c26bb0801965bc29192efbcc3ea262a0b4025a4cea3ecc940ef3e3d44b2b896365919c9139f1755cb6476af38330e5df22dfba36f05819d7af1f3617d8073026f7b9dfb"}], @NL80211_ATTR_IE={0x62, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @broadcast}}, @channel_switch={0x25, 0x3, {0x1, 0xae, 0x9}}, @ssid={0x0, 0x6, @default_ap_ssid}, @ibss={0x6, 0x2, 0x876}, @mic={0x8c, 0x10, {0xacc, "dfeed822fc7c", @short="aa2b416aff46e94a"}}, @mesh_chsw={0x76, 0x6, {0x5, 0x20, 0x1d, 0x2969}}, @gcr_ga={0xbd, 0x6, @broadcast}, @rann={0x7e, 0x15, {{0x0, 0x4f}, 0x34, 0x3, @broadcast, 0xfffffffe, 0x5, 0xd}}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x4000080}, 0x8880) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'veth0_to_team\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x40, 0x20, 0x2, 0x9, {{0x8, 0x4, 0x0, 0x34, 0x20, 0x67, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010100, @multicast2, {[@timestamp={0x44, 0x8, 0x31, 0x0, 0x5, [0xfff]}, @noop]}}}}}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x40, 0x8020, 0x0, 0x3f, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x68, 0x0, 0x1, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0xcc, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x38}, 0xe}, {@private=0xa010100, 0x9}]}, @ssrr={0x89, 0xf, 0x57, [@loopback, @private=0xa010101, @multicast1]}, @noop, @timestamp_prespec={0x44, 0x14, 0x6b, 0x3, 0x0, [{@multicast1, 0x8}, {@empty, 0x4}]}, @ra={0x94, 0x4, 0x1}]}}}}}) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0xf, 0x45, 0x31, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x8, 0x6a79, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000600)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x3, 0x51, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x1, 0x8, 0x9}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xb0, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) (async, rerun: 64) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async, rerun: 64) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000840), 0x4) (async) socketpair(0x28, 0x800, 0x7fff, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r9, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r1, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c040}, 0x4042080) (async) socket$netlink(0x10, 0x3, 0xc) (async) ioctl$FIONCLEX(r10, 0x5450) (async, rerun: 64) socket$l2tp(0x2, 0x2, 0x73) (async, rerun: 64) r12 = socket$kcm(0x29, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(r10, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40010) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r12, 0x4058587a, &(0x7f0000000c40)={{r0, &(0x7f0000000b00)='syz_tun\x00', 0x400200, &(0x7f0000000b40)={@_ha_fsid={[0x9, 0x1]}, {0x40, 0x3b, 0x3, 0x800}}, 0x5, &(0x7f0000000b80), &(0x7f0000000bc0)=0x81}, {[0xdd8, 0x28, 0x7fffffff, 0x8]}, 0xfffffff9, 0x14, &(0x7f0000000c00)=""/20}) getsockopt$IP_SET_OP_VERSION(r13, 0x1, 0x53, &(0x7f0000000cc0), &(0x7f0000000d00)=0x8) (async) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r14, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x40, 0x1, 0x7, 0x101, 0x0, 0x0, {0x3}, [@NFACCT_FLAGS={0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x800}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2a3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x90) (async, rerun: 32) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000001140)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001100)={&(0x7f0000000e80)={0x27c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x14}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaa}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xa}, @NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xa}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0xd5}]}, @NL80211_ATTR_MESH_SETUP={0x1ec, 0x70, [@NL80211_MESH_SETUP_IE={0x102, 0x3, "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"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_IE={0xc5, 0x3, "94c2600320ee84451f553c63a694dc9c66f40d53bb97ced4b0e3156d50ecf894f393fe6081d02a3682fcd727c1261ea0eb91c0c2bb38017b22b119e7ee2ecb1f17a1d64cb76fef574cb21c9b4104c2038e4cb82b4e08df9091d2ad33b3619ad1d157d66a2b7521da1fbb399549584cb844452274998953996ca0dd993060ca0d3b5c079fad05038e14e1df814c01011b5748822f417d2cfae1211cc10945394e2aba4e5f36eb6e82bf028a5e50500f09956fabff1d83b5af15457bf28d6c472ccf"}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x16, 0x24, [{0x30}, {0x9, 0x1}, {0x24, 0x1}, {0x5, 0x1}, {0x60, 0x1}, {0x3, 0x1}, {0x16}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x48, 0x1}, {0x4, 0x1}, {0xfbf98154f554236, 0x1}, {0x32}, {0x18, 0x1}, {0xb}, {0x60, 0x1}, {0x4}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x20000041}, 0x40) (async, rerun: 32) r15 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r10) (rerun: 64) sendmsg$NL80211_CMD_FRAME(r15, &(0x7f0000001540)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001500)={&(0x7f0000001200)={0x2f0, r16, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9a6}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @NL80211_ATTR_FRAME={0x29d, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x1}, @broadcast, @broadcast, @random="204f2ead6478", {0x6, 0x33}}, 0x6014, 0x40, @random=0x101, @val={0x1, 0x5, [{0x1b}, {0x16}, {0x3, 0x1}, {0xc, 0x1}, {0x24, 0x1}]}, @val={0x2d, 0x1a, {0x80, 0x3, 0x1, 0x0, {0x48000, 0x6, 0x0, 0xd6, 0x0, 0x1}, 0x0, 0x2, 0x2}}, [{0xdd, 0xc0, "2fdf50652c1e1a9aa9cbf9b52ff0d093088783a638e72bee03de955ce2f493890e9d07379f308960b60054657e5d37222ba27099c76ee4834fe0b2af49e33595c3e3a650a5613deb987624c69ede93c4e398aca43c1a573b6b738d6fa74f085e87b3ba4300d530588a09cc1adf3f0a86ff98ba018b1df75e230ca3446f3ccfb137c1f82513f23426ad12416693b2a74610443b04ac41a4850e12dc266c4ab8e175e74c9ca361b1cc04819b1a1ab0179fee37078931826a888eb0de0bbd36fd85"}, {0xdd, 0x15, "a56c91280ee3cfb86fcc7c95991611171f2238388f"}, {0xdd, 0x82, "d4950ee24b50dad6373241497979447e8414bde0c32154b9a5e53e2dfcea6bf390774d78b5eea342d6d0b1e63992cde6c7c9f9d586a5c370305d2ba616741e72813540e8a40342e66768a8e62813fbf0efa5ca76156aa4be75eb611384ecab0f853ed424d5339ca206daa4509483905d196888ca92b6e793986f5ee9ec24435fda48"}, {0xdd, 0x12, "e853e5254d6b1cab72780572f99beffb66a1"}, {0xdd, 0xe5, "4b46b5b9621be2263288985572ed58028436e1947a5352dae11c597e6c7d82d61017facfe1c6e51927f9b502f8e1f7df9cb78d61cdf9695d8d011902c516fa011cbb247dae571d5958ba61839b69b662a44897e61241cb6f65b687f91b7c9825e536925031477e7fe904170176265bd2388695acbbd5f795960735431ee8d2be36308b2f8a8eec6d89fcad45d89d06f717f54bc48d413ec7e943965997dc4eead8abe4bfce1941cf09028ef0dea50af0e6bb00c081467aa38823374edea8bb6b0439a15fce3b5a95a6f63db9c0d368363990985b11d17f812566477ae4bba7a0a895122505"}]}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x395}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]]}, 0x2f0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 16] detailed listing: executing program 4: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x2, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x100) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0xe2cf}]}}]}, 0x3c}}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008011) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_DELTABLE={0xff4e, 0x2, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x48, 0xe, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x90}}, 0x8020) executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x4, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) (async) r6 = socket(0x840000000002, 0x3, 0x102) getsockopt$inet_pktinfo(r6, 0x0, 0x34, 0x0, &(0x7f0000000100)=0x2) (async) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 32) write(r3, &(0x7f0000000080)="05000000010001", 0x7) (async, rerun: 32) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req={0x4, 0x6, 0x224, 0x1}, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) program crashed: KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings bisect: the chunk can be dropped bisect: split chunks (needed=true): <2> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$cgroup_ro-mmap-socket$inet6_tcp-getsockopt$inet6_buf-socket$packet-setsockopt$packet_int-syz_init_net_socket$bt_hci-socket$nl_generic-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_SET_CQM-socket-getsockopt$inet_pktinfo-bind$bt_hci-write-setsockopt$packet_rx_ring-syz_genetlink_get_family_id$mptcp detailed listing: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x4, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) (async) r6 = socket(0x840000000002, 0x3, 0x102) getsockopt$inet_pktinfo(r6, 0x0, 0x34, 0x0, &(0x7f0000000100)=0x2) (async) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 32) write(r3, &(0x7f0000000080)="05000000010001", 0x7) (async, rerun: 32) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req={0x4, 0x6, 0x224, 0x1}, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$netlink-socket$kcm-sendmsg$inet-sendmsg$RDMA_NLDEV_CMD_NEWLINK-syz_genetlink_get_family_id$devlink-openat$tun-ioctl$TUNSETIFF-socket-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-ioctl$sock_FIOGETOWN-sendmsg$DEVLINK_CMD_RELOAD-socket$nl_netfilter-sendmsg$NFT_BATCH detailed listing: executing program 4: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x2, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x100) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0xe2cf}]}}]}, 0x3c}}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008011) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_DELTABLE={0xff4e, 0x2, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x48, 0xe, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x90}}, 0x8020) program crashed: KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings bisect: the chunk can be dropped bisect: split chunks (needed=true): <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 1 programs left: executing program 4: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x2, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x100) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0xe2cf}]}}]}, 0x3c}}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008011) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_DELTABLE={0xff4e, 0x2, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x48, 0xe, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x90}}, 0x8020) bisect: trying to concatenate bisect: concatenate 1 entries testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$netlink-socket$kcm-sendmsg$inet-sendmsg$RDMA_NLDEV_CMD_NEWLINK-syz_genetlink_get_family_id$devlink-openat$tun-ioctl$TUNSETIFF-socket-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-ioctl$sock_FIOGETOWN-sendmsg$DEVLINK_CMD_RELOAD-socket$nl_netfilter-sendmsg$NFT_BATCH detailed listing: executing program 0: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x2, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x100) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0xe2cf}]}}]}, 0x3c}}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008011) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_DELTABLE={0xff4e, 0x2, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x48, 0xe, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x90}}, 0x8020) program crashed: KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings bisect: concatenation succeeded found reproducer with 16 syscalls minimizing guilty program testing program (duration=6m31.608998606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$netlink-socket$kcm-sendmsg$inet-sendmsg$RDMA_NLDEV_CMD_NEWLINK-syz_genetlink_get_family_id$devlink-openat$tun-ioctl$TUNSETIFF-socket-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-ioctl$sock_FIOGETOWN-sendmsg$DEVLINK_CMD_RELOAD-socket$nl_netfilter detailed listing: executing program 0: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x2, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x100) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0xe2cf}]}}]}, 0x3c}}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008011) socket$nl_netfilter(0x10, 0x3, 0xc) program crashed: KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings testing program (duration=6m31.608998606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$netlink-socket$kcm-sendmsg$inet-sendmsg$RDMA_NLDEV_CMD_NEWLINK-syz_genetlink_get_family_id$devlink-openat$tun-ioctl$TUNSETIFF-socket-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-ioctl$sock_FIOGETOWN-sendmsg$DEVLINK_CMD_RELOAD detailed listing: executing program 0: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x2, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x100) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0xe2cf}]}}]}, 0x3c}}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008011) program crashed: KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings testing program (duration=6m31.608998606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$netlink-socket$kcm-sendmsg$inet-sendmsg$RDMA_NLDEV_CMD_NEWLINK-syz_genetlink_get_family_id$devlink-openat$tun-ioctl$TUNSETIFF-socket-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-ioctl$sock_FIOGETOWN detailed listing: executing program 0: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x2, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x100) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0xe2cf}]}}]}, 0x3c}}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) program did not crash testing program (duration=6m31.608998606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$netlink-socket$kcm-sendmsg$inet-sendmsg$RDMA_NLDEV_CMD_NEWLINK-syz_genetlink_get_family_id$devlink-openat$tun-ioctl$TUNSETIFF-socket-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-sendmsg$DEVLINK_CMD_RELOAD detailed listing: executing program 0: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x2, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x100) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0xe2cf}]}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008011) program crashed: KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings testing program (duration=6m31.608998606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$netlink-socket$kcm-sendmsg$inet-sendmsg$RDMA_NLDEV_CMD_NEWLINK-syz_genetlink_get_family_id$devlink-openat$tun-ioctl$TUNSETIFF-socket-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$DEVLINK_CMD_RELOAD detailed listing: executing program 0: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x2, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x100) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008011) program crashed: KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings testing program (duration=6m31.608998606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$netlink-socket$kcm-sendmsg$inet-sendmsg$RDMA_NLDEV_CMD_NEWLINK-syz_genetlink_get_family_id$devlink-openat$tun-ioctl$TUNSETIFF-socket-ioctl$sock_SIOCGIFINDEX-sendmsg$DEVLINK_CMD_RELOAD detailed listing: executing program 0: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x2, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x100) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008011) program crashed: KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings testing program (duration=6m31.608998606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$netlink-socket$kcm-sendmsg$inet-sendmsg$RDMA_NLDEV_CMD_NEWLINK-syz_genetlink_get_family_id$devlink-openat$tun-ioctl$TUNSETIFF-socket-sendmsg$DEVLINK_CMD_RELOAD detailed listing: executing program 0: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x2, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x100) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008011) program crashed: KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings testing program (duration=6m31.608998606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$netlink-socket$kcm-sendmsg$inet-sendmsg$RDMA_NLDEV_CMD_NEWLINK-syz_genetlink_get_family_id$devlink-openat$tun-ioctl$TUNSETIFF-sendmsg$DEVLINK_CMD_RELOAD detailed listing: executing program 0: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x2, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x100) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008011) program crashed: KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings testing program (duration=6m31.608998606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$netlink-socket$kcm-sendmsg$inet-sendmsg$RDMA_NLDEV_CMD_NEWLINK-syz_genetlink_get_family_id$devlink-openat$tun-sendmsg$DEVLINK_CMD_RELOAD detailed listing: executing program 0: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x2, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x100) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008011) program crashed: KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings testing program (duration=6m31.608998606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$netlink-socket$kcm-sendmsg$inet-sendmsg$RDMA_NLDEV_CMD_NEWLINK-syz_genetlink_get_family_id$devlink-sendmsg$DEVLINK_CMD_RELOAD detailed listing: executing program 0: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x2, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x100) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008011) program crashed: KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings testing program (duration=6m31.608998606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$netlink-socket$kcm-sendmsg$inet-sendmsg$RDMA_NLDEV_CMD_NEWLINK-sendmsg$DEVLINK_CMD_RELOAD detailed listing: executing program 0: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x2, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x100) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008011) program crashed: KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings testing program (duration=6m31.608998606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$netlink-socket$kcm-sendmsg$inet-sendmsg$DEVLINK_CMD_RELOAD detailed listing: executing program 0: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008011) program did not crash testing program (duration=6m31.608998606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$netlink-socket$kcm-sendmsg$RDMA_NLDEV_CMD_NEWLINK-sendmsg$DEVLINK_CMD_RELOAD detailed listing: executing program 0: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) socket$kcm(0x10, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x2, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x100) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008011) program crashed: KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings testing program (duration=6m31.608998606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$netlink-sendmsg$RDMA_NLDEV_CMD_NEWLINK-sendmsg$DEVLINK_CMD_RELOAD detailed listing: executing program 0: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x2, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x100) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008011) program crashed: KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings testing program (duration=6m31.608998606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-sendmsg$RDMA_NLDEV_CMD_NEWLINK-sendmsg$DEVLINK_CMD_RELOAD detailed listing: executing program 0: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x2, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x100) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008011) program did not crash testing program (duration=6m31.608998606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$RDMA_NLDEV_CMD_NEWLINK-sendmsg$DEVLINK_CMD_RELOAD detailed listing: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x2, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x100) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008011) program crashed: KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings testing program (duration=6m31.608998606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$RDMA_NLDEV_CMD_NEWLINK-sendmsg$DEVLINK_CMD_RELOAD detailed listing: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, 0x0, 0x100) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008011) program did not crash testing program (duration=6m31.608998606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$RDMA_NLDEV_CMD_NEWLINK-sendmsg$DEVLINK_CMD_RELOAD detailed listing: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x100) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008011) program did not crash testing program (duration=6m31.608998606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$RDMA_NLDEV_CMD_NEWLINK-sendmsg$DEVLINK_CMD_RELOAD detailed listing: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x100) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008011) program did not crash testing program (duration=6m31.608998606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$RDMA_NLDEV_CMD_NEWLINK-sendmsg$DEVLINK_CMD_RELOAD detailed listing: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x2, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x100) sendmsg$DEVLINK_CMD_RELOAD(r0, 0x0, 0x4008011) program crashed: KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings extracting C reproducer testing compiled C program (duration=6m31.608998606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$RDMA_NLDEV_CMD_NEWLINK-sendmsg$DEVLINK_CMD_RELOAD program crashed: no output from test machine a never seen crash title: no output from test machine, ignore simplifying guilty program options testing program (duration=6m31.608998606s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$RDMA_NLDEV_CMD_NEWLINK-sendmsg$DEVLINK_CMD_RELOAD detailed listing: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x2, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x100) sendmsg$DEVLINK_CMD_RELOAD(r0, 0x0, 0x4008011) program crashed: KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings extracting C reproducer testing compiled C program (duration=6m31.608998606s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$RDMA_NLDEV_CMD_NEWLINK-sendmsg$DEVLINK_CMD_RELOAD program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing program (duration=6m31.608998606s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$RDMA_NLDEV_CMD_NEWLINK-sendmsg$DEVLINK_CMD_RELOAD detailed listing: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x2, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x100) sendmsg$DEVLINK_CMD_RELOAD(r0, 0x0, 0x4008011) program did not crash testing program (duration=6m31.608998606s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$RDMA_NLDEV_CMD_NEWLINK-sendmsg$DEVLINK_CMD_RELOAD detailed listing: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x2, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x100) sendmsg$DEVLINK_CMD_RELOAD(r0, 0x0, 0x4008011) program crashed: KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings validation run: crashed=true testing program (duration=6m31.608998606s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$RDMA_NLDEV_CMD_NEWLINK-sendmsg$DEVLINK_CMD_RELOAD detailed listing: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x2, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x100) sendmsg$DEVLINK_CMD_RELOAD(r0, 0x0, 0x4008011) program crashed: KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings validation run: crashed=true testing program (duration=6m31.608998606s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$RDMA_NLDEV_CMD_NEWLINK-sendmsg$DEVLINK_CMD_RELOAD detailed listing: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x2, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x100) sendmsg$DEVLINK_CMD_RELOAD(r0, 0x0, 0x4008011) program crashed: KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings validation run: crashed=true reproducing took 3h39m1.711497747s repro crashed as (corrupted=false): ================================================================== BUG: KASAN: slab-use-after-free in netdev_need_ops_lock include/net/netdev_lock.h:30 [inline] BUG: KASAN: slab-use-after-free in netdev_lock_ops include/net/netdev_lock.h:41 [inline] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x230/0x250 net/ethtool/ioctl.c:463 Read of size 1 at addr ffff88807b8bce09 by task kworker/0:3/5357 CPU: 0 UID: 0 PID: 5357 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 Workqueue: events smc_ib_port_event_work Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 print_address_description+0x55/0x1e0 mm/kasan/report.c:378 print_report+0x58/0x70 mm/kasan/report.c:482 kasan_report+0x117/0x150 mm/kasan/report.c:595 netdev_need_ops_lock include/net/netdev_lock.h:30 [inline] netdev_lock_ops include/net/netdev_lock.h:41 [inline] __ethtool_get_link_ksettings+0x230/0x250 net/ethtool/ioctl.c:463 __ethtool_get_link_ksettings+0x11f/0x250 net/ethtool/ioctl.c:464 ib_get_eth_speed+0x180/0x7f0 drivers/infiniband/core/verbs.c:2052 rxe_query_port+0x93/0x3d0 drivers/infiniband/sw/rxe/rxe_verbs.c:56 __ib_query_port drivers/infiniband/core/device.c:2129 [inline] ib_query_port+0x16e/0x830 drivers/infiniband/core/device.c:2161 smc_ib_remember_port_attr net/smc/smc_ib.c:364 [inline] smc_ib_port_event_work+0x147/0x920 net/smc/smc_ib.c:388 process_one_work kernel/workqueue.c:3322 [inline] process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Allocated by task 8994: kasan_save_stack mm/kasan/common.c:57 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:78 poison_kmalloc_redzone mm/kasan/common.c:398 [inline] __kasan_kmalloc+0x93/0xb0 mm/kasan/common.c:415 kasan_kmalloc include/linux/kasan.h:263 [inline] __do_kmalloc_node mm/slub.c:5362 [inline] __kvmalloc_node_noprof+0x53f/0x860 mm/slub.c:6933 alloc_netdev_mqs+0xa9/0x12b0 net/core/dev.c:12054 rtnl_create_link+0x321/0xd70 net/core/rtnetlink.c:3721 rtnl_newlink_create+0x25f/0xb00 net/core/rtnetlink.c:3903 __rtnl_newlink net/core/rtnetlink.c:4044 [inline] rtnl_newlink+0x167f/0x1bd0 net/core/rtnetlink.c:4159 rtnetlink_rcv_msg+0x802/0xc00 net/core/rtnetlink.c:7076 netlink_rcv_skb+0x226/0x4a0 net/netlink/af_netlink.c:2556 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x7bb/0x940 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1900 sock_sendmsg_nosec+0x13a/0x180 net/socket.c:775 __sock_sendmsg net/socket.c:790 [inline] __sys_sendto+0x408/0x5a0 net/socket.c:2252 __do_sys_sendto net/socket.c:2259 [inline] __se_sys_sendto net/socket.c:2255 [inline] __x64_sys_sendto+0xde/0x100 net/socket.c:2255 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Freed by task 1128: kasan_save_stack mm/kasan/common.c:57 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:78 kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:584 poison_slab_object mm/kasan/common.c:253 [inline] __kasan_slab_free+0x5c/0x80 mm/kasan/common.c:285 kasan_slab_free include/linux/kasan.h:235 [inline] slab_free_hook mm/slub.c:2705 [inline] slab_free mm/slub.c:6405 [inline] kfree+0x1c5/0x640 mm/slub.c:6720 device_release+0xc4/0x1f0 drivers/base/core.c:-1 kobject_cleanup lib/kobject.c:689 [inline] kobject_release lib/kobject.c:720 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x222/0x550 lib/kobject.c:737 netdev_run_todo+0xf56/0x10d0 net/core/dev.c:11755 default_device_exit_batch+0x966/0x9e0 net/core/dev.c:13100 ops_exit_list net/core/net_namespace.c:205 [inline] ops_undo_list+0x4b4/0x8d0 net/core/net_namespace.c:252 cleanup_net+0x572/0x810 net/core/net_namespace.c:702 process_one_work kernel/workqueue.c:3322 [inline] process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 The buggy address belongs to the object at ffff88807b8bc000 which belongs to the cache kmalloc-cg-4k of size 4096 The buggy address is located 3593 bytes inside of freed 4096-byte region [ffff88807b8bc000, ffff88807b8bd000) The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807b8b8000 pfn:0x7b8b8 head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 memcg:ffff88807b8b9011 flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) page_type: f5(slab) raw: 00fff00000000240 ffff88801b01c500 ffffea0001632410 ffffea0001fb1410 raw: ffff88807b8b8000 0000200000040003 00000000f5000000 ffff88807b8b9011 head: 00fff00000000240 ffff88801b01c500 ffffea0001632410 ffffea0001fb1410 head: ffff88807b8b8000 0000200000040003 00000000f5000000 ffff88807b8b9011 head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5783, tgid 5783 (syz-executor), ts 140318214234, free_ts 139030114105 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x1f9/0x250 mm/page_alloc.c:1859 prep_new_page mm/page_alloc.c:1867 [inline] get_page_from_freelist+0x21fa/0x2270 mm/page_alloc.c:3946 __alloc_frozen_pages_noprof+0x18d/0x380 mm/page_alloc.c:5304 alloc_slab_page mm/slub.c:3294 [inline] allocate_slab+0x79/0x5e0 mm/slub.c:3408 new_slab mm/slub.c:3454 [inline] refill_objects+0x2d5/0x350 mm/slub.c:7338 refill_sheaf mm/slub.c:2832 [inline] __pcs_replace_empty_main+0x2bf/0x6b0 mm/slub.c:4703 alloc_from_pcs mm/slub.c:4801 [inline] slab_alloc_node mm/slub.c:4933 [inline] __do_kmalloc_node mm/slub.c:5361 [inline] __kvmalloc_node_noprof+0x66b/0x860 mm/slub.c:6933 alloc_netdev_mqs+0xa9/0x12b0 net/core/dev.c:12054 vti6_init_net+0x104/0x3b0 net/ipv6/ip6_vti.c:1160 ops_init+0x35d/0x5d0 net/core/net_namespace.c:137 setup_net+0x118/0x350 net/core/net_namespace.c:446 copy_net_ns+0x4f9/0x720 net/core/net_namespace.c:579 create_new_namespaces+0x3f0/0x6b0 kernel/nsproxy.c:132 unshare_nsproxy_namespaces+0x149/0x190 kernel/nsproxy.c:234 ksys_unshare+0x57d/0xa00 kernel/fork.c:3269 __do_sys_unshare kernel/fork.c:3343 [inline] __se_sys_unshare kernel/fork.c:3341 [inline] __x64_sys_unshare+0x38/0x50 kernel/fork.c:3341 page last free pid 5779 tgid 5779 stack trace: reset_page_owner include/linux/page_owner.h:25 [inline] __free_pages_prepare mm/page_alloc.c:1406 [inline] __free_frozen_pages+0xc1e/0xd10 mm/page_alloc.c:2950 __slab_free+0x274/0x2c0 mm/slub.c:5767 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:350 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4612 [inline] slab_alloc_node mm/slub.c:4945 [inline] kmem_cache_alloc_noprof+0x2a0/0x5f0 mm/slub.c:4959 vm_area_dup+0x28/0x670 mm/vma_init.c:123 dup_mmap+0x8a2/0x1d90 mm/mmap.c:1786 dup_mm kernel/fork.c:1543 [inline] copy_mm+0x11a/0x480 kernel/fork.c:1595 copy_process+0x1e3e/0x4390 kernel/fork.c:2289 kernel_clone+0x2d7/0x940 kernel/fork.c:2748 __do_sys_clone kernel/fork.c:2889 [inline] __se_sys_clone kernel/fork.c:2873 [inline] __x64_sys_clone+0x1b6/0x230 kernel/fork.c:2873 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Memory state around the buggy address: ffff88807b8bcd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff88807b8bcd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb >ffff88807b8bce00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff88807b8bce80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff88807b8bcf00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ================================================================== final repro crashed as (corrupted=false): ================================================================== BUG: KASAN: slab-use-after-free in netdev_need_ops_lock include/net/netdev_lock.h:30 [inline] BUG: KASAN: slab-use-after-free in netdev_lock_ops include/net/netdev_lock.h:41 [inline] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x230/0x250 net/ethtool/ioctl.c:463 Read of size 1 at addr ffff88807b8bce09 by task kworker/0:3/5357 CPU: 0 UID: 0 PID: 5357 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 Workqueue: events smc_ib_port_event_work Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 print_address_description+0x55/0x1e0 mm/kasan/report.c:378 print_report+0x58/0x70 mm/kasan/report.c:482 kasan_report+0x117/0x150 mm/kasan/report.c:595 netdev_need_ops_lock include/net/netdev_lock.h:30 [inline] netdev_lock_ops include/net/netdev_lock.h:41 [inline] __ethtool_get_link_ksettings+0x230/0x250 net/ethtool/ioctl.c:463 __ethtool_get_link_ksettings+0x11f/0x250 net/ethtool/ioctl.c:464 ib_get_eth_speed+0x180/0x7f0 drivers/infiniband/core/verbs.c:2052 rxe_query_port+0x93/0x3d0 drivers/infiniband/sw/rxe/rxe_verbs.c:56 __ib_query_port drivers/infiniband/core/device.c:2129 [inline] ib_query_port+0x16e/0x830 drivers/infiniband/core/device.c:2161 smc_ib_remember_port_attr net/smc/smc_ib.c:364 [inline] smc_ib_port_event_work+0x147/0x920 net/smc/smc_ib.c:388 process_one_work kernel/workqueue.c:3322 [inline] process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Allocated by task 8994: kasan_save_stack mm/kasan/common.c:57 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:78 poison_kmalloc_redzone mm/kasan/common.c:398 [inline] __kasan_kmalloc+0x93/0xb0 mm/kasan/common.c:415 kasan_kmalloc include/linux/kasan.h:263 [inline] __do_kmalloc_node mm/slub.c:5362 [inline] __kvmalloc_node_noprof+0x53f/0x860 mm/slub.c:6933 alloc_netdev_mqs+0xa9/0x12b0 net/core/dev.c:12054 rtnl_create_link+0x321/0xd70 net/core/rtnetlink.c:3721 rtnl_newlink_create+0x25f/0xb00 net/core/rtnetlink.c:3903 __rtnl_newlink net/core/rtnetlink.c:4044 [inline] rtnl_newlink+0x167f/0x1bd0 net/core/rtnetlink.c:4159 rtnetlink_rcv_msg+0x802/0xc00 net/core/rtnetlink.c:7076 netlink_rcv_skb+0x226/0x4a0 net/netlink/af_netlink.c:2556 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x7bb/0x940 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1900 sock_sendmsg_nosec+0x13a/0x180 net/socket.c:775 __sock_sendmsg net/socket.c:790 [inline] __sys_sendto+0x408/0x5a0 net/socket.c:2252 __do_sys_sendto net/socket.c:2259 [inline] __se_sys_sendto net/socket.c:2255 [inline] __x64_sys_sendto+0xde/0x100 net/socket.c:2255 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Freed by task 1128: kasan_save_stack mm/kasan/common.c:57 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:78 kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:584 poison_slab_object mm/kasan/common.c:253 [inline] __kasan_slab_free+0x5c/0x80 mm/kasan/common.c:285 kasan_slab_free include/linux/kasan.h:235 [inline] slab_free_hook mm/slub.c:2705 [inline] slab_free mm/slub.c:6405 [inline] kfree+0x1c5/0x640 mm/slub.c:6720 device_release+0xc4/0x1f0 drivers/base/core.c:-1 kobject_cleanup lib/kobject.c:689 [inline] kobject_release lib/kobject.c:720 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x222/0x550 lib/kobject.c:737 netdev_run_todo+0xf56/0x10d0 net/core/dev.c:11755 default_device_exit_batch+0x966/0x9e0 net/core/dev.c:13100 ops_exit_list net/core/net_namespace.c:205 [inline] ops_undo_list+0x4b4/0x8d0 net/core/net_namespace.c:252 cleanup_net+0x572/0x810 net/core/net_namespace.c:702 process_one_work kernel/workqueue.c:3322 [inline] process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 The buggy address belongs to the object at ffff88807b8bc000 which belongs to the cache kmalloc-cg-4k of size 4096 The buggy address is located 3593 bytes inside of freed 4096-byte region [ffff88807b8bc000, ffff88807b8bd000) The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807b8b8000 pfn:0x7b8b8 head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 memcg:ffff88807b8b9011 flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) page_type: f5(slab) raw: 00fff00000000240 ffff88801b01c500 ffffea0001632410 ffffea0001fb1410 raw: ffff88807b8b8000 0000200000040003 00000000f5000000 ffff88807b8b9011 head: 00fff00000000240 ffff88801b01c500 ffffea0001632410 ffffea0001fb1410 head: ffff88807b8b8000 0000200000040003 00000000f5000000 ffff88807b8b9011 head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5783, tgid 5783 (syz-executor), ts 140318214234, free_ts 139030114105 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x1f9/0x250 mm/page_alloc.c:1859 prep_new_page mm/page_alloc.c:1867 [inline] get_page_from_freelist+0x21fa/0x2270 mm/page_alloc.c:3946 __alloc_frozen_pages_noprof+0x18d/0x380 mm/page_alloc.c:5304 alloc_slab_page mm/slub.c:3294 [inline] allocate_slab+0x79/0x5e0 mm/slub.c:3408 new_slab mm/slub.c:3454 [inline] refill_objects+0x2d5/0x350 mm/slub.c:7338 refill_sheaf mm/slub.c:2832 [inline] __pcs_replace_empty_main+0x2bf/0x6b0 mm/slub.c:4703 alloc_from_pcs mm/slub.c:4801 [inline] slab_alloc_node mm/slub.c:4933 [inline] __do_kmalloc_node mm/slub.c:5361 [inline] __kvmalloc_node_noprof+0x66b/0x860 mm/slub.c:6933 alloc_netdev_mqs+0xa9/0x12b0 net/core/dev.c:12054 vti6_init_net+0x104/0x3b0 net/ipv6/ip6_vti.c:1160 ops_init+0x35d/0x5d0 net/core/net_namespace.c:137 setup_net+0x118/0x350 net/core/net_namespace.c:446 copy_net_ns+0x4f9/0x720 net/core/net_namespace.c:579 create_new_namespaces+0x3f0/0x6b0 kernel/nsproxy.c:132 unshare_nsproxy_namespaces+0x149/0x190 kernel/nsproxy.c:234 ksys_unshare+0x57d/0xa00 kernel/fork.c:3269 __do_sys_unshare kernel/fork.c:3343 [inline] __se_sys_unshare kernel/fork.c:3341 [inline] __x64_sys_unshare+0x38/0x50 kernel/fork.c:3341 page last free pid 5779 tgid 5779 stack trace: reset_page_owner include/linux/page_owner.h:25 [inline] __free_pages_prepare mm/page_alloc.c:1406 [inline] __free_frozen_pages+0xc1e/0xd10 mm/page_alloc.c:2950 __slab_free+0x274/0x2c0 mm/slub.c:5767 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:350 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4612 [inline] slab_alloc_node mm/slub.c:4945 [inline] kmem_cache_alloc_noprof+0x2a0/0x5f0 mm/slub.c:4959 vm_area_dup+0x28/0x670 mm/vma_init.c:123 dup_mmap+0x8a2/0x1d90 mm/mmap.c:1786 dup_mm kernel/fork.c:1543 [inline] copy_mm+0x11a/0x480 kernel/fork.c:1595 copy_process+0x1e3e/0x4390 kernel/fork.c:2289 kernel_clone+0x2d7/0x940 kernel/fork.c:2748 __do_sys_clone kernel/fork.c:2889 [inline] __se_sys_clone kernel/fork.c:2873 [inline] __x64_sys_clone+0x1b6/0x230 kernel/fork.c:2873 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Memory state around the buggy address: ffff88807b8bcd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff88807b8bcd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb >ffff88807b8bce00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff88807b8bce80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff88807b8bcf00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ==================================================================