Extracting prog: 39m38.683440691s Minimizing prog: 46m20.646534404s Simplifying prog options: 0s Extracting C: 1m34.112435359s Simplifying C: 30m25.75206387s 30 programs, timeouts [15s 1m40s 6m0s] extracting reproducer from 30 programs single: executing 5 programs separately with timeout 15s testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$ethtool-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$ETHTOOL_MSG_LINKINFO_SET detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100e8ffffff00000000250000002000018008000100", @ANYRES32=r2, @ANYBLOB="14000200776731"], 0x34}}, 0x0) program did not crash testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-bpf$BPF_BTF_LOAD-ioctl$BTRFS_IOC_SET_FEATURES-socket-socket$packet-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-syz_init_net_socket$nl_generic-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$netlbl_mgmt-sendmsg$NLBL_MGMT_C_ADDDEF-ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL-socket$packet-socket$packet-setsockopt$packet_int-openat$cgroup_root-write$cgroup_subtree-socket$nl_netfilter-socket$netlink-writev detailed listing: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206050000000000000000020000000005000400000000000900020000000500010007000000050005000a0000000c0007686173683a69702c6d61726b00000000efaf871881dc6abf8e"], 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x1, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000001c0)={0x2, 0x0, 0x4}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delqdisc={0x1f0, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd}, {0xe, 0xffe0}, {0x7, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa534}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x4, 0x7, 0x3f, 0x100, 0x6, 0x5, 0x3}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa2, 0x40, 0x1b4a, 0x7, 0x1, 0x6, 0x8, 0xa}}, {0x18, 0x2, [0x9, 0x1f, 0xe164, 0x200, 0x800, 0xf73, 0x6, 0xb46b, 0x7, 0x5]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x138, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1f}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xff, 0x7, 0x1e, 0x1a, 0x12, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x7}}]}}]}, 0x1f0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', r4, 0x0, 0x80, 0x1, 0x9, {{0x2a, 0x4, 0x0, 0x6, 0xa8, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0xd3, 0x0, 0x3, [0x4, 0x8, 0x80]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "c4e1"}]}, @generic={0x94, 0x9, "8365338488a7d2"}, @ssrr={0x89, 0xb, 0xf5, [@multicast2, @local]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x6, 0xb, "6eada64be5f45755c8"}, {0x1, 0xc, "d582caaf1cb9bbce71da"}, {0x1, 0x5, "cef94f"}, {0x7, 0x3, '#'}, {0x0, 0x7, "473bd31abd"}, {0x1, 0x9, "19c0e44287abee"}, {0x1, 0x3, "cd"}]}, @timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0xf, [{@loopback, 0x8}, {@local, 0x8001}, {@broadcast, 0xfffffc00}, {@multicast2, 0xae9c}, {@remote, 0x40}]}]}}}}}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x31) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="370000001300031a680907070000000f00e9ff3f13000000170a00170000000004003700b0fa77647f6b4a6aaa58b9a6c011f6bbf40820", 0x37}], 0x1) program did not crash testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$inet6_IPV6_XFRM_POLICY-connect$inet6 detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast2, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3500, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) program did not crash testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-connect$tipc-write$binfmt_misc-setsockopt$sock_int detailed listing: executing program 0: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x2000011a) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080), 0x4) program did not crash testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-connect$inet6-write$binfmt_script-setsockopt$inet6_IPV6_ADDRFORM detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000080), 0x76e5467) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 30 programs with base timeout 15s testing program (duration=22s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 3, 4, 4, 4, 3, 4, 23, 30, 3, 4, 28, 28, 4, 4, 4, 23, 4, 4, 4, 4, 3, 4, 4, 4, 2, 4, 3, 23, 4] detailed listing: executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x7f}}], 0x18}}], 0x1, 0x8890) executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x44, r1, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}}, 0x0) executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x5, 0x5, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000b00), 0x3f, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r0, &(0x7f0000000300), 0x0}, 0x20) executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000700)=""/262, 0x106}], 0x1}, 0x5}], 0x1, 0x2, 0x0) executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000840)=0x3, 0x78bfad8e4ece0e71) sendmmsg$inet6(r0, &(0x7f0000005c80)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0xb80b) write(r0, 0x0, 0x6000) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000f1a000000000000000018160000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000ffe0f505b703000000000000850000002a000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x8}, 0x90) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206050000000000000000020000000005000400000000000900020000000500010007000000050005000a0000000c0007686173683a69702c6d61726b00000000efaf871881dc6abf8e"], 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x1, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000001c0)={0x2, 0x0, 0x4}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delqdisc={0x1f0, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd}, {0xe, 0xffe0}, {0x7, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa534}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x4, 0x7, 0x3f, 0x100, 0x6, 0x5, 0x3}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa2, 0x40, 0x1b4a, 0x7, 0x1, 0x6, 0x8, 0xa}}, {0x18, 0x2, [0x9, 0x1f, 0xe164, 0x200, 0x800, 0xf73, 0x6, 0xb46b, 0x7, 0x5]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x138, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1f}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xff, 0x7, 0x1e, 0x1a, 0x12, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x7}}]}}]}, 0x1f0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', r4, 0x0, 0x80, 0x1, 0x9, {{0x2a, 0x4, 0x0, 0x6, 0xa8, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0xd3, 0x0, 0x3, [0x4, 0x8, 0x80]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "c4e1"}]}, @generic={0x94, 0x9, "8365338488a7d2"}, @ssrr={0x89, 0xb, 0xf5, [@multicast2, @local]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x6, 0xb, "6eada64be5f45755c8"}, {0x1, 0xc, "d582caaf1cb9bbce71da"}, {0x1, 0x5, "cef94f"}, {0x7, 0x3, '#'}, {0x0, 0x7, "473bd31abd"}, {0x1, 0x9, "19c0e44287abee"}, {0x1, 0x3, "cd"}]}, @timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0xf, [{@loopback, 0x8}, {@local, 0x8001}, {@broadcast, 0xfffffc00}, {@multicast2, 0xae9c}, {@remote, 0x40}]}]}}}}}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x31) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="370000001300031a680907070000000f00e9ff3f13000000170a00170000000004003700b0fa77647f6b4a6aaa58b9a6c011f6bbf40820", 0x37}], 0x1) executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa0000000000000008"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe47}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000e69b789925bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB], 0x18}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0x10, 0x100000000002, 0x4) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba3704002cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) connect$tipc(r0, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x0, 0x2}}}, 0x10) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="1834000002000000000000000000000018190000", @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="00000000002000001b7ebdac940c3a0b24bc1e9a85da3672570777e5a10b42bb22a90185fc47ece9b47a420d11cbd6bdb375e6"], &(0x7f0000000480)='GPL\x00', 0x0, 0x90, &(0x7f0000000780)=""/144, 0x40f00, 0x41, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x23ceb, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000ac0)=[{0x1, 0x1, 0x1}], 0x10, 0x3}, 0x90) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r8, r6, 0x4, r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000001a006da900000000000000001c0000000000000000000000080004"], 0x24}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010800000000000000000a0000000900010073797a310000000028000000000a0300000000"], 0x70}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@link_local, @dev, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @local, @multicast2}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x21}, 0x20) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000140)) executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f0000000680)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0xc044) sendmmsg$inet(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="4a4b1091d520ad6fe99665f97f7d40315878c0cf55a0326945b02d63ab7be97f7a3b51362570a641d0890dcef8a9ca353cad1633ecbd239abaed680353cc2481fdc73111cb4da6874aa61bf0f7b9c34f3bb36739f465d19753bf9cced30bb4b760fb591bcae63058ef44954c9671c88282a207c8294437cebb9a58ed7c7705a6fb641960d368b41acbbc4dd2253c083da6516b12140948029eb0d0762b5a74", 0x9f}, {&(0x7f0000003c80)="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", 0x4d2}], 0x2}}], 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x24}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffff, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x4, @empty}}]}, 0x110) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000500)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000100000000000018110000", @ANYRES32, @ANYBLOB="2598ccde00000000b70800004e9d00007b8af8ff00000000bfa20000fbff000007020000f8fffffdb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0xb) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f00000000c0), 0x10) sendto$l2tp(r2, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000000)=0x3, 0x4) recvfrom$l2tp(r2, 0x0, 0x0, 0x40010001, 0x0, 0x0) recvfrom$l2tp(r2, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000002480)=[{&(0x7f00000001c0)="9718b7b35f0f5725d440a340664128463b2edd", 0x13}], 0x1, 0x0) r5 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="63dc795835b4abc3c66a6e43fea75ec65048efda024fdf35087571dc1d1b616c974a193938ab50c5a9040e493af0d8b3fd64c4b6c4e240f82c33fa04565e96627b", 0x41}], 0x1}, 0x0) setsockopt$inet_int(r5, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r5, 0x0, 0xe8, 0x0) recvfrom$l2tp(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc) close(r0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000087080000000000007b8af8ff00000000bfa20000000000000702001002ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0xff9, &(0x7f0000002300)=""/4089}, 0x90) executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000080), 0x76e5467) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206050000000000000000020000000005000400000000000900020000000500010007000000050005000a0000000c0007686173683a69702c6d61726b00000000efaf871881dc6abf8e"], 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x1, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000001c0)={0x2, 0x0, 0x4}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delqdisc={0x1f0, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd}, {0xe, 0xffe0}, {0x7, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa534}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x4, 0x7, 0x3f, 0x100, 0x6, 0x5, 0x3}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa2, 0x40, 0x1b4a, 0x7, 0x1, 0x6, 0x8, 0xa}}, {0x18, 0x2, [0x9, 0x1f, 0xe164, 0x200, 0x800, 0xf73, 0x6, 0xb46b, 0x7, 0x5]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x138, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1f}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xff, 0x7, 0x1e, 0x1a, 0x12, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x7}}]}}]}, 0x1f0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', r4, 0x0, 0x80, 0x1, 0x9, {{0x2a, 0x4, 0x0, 0x6, 0xa8, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0xd3, 0x0, 0x3, [0x4, 0x8, 0x80]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "c4e1"}]}, @generic={0x94, 0x9, "8365338488a7d2"}, @ssrr={0x89, 0xb, 0xf5, [@multicast2, @local]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x6, 0xb, "6eada64be5f45755c8"}, {0x1, 0xc, "d582caaf1cb9bbce71da"}, {0x1, 0x5, "cef94f"}, {0x7, 0x3, '#'}, {0x0, 0x7, "473bd31abd"}, {0x1, 0x9, "19c0e44287abee"}, {0x1, 0x3, "cd"}]}, @timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0xf, [{@loopback, 0x8}, {@local, 0x8001}, {@broadcast, 0xfffffc00}, {@multicast2, 0xae9c}, {@remote, 0x40}]}]}}}}}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x31) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="370000001300031a680907070000000f00e9ff3f13000000170a00170000000004003700b0fa77647f6b4a6aaa58b9a6c011f6bbf40820", 0x37}], 0x1) executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast2}, @address_reply={0x12, 0x0, 0x0, 0x1000}}}}}, 0x0) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0xc0, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x90, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x80, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0x2}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xa54, 0x18}}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x58, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x6a}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x95ee}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xb22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0x24, 0x1, {0xae81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xc0}, 0x1, 0xba01}, 0x810) executing program 1: write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000010000000080007000000000018000180140002006e657464657673696d300000000000000800060000000000080008"], 0x44}}, 0x0) executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@ifindex, 0xffffffffffffffff, 0x0, 0x1}, 0x20) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63", 0xa}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @empty, 'wlan0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)="a29d", 0x2}], 0x1}}], 0x1, 0x881) executing program 1: syz_emit_ethernet(0x1de, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a601a80000fc020000000000000000000000000000fe8000000000000000000000000000aa22340502c9a4319fa14172170a013589317d2af31ba554"], 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xd9}}}}}}}, 0x0) executing program 0: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x2000011a) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080), 0x4) executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @local, 0x800000}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@hoplimit={{0x0, 0x29, 0x34, 0x2}}], 0x30}}], 0x2, 0x0) executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}}, 0x0) executing program 4: r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast2, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3500, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206050000000000000000020000000005000400000000000900020000000500010007000000050005000a0000000c0007686173683a69702c6d61726b00000000efaf871881dc6abf8e"], 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x1, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000001c0)={0x2, 0x0, 0x4}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delqdisc={0x1f0, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd}, {0xe, 0xffe0}, {0x7, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa534}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x4, 0x7, 0x3f, 0x100, 0x6, 0x5, 0x3}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa2, 0x40, 0x1b4a, 0x7, 0x1, 0x6, 0x8, 0xa}}, {0x18, 0x2, [0x9, 0x1f, 0xe164, 0x200, 0x800, 0xf73, 0x6, 0xb46b, 0x7, 0x5]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x138, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1f}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xff, 0x7, 0x1e, 0x1a, 0x12, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x7}}]}}]}, 0x1f0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', r4, 0x0, 0x80, 0x1, 0x9, {{0x2a, 0x4, 0x0, 0x6, 0xa8, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0xd3, 0x0, 0x3, [0x4, 0x8, 0x80]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "c4e1"}]}, @generic={0x94, 0x9, "8365338488a7d2"}, @ssrr={0x89, 0xb, 0xf5, [@multicast2, @local]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x6, 0xb, "6eada64be5f45755c8"}, {0x1, 0xc, "d582caaf1cb9bbce71da"}, {0x1, 0x5, "cef94f"}, {0x7, 0x3, '#'}, {0x0, 0x7, "473bd31abd"}, {0x1, 0x9, "19c0e44287abee"}, {0x1, 0x3, "cd"}]}, @timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0xf, [{@loopback, 0x8}, {@local, 0x8001}, {@broadcast, 0xfffffc00}, {@multicast2, 0xae9c}, {@remote, 0x40}]}]}}}}}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x31) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="370000001300031a680907070000000f00e9ff3f13000000170a00170000000004003700b0fa77647f6b4a6aaa58b9a6c011f6bbf40820", 0x37}], 0x1) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100e8ffffff00000000250000002000018008000100", @ANYRES32=r2, @ANYBLOB="14000200776731"], 0x34}}, 0x0) program crashed: WARNING in ethnl_req_get_phydev bisect: bisecting 30 programs bisect: split chunks (needed=false): <30> bisect: split chunk #0 of len 30 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=20s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 28, 28, 4, 4, 4, 23, 4, 4, 4, 4, 3, 4, 4, 4, 2, 4, 3, 23, 4] detailed listing: executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x21}, 0x20) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000140)) executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f0000000680)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0xc044) sendmmsg$inet(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="4a4b1091d520ad6fe99665f97f7d40315878c0cf55a0326945b02d63ab7be97f7a3b51362570a641d0890dcef8a9ca353cad1633ecbd239abaed680353cc2481fdc73111cb4da6874aa61bf0f7b9c34f3bb36739f465d19753bf9cced30bb4b760fb591bcae63058ef44954c9671c88282a207c8294437cebb9a58ed7c7705a6fb641960d368b41acbbc4dd2253c083da6516b12140948029eb0d0762b5a74", 0x9f}, {&(0x7f0000003c80)="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", 0x4d2}], 0x2}}], 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x24}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffff, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x4, @empty}}]}, 0x110) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000500)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000100000000000018110000", @ANYRES32, @ANYBLOB="2598ccde00000000b70800004e9d00007b8af8ff00000000bfa20000fbff000007020000f8fffffdb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0xb) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f00000000c0), 0x10) sendto$l2tp(r2, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000000)=0x3, 0x4) recvfrom$l2tp(r2, 0x0, 0x0, 0x40010001, 0x0, 0x0) recvfrom$l2tp(r2, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000002480)=[{&(0x7f00000001c0)="9718b7b35f0f5725d440a340664128463b2edd", 0x13}], 0x1, 0x0) r5 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="63dc795835b4abc3c66a6e43fea75ec65048efda024fdf35087571dc1d1b616c974a193938ab50c5a9040e493af0d8b3fd64c4b6c4e240f82c33fa04565e96627b", 0x41}], 0x1}, 0x0) setsockopt$inet_int(r5, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r5, 0x0, 0xe8, 0x0) recvfrom$l2tp(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc) close(r0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000087080000000000007b8af8ff00000000bfa20000000000000702001002ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0xff9, &(0x7f0000002300)=""/4089}, 0x90) executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000080), 0x76e5467) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206050000000000000000020000000005000400000000000900020000000500010007000000050005000a0000000c0007686173683a69702c6d61726b00000000efaf871881dc6abf8e"], 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x1, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000001c0)={0x2, 0x0, 0x4}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delqdisc={0x1f0, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd}, {0xe, 0xffe0}, {0x7, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa534}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x4, 0x7, 0x3f, 0x100, 0x6, 0x5, 0x3}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa2, 0x40, 0x1b4a, 0x7, 0x1, 0x6, 0x8, 0xa}}, {0x18, 0x2, [0x9, 0x1f, 0xe164, 0x200, 0x800, 0xf73, 0x6, 0xb46b, 0x7, 0x5]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x138, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1f}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xff, 0x7, 0x1e, 0x1a, 0x12, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "287c3640b41d974a38d7f5a4112c96f9936942a02d4ab65139d1bda86c385817738f58b9faaf75d48c4791d7a12876019fd7b58a601aaf11b95fdc20f13864df01d18d01ad19b2af19288989660e4727309939d8a3bdb11512871dcdfb67657d934e9a256981b286e3aa1be9d405846d79efff9a72306dab67e8ab0ec8d68b812031cf73bd65d35d793368c8014d95bdf7923fab4529368f0a9dfe00637f65ad3c2f5dcc160739f55ef54bc1f1a21fed628be604ec7611be6e113d8d975a2107a1cfa92719b541e402edd2b8f38bc77708ba4dc99379de3f85d35e10c37142668e61b3d9b48e28cf4172b33693170dd27e536e99e3b8f52bef6e2f1045437b14"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x7}}]}}]}, 0x1f0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', r4, 0x0, 0x80, 0x1, 0x9, {{0x2a, 0x4, 0x0, 0x6, 0xa8, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0xd3, 0x0, 0x3, [0x4, 0x8, 0x80]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "c4e1"}]}, @generic={0x94, 0x9, "8365338488a7d2"}, @ssrr={0x89, 0xb, 0xf5, [@multicast2, @local]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x6, 0xb, "6eada64be5f45755c8"}, {0x1, 0xc, "d582caaf1cb9bbce71da"}, {0x1, 0x5, "cef94f"}, {0x7, 0x3, '#'}, {0x0, 0x7, "473bd31abd"}, {0x1, 0x9, "19c0e44287abee"}, {0x1, 0x3, "cd"}]}, @timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0xf, [{@loopback, 0x8}, {@local, 0x8001}, {@broadcast, 0xfffffc00}, {@multicast2, 0xae9c}, {@remote, 0x40}]}]}}}}}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x31) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="370000001300031a680907070000000f00e9ff3f13000000170a00170000000004003700b0fa77647f6b4a6aaa58b9a6c011f6bbf40820", 0x37}], 0x1) executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast2}, @address_reply={0x12, 0x0, 0x0, 0x1000}}}}}, 0x0) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0xc0, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x90, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x80, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0x2}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xa54, 0x18}}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x58, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x6a}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x95ee}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xb22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0x24, 0x1, {0xae81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xc0}, 0x1, 0xba01}, 0x810) executing program 1: write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000010000000080007000000000018000180140002006e657464657673696d300000000000000800060000000000080008"], 0x44}}, 0x0) executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@ifindex, 0xffffffffffffffff, 0x0, 0x1}, 0x20) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63", 0xa}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @empty, 'wlan0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)="a29d", 0x2}], 0x1}}], 0x1, 0x881) executing program 1: syz_emit_ethernet(0x1de, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a601a80000fc020000000000000000000000000000fe8000000000000000000000000000aa22340502c9a4319fa14172170a013589317d2af31ba554"], 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xd9}}}}}}}, 0x0) executing program 0: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x2000011a) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080), 0x4) executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @local, 0x800000}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@hoplimit={{0x0, 0x29, 0x34, 0x2}}], 0x30}}], 0x2, 0x0) executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}}, 0x0) executing program 4: r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast2, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3500, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206050000000000000000020000000005000400000000000900020000000500010007000000050005000a0000000c0007686173683a69702c6d61726b00000000efaf871881dc6abf8e"], 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x1, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000001c0)={0x2, 0x0, 0x4}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delqdisc={0x1f0, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd}, {0xe, 0xffe0}, {0x7, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa534}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x4, 0x7, 0x3f, 0x100, 0x6, 0x5, 0x3}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa2, 0x40, 0x1b4a, 0x7, 0x1, 0x6, 0x8, 0xa}}, {0x18, 0x2, [0x9, 0x1f, 0xe164, 0x200, 0x800, 0xf73, 0x6, 0xb46b, 0x7, 0x5]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x138, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1f}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xff, 0x7, 0x1e, 0x1a, 0x12, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x7}}]}}]}, 0x1f0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', r4, 0x0, 0x80, 0x1, 0x9, {{0x2a, 0x4, 0x0, 0x6, 0xa8, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0xd3, 0x0, 0x3, [0x4, 0x8, 0x80]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "c4e1"}]}, @generic={0x94, 0x9, "8365338488a7d2"}, @ssrr={0x89, 0xb, 0xf5, [@multicast2, @local]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x6, 0xb, "6eada64be5f45755c8"}, {0x1, 0xc, "d582caaf1cb9bbce71da"}, {0x1, 0x5, "cef94f"}, {0x7, 0x3, '#'}, {0x0, 0x7, "473bd31abd"}, {0x1, 0x9, "19c0e44287abee"}, {0x1, 0x3, "cd"}]}, @timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0xf, [{@loopback, 0x8}, {@local, 0x8001}, {@broadcast, 0xfffffc00}, {@multicast2, 0xae9c}, {@remote, 0x40}]}]}}}}}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x31) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="370000001300031a680907070000000f00e9ff3f13000000170a00170000000004003700b0fa77647f6b4a6aaa58b9a6c011f6bbf40820", 0x37}], 0x1) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100e8ffffff00000000250000002000018008000100", @ANYRES32=r2, @ANYBLOB="14000200776731"], 0x34}}, 0x0) program did not crash bisect: testing without sub-chunk 2/3 testing program (duration=20s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 3, 4, 4, 4, 3, 4, 23, 30, 3, 4, 3, 4, 4, 4, 2, 4, 3, 23, 4] detailed listing: executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x7f}}], 0x18}}], 0x1, 0x8890) executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x44, r1, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}}, 0x0) executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x5, 0x5, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000b00), 0x3f, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r0, &(0x7f0000000300), 0x0}, 0x20) executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000700)=""/262, 0x106}], 0x1}, 0x5}], 0x1, 0x2, 0x0) executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000840)=0x3, 0x78bfad8e4ece0e71) sendmmsg$inet6(r0, &(0x7f0000005c80)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0xb80b) write(r0, 0x0, 0x6000) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000f1a000000000000000018160000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000ffe0f505b703000000000000850000002a000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x8}, 0x90) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206050000000000000000020000000005000400000000000900020000000500010007000000050005000a0000000c0007686173683a69702c6d61726b00000000efaf871881dc6abf8e"], 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x1, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000001c0)={0x2, 0x0, 0x4}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delqdisc={0x1f0, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd}, {0xe, 0xffe0}, {0x7, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa534}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x4, 0x7, 0x3f, 0x100, 0x6, 0x5, 0x3}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa2, 0x40, 0x1b4a, 0x7, 0x1, 0x6, 0x8, 0xa}}, {0x18, 0x2, [0x9, 0x1f, 0xe164, 0x200, 0x800, 0xf73, 0x6, 0xb46b, 0x7, 0x5]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x138, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1f}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xff, 0x7, 0x1e, 0x1a, 0x12, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x7}}]}}]}, 0x1f0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', r4, 0x0, 0x80, 0x1, 0x9, {{0x2a, 0x4, 0x0, 0x6, 0xa8, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0xd3, 0x0, 0x3, [0x4, 0x8, 0x80]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "c4e1"}]}, @generic={0x94, 0x9, "8365338488a7d2"}, @ssrr={0x89, 0xb, 0xf5, [@multicast2, @local]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x6, 0xb, "6eada64be5f45755c8"}, {0x1, 0xc, "d582caaf1cb9bbce71da"}, {0x1, 0x5, "cef94f"}, {0x7, 0x3, '#'}, {0x0, 0x7, "473bd31abd"}, {0x1, 0x9, "19c0e44287abee"}, {0x1, 0x3, "cd"}]}, @timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0xf, [{@loopback, 0x8}, {@local, 0x8001}, {@broadcast, 0xfffffc00}, {@multicast2, 0xae9c}, {@remote, 0x40}]}]}}}}}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x31) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="370000001300031a680907070000000f00e9ff3f13000000170a00170000000004003700b0fa77647f6b4a6aaa58b9a6c011f6bbf40820", 0x37}], 0x1) executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa0000000000000008"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe47}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000e69b789925bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB], 0x18}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0x10, 0x100000000002, 0x4) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba3704002cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) connect$tipc(r0, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x0, 0x2}}}, 0x10) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="1834000002000000000000000000000018190000", @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="00000000002000001b7ebdac940c3a0b24bc1e9a85da3672570777e5a10b42bb22a90185fc47ece9b47a420d11cbd6bdb375e6"], &(0x7f0000000480)='GPL\x00', 0x0, 0x90, &(0x7f0000000780)=""/144, 0x40f00, 0x41, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x23ceb, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000ac0)=[{0x1, 0x1, 0x1}], 0x10, 0x3}, 0x90) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r8, r6, 0x4, r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000001a006da900000000000000001c0000000000000000000000080004"], 0x24}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010800000000000000000a0000000900010073797a310000000028000000000a0300000000"], 0x70}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@link_local, @dev, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @local, @multicast2}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@ifindex, 0xffffffffffffffff, 0x0, 0x1}, 0x20) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63", 0xa}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @empty, 'wlan0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)="a29d", 0x2}], 0x1}}], 0x1, 0x881) executing program 1: syz_emit_ethernet(0x1de, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a601a80000fc020000000000000000000000000000fe8000000000000000000000000000aa22340502c9a4319fa14172170a013589317d2af31ba554"], 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xd9}}}}}}}, 0x0) executing program 0: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x2000011a) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080), 0x4) executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @local, 0x800000}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@hoplimit={{0x0, 0x29, 0x34, 0x2}}], 0x30}}], 0x2, 0x0) executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}}, 0x0) executing program 4: r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast2, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3500, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206050000000000000000020000000005000400000000000900020000000500010007000000050005000a0000000c0007686173683a69702c6d61726b00000000efaf871881dc6abf8e"], 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x1, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000001c0)={0x2, 0x0, 0x4}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delqdisc={0x1f0, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd}, {0xe, 0xffe0}, {0x7, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa534}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x4, 0x7, 0x3f, 0x100, 0x6, 0x5, 0x3}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa2, 0x40, 0x1b4a, 0x7, 0x1, 0x6, 0x8, 0xa}}, {0x18, 0x2, [0x9, 0x1f, 0xe164, 0x200, 0x800, 0xf73, 0x6, 0xb46b, 0x7, 0x5]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x138, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1f}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xff, 0x7, 0x1e, 0x1a, 0x12, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x7}}]}}]}, 0x1f0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', r4, 0x0, 0x80, 0x1, 0x9, {{0x2a, 0x4, 0x0, 0x6, 0xa8, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0xd3, 0x0, 0x3, [0x4, 0x8, 0x80]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "c4e1"}]}, @generic={0x94, 0x9, "8365338488a7d2"}, @ssrr={0x89, 0xb, 0xf5, [@multicast2, @local]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x6, 0xb, "6eada64be5f45755c8"}, {0x1, 0xc, "d582caaf1cb9bbce71da"}, {0x1, 0x5, "cef94f"}, {0x7, 0x3, '#'}, {0x0, 0x7, "473bd31abd"}, {0x1, 0x9, "19c0e44287abee"}, {0x1, 0x3, "cd"}]}, @timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0xf, [{@loopback, 0x8}, {@local, 0x8001}, {@broadcast, 0xfffffc00}, {@multicast2, 0xae9c}, {@remote, 0x40}]}]}}}}}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x31) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="370000001300031a680907070000000f00e9ff3f13000000170a00170000000004003700b0fa77647f6b4a6aaa58b9a6c011f6bbf40820", 0x37}], 0x1) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100e8ffffff00000000250000002000018008000100", @ANYRES32=r2, @ANYBLOB="14000200776731"], 0x34}}, 0x0) program crashed: WARNING in ethnl_req_get_phydev bisect: the chunk can be dropped bisect: testing without sub-chunk 3/3 testing program (duration=17s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 3, 4, 4, 4, 3, 4, 23, 30, 3] detailed listing: executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x7f}}], 0x18}}], 0x1, 0x8890) executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x44, r1, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}}, 0x0) executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x5, 0x5, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000b00), 0x3f, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r0, &(0x7f0000000300), 0x0}, 0x20) executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000700)=""/262, 0x106}], 0x1}, 0x5}], 0x1, 0x2, 0x0) executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000840)=0x3, 0x78bfad8e4ece0e71) sendmmsg$inet6(r0, &(0x7f0000005c80)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0xb80b) write(r0, 0x0, 0x6000) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000f1a000000000000000018160000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000ffe0f505b703000000000000850000002a000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x8}, 0x90) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206050000000000000000020000000005000400000000000900020000000500010007000000050005000a0000000c0007686173683a69702c6d61726b00000000efaf871881dc6abf8e"], 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x1, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000001c0)={0x2, 0x0, 0x4}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delqdisc={0x1f0, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd}, {0xe, 0xffe0}, {0x7, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa534}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x4, 0x7, 0x3f, 0x100, 0x6, 0x5, 0x3}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa2, 0x40, 0x1b4a, 0x7, 0x1, 0x6, 0x8, 0xa}}, {0x18, 0x2, [0x9, 0x1f, 0xe164, 0x200, 0x800, 0xf73, 0x6, 0xb46b, 0x7, 0x5]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x138, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1f}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xff, 0x7, 0x1e, 0x1a, 0x12, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x7}}]}}]}, 0x1f0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', r4, 0x0, 0x80, 0x1, 0x9, {{0x2a, 0x4, 0x0, 0x6, 0xa8, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0xd3, 0x0, 0x3, [0x4, 0x8, 0x80]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "c4e1"}]}, @generic={0x94, 0x9, "8365338488a7d2"}, @ssrr={0x89, 0xb, 0xf5, [@multicast2, @local]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x6, 0xb, "6eada64be5f45755c8"}, {0x1, 0xc, "d582caaf1cb9bbce71da"}, {0x1, 0x5, "cef94f"}, {0x7, 0x3, '#'}, {0x0, 0x7, "473bd31abd"}, {0x1, 0x9, "19c0e44287abee"}, {0x1, 0x3, "cd"}]}, @timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0xf, [{@loopback, 0x8}, {@local, 0x8001}, {@broadcast, 0xfffffc00}, {@multicast2, 0xae9c}, {@remote, 0x40}]}]}}}}}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x31) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="370000001300031a680907070000000f00e9ff3f13000000170a00170000000004003700b0fa77647f6b4a6aaa58b9a6c011f6bbf40820", 0x37}], 0x1) executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa0000000000000008"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe47}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000e69b789925bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB], 0x18}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0x10, 0x100000000002, 0x4) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba3704002cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) connect$tipc(r0, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x0, 0x2}}}, 0x10) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="1834000002000000000000000000000018190000", @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="00000000002000001b7ebdac940c3a0b24bc1e9a85da3672570777e5a10b42bb22a90185fc47ece9b47a420d11cbd6bdb375e6"], &(0x7f0000000480)='GPL\x00', 0x0, 0x90, &(0x7f0000000780)=""/144, 0x40f00, 0x41, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x23ceb, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000ac0)=[{0x1, 0x1, 0x1}], 0x10, 0x3}, 0x90) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r8, r6, 0x4, r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000001a006da900000000000000001c0000000000000000000000080004"], 0x24}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010800000000000000000a0000000900010073797a310000000028000000000a0300000000"], 0x70}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@link_local, @dev, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @local, @multicast2}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) program did not crash bisect: split chunks (needed=true): <10>, <10> bisect: split chunk #0 of len 10 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=18s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 4, 23, 30, 3, 4, 3, 4, 4, 4, 2, 4, 3, 23, 4] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000f1a000000000000000018160000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000ffe0f505b703000000000000850000002a000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x8}, 0x90) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206050000000000000000020000000005000400000000000900020000000500010007000000050005000a0000000c0007686173683a69702c6d61726b00000000efaf871881dc6abf8e"], 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x1, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000001c0)={0x2, 0x0, 0x4}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delqdisc={0x1f0, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd}, {0xe, 0xffe0}, {0x7, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa534}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x4, 0x7, 0x3f, 0x100, 0x6, 0x5, 0x3}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa2, 0x40, 0x1b4a, 0x7, 0x1, 0x6, 0x8, 0xa}}, {0x18, 0x2, [0x9, 0x1f, 0xe164, 0x200, 0x800, 0xf73, 0x6, 0xb46b, 0x7, 0x5]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x138, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1f}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xff, 0x7, 0x1e, 0x1a, 0x12, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x7}}]}}]}, 0x1f0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', r4, 0x0, 0x80, 0x1, 0x9, {{0x2a, 0x4, 0x0, 0x6, 0xa8, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0xd3, 0x0, 0x3, [0x4, 0x8, 0x80]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "c4e1"}]}, @generic={0x94, 0x9, "8365338488a7d2"}, @ssrr={0x89, 0xb, 0xf5, [@multicast2, @local]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x6, 0xb, "6eada64be5f45755c8"}, {0x1, 0xc, "d582caaf1cb9bbce71da"}, {0x1, 0x5, "cef94f"}, {0x7, 0x3, '#'}, {0x0, 0x7, "473bd31abd"}, {0x1, 0x9, "19c0e44287abee"}, {0x1, 0x3, "cd"}]}, @timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0xf, [{@loopback, 0x8}, {@local, 0x8001}, {@broadcast, 0xfffffc00}, {@multicast2, 0xae9c}, {@remote, 0x40}]}]}}}}}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x31) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="370000001300031a680907070000000f00e9ff3f13000000170a00170000000004003700b0fa77647f6b4a6aaa58b9a6c011f6bbf40820", 0x37}], 0x1) executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa0000000000000008"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe47}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000e69b789925bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB], 0x18}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0x10, 0x100000000002, 0x4) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba3704002cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) connect$tipc(r0, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x0, 0x2}}}, 0x10) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="1834000002000000000000000000000018190000", @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="00000000002000001b7ebdac940c3a0b24bc1e9a85da3672570777e5a10b42bb22a90185fc47ece9b47a420d11cbd6bdb375e6"], &(0x7f0000000480)='GPL\x00', 0x0, 0x90, &(0x7f0000000780)=""/144, 0x40f00, 0x41, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x23ceb, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000ac0)=[{0x1, 0x1, 0x1}], 0x10, 0x3}, 0x90) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r8, r6, 0x4, r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000001a006da900000000000000001c0000000000000000000000080004"], 0x24}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010800000000000000000a0000000900010073797a310000000028000000000a0300000000"], 0x70}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@link_local, @dev, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @local, @multicast2}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@ifindex, 0xffffffffffffffff, 0x0, 0x1}, 0x20) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63", 0xa}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @empty, 'wlan0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)="a29d", 0x2}], 0x1}}], 0x1, 0x881) executing program 1: syz_emit_ethernet(0x1de, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a601a80000fc020000000000000000000000000000fe8000000000000000000000000000aa22340502c9a4319fa14172170a013589317d2af31ba554"], 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xd9}}}}}}}, 0x0) executing program 0: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x2000011a) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080), 0x4) executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @local, 0x800000}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@hoplimit={{0x0, 0x29, 0x34, 0x2}}], 0x30}}], 0x2, 0x0) executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}}, 0x0) executing program 4: r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast2, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3500, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206050000000000000000020000000005000400000000000900020000000500010007000000050005000a0000000c0007686173683a69702c6d61726b00000000efaf871881dc6abf8e"], 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x1, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000001c0)={0x2, 0x0, 0x4}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delqdisc={0x1f0, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd}, {0xe, 0xffe0}, {0x7, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa534}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x4, 0x7, 0x3f, 0x100, 0x6, 0x5, 0x3}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa2, 0x40, 0x1b4a, 0x7, 0x1, 0x6, 0x8, 0xa}}, {0x18, 0x2, [0x9, 0x1f, 0xe164, 0x200, 0x800, 0xf73, 0x6, 0xb46b, 0x7, 0x5]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x138, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1f}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xff, 0x7, 0x1e, 0x1a, 0x12, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "287c3640b41d974a38d7f5a4112c96f9936942a02d4ab65139d1bda86c385817738f58b9faaf75d48c4791d7a12876019fd7b58a601aaf11b95fdc20f13864df01d18d01ad19b2af19288989660e4727309939d8a3bdb11512871dcdfb67657d934e9a256981b286e3aa1be9d405846d79efff9a72306dab67e8ab0ec8d68b812031cf73bd65d35d793368c8014d95bdf7923fab4529368f0a9dfe00637f65ad3c2f5dcc160739f55ef54bc1f1a21fed628be604ec7611be6e113d8d975a2107a1cfa92719b541e402edd2b8f38bc77708ba4dc99379de3f85d35e10c37142668e61b3d9b48e28cf4172b33693170dd27e536e99e3b8f52bef6e2f1045437b14"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x7}}]}}]}, 0x1f0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', r4, 0x0, 0x80, 0x1, 0x9, {{0x2a, 0x4, 0x0, 0x6, 0xa8, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0xd3, 0x0, 0x3, [0x4, 0x8, 0x80]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "c4e1"}]}, @generic={0x94, 0x9, "8365338488a7d2"}, @ssrr={0x89, 0xb, 0xf5, [@multicast2, @local]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x6, 0xb, "6eada64be5f45755c8"}, {0x1, 0xc, "d582caaf1cb9bbce71da"}, {0x1, 0x5, "cef94f"}, {0x7, 0x3, '#'}, {0x0, 0x7, "473bd31abd"}, {0x1, 0x9, "19c0e44287abee"}, {0x1, 0x3, "cd"}]}, @timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0xf, [{@loopback, 0x8}, {@local, 0x8001}, {@broadcast, 0xfffffc00}, {@multicast2, 0xae9c}, {@remote, 0x40}]}]}}}}}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x31) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="370000001300031a680907070000000f00e9ff3f13000000170a00170000000004003700b0fa77647f6b4a6aaa58b9a6c011f6bbf40820", 0x37}], 0x1) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100e8ffffff00000000250000002000018008000100", @ANYRES32=r2, @ANYBLOB="14000200776731"], 0x34}}, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=18s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 3, 4, 4, 4, 4, 3, 4, 4, 4, 2, 4, 3, 23, 4] detailed listing: executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x7f}}], 0x18}}], 0x1, 0x8890) executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x44, r1, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}}, 0x0) executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x5, 0x5, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000b00), 0x3f, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r0, &(0x7f0000000300), 0x0}, 0x20) executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000700)=""/262, 0x106}], 0x1}, 0x5}], 0x1, 0x2, 0x0) executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000840)=0x3, 0x78bfad8e4ece0e71) sendmmsg$inet6(r0, &(0x7f0000005c80)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0xb80b) write(r0, 0x0, 0x6000) executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@ifindex, 0xffffffffffffffff, 0x0, 0x1}, 0x20) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63", 0xa}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @empty, 'wlan0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)="a29d", 0x2}], 0x1}}], 0x1, 0x881) executing program 1: syz_emit_ethernet(0x1de, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a601a80000fc020000000000000000000000000000fe8000000000000000000000000000aa22340502c9a4319fa14172170a013589317d2af31ba554"], 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xd9}}}}}}}, 0x0) executing program 0: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x2000011a) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080), 0x4) executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @local, 0x800000}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@hoplimit={{0x0, 0x29, 0x34, 0x2}}], 0x30}}], 0x2, 0x0) executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}}, 0x0) executing program 4: r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast2, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3500, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206050000000000000000020000000005000400000000000900020000000500010007000000050005000a0000000c0007686173683a69702c6d61726b00000000efaf871881dc6abf8e"], 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x1, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000001c0)={0x2, 0x0, 0x4}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delqdisc={0x1f0, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd}, {0xe, 0xffe0}, {0x7, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa534}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x4, 0x7, 0x3f, 0x100, 0x6, 0x5, 0x3}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa2, 0x40, 0x1b4a, 0x7, 0x1, 0x6, 0x8, 0xa}}, {0x18, 0x2, [0x9, 0x1f, 0xe164, 0x200, 0x800, 0xf73, 0x6, 0xb46b, 0x7, 0x5]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x138, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1f}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xff, 0x7, 0x1e, 0x1a, 0x12, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x7}}]}}]}, 0x1f0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', r4, 0x0, 0x80, 0x1, 0x9, {{0x2a, 0x4, 0x0, 0x6, 0xa8, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0xd3, 0x0, 0x3, [0x4, 0x8, 0x80]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "c4e1"}]}, @generic={0x94, 0x9, "8365338488a7d2"}, @ssrr={0x89, 0xb, 0xf5, [@multicast2, @local]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x6, 0xb, "6eada64be5f45755c8"}, {0x1, 0xc, "d582caaf1cb9bbce71da"}, {0x1, 0x5, "cef94f"}, {0x7, 0x3, '#'}, {0x0, 0x7, "473bd31abd"}, {0x1, 0x9, "19c0e44287abee"}, {0x1, 0x3, "cd"}]}, @timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0xf, [{@loopback, 0x8}, {@local, 0x8001}, {@broadcast, 0xfffffc00}, {@multicast2, 0xae9c}, {@remote, 0x40}]}]}}}}}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x31) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="370000001300031a680907070000000f00e9ff3f13000000170a00170000000004003700b0fa77647f6b4a6aaa58b9a6c011f6bbf40820", 0x37}], 0x1) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100e8ffffff00000000250000002000018008000100", @ANYRES32=r2, @ANYBLOB="14000200776731"], 0x34}}, 0x0) program did not crash bisect: split chunk #1 of len 10 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=18s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 3, 4, 4, 4, 3, 4, 23, 30, 3, 2, 4, 3, 23, 4] detailed listing: executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x7f}}], 0x18}}], 0x1, 0x8890) executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x44, r1, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}}, 0x0) executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x5, 0x5, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000b00), 0x3f, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r0, &(0x7f0000000300), 0x0}, 0x20) executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000700)=""/262, 0x106}], 0x1}, 0x5}], 0x1, 0x2, 0x0) executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000840)=0x3, 0x78bfad8e4ece0e71) sendmmsg$inet6(r0, &(0x7f0000005c80)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0xb80b) write(r0, 0x0, 0x6000) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000f1a000000000000000018160000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000ffe0f505b703000000000000850000002a000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x8}, 0x90) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206050000000000000000020000000005000400000000000900020000000500010007000000050005000a0000000c0007686173683a69702c6d61726b00000000efaf871881dc6abf8e"], 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x1, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000001c0)={0x2, 0x0, 0x4}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delqdisc={0x1f0, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd}, {0xe, 0xffe0}, {0x7, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa534}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x4, 0x7, 0x3f, 0x100, 0x6, 0x5, 0x3}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa2, 0x40, 0x1b4a, 0x7, 0x1, 0x6, 0x8, 0xa}}, {0x18, 0x2, [0x9, 0x1f, 0xe164, 0x200, 0x800, 0xf73, 0x6, 0xb46b, 0x7, 0x5]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x138, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1f}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xff, 0x7, 0x1e, 0x1a, 0x12, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "287c3640b41d974a38d7f5a4112c96f9936942a02d4ab65139d1bda86c385817738f58b9faaf75d48c4791d7a12876019fd7b58a601aaf11b95fdc20f13864df01d18d01ad19b2af19288989660e4727309939d8a3bdb11512871dcdfb67657d934e9a256981b286e3aa1be9d405846d79efff9a72306dab67e8ab0ec8d68b812031cf73bd65d35d793368c8014d95bdf7923fab4529368f0a9dfe00637f65ad3c2f5dcc160739f55ef54bc1f1a21fed628be604ec7611be6e113d8d975a2107a1cfa92719b541e402edd2b8f38bc77708ba4dc99379de3f85d35e10c37142668e61b3d9b48e28cf4172b33693170dd27e536e99e3b8f52bef6e2f1045437b14"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x7}}]}}]}, 0x1f0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', r4, 0x0, 0x80, 0x1, 0x9, {{0x2a, 0x4, 0x0, 0x6, 0xa8, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0xd3, 0x0, 0x3, [0x4, 0x8, 0x80]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "c4e1"}]}, @generic={0x94, 0x9, "8365338488a7d2"}, @ssrr={0x89, 0xb, 0xf5, [@multicast2, @local]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x6, 0xb, "6eada64be5f45755c8"}, {0x1, 0xc, "d582caaf1cb9bbce71da"}, {0x1, 0x5, "cef94f"}, {0x7, 0x3, '#'}, {0x0, 0x7, "473bd31abd"}, {0x1, 0x9, "19c0e44287abee"}, {0x1, 0x3, "cd"}]}, @timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0xf, [{@loopback, 0x8}, {@local, 0x8001}, {@broadcast, 0xfffffc00}, {@multicast2, 0xae9c}, {@remote, 0x40}]}]}}}}}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x31) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="370000001300031a680907070000000f00e9ff3f13000000170a00170000000004003700b0fa77647f6b4a6aaa58b9a6c011f6bbf40820", 0x37}], 0x1) executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa0000000000000008"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe47}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000e69b789925bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB], 0x18}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0x10, 0x100000000002, 0x4) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba3704002cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) connect$tipc(r0, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x0, 0x2}}}, 0x10) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="1834000002000000000000000000000018190000", @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="00000000002000001b7ebdac940c3a0b24bc1e9a85da3672570777e5a10b42bb22a90185fc47ece9b47a420d11cbd6bdb375e6"], &(0x7f0000000480)='GPL\x00', 0x0, 0x90, &(0x7f0000000780)=""/144, 0x40f00, 0x41, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x23ceb, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000ac0)=[{0x1, 0x1, 0x1}], 0x10, 0x3}, 0x90) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r8, r6, 0x4, r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000001a006da900000000000000001c0000000000000000000000080004"], 0x24}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010800000000000000000a0000000900010073797a310000000028000000000a0300000000"], 0x70}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@link_local, @dev, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @local, @multicast2}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @local, 0x800000}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@hoplimit={{0x0, 0x29, 0x34, 0x2}}], 0x30}}], 0x2, 0x0) executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}}, 0x0) executing program 4: r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast2, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3500, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206050000000000000000020000000005000400000000000900020000000500010007000000050005000a0000000c0007686173683a69702c6d61726b00000000efaf871881dc6abf8e"], 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x1, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000001c0)={0x2, 0x0, 0x4}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delqdisc={0x1f0, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd}, {0xe, 0xffe0}, {0x7, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa534}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x4, 0x7, 0x3f, 0x100, 0x6, 0x5, 0x3}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa2, 0x40, 0x1b4a, 0x7, 0x1, 0x6, 0x8, 0xa}}, {0x18, 0x2, [0x9, 0x1f, 0xe164, 0x200, 0x800, 0xf73, 0x6, 0xb46b, 0x7, 0x5]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x138, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1f}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xff, 0x7, 0x1e, 0x1a, 0x12, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x7}}]}}]}, 0x1f0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', r4, 0x0, 0x80, 0x1, 0x9, {{0x2a, 0x4, 0x0, 0x6, 0xa8, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0xd3, 0x0, 0x3, [0x4, 0x8, 0x80]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "c4e1"}]}, @generic={0x94, 0x9, "8365338488a7d2"}, @ssrr={0x89, 0xb, 0xf5, [@multicast2, @local]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x6, 0xb, "6eada64be5f45755c8"}, {0x1, 0xc, "d582caaf1cb9bbce71da"}, {0x1, 0x5, "cef94f"}, {0x7, 0x3, '#'}, {0x0, 0x7, "473bd31abd"}, {0x1, 0x9, "19c0e44287abee"}, {0x1, 0x3, "cd"}]}, @timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0xf, [{@loopback, 0x8}, {@local, 0x8001}, {@broadcast, 0xfffffc00}, {@multicast2, 0xae9c}, {@remote, 0x40}]}]}}}}}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x31) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="370000001300031a680907070000000f00e9ff3f13000000170a00170000000004003700b0fa77647f6b4a6aaa58b9a6c011f6bbf40820", 0x37}], 0x1) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100e8ffffff00000000250000002000018008000100", @ANYRES32=r2, @ANYBLOB="14000200776731"], 0x34}}, 0x0) program crashed: WARNING in ethnl_req_get_phydev bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <5>, <5>, <5> bisect: split chunk #0 of len 5 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=18s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 3, 4, 23, 30, 3, 2, 4, 3, 23, 4] detailed listing: executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000700)=""/262, 0x106}], 0x1}, 0x5}], 0x1, 0x2, 0x0) executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000840)=0x3, 0x78bfad8e4ece0e71) sendmmsg$inet6(r0, &(0x7f0000005c80)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0xb80b) write(r0, 0x0, 0x6000) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000f1a000000000000000018160000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000ffe0f505b703000000000000850000002a000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x8}, 0x90) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206050000000000000000020000000005000400000000000900020000000500010007000000050005000a0000000c0007686173683a69702c6d61726b00000000efaf871881dc6abf8e"], 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x1, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000001c0)={0x2, 0x0, 0x4}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delqdisc={0x1f0, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd}, {0xe, 0xffe0}, {0x7, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa534}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x4, 0x7, 0x3f, 0x100, 0x6, 0x5, 0x3}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa2, 0x40, 0x1b4a, 0x7, 0x1, 0x6, 0x8, 0xa}}, {0x18, 0x2, [0x9, 0x1f, 0xe164, 0x200, 0x800, 0xf73, 0x6, 0xb46b, 0x7, 0x5]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x138, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1f}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xff, 0x7, 0x1e, 0x1a, 0x12, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x7}}]}}]}, 0x1f0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', r4, 0x0, 0x80, 0x1, 0x9, {{0x2a, 0x4, 0x0, 0x6, 0xa8, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0xd3, 0x0, 0x3, [0x4, 0x8, 0x80]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "c4e1"}]}, @generic={0x94, 0x9, "8365338488a7d2"}, @ssrr={0x89, 0xb, 0xf5, [@multicast2, @local]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x6, 0xb, "6eada64be5f45755c8"}, {0x1, 0xc, "d582caaf1cb9bbce71da"}, {0x1, 0x5, "cef94f"}, {0x7, 0x3, '#'}, {0x0, 0x7, "473bd31abd"}, {0x1, 0x9, "19c0e44287abee"}, {0x1, 0x3, "cd"}]}, @timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0xf, [{@loopback, 0x8}, {@local, 0x8001}, {@broadcast, 0xfffffc00}, {@multicast2, 0xae9c}, {@remote, 0x40}]}]}}}}}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x31) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="370000001300031a680907070000000f00e9ff3f13000000170a00170000000004003700b0fa77647f6b4a6aaa58b9a6c011f6bbf40820", 0x37}], 0x1) executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa0000000000000008"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe47}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000e69b789925bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB], 0x18}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0x10, 0x100000000002, 0x4) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba3704002cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) connect$tipc(r0, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x0, 0x2}}}, 0x10) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="1834000002000000000000000000000018190000", @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="00000000002000001b7ebdac940c3a0b24bc1e9a85da3672570777e5a10b42bb22a90185fc47ece9b47a420d11cbd6bdb375e6"], &(0x7f0000000480)='GPL\x00', 0x0, 0x90, &(0x7f0000000780)=""/144, 0x40f00, 0x41, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x23ceb, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000ac0)=[{0x1, 0x1, 0x1}], 0x10, 0x3}, 0x90) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r8, r6, 0x4, r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000001a006da900000000000000001c0000000000000000000000080004"], 0x24}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010800000000000000000a0000000900010073797a310000000028000000000a0300000000"], 0x70}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@link_local, @dev, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @local, @multicast2}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @local, 0x800000}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@hoplimit={{0x0, 0x29, 0x34, 0x2}}], 0x30}}], 0x2, 0x0) executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}}, 0x0) executing program 4: r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast2, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3500, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206050000000000000000020000000005000400000000000900020000000500010007000000050005000a0000000c0007686173683a69702c6d61726b00000000efaf871881dc6abf8e"], 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x1, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000001c0)={0x2, 0x0, 0x4}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delqdisc={0x1f0, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd}, {0xe, 0xffe0}, {0x7, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa534}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x4, 0x7, 0x3f, 0x100, 0x6, 0x5, 0x3}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa2, 0x40, 0x1b4a, 0x7, 0x1, 0x6, 0x8, 0xa}}, {0x18, 0x2, [0x9, 0x1f, 0xe164, 0x200, 0x800, 0xf73, 0x6, 0xb46b, 0x7, 0x5]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x138, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1f}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xff, 0x7, 0x1e, 0x1a, 0x12, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x7}}]}}]}, 0x1f0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', r4, 0x0, 0x80, 0x1, 0x9, {{0x2a, 0x4, 0x0, 0x6, 0xa8, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0xd3, 0x0, 0x3, [0x4, 0x8, 0x80]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "c4e1"}]}, @generic={0x94, 0x9, "8365338488a7d2"}, @ssrr={0x89, 0xb, 0xf5, [@multicast2, @local]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x6, 0xb, "6eada64be5f45755c8"}, {0x1, 0xc, "d582caaf1cb9bbce71da"}, {0x1, 0x5, "cef94f"}, {0x7, 0x3, '#'}, {0x0, 0x7, "473bd31abd"}, {0x1, 0x9, "19c0e44287abee"}, {0x1, 0x3, "cd"}]}, @timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0xf, [{@loopback, 0x8}, {@local, 0x8001}, {@broadcast, 0xfffffc00}, {@multicast2, 0xae9c}, {@remote, 0x40}]}]}}}}}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x31) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="370000001300031a680907070000000f00e9ff3f13000000170a00170000000004003700b0fa77647f6b4a6aaa58b9a6c011f6bbf40820", 0x37}], 0x1) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100e8ffffff00000000250000002000018008000100", @ANYRES32=r2, @ANYBLOB="14000200776731"], 0x34}}, 0x0) program crashed: WARNING in ethnl_req_get_phydev bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #1 of len 5 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=17s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 30, 3, 2, 4, 3, 23, 4] detailed listing: executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000700)=""/262, 0x106}], 0x1}, 0x5}], 0x1, 0x2, 0x0) executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000840)=0x3, 0x78bfad8e4ece0e71) sendmmsg$inet6(r0, &(0x7f0000005c80)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0xb80b) write(r0, 0x0, 0x6000) executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa0000000000000008"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe47}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000e69b789925bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB], 0x18}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0x10, 0x100000000002, 0x4) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba3704002cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) connect$tipc(r0, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x0, 0x2}}}, 0x10) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="1834000002000000000000000000000018190000", @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="00000000002000001b7ebdac940c3a0b24bc1e9a85da3672570777e5a10b42bb22a90185fc47ece9b47a420d11cbd6bdb375e6"], &(0x7f0000000480)='GPL\x00', 0x0, 0x90, &(0x7f0000000780)=""/144, 0x40f00, 0x41, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x23ceb, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000ac0)=[{0x1, 0x1, 0x1}], 0x10, 0x3}, 0x90) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r8, r6, 0x4, r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000001a006da900000000000000001c0000000000000000000000080004"], 0x24}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010800000000000000000a0000000900010073797a310000000028000000000a0300000000"], 0x70}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@link_local, @dev, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @local, @multicast2}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @local, 0x800000}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@hoplimit={{0x0, 0x29, 0x34, 0x2}}], 0x30}}], 0x2, 0x0) executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}}, 0x0) executing program 4: r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast2, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3500, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206050000000000000000020000000005000400000000000900020000000500010007000000050005000a0000000c0007686173683a69702c6d61726b00000000efaf871881dc6abf8e"], 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x1, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000001c0)={0x2, 0x0, 0x4}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delqdisc={0x1f0, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd}, {0xe, 0xffe0}, {0x7, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa534}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x4, 0x7, 0x3f, 0x100, 0x6, 0x5, 0x3}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa2, 0x40, 0x1b4a, 0x7, 0x1, 0x6, 0x8, 0xa}}, {0x18, 0x2, [0x9, 0x1f, 0xe164, 0x200, 0x800, 0xf73, 0x6, 0xb46b, 0x7, 0x5]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x138, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1f}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xff, 0x7, 0x1e, 0x1a, 0x12, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x7}}]}}]}, 0x1f0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', r4, 0x0, 0x80, 0x1, 0x9, {{0x2a, 0x4, 0x0, 0x6, 0xa8, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0xd3, 0x0, 0x3, [0x4, 0x8, 0x80]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "c4e1"}]}, @generic={0x94, 0x9, "8365338488a7d2"}, @ssrr={0x89, 0xb, 0xf5, [@multicast2, @local]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x6, 0xb, "6eada64be5f45755c8"}, {0x1, 0xc, "d582caaf1cb9bbce71da"}, {0x1, 0x5, "cef94f"}, {0x7, 0x3, '#'}, {0x0, 0x7, "473bd31abd"}, {0x1, 0x9, "19c0e44287abee"}, {0x1, 0x3, "cd"}]}, @timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0xf, [{@loopback, 0x8}, {@local, 0x8001}, {@broadcast, 0xfffffc00}, {@multicast2, 0xae9c}, {@remote, 0x40}]}]}}}}}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x31) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="370000001300031a680907070000000f00e9ff3f13000000170a00170000000004003700b0fa77647f6b4a6aaa58b9a6c011f6bbf40820", 0x37}], 0x1) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100e8ffffff00000000250000002000018008000100", @ANYRES32=r2, @ANYBLOB="14000200776731"], 0x34}}, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=17s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 3, 4, 23, 2, 4, 3, 23, 4] detailed listing: executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000700)=""/262, 0x106}], 0x1}, 0x5}], 0x1, 0x2, 0x0) executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000840)=0x3, 0x78bfad8e4ece0e71) sendmmsg$inet6(r0, &(0x7f0000005c80)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0xb80b) write(r0, 0x0, 0x6000) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000f1a000000000000000018160000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000ffe0f505b703000000000000850000002a000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x8}, 0x90) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206050000000000000000020000000005000400000000000900020000000500010007000000050005000a0000000c0007686173683a69702c6d61726b00000000efaf871881dc6abf8e"], 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x1, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000001c0)={0x2, 0x0, 0x4}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delqdisc={0x1f0, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd}, {0xe, 0xffe0}, {0x7, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa534}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x4, 0x7, 0x3f, 0x100, 0x6, 0x5, 0x3}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa2, 0x40, 0x1b4a, 0x7, 0x1, 0x6, 0x8, 0xa}}, {0x18, 0x2, [0x9, 0x1f, 0xe164, 0x200, 0x800, 0xf73, 0x6, 0xb46b, 0x7, 0x5]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x138, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1f}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xff, 0x7, 0x1e, 0x1a, 0x12, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x7}}]}}]}, 0x1f0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', r4, 0x0, 0x80, 0x1, 0x9, {{0x2a, 0x4, 0x0, 0x6, 0xa8, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0xd3, 0x0, 0x3, [0x4, 0x8, 0x80]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "c4e1"}]}, @generic={0x94, 0x9, "8365338488a7d2"}, @ssrr={0x89, 0xb, 0xf5, [@multicast2, @local]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x6, 0xb, "6eada64be5f45755c8"}, {0x1, 0xc, "d582caaf1cb9bbce71da"}, {0x1, 0x5, "cef94f"}, {0x7, 0x3, '#'}, {0x0, 0x7, "473bd31abd"}, {0x1, 0x9, "19c0e44287abee"}, {0x1, 0x3, "cd"}]}, @timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0xf, [{@loopback, 0x8}, {@local, 0x8001}, {@broadcast, 0xfffffc00}, {@multicast2, 0xae9c}, {@remote, 0x40}]}]}}}}}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x31) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="370000001300031a680907070000000f00e9ff3f13000000170a00170000000004003700b0fa77647f6b4a6aaa58b9a6c011f6bbf40820", 0x37}], 0x1) executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @local, 0x800000}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@hoplimit={{0x0, 0x29, 0x34, 0x2}}], 0x30}}], 0x2, 0x0) executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}}, 0x0) executing program 4: r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast2, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3500, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206050000000000000000020000000005000400000000000900020000000500010007000000050005000a0000000c0007686173683a69702c6d61726b00000000efaf871881dc6abf8e"], 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x1, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000001c0)={0x2, 0x0, 0x4}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delqdisc={0x1f0, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd}, {0xe, 0xffe0}, {0x7, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa534}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x4, 0x7, 0x3f, 0x100, 0x6, 0x5, 0x3}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa2, 0x40, 0x1b4a, 0x7, 0x1, 0x6, 0x8, 0xa}}, {0x18, 0x2, [0x9, 0x1f, 0xe164, 0x200, 0x800, 0xf73, 0x6, 0xb46b, 0x7, 0x5]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x138, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1f}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xff, 0x7, 0x1e, 0x1a, 0x12, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x7}}]}}]}, 0x1f0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', r4, 0x0, 0x80, 0x1, 0x9, {{0x2a, 0x4, 0x0, 0x6, 0xa8, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0xd3, 0x0, 0x3, [0x4, 0x8, 0x80]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "c4e1"}]}, @generic={0x94, 0x9, "8365338488a7d2"}, @ssrr={0x89, 0xb, 0xf5, [@multicast2, @local]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x6, 0xb, "6eada64be5f45755c8"}, {0x1, 0xc, "d582caaf1cb9bbce71da"}, {0x1, 0x5, "cef94f"}, {0x7, 0x3, '#'}, {0x0, 0x7, "473bd31abd"}, {0x1, 0x9, "19c0e44287abee"}, {0x1, 0x3, "cd"}]}, @timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0xf, [{@loopback, 0x8}, {@local, 0x8001}, {@broadcast, 0xfffffc00}, {@multicast2, 0xae9c}, {@remote, 0x40}]}]}}}}}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x31) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="370000001300031a680907070000000f00e9ff3f13000000170a00170000000004003700b0fa77647f6b4a6aaa58b9a6c011f6bbf40820", 0x37}], 0x1) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100e8ffffff00000000250000002000018008000100", @ANYRES32=r2, @ANYBLOB="14000200776731"], 0x34}}, 0x0) program did not crash bisect: split chunk #2 of len 5 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=17s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 3, 4, 23, 30, 3, 23, 4] detailed listing: executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000700)=""/262, 0x106}], 0x1}, 0x5}], 0x1, 0x2, 0x0) executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000840)=0x3, 0x78bfad8e4ece0e71) sendmmsg$inet6(r0, &(0x7f0000005c80)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0xb80b) write(r0, 0x0, 0x6000) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000f1a000000000000000018160000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000ffe0f505b703000000000000850000002a000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x8}, 0x90) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206050000000000000000020000000005000400000000000900020000000500010007000000050005000a0000000c0007686173683a69702c6d61726b00000000efaf871881dc6abf8e"], 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x1, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000001c0)={0x2, 0x0, 0x4}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delqdisc={0x1f0, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd}, {0xe, 0xffe0}, {0x7, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa534}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x4, 0x7, 0x3f, 0x100, 0x6, 0x5, 0x3}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa2, 0x40, 0x1b4a, 0x7, 0x1, 0x6, 0x8, 0xa}}, {0x18, 0x2, [0x9, 0x1f, 0xe164, 0x200, 0x800, 0xf73, 0x6, 0xb46b, 0x7, 0x5]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x138, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1f}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xff, 0x7, 0x1e, 0x1a, 0x12, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x7}}]}}]}, 0x1f0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', r4, 0x0, 0x80, 0x1, 0x9, {{0x2a, 0x4, 0x0, 0x6, 0xa8, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0xd3, 0x0, 0x3, [0x4, 0x8, 0x80]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "c4e1"}]}, @generic={0x94, 0x9, "8365338488a7d2"}, @ssrr={0x89, 0xb, 0xf5, [@multicast2, @local]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x6, 0xb, "6eada64be5f45755c8"}, {0x1, 0xc, "d582caaf1cb9bbce71da"}, {0x1, 0x5, "cef94f"}, {0x7, 0x3, '#'}, {0x0, 0x7, "473bd31abd"}, {0x1, 0x9, "19c0e44287abee"}, {0x1, 0x3, "cd"}]}, @timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0xf, [{@loopback, 0x8}, {@local, 0x8001}, {@broadcast, 0xfffffc00}, {@multicast2, 0xae9c}, {@remote, 0x40}]}]}}}}}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x31) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="370000001300031a680907070000000f00e9ff3f13000000170a00170000000004003700b0fa77647f6b4a6aaa58b9a6c011f6bbf40820", 0x37}], 0x1) executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa0000000000000008"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe47}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000e69b789925bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB], 0x18}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0x10, 0x100000000002, 0x4) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba3704002cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) connect$tipc(r0, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x0, 0x2}}}, 0x10) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="1834000002000000000000000000000018190000", @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="00000000002000001b7ebdac940c3a0b24bc1e9a85da3672570777e5a10b42bb22a90185fc47ece9b47a420d11cbd6bdb375e6"], &(0x7f0000000480)='GPL\x00', 0x0, 0x90, &(0x7f0000000780)=""/144, 0x40f00, 0x41, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x23ceb, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000ac0)=[{0x1, 0x1, 0x1}], 0x10, 0x3}, 0x90) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r8, r6, 0x4, r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000001a006da900000000000000001c0000000000000000000000080004"], 0x24}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010800000000000000000a0000000900010073797a310000000028000000000a0300000000"], 0x70}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@link_local, @dev, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @local, @multicast2}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206050000000000000000020000000005000400000000000900020000000500010007000000050005000a0000000c0007686173683a69702c6d61726b00000000efaf871881dc6abf8e"], 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x1, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000001c0)={0x2, 0x0, 0x4}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delqdisc={0x1f0, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd}, {0xe, 0xffe0}, {0x7, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa534}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x4, 0x7, 0x3f, 0x100, 0x6, 0x5, 0x3}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa2, 0x40, 0x1b4a, 0x7, 0x1, 0x6, 0x8, 0xa}}, {0x18, 0x2, [0x9, 0x1f, 0xe164, 0x200, 0x800, 0xf73, 0x6, 0xb46b, 0x7, 0x5]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x138, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1f}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xff, 0x7, 0x1e, 0x1a, 0x12, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "287c3640b41d974a38d7f5a4112c96f9936942a02d4ab65139d1bda86c385817738f58b9faaf75d48c4791d7a12876019fd7b58a601aaf11b95fdc20f13864df01d18d01ad19b2af19288989660e4727309939d8a3bdb11512871dcdfb67657d934e9a256981b286e3aa1be9d405846d79efff9a72306dab67e8ab0ec8d68b812031cf73bd65d35d793368c8014d95bdf7923fab4529368f0a9dfe00637f65ad3c2f5dcc160739f55ef54bc1f1a21fed628be604ec7611be6e113d8d975a2107a1cfa92719b541e402edd2b8f38bc77708ba4dc99379de3f85d35e10c37142668e61b3d9b48e28cf4172b33693170dd27e536e99e3b8f52bef6e2f1045437b14"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x7}}]}}]}, 0x1f0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', r4, 0x0, 0x80, 0x1, 0x9, {{0x2a, 0x4, 0x0, 0x6, 0xa8, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0xd3, 0x0, 0x3, [0x4, 0x8, 0x80]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "c4e1"}]}, @generic={0x94, 0x9, "8365338488a7d2"}, @ssrr={0x89, 0xb, 0xf5, [@multicast2, @local]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x6, 0xb, "6eada64be5f45755c8"}, {0x1, 0xc, "d582caaf1cb9bbce71da"}, {0x1, 0x5, "cef94f"}, {0x7, 0x3, '#'}, {0x0, 0x7, "473bd31abd"}, {0x1, 0x9, "19c0e44287abee"}, {0x1, 0x3, "cd"}]}, @timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0xf, [{@loopback, 0x8}, {@local, 0x8001}, {@broadcast, 0xfffffc00}, {@multicast2, 0xae9c}, {@remote, 0x40}]}]}}}}}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x31) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="370000001300031a680907070000000f00e9ff3f13000000170a00170000000004003700b0fa77647f6b4a6aaa58b9a6c011f6bbf40820", 0x37}], 0x1) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100e8ffffff00000000250000002000018008000100", @ANYRES32=r2, @ANYBLOB="14000200776731"], 0x34}}, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=17s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 3, 4, 23, 30, 3, 2, 4, 3] detailed listing: executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000700)=""/262, 0x106}], 0x1}, 0x5}], 0x1, 0x2, 0x0) executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000840)=0x3, 0x78bfad8e4ece0e71) sendmmsg$inet6(r0, &(0x7f0000005c80)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0xb80b) write(r0, 0x0, 0x6000) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000f1a000000000000000018160000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000ffe0f505b703000000000000850000002a000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x8}, 0x90) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206050000000000000000020000000005000400000000000900020000000500010007000000050005000a0000000c0007686173683a69702c6d61726b00000000efaf871881dc6abf8e"], 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x1, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000001c0)={0x2, 0x0, 0x4}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delqdisc={0x1f0, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd}, {0xe, 0xffe0}, {0x7, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa534}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x4, 0x7, 0x3f, 0x100, 0x6, 0x5, 0x3}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa2, 0x40, 0x1b4a, 0x7, 0x1, 0x6, 0x8, 0xa}}, {0x18, 0x2, [0x9, 0x1f, 0xe164, 0x200, 0x800, 0xf73, 0x6, 0xb46b, 0x7, 0x5]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x138, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1f}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xff, 0x7, 0x1e, 0x1a, 0x12, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x7}}]}}]}, 0x1f0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', r4, 0x0, 0x80, 0x1, 0x9, {{0x2a, 0x4, 0x0, 0x6, 0xa8, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0xd3, 0x0, 0x3, [0x4, 0x8, 0x80]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "c4e1"}]}, @generic={0x94, 0x9, "8365338488a7d2"}, @ssrr={0x89, 0xb, 0xf5, [@multicast2, @local]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x6, 0xb, "6eada64be5f45755c8"}, {0x1, 0xc, "d582caaf1cb9bbce71da"}, {0x1, 0x5, "cef94f"}, {0x7, 0x3, '#'}, {0x0, 0x7, "473bd31abd"}, {0x1, 0x9, "19c0e44287abee"}, {0x1, 0x3, "cd"}]}, @timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0xf, [{@loopback, 0x8}, {@local, 0x8001}, {@broadcast, 0xfffffc00}, {@multicast2, 0xae9c}, {@remote, 0x40}]}]}}}}}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x31) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="370000001300031a680907070000000f00e9ff3f13000000170a00170000000004003700b0fa77647f6b4a6aaa58b9a6c011f6bbf40820", 0x37}], 0x1) executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa0000000000000008"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe47}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000e69b789925bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB], 0x18}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0x10, 0x100000000002, 0x4) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba3704002cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) connect$tipc(r0, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x0, 0x2}}}, 0x10) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="1834000002000000000000000000000018190000", @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="00000000002000001b7ebdac940c3a0b24bc1e9a85da3672570777e5a10b42bb22a90185fc47ece9b47a420d11cbd6bdb375e6"], &(0x7f0000000480)='GPL\x00', 0x0, 0x90, &(0x7f0000000780)=""/144, 0x40f00, 0x41, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x23ceb, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000ac0)=[{0x1, 0x1, 0x1}], 0x10, 0x3}, 0x90) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r8, r6, 0x4, r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000001a006da900000000000000001c0000000000000000000000080004"], 0x24}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010800000000000000000a0000000900010073797a310000000028000000000a0300000000"], 0x70}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@link_local, @dev, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @local, @multicast2}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @local, 0x800000}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@hoplimit={{0x0, 0x29, 0x34, 0x2}}], 0x30}}], 0x2, 0x0) executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}}, 0x0) executing program 4: r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast2, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3500, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) program did not crash bisect: split chunks (needed=true): <2>, <3>, <2>, <3>, <2> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=17s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 3, 4, 23, 30, 3, 2, 4, 3, 23, 4] detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000840)=0x3, 0x78bfad8e4ece0e71) sendmmsg$inet6(r0, &(0x7f0000005c80)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0xb80b) write(r0, 0x0, 0x6000) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000f1a000000000000000018160000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000ffe0f505b703000000000000850000002a000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x8}, 0x90) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206050000000000000000020000000005000400000000000900020000000500010007000000050005000a0000000c0007686173683a69702c6d61726b00000000efaf871881dc6abf8e"], 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x1, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000001c0)={0x2, 0x0, 0x4}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delqdisc={0x1f0, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd}, {0xe, 0xffe0}, {0x7, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa534}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x4, 0x7, 0x3f, 0x100, 0x6, 0x5, 0x3}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa2, 0x40, 0x1b4a, 0x7, 0x1, 0x6, 0x8, 0xa}}, {0x18, 0x2, [0x9, 0x1f, 0xe164, 0x200, 0x800, 0xf73, 0x6, 0xb46b, 0x7, 0x5]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x138, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1f}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xff, 0x7, 0x1e, 0x1a, 0x12, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x7}}]}}]}, 0x1f0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', r4, 0x0, 0x80, 0x1, 0x9, {{0x2a, 0x4, 0x0, 0x6, 0xa8, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0xd3, 0x0, 0x3, [0x4, 0x8, 0x80]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "c4e1"}]}, @generic={0x94, 0x9, "8365338488a7d2"}, @ssrr={0x89, 0xb, 0xf5, [@multicast2, @local]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x6, 0xb, "6eada64be5f45755c8"}, {0x1, 0xc, "d582caaf1cb9bbce71da"}, {0x1, 0x5, "cef94f"}, {0x7, 0x3, '#'}, {0x0, 0x7, "473bd31abd"}, {0x1, 0x9, "19c0e44287abee"}, {0x1, 0x3, "cd"}]}, @timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0xf, [{@loopback, 0x8}, {@local, 0x8001}, {@broadcast, 0xfffffc00}, {@multicast2, 0xae9c}, {@remote, 0x40}]}]}}}}}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x31) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="370000001300031a680907070000000f00e9ff3f13000000170a00170000000004003700b0fa77647f6b4a6aaa58b9a6c011f6bbf40820", 0x37}], 0x1) executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa0000000000000008"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe47}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000e69b789925bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB], 0x18}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0x10, 0x100000000002, 0x4) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba3704002cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) connect$tipc(r0, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x0, 0x2}}}, 0x10) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="1834000002000000000000000000000018190000", @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="00000000002000001b7ebdac940c3a0b24bc1e9a85da3672570777e5a10b42bb22a90185fc47ece9b47a420d11cbd6bdb375e6"], &(0x7f0000000480)='GPL\x00', 0x0, 0x90, &(0x7f0000000780)=""/144, 0x40f00, 0x41, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x23ceb, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000ac0)=[{0x1, 0x1, 0x1}], 0x10, 0x3}, 0x90) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r8, r6, 0x4, r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000001a006da900000000000000001c0000000000000000000000080004"], 0x24}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010800000000000000000a0000000900010073797a310000000028000000000a0300000000"], 0x70}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@link_local, @dev, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @local, @multicast2}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @local, 0x800000}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@hoplimit={{0x0, 0x29, 0x34, 0x2}}], 0x30}}], 0x2, 0x0) executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}}, 0x0) executing program 4: r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast2, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3500, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206050000000000000000020000000005000400000000000900020000000500010007000000050005000a0000000c0007686173683a69702c6d61726b00000000efaf871881dc6abf8e"], 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x1, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000001c0)={0x2, 0x0, 0x4}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delqdisc={0x1f0, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd}, {0xe, 0xffe0}, {0x7, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa534}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x4, 0x7, 0x3f, 0x100, 0x6, 0x5, 0x3}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa2, 0x40, 0x1b4a, 0x7, 0x1, 0x6, 0x8, 0xa}}, {0x18, 0x2, [0x9, 0x1f, 0xe164, 0x200, 0x800, 0xf73, 0x6, 0xb46b, 0x7, 0x5]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x138, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1f}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xff, 0x7, 0x1e, 0x1a, 0x12, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x7}}]}}]}, 0x1f0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', r4, 0x0, 0x80, 0x1, 0x9, {{0x2a, 0x4, 0x0, 0x6, 0xa8, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0xd3, 0x0, 0x3, [0x4, 0x8, 0x80]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "c4e1"}]}, @generic={0x94, 0x9, "8365338488a7d2"}, @ssrr={0x89, 0xb, 0xf5, [@multicast2, @local]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x6, 0xb, "6eada64be5f45755c8"}, {0x1, 0xc, "d582caaf1cb9bbce71da"}, {0x1, 0x5, "cef94f"}, {0x7, 0x3, '#'}, {0x0, 0x7, "473bd31abd"}, {0x1, 0x9, "19c0e44287abee"}, {0x1, 0x3, "cd"}]}, @timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0xf, [{@loopback, 0x8}, {@local, 0x8001}, {@broadcast, 0xfffffc00}, {@multicast2, 0xae9c}, {@remote, 0x40}]}]}}}}}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x31) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="370000001300031a680907070000000f00e9ff3f13000000170a00170000000004003700b0fa77647f6b4a6aaa58b9a6c011f6bbf40820", 0x37}], 0x1) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100e8ffffff00000000250000002000018008000100", @ANYRES32=r2, @ANYBLOB="14000200776731"], 0x34}}, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=17s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 3, 4, 23, 30, 3, 2, 4, 3, 23, 4] detailed listing: executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000700)=""/262, 0x106}], 0x1}, 0x5}], 0x1, 0x2, 0x0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000f1a000000000000000018160000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000ffe0f505b703000000000000850000002a000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x8}, 0x90) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206050000000000000000020000000005000400000000000900020000000500010007000000050005000a0000000c0007686173683a69702c6d61726b00000000efaf871881dc6abf8e"], 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x1, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000001c0)={0x2, 0x0, 0x4}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delqdisc={0x1f0, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd}, {0xe, 0xffe0}, {0x7, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa534}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x4, 0x7, 0x3f, 0x100, 0x6, 0x5, 0x3}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa2, 0x40, 0x1b4a, 0x7, 0x1, 0x6, 0x8, 0xa}}, {0x18, 0x2, [0x9, 0x1f, 0xe164, 0x200, 0x800, 0xf73, 0x6, 0xb46b, 0x7, 0x5]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x138, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1f}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xff, 0x7, 0x1e, 0x1a, 0x12, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x7}}]}}]}, 0x1f0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', r4, 0x0, 0x80, 0x1, 0x9, {{0x2a, 0x4, 0x0, 0x6, 0xa8, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0xd3, 0x0, 0x3, [0x4, 0x8, 0x80]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "c4e1"}]}, @generic={0x94, 0x9, "8365338488a7d2"}, @ssrr={0x89, 0xb, 0xf5, [@multicast2, @local]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x6, 0xb, "6eada64be5f45755c8"}, {0x1, 0xc, "d582caaf1cb9bbce71da"}, {0x1, 0x5, "cef94f"}, {0x7, 0x3, '#'}, {0x0, 0x7, "473bd31abd"}, {0x1, 0x9, "19c0e44287abee"}, {0x1, 0x3, "cd"}]}, @timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0xf, [{@loopback, 0x8}, {@local, 0x8001}, {@broadcast, 0xfffffc00}, {@multicast2, 0xae9c}, {@remote, 0x40}]}]}}}}}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x31) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="370000001300031a680907070000000f00e9ff3f13000000170a00170000000004003700b0fa77647f6b4a6aaa58b9a6c011f6bbf40820", 0x37}], 0x1) executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa0000000000000008"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe47}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000e69b789925bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB], 0x18}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0x10, 0x100000000002, 0x4) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba3704002cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) connect$tipc(r0, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x0, 0x2}}}, 0x10) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="1834000002000000000000000000000018190000", @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="00000000002000001b7ebdac940c3a0b24bc1e9a85da3672570777e5a10b42bb22a90185fc47ece9b47a420d11cbd6bdb375e6"], &(0x7f0000000480)='GPL\x00', 0x0, 0x90, &(0x7f0000000780)=""/144, 0x40f00, 0x41, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x23ceb, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000ac0)=[{0x1, 0x1, 0x1}], 0x10, 0x3}, 0x90) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r8, r6, 0x4, r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000001a006da900000000000000001c0000000000000000000000080004"], 0x24}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010800000000000000000a0000000900010073797a310000000028000000000a0300000000"], 0x70}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@link_local, @dev, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @local, @multicast2}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @local, 0x800000}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@hoplimit={{0x0, 0x29, 0x34, 0x2}}], 0x30}}], 0x2, 0x0) executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}}, 0x0) executing program 4: r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast2, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3500, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206050000000000000000020000000005000400000000000900020000000500010007000000050005000a0000000c0007686173683a69702c6d61726b00000000efaf871881dc6abf8e"], 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x1, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000001c0)={0x2, 0x0, 0x4}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delqdisc={0x1f0, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd}, {0xe, 0xffe0}, {0x7, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa534}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x4, 0x7, 0x3f, 0x100, 0x6, 0x5, 0x3}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa2, 0x40, 0x1b4a, 0x7, 0x1, 0x6, 0x8, 0xa}}, {0x18, 0x2, [0x9, 0x1f, 0xe164, 0x200, 0x800, 0xf73, 0x6, 0xb46b, 0x7, 0x5]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x138, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1f}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xff, 0x7, 0x1e, 0x1a, 0x12, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x7}}]}}]}, 0x1f0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', r4, 0x0, 0x80, 0x1, 0x9, {{0x2a, 0x4, 0x0, 0x6, 0xa8, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0xd3, 0x0, 0x3, [0x4, 0x8, 0x80]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "c4e1"}]}, @generic={0x94, 0x9, "8365338488a7d2"}, @ssrr={0x89, 0xb, 0xf5, [@multicast2, @local]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x6, 0xb, "6eada64be5f45755c8"}, {0x1, 0xc, "d582caaf1cb9bbce71da"}, {0x1, 0x5, "cef94f"}, {0x7, 0x3, '#'}, {0x0, 0x7, "473bd31abd"}, {0x1, 0x9, "19c0e44287abee"}, {0x1, 0x3, "cd"}]}, @timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0xf, [{@loopback, 0x8}, {@local, 0x8001}, {@broadcast, 0xfffffc00}, {@multicast2, 0xae9c}, {@remote, 0x40}]}]}}}}}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x31) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="370000001300031a680907070000000f00e9ff3f13000000170a00170000000004003700b0fa77647f6b4a6aaa58b9a6c011f6bbf40820", 0x37}], 0x1) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100e8ffffff00000000250000002000018008000100", @ANYRES32=r2, @ANYBLOB="14000200776731"], 0x34}}, 0x0) program did not crash bisect: split chunk #1 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=17s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 23, 30, 3, 2, 4, 3, 23, 4] detailed listing: executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000700)=""/262, 0x106}], 0x1}, 0x5}], 0x1, 0x2, 0x0) executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000840)=0x3, 0x78bfad8e4ece0e71) sendmmsg$inet6(r0, &(0x7f0000005c80)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0xb80b) write(r0, 0x0, 0x6000) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206050000000000000000020000000005000400000000000900020000000500010007000000050005000a0000000c0007686173683a69702c6d61726b00000000efaf871881dc6abf8e"], 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x1, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000001c0)={0x2, 0x0, 0x4}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delqdisc={0x1f0, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd}, {0xe, 0xffe0}, {0x7, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa534}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x4, 0x7, 0x3f, 0x100, 0x6, 0x5, 0x3}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa2, 0x40, 0x1b4a, 0x7, 0x1, 0x6, 0x8, 0xa}}, {0x18, 0x2, [0x9, 0x1f, 0xe164, 0x200, 0x800, 0xf73, 0x6, 0xb46b, 0x7, 0x5]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x138, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1f}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xff, 0x7, 0x1e, 0x1a, 0x12, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x7}}]}}]}, 0x1f0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', r4, 0x0, 0x80, 0x1, 0x9, {{0x2a, 0x4, 0x0, 0x6, 0xa8, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0xd3, 0x0, 0x3, [0x4, 0x8, 0x80]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "c4e1"}]}, @generic={0x94, 0x9, "8365338488a7d2"}, @ssrr={0x89, 0xb, 0xf5, [@multicast2, @local]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x6, 0xb, "6eada64be5f45755c8"}, {0x1, 0xc, "d582caaf1cb9bbce71da"}, {0x1, 0x5, "cef94f"}, {0x7, 0x3, '#'}, {0x0, 0x7, "473bd31abd"}, {0x1, 0x9, "19c0e44287abee"}, {0x1, 0x3, "cd"}]}, @timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0xf, [{@loopback, 0x8}, {@local, 0x8001}, {@broadcast, 0xfffffc00}, {@multicast2, 0xae9c}, {@remote, 0x40}]}]}}}}}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x31) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="370000001300031a680907070000000f00e9ff3f13000000170a00170000000004003700b0fa77647f6b4a6aaa58b9a6c011f6bbf40820", 0x37}], 0x1) executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa0000000000000008"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe47}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000e69b789925bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB], 0x18}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0x10, 0x100000000002, 0x4) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba3704002cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) connect$tipc(r0, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x0, 0x2}}}, 0x10) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="1834000002000000000000000000000018190000", @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="00000000002000001b7ebdac940c3a0b24bc1e9a85da3672570777e5a10b42bb22a90185fc47ece9b47a420d11cbd6bdb375e6"], &(0x7f0000000480)='GPL\x00', 0x0, 0x90, &(0x7f0000000780)=""/144, 0x40f00, 0x41, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x23ceb, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000ac0)=[{0x1, 0x1, 0x1}], 0x10, 0x3}, 0x90) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r8, r6, 0x4, r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000001a006da900000000000000001c0000000000000000000000080004"], 0x24}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010800000000000000000a0000000900010073797a310000000028000000000a0300000000"], 0x70}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@link_local, @dev, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @local, @multicast2}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @local, 0x800000}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@hoplimit={{0x0, 0x29, 0x34, 0x2}}], 0x30}}], 0x2, 0x0) executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}}, 0x0) executing program 4: r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast2, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3500, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206050000000000000000020000000005000400000000000900020000000500010007000000050005000a0000000c0007686173683a69702c6d61726b00000000efaf871881dc6abf8e"], 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x1, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000001c0)={0x2, 0x0, 0x4}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delqdisc={0x1f0, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd}, {0xe, 0xffe0}, {0x7, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa534}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x4, 0x7, 0x3f, 0x100, 0x6, 0x5, 0x3}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa2, 0x40, 0x1b4a, 0x7, 0x1, 0x6, 0x8, 0xa}}, {0x18, 0x2, [0x9, 0x1f, 0xe164, 0x200, 0x800, 0xf73, 0x6, 0xb46b, 0x7, 0x5]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x138, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1f}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xff, 0x7, 0x1e, 0x1a, 0x12, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "287c3640b41d974a38d7f5a4112c96f9936942a02d4ab65139d1bda86c385817738f58b9faaf75d48c4791d7a12876019fd7b58a601aaf11b95fdc20f13864df01d18d01ad19b2af19288989660e4727309939d8a3bdb11512871dcdfb67657d934e9a256981b286e3aa1be9d405846d79efff9a72306dab67e8ab0ec8d68b812031cf73bd65d35d793368c8014d95bdf7923fab4529368f0a9dfe00637f65ad3c2f5dcc160739f55ef54bc1f1a21fed628be604ec7611be6e113d8d975a2107a1cfa92719b541e402edd2b8f38bc77708ba4dc99379de3f85d35e10c37142668e61b3d9b48e28cf4172b33693170dd27e536e99e3b8f52bef6e2f1045437b14"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x7}}]}}]}, 0x1f0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', r4, 0x0, 0x80, 0x1, 0x9, {{0x2a, 0x4, 0x0, 0x6, 0xa8, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0xd3, 0x0, 0x3, [0x4, 0x8, 0x80]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "c4e1"}]}, @generic={0x94, 0x9, "8365338488a7d2"}, @ssrr={0x89, 0xb, 0xf5, [@multicast2, @local]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x6, 0xb, "6eada64be5f45755c8"}, {0x1, 0xc, "d582caaf1cb9bbce71da"}, {0x1, 0x5, "cef94f"}, {0x7, 0x3, '#'}, {0x0, 0x7, "473bd31abd"}, {0x1, 0x9, "19c0e44287abee"}, {0x1, 0x3, "cd"}]}, @timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0xf, [{@loopback, 0x8}, {@local, 0x8001}, {@broadcast, 0xfffffc00}, {@multicast2, 0xae9c}, {@remote, 0x40}]}]}}}}}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x31) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="370000001300031a680907070000000f00e9ff3f13000000170a00170000000004003700b0fa77647f6b4a6aaa58b9a6c011f6bbf40820", 0x37}], 0x1) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100e8ffffff00000000250000002000018008000100", @ANYRES32=r2, @ANYBLOB="14000200776731"], 0x34}}, 0x0) program crashed: WARNING in ethnl_req_get_phydev bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #2 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=17s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 23, 3, 2, 4, 3, 23, 4] detailed listing: executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000700)=""/262, 0x106}], 0x1}, 0x5}], 0x1, 0x2, 0x0) executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000840)=0x3, 0x78bfad8e4ece0e71) sendmmsg$inet6(r0, &(0x7f0000005c80)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0xb80b) write(r0, 0x0, 0x6000) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206050000000000000000020000000005000400000000000900020000000500010007000000050005000a0000000c0007686173683a69702c6d61726b00000000efaf871881dc6abf8e"], 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x1, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000001c0)={0x2, 0x0, 0x4}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delqdisc={0x1f0, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd}, {0xe, 0xffe0}, {0x7, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa534}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x4, 0x7, 0x3f, 0x100, 0x6, 0x5, 0x3}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa2, 0x40, 0x1b4a, 0x7, 0x1, 0x6, 0x8, 0xa}}, {0x18, 0x2, [0x9, 0x1f, 0xe164, 0x200, 0x800, 0xf73, 0x6, 0xb46b, 0x7, 0x5]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x138, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1f}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xff, 0x7, 0x1e, 0x1a, 0x12, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "287c3640b41d974a38d7f5a4112c96f9936942a02d4ab65139d1bda86c385817738f58b9faaf75d48c4791d7a12876019fd7b58a601aaf11b95fdc20f13864df01d18d01ad19b2af19288989660e4727309939d8a3bdb11512871dcdfb67657d934e9a256981b286e3aa1be9d405846d79efff9a72306dab67e8ab0ec8d68b812031cf73bd65d35d793368c8014d95bdf7923fab4529368f0a9dfe00637f65ad3c2f5dcc160739f55ef54bc1f1a21fed628be604ec7611be6e113d8d975a2107a1cfa92719b541e402edd2b8f38bc77708ba4dc99379de3f85d35e10c37142668e61b3d9b48e28cf4172b33693170dd27e536e99e3b8f52bef6e2f1045437b14"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x7}}]}}]}, 0x1f0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', r4, 0x0, 0x80, 0x1, 0x9, {{0x2a, 0x4, 0x0, 0x6, 0xa8, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0xd3, 0x0, 0x3, [0x4, 0x8, 0x80]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "c4e1"}]}, @generic={0x94, 0x9, "8365338488a7d2"}, @ssrr={0x89, 0xb, 0xf5, [@multicast2, @local]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x6, 0xb, "6eada64be5f45755c8"}, {0x1, 0xc, "d582caaf1cb9bbce71da"}, {0x1, 0x5, "cef94f"}, {0x7, 0x3, '#'}, {0x0, 0x7, "473bd31abd"}, {0x1, 0x9, "19c0e44287abee"}, {0x1, 0x3, "cd"}]}, @timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0xf, [{@loopback, 0x8}, {@local, 0x8001}, {@broadcast, 0xfffffc00}, {@multicast2, 0xae9c}, {@remote, 0x40}]}]}}}}}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x31) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="370000001300031a680907070000000f00e9ff3f13000000170a00170000000004003700b0fa77647f6b4a6aaa58b9a6c011f6bbf40820", 0x37}], 0x1) executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@link_local, @dev, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @local, @multicast2}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @local, 0x800000}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@hoplimit={{0x0, 0x29, 0x34, 0x2}}], 0x30}}], 0x2, 0x0) executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}}, 0x0) executing program 4: r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast2, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3500, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206050000000000000000020000000005000400000000000900020000000500010007000000050005000a0000000c0007686173683a69702c6d61726b00000000efaf871881dc6abf8e"], 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x1, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000001c0)={0x2, 0x0, 0x4}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delqdisc={0x1f0, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd}, {0xe, 0xffe0}, {0x7, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa534}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x4, 0x7, 0x3f, 0x100, 0x6, 0x5, 0x3}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa2, 0x40, 0x1b4a, 0x7, 0x1, 0x6, 0x8, 0xa}}, {0x18, 0x2, [0x9, 0x1f, 0xe164, 0x200, 0x800, 0xf73, 0x6, 0xb46b, 0x7, 0x5]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x138, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1f}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xff, 0x7, 0x1e, 0x1a, 0x12, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x7}}]}}]}, 0x1f0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', r4, 0x0, 0x80, 0x1, 0x9, {{0x2a, 0x4, 0x0, 0x6, 0xa8, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0xd3, 0x0, 0x3, [0x4, 0x8, 0x80]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "c4e1"}]}, @generic={0x94, 0x9, "8365338488a7d2"}, @ssrr={0x89, 0xb, 0xf5, [@multicast2, @local]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x6, 0xb, "6eada64be5f45755c8"}, {0x1, 0xc, "d582caaf1cb9bbce71da"}, {0x1, 0x5, "cef94f"}, {0x7, 0x3, '#'}, {0x0, 0x7, "473bd31abd"}, {0x1, 0x9, "19c0e44287abee"}, {0x1, 0x3, "cd"}]}, @timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0xf, [{@loopback, 0x8}, {@local, 0x8001}, {@broadcast, 0xfffffc00}, {@multicast2, 0xae9c}, {@remote, 0x40}]}]}}}}}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x31) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="370000001300031a680907070000000f00e9ff3f13000000170a00170000000004003700b0fa77647f6b4a6aaa58b9a6c011f6bbf40820", 0x37}], 0x1) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100e8ffffff00000000250000002000018008000100", @ANYRES32=r2, @ANYBLOB="14000200776731"], 0x34}}, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=17s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 23, 30, 2, 4, 3, 23, 4] detailed listing: executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000700)=""/262, 0x106}], 0x1}, 0x5}], 0x1, 0x2, 0x0) executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000840)=0x3, 0x78bfad8e4ece0e71) sendmmsg$inet6(r0, &(0x7f0000005c80)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0xb80b) write(r0, 0x0, 0x6000) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206050000000000000000020000000005000400000000000900020000000500010007000000050005000a0000000c0007686173683a69702c6d61726b00000000efaf871881dc6abf8e"], 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x1, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000001c0)={0x2, 0x0, 0x4}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delqdisc={0x1f0, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd}, {0xe, 0xffe0}, {0x7, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa534}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x4, 0x7, 0x3f, 0x100, 0x6, 0x5, 0x3}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa2, 0x40, 0x1b4a, 0x7, 0x1, 0x6, 0x8, 0xa}}, {0x18, 0x2, [0x9, 0x1f, 0xe164, 0x200, 0x800, 0xf73, 0x6, 0xb46b, 0x7, 0x5]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x138, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1f}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xff, 0x7, 0x1e, 0x1a, 0x12, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x7}}]}}]}, 0x1f0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', r4, 0x0, 0x80, 0x1, 0x9, {{0x2a, 0x4, 0x0, 0x6, 0xa8, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0xd3, 0x0, 0x3, [0x4, 0x8, 0x80]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "c4e1"}]}, @generic={0x94, 0x9, "8365338488a7d2"}, @ssrr={0x89, 0xb, 0xf5, [@multicast2, @local]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x6, 0xb, "6eada64be5f45755c8"}, {0x1, 0xc, "d582caaf1cb9bbce71da"}, {0x1, 0x5, "cef94f"}, {0x7, 0x3, '#'}, {0x0, 0x7, "473bd31abd"}, {0x1, 0x9, "19c0e44287abee"}, {0x1, 0x3, "cd"}]}, @timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0xf, [{@loopback, 0x8}, {@local, 0x8001}, {@broadcast, 0xfffffc00}, {@multicast2, 0xae9c}, {@remote, 0x40}]}]}}}}}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x31) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="370000001300031a680907070000000f00e9ff3f13000000170a00170000000004003700b0fa77647f6b4a6aaa58b9a6c011f6bbf40820", 0x37}], 0x1) executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa0000000000000008"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe47}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000e69b789925bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB], 0x18}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0x10, 0x100000000002, 0x4) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba3704002cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) connect$tipc(r0, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x0, 0x2}}}, 0x10) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="1834000002000000000000000000000018190000", @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="00000000002000001b7ebdac940c3a0b24bc1e9a85da3672570777e5a10b42bb22a90185fc47ece9b47a420d11cbd6bdb375e6"], &(0x7f0000000480)='GPL\x00', 0x0, 0x90, &(0x7f0000000780)=""/144, 0x40f00, 0x41, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x23ceb, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000ac0)=[{0x1, 0x1, 0x1}], 0x10, 0x3}, 0x90) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r8, r6, 0x4, r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000001a006da900000000000000001c0000000000000000000000080004"], 0x24}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010800000000000000000a0000000900010073797a310000000028000000000a0300000000"], 0x70}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @local, 0x800000}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@hoplimit={{0x0, 0x29, 0x34, 0x2}}], 0x30}}], 0x2, 0x0) executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}}, 0x0) executing program 4: r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast2, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3500, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206050000000000000000020000000005000400000000000900020000000500010007000000050005000a0000000c0007686173683a69702c6d61726b00000000efaf871881dc6abf8e"], 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x1, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000001c0)={0x2, 0x0, 0x4}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delqdisc={0x1f0, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd}, {0xe, 0xffe0}, {0x7, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa534}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x4, 0x7, 0x3f, 0x100, 0x6, 0x5, 0x3}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa2, 0x40, 0x1b4a, 0x7, 0x1, 0x6, 0x8, 0xa}}, {0x18, 0x2, [0x9, 0x1f, 0xe164, 0x200, 0x800, 0xf73, 0x6, 0xb46b, 0x7, 0x5]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x138, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1f}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xff, 0x7, 0x1e, 0x1a, 0x12, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "287c3640b41d974a38d7f5a4112c96f9936942a02d4ab65139d1bda86c385817738f58b9faaf75d48c4791d7a12876019fd7b58a601aaf11b95fdc20f13864df01d18d01ad19b2af19288989660e4727309939d8a3bdb11512871dcdfb67657d934e9a256981b286e3aa1be9d405846d79efff9a72306dab67e8ab0ec8d68b812031cf73bd65d35d793368c8014d95bdf7923fab4529368f0a9dfe00637f65ad3c2f5dcc160739f55ef54bc1f1a21fed628be604ec7611be6e113d8d975a2107a1cfa92719b541e402edd2b8f38bc77708ba4dc99379de3f85d35e10c37142668e61b3d9b48e28cf4172b33693170dd27e536e99e3b8f52bef6e2f1045437b14"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x7}}]}}]}, 0x1f0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', r4, 0x0, 0x80, 0x1, 0x9, {{0x2a, 0x4, 0x0, 0x6, 0xa8, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0xd3, 0x0, 0x3, [0x4, 0x8, 0x80]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "c4e1"}]}, @generic={0x94, 0x9, "8365338488a7d2"}, @ssrr={0x89, 0xb, 0xf5, [@multicast2, @local]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x6, 0xb, "6eada64be5f45755c8"}, {0x1, 0xc, "d582caaf1cb9bbce71da"}, {0x1, 0x5, "cef94f"}, {0x7, 0x3, '#'}, {0x0, 0x7, "473bd31abd"}, {0x1, 0x9, "19c0e44287abee"}, {0x1, 0x3, "cd"}]}, @timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0xf, [{@loopback, 0x8}, {@local, 0x8001}, {@broadcast, 0xfffffc00}, {@multicast2, 0xae9c}, {@remote, 0x40}]}]}}}}}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x31) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="370000001300031a680907070000000f00e9ff3f13000000170a00170000000004003700b0fa77647f6b4a6aaa58b9a6c011f6bbf40820", 0x37}], 0x1) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100e8ffffff00000000250000002000018008000100", @ANYRES32=r2, @ANYBLOB="14000200776731"], 0x34}}, 0x0) program did not crash bisect: split chunk #3 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=17s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 23, 30, 3, 3, 23, 4] detailed listing: executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000700)=""/262, 0x106}], 0x1}, 0x5}], 0x1, 0x2, 0x0) executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000840)=0x3, 0x78bfad8e4ece0e71) sendmmsg$inet6(r0, &(0x7f0000005c80)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0xb80b) write(r0, 0x0, 0x6000) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206050000000000000000020000000005000400000000000900020000000500010007000000050005000a0000000c0007686173683a69702c6d61726b00000000efaf871881dc6abf8e"], 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x1, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000001c0)={0x2, 0x0, 0x4}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delqdisc={0x1f0, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd}, {0xe, 0xffe0}, {0x7, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa534}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x4, 0x7, 0x3f, 0x100, 0x6, 0x5, 0x3}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa2, 0x40, 0x1b4a, 0x7, 0x1, 0x6, 0x8, 0xa}}, {0x18, 0x2, [0x9, 0x1f, 0xe164, 0x200, 0x800, 0xf73, 0x6, 0xb46b, 0x7, 0x5]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x138, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1f}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xff, 0x7, 0x1e, 0x1a, 0x12, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x7}}]}}]}, 0x1f0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', r4, 0x0, 0x80, 0x1, 0x9, {{0x2a, 0x4, 0x0, 0x6, 0xa8, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0xd3, 0x0, 0x3, [0x4, 0x8, 0x80]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "c4e1"}]}, @generic={0x94, 0x9, "8365338488a7d2"}, @ssrr={0x89, 0xb, 0xf5, [@multicast2, @local]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x6, 0xb, "6eada64be5f45755c8"}, {0x1, 0xc, "d582caaf1cb9bbce71da"}, {0x1, 0x5, "cef94f"}, {0x7, 0x3, '#'}, {0x0, 0x7, "473bd31abd"}, {0x1, 0x9, "19c0e44287abee"}, {0x1, 0x3, "cd"}]}, @timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0xf, [{@loopback, 0x8}, {@local, 0x8001}, {@broadcast, 0xfffffc00}, {@multicast2, 0xae9c}, {@remote, 0x40}]}]}}}}}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x31) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="370000001300031a680907070000000f00e9ff3f13000000170a00170000000004003700b0fa77647f6b4a6aaa58b9a6c011f6bbf40820", 0x37}], 0x1) executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa0000000000000008"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe47}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000e69b789925bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB], 0x18}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0x10, 0x100000000002, 0x4) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba3704002cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) connect$tipc(r0, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x0, 0x2}}}, 0x10) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="1834000002000000000000000000000018190000", @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="00000000002000001b7ebdac940c3a0b24bc1e9a85da3672570777e5a10b42bb22a90185fc47ece9b47a420d11cbd6bdb375e6"], &(0x7f0000000480)='GPL\x00', 0x0, 0x90, &(0x7f0000000780)=""/144, 0x40f00, 0x41, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x23ceb, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000ac0)=[{0x1, 0x1, 0x1}], 0x10, 0x3}, 0x90) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r8, r6, 0x4, r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000001a006da900000000000000001c0000000000000000000000080004"], 0x24}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010800000000000000000a0000000900010073797a310000000028000000000a0300000000"], 0x70}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@link_local, @dev, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @local, @multicast2}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) executing program 4: r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast2, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3500, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206050000000000000000020000000005000400000000000900020000000500010007000000050005000a0000000c0007686173683a69702c6d61726b00000000efaf871881dc6abf8e"], 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x1, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000001c0)={0x2, 0x0, 0x4}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delqdisc={0x1f0, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd}, {0xe, 0xffe0}, {0x7, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa534}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x4, 0x7, 0x3f, 0x100, 0x6, 0x5, 0x3}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa2, 0x40, 0x1b4a, 0x7, 0x1, 0x6, 0x8, 0xa}}, {0x18, 0x2, [0x9, 0x1f, 0xe164, 0x200, 0x800, 0xf73, 0x6, 0xb46b, 0x7, 0x5]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x138, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1f}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xff, 0x7, 0x1e, 0x1a, 0x12, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x7}}]}}]}, 0x1f0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', r4, 0x0, 0x80, 0x1, 0x9, {{0x2a, 0x4, 0x0, 0x6, 0xa8, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0xd3, 0x0, 0x3, [0x4, 0x8, 0x80]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "c4e1"}]}, @generic={0x94, 0x9, "8365338488a7d2"}, @ssrr={0x89, 0xb, 0xf5, [@multicast2, @local]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x6, 0xb, "6eada64be5f45755c8"}, {0x1, 0xc, "d582caaf1cb9bbce71da"}, {0x1, 0x5, "cef94f"}, {0x7, 0x3, '#'}, {0x0, 0x7, "473bd31abd"}, {0x1, 0x9, "19c0e44287abee"}, {0x1, 0x3, "cd"}]}, @timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0xf, [{@loopback, 0x8}, {@local, 0x8001}, {@broadcast, 0xfffffc00}, {@multicast2, 0xae9c}, {@remote, 0x40}]}]}}}}}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x31) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="370000001300031a680907070000000f00e9ff3f13000000170a00170000000004003700b0fa77647f6b4a6aaa58b9a6c011f6bbf40820", 0x37}], 0x1) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100e8ffffff00000000250000002000018008000100", @ANYRES32=r2, @ANYBLOB="14000200776731"], 0x34}}, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=17s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 23, 30, 3, 2, 4, 23, 4] detailed listing: executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000700)=""/262, 0x106}], 0x1}, 0x5}], 0x1, 0x2, 0x0) executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000840)=0x3, 0x78bfad8e4ece0e71) sendmmsg$inet6(r0, &(0x7f0000005c80)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0xb80b) write(r0, 0x0, 0x6000) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206050000000000000000020000000005000400000000000900020000000500010007000000050005000a0000000c0007686173683a69702c6d61726b00000000efaf871881dc6abf8e"], 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x1, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000001c0)={0x2, 0x0, 0x4}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delqdisc={0x1f0, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd}, {0xe, 0xffe0}, {0x7, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa534}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x4, 0x7, 0x3f, 0x100, 0x6, 0x5, 0x3}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa2, 0x40, 0x1b4a, 0x7, 0x1, 0x6, 0x8, 0xa}}, {0x18, 0x2, [0x9, 0x1f, 0xe164, 0x200, 0x800, 0xf73, 0x6, 0xb46b, 0x7, 0x5]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x138, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1f}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xff, 0x7, 0x1e, 0x1a, 0x12, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x7}}]}}]}, 0x1f0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', r4, 0x0, 0x80, 0x1, 0x9, {{0x2a, 0x4, 0x0, 0x6, 0xa8, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0xd3, 0x0, 0x3, [0x4, 0x8, 0x80]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "c4e1"}]}, @generic={0x94, 0x9, "8365338488a7d2"}, @ssrr={0x89, 0xb, 0xf5, [@multicast2, @local]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x6, 0xb, "6eada64be5f45755c8"}, {0x1, 0xc, "d582caaf1cb9bbce71da"}, {0x1, 0x5, "cef94f"}, {0x7, 0x3, '#'}, {0x0, 0x7, "473bd31abd"}, {0x1, 0x9, "19c0e44287abee"}, {0x1, 0x3, "cd"}]}, @timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0xf, [{@loopback, 0x8}, {@local, 0x8001}, {@broadcast, 0xfffffc00}, {@multicast2, 0xae9c}, {@remote, 0x40}]}]}}}}}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x31) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="370000001300031a680907070000000f00e9ff3f13000000170a00170000000004003700b0fa77647f6b4a6aaa58b9a6c011f6bbf40820", 0x37}], 0x1) executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa0000000000000008"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe47}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000e69b789925bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB], 0x18}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0x10, 0x100000000002, 0x4) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba3704002cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) connect$tipc(r0, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x0, 0x2}}}, 0x10) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="1834000002000000000000000000000018190000", @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="00000000002000001b7ebdac940c3a0b24bc1e9a85da3672570777e5a10b42bb22a90185fc47ece9b47a420d11cbd6bdb375e6"], &(0x7f0000000480)='GPL\x00', 0x0, 0x90, &(0x7f0000000780)=""/144, 0x40f00, 0x41, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x23ceb, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000ac0)=[{0x1, 0x1, 0x1}], 0x10, 0x3}, 0x90) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r8, r6, 0x4, r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000001a006da900000000000000001c0000000000000000000000080004"], 0x24}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010800000000000000000a0000000900010073797a310000000028000000000a0300000000"], 0x70}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@link_local, @dev, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @local, @multicast2}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @local, 0x800000}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@hoplimit={{0x0, 0x29, 0x34, 0x2}}], 0x30}}], 0x2, 0x0) executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}}, 0x0) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206050000000000000000020000000005000400000000000900020000000500010007000000050005000a0000000c0007686173683a69702c6d61726b00000000efaf871881dc6abf8e"], 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x1, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000001c0)={0x2, 0x0, 0x4}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delqdisc={0x1f0, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd}, {0xe, 0xffe0}, {0x7, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa534}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x4, 0x7, 0x3f, 0x100, 0x6, 0x5, 0x3}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa2, 0x40, 0x1b4a, 0x7, 0x1, 0x6, 0x8, 0xa}}, {0x18, 0x2, [0x9, 0x1f, 0xe164, 0x200, 0x800, 0xf73, 0x6, 0xb46b, 0x7, 0x5]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x138, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1f}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xff, 0x7, 0x1e, 0x1a, 0x12, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x7}}]}}]}, 0x1f0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', r4, 0x0, 0x80, 0x1, 0x9, {{0x2a, 0x4, 0x0, 0x6, 0xa8, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0xd3, 0x0, 0x3, [0x4, 0x8, 0x80]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "c4e1"}]}, @generic={0x94, 0x9, "8365338488a7d2"}, @ssrr={0x89, 0xb, 0xf5, [@multicast2, @local]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x6, 0xb, "6eada64be5f45755c8"}, {0x1, 0xc, "d582caaf1cb9bbce71da"}, {0x1, 0x5, "cef94f"}, {0x7, 0x3, '#'}, {0x0, 0x7, "473bd31abd"}, {0x1, 0x9, "19c0e44287abee"}, {0x1, 0x3, "cd"}]}, @timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0xf, [{@loopback, 0x8}, {@local, 0x8001}, {@broadcast, 0xfffffc00}, {@multicast2, 0xae9c}, {@remote, 0x40}]}]}}}}}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x31) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="370000001300031a680907070000000f00e9ff3f13000000170a00170000000004003700b0fa77647f6b4a6aaa58b9a6c011f6bbf40820", 0x37}], 0x1) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100e8ffffff00000000250000002000018008000100", @ANYRES32=r2, @ANYBLOB="14000200776731"], 0x34}}, 0x0) program did not crash bisect: split chunk #4 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=17s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 23, 30, 3, 2, 4, 3, 4] detailed listing: executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000700)=""/262, 0x106}], 0x1}, 0x5}], 0x1, 0x2, 0x0) executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000840)=0x3, 0x78bfad8e4ece0e71) sendmmsg$inet6(r0, &(0x7f0000005c80)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0xb80b) write(r0, 0x0, 0x6000) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206050000000000000000020000000005000400000000000900020000000500010007000000050005000a0000000c0007686173683a69702c6d61726b00000000efaf871881dc6abf8e"], 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x1, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000001c0)={0x2, 0x0, 0x4}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delqdisc={0x1f0, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd}, {0xe, 0xffe0}, {0x7, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa534}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x4, 0x7, 0x3f, 0x100, 0x6, 0x5, 0x3}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa2, 0x40, 0x1b4a, 0x7, 0x1, 0x6, 0x8, 0xa}}, {0x18, 0x2, [0x9, 0x1f, 0xe164, 0x200, 0x800, 0xf73, 0x6, 0xb46b, 0x7, 0x5]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x138, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1f}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xff, 0x7, 0x1e, 0x1a, 0x12, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x7}}]}}]}, 0x1f0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', r4, 0x0, 0x80, 0x1, 0x9, {{0x2a, 0x4, 0x0, 0x6, 0xa8, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0xd3, 0x0, 0x3, [0x4, 0x8, 0x80]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "c4e1"}]}, @generic={0x94, 0x9, "8365338488a7d2"}, @ssrr={0x89, 0xb, 0xf5, [@multicast2, @local]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x6, 0xb, "6eada64be5f45755c8"}, {0x1, 0xc, "d582caaf1cb9bbce71da"}, {0x1, 0x5, "cef94f"}, {0x7, 0x3, '#'}, {0x0, 0x7, "473bd31abd"}, {0x1, 0x9, "19c0e44287abee"}, {0x1, 0x3, "cd"}]}, @timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0xf, [{@loopback, 0x8}, {@local, 0x8001}, {@broadcast, 0xfffffc00}, {@multicast2, 0xae9c}, {@remote, 0x40}]}]}}}}}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x31) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="370000001300031a680907070000000f00e9ff3f13000000170a00170000000004003700b0fa77647f6b4a6aaa58b9a6c011f6bbf40820", 0x37}], 0x1) executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa0000000000000008"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe47}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000e69b789925bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB], 0x18}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0x10, 0x100000000002, 0x4) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba3704002cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) connect$tipc(r0, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x0, 0x2}}}, 0x10) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="1834000002000000000000000000000018190000", @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="00000000002000001b7ebdac940c3a0b24bc1e9a85da3672570777e5a10b42bb22a90185fc47ece9b47a420d11cbd6bdb375e6"], &(0x7f0000000480)='GPL\x00', 0x0, 0x90, &(0x7f0000000780)=""/144, 0x40f00, 0x41, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x23ceb, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000ac0)=[{0x1, 0x1, 0x1}], 0x10, 0x3}, 0x90) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r8, r6, 0x4, r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000001a006da900000000000000001c0000000000000000000000080004"], 0x24}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010800000000000000000a0000000900010073797a310000000028000000000a0300000000"], 0x70}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@link_local, @dev, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @local, @multicast2}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @local, 0x800000}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@hoplimit={{0x0, 0x29, 0x34, 0x2}}], 0x30}}], 0x2, 0x0) executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}}, 0x0) executing program 4: r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast2, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3500, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100e8ffffff00000000250000002000018008000100", @ANYRES32=r2, @ANYBLOB="14000200776731"], 0x34}}, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=17s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 23, 30, 3, 2, 4, 3, 23] detailed listing: executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000700)=""/262, 0x106}], 0x1}, 0x5}], 0x1, 0x2, 0x0) executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000840)=0x3, 0x78bfad8e4ece0e71) sendmmsg$inet6(r0, &(0x7f0000005c80)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0xb80b) write(r0, 0x0, 0x6000) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206050000000000000000020000000005000400000000000900020000000500010007000000050005000a0000000c0007686173683a69702c6d61726b00000000efaf871881dc6abf8e"], 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x1, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000001c0)={0x2, 0x0, 0x4}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delqdisc={0x1f0, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd}, {0xe, 0xffe0}, {0x7, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa534}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x4, 0x7, 0x3f, 0x100, 0x6, 0x5, 0x3}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa2, 0x40, 0x1b4a, 0x7, 0x1, 0x6, 0x8, 0xa}}, {0x18, 0x2, [0x9, 0x1f, 0xe164, 0x200, 0x800, 0xf73, 0x6, 0xb46b, 0x7, 0x5]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x138, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1f}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xff, 0x7, 0x1e, 0x1a, 0x12, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x7}}]}}]}, 0x1f0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', r4, 0x0, 0x80, 0x1, 0x9, {{0x2a, 0x4, 0x0, 0x6, 0xa8, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0xd3, 0x0, 0x3, [0x4, 0x8, 0x80]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "c4e1"}]}, @generic={0x94, 0x9, "8365338488a7d2"}, @ssrr={0x89, 0xb, 0xf5, [@multicast2, @local]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x6, 0xb, "6eada64be5f45755c8"}, {0x1, 0xc, "d582caaf1cb9bbce71da"}, {0x1, 0x5, "cef94f"}, {0x7, 0x3, '#'}, {0x0, 0x7, "473bd31abd"}, {0x1, 0x9, "19c0e44287abee"}, {0x1, 0x3, "cd"}]}, @timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0xf, [{@loopback, 0x8}, {@local, 0x8001}, {@broadcast, 0xfffffc00}, {@multicast2, 0xae9c}, {@remote, 0x40}]}]}}}}}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x31) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="370000001300031a680907070000000f00e9ff3f13000000170a00170000000004003700b0fa77647f6b4a6aaa58b9a6c011f6bbf40820", 0x37}], 0x1) executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa0000000000000008"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe47}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000e69b789925bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB], 0x18}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0x10, 0x100000000002, 0x4) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba3704002cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) connect$tipc(r0, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x0, 0x2}}}, 0x10) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="1834000002000000000000000000000018190000", @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="00000000002000001b7ebdac940c3a0b24bc1e9a85da3672570777e5a10b42bb22a90185fc47ece9b47a420d11cbd6bdb375e6"], &(0x7f0000000480)='GPL\x00', 0x0, 0x90, &(0x7f0000000780)=""/144, 0x40f00, 0x41, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x23ceb, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000ac0)=[{0x1, 0x1, 0x1}], 0x10, 0x3}, 0x90) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r8, r6, 0x4, r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000001a006da900000000000000001c0000000000000000000000080004"], 0x24}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010800000000000000000a0000000900010073797a310000000028000000000a0300000000"], 0x70}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@link_local, @dev, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @local, @multicast2}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @local, 0x800000}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@hoplimit={{0x0, 0x29, 0x34, 0x2}}], 0x30}}], 0x2, 0x0) executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}}, 0x0) executing program 4: r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast2, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3500, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206050000000000000000020000000005000400000000000900020000000500010007000000050005000a0000000c0007686173683a69702c6d61726b00000000efaf871881dc6abf8e"], 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x1, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000001c0)={0x2, 0x0, 0x4}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delqdisc={0x1f0, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd}, {0xe, 0xffe0}, {0x7, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa534}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x4, 0x7, 0x3f, 0x100, 0x6, 0x5, 0x3}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa2, 0x40, 0x1b4a, 0x7, 0x1, 0x6, 0x8, 0xa}}, {0x18, 0x2, [0x9, 0x1f, 0xe164, 0x200, 0x800, 0xf73, 0x6, 0xb46b, 0x7, 0x5]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x138, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1f}, @TCA_RED_PARMS={0x14, 0x1, {0x1ff, 0xff, 0x7, 0x1e, 0x1a, 0x12, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x7}}]}}]}, 0x1f0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', r4, 0x0, 0x80, 0x1, 0x9, {{0x2a, 0x4, 0x0, 0x6, 0xa8, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0xd3, 0x0, 0x3, [0x4, 0x8, 0x80]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "c4e1"}]}, @generic={0x94, 0x9, "8365338488a7d2"}, @ssrr={0x89, 0xb, 0xf5, [@multicast2, @local]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x6, 0xb, "6eada64be5f45755c8"}, {0x1, 0xc, "d582caaf1cb9bbce71da"}, {0x1, 0x5, "cef94f"}, {0x7, 0x3, '#'}, {0x0, 0x7, "473bd31abd"}, {0x1, 0x9, "19c0e44287abee"}, {0x1, 0x3, "cd"}]}, @timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0xf, [{@loopback, 0x8}, {@local, 0x8001}, {@broadcast, 0xfffffc00}, {@multicast2, 0xae9c}, {@remote, 0x40}]}]}}}}}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x31) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="370000001300031a680907070000000f00e9ff3f13000000170a00170000000004003700b0fa77647f6b4a6aaa58b9a6c011f6bbf40820", 0x37}], 0x1) program did not crash bisect: too many guilty chunks, aborting single: executing 5 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$ethtool-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$ETHTOOL_MSG_LINKINFO_SET detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100e8ffffff00000000250000002000018008000100", @ANYRES32=r2, @ANYBLOB="14000200776731"], 0x34}}, 0x0) program crashed: WARNING in ethnl_req_get_phydev single: successfully extracted reproducer found reproducer with 4 syscalls minimizing guilty program testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$ethtool-ioctl$ifreq_SIOCGIFINDEX_wireguard detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00'}) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$ethtool-sendmsg$ETHTOOL_MSG_LINKINFO_SET detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100e8ffffff00000000250000002000018008000100", @ANYRES32, @ANYBLOB="14000200776731"], 0x34}}, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$ETHTOOL_MSG_LINKINFO_SET detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100e8ffffff00000000250000002000018008000100", @ANYRES32=r1, @ANYBLOB="14000200776731"], 0x34}}, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_genetlink_get_family_id$ethtool-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$ETHTOOL_MSG_LINKINFO_SET detailed listing: executing program 0: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100e8ffffff00000000250000002000018008000100", @ANYRES32=r1, @ANYBLOB="14000200776731"], 0x34}}, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$ethtool-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$ETHTOOL_MSG_LINKINFO_SET detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100e8ffffff00000000250000002000018008000100", @ANYRES32=r2, @ANYBLOB="14000200776731"], 0x34}}, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$ethtool-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$ETHTOOL_MSG_LINKINFO_SET detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100e8ffffff00000000250000002000018008000100", @ANYRES32, @ANYBLOB="14000200776731"], 0x34}}, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$ethtool-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$ETHTOOL_MSG_LINKINFO_SET detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00'}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, 0x0, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$ethtool-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$ETHTOOL_MSG_LINKINFO_SET detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00'}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$ethtool-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$ETHTOOL_MSG_LINKINFO_SET detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00'}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x34}}, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$ethtool-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$ETHTOOL_MSG_LINKINFO_SET detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00'}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[], 0x34}}, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$ethtool-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$ETHTOOL_MSG_LINKINFO_SET detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100e8ffffff00000000250000002000018008000100", @ANYRES32=r2, @ANYBLOB], 0x34}}, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$ethtool-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$ETHTOOL_MSG_LINKINFO_SET detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="14000200776731"], 0x34}}, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$ethtool-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$ETHTOOL_MSG_LINKINFO_SET detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0100e8ffffff00000000250000002000018008000100", @ANYRES32=r2, @ANYBLOB="14000200776731"], 0x34}}, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$ethtool-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$ETHTOOL_MSG_LINKINFO_SET program crashed: WARNING in ethnl_req_get_phydev simplifying C reproducer testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$ethtool-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$ETHTOOL_MSG_LINKINFO_SET program crashed: WARNING in ethnl_req_get_phydev testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$ethtool-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$ETHTOOL_MSG_LINKINFO_SET program crashed: WARNING in ethnl_req_get_phydev testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$ethtool-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$ETHTOOL_MSG_LINKINFO_SET program did not crash testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$ethtool-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$ETHTOOL_MSG_LINKINFO_SET program crashed: WARNING in ethnl_req_get_phydev testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$ethtool-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$ETHTOOL_MSG_LINKINFO_SET program did not crash testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$ethtool-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$ETHTOOL_MSG_LINKINFO_SET program crashed: WARNING in ethnl_req_get_phydev testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$ethtool-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$ETHTOOL_MSG_LINKINFO_SET program crashed: WARNING in ethnl_req_get_phydev testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$ethtool-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$ETHTOOL_MSG_LINKINFO_SET program crashed: WARNING in ethnl_req_get_phydev testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$ethtool-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$ETHTOOL_MSG_LINKINFO_SET program crashed: WARNING in ethnl_req_get_phydev testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$ethtool-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$ETHTOOL_MSG_LINKINFO_SET program crashed: WARNING in ethnl_req_get_phydev testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$ethtool-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$ETHTOOL_MSG_LINKINFO_SET program crashed: WARNING in ethnl_req_get_phydev testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$ethtool-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$ETHTOOL_MSG_LINKINFO_SET program crashed: WARNING in ethnl_req_get_phydev testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$ethtool-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$ETHTOOL_MSG_LINKINFO_SET program crashed: WARNING in ethnl_req_get_phydev testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$ethtool-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$ETHTOOL_MSG_LINKINFO_SET program crashed: WARNING in ethnl_req_get_phydev testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$ethtool-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$ETHTOOL_MSG_LINKINFO_SET program crashed: WARNING in ethnl_req_get_phydev testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$ethtool-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$ETHTOOL_MSG_LINKINFO_SET program crashed: WARNING in ethnl_req_get_phydev reproducing took 1h57m59.19449563s repro crashed as (corrupted=false): ------------[ cut here ]------------ RTNL: assertion failed at net/ethtool/netlink.c (218) WARNING: CPU: 1 PID: 5234 at net/ethtool/netlink.c:218 ethnl_req_get_phydev+0x1f2/0x220 net/ethtool/netlink.c:218 Modules linked in: CPU: 1 UID: 0 PID: 5234 Comm: syz-executor386 Not tainted 6.11.0-rc4-syzkaller-00565-gf9db28bb09f4 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 RIP: 0010:ethnl_req_get_phydev+0x1f2/0x220 net/ethtool/netlink.c:218 Code: cc cc cc cc e8 bf ac ca f7 c6 05 52 01 39 06 01 90 48 c7 c7 00 9b 11 8d 48 c7 c6 80 99 11 8d ba da 00 00 00 e8 9f d3 8c f7 90 <0f> 0b 90 90 e9 4c fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 7e RSP: 0018:ffffc90003377318 EFLAGS: 00010246 RAX: 388b48be279fee00 RBX: ffffc900033773e0 RCX: ffff888027535a00 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: 0000000000000000 R08: ffffffff8155b4d2 R09: 1ffff1101726519a R10: dffffc0000000000 R11: ffffed101726519b R12: ffffc900033775f0 R13: dffffc0000000000 R14: ffff88801f8ea414 R15: ffffc90003377740 FS: 0000555588309380(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffe64207cf8 CR3: 0000000011dcc000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ethnl_set_pse_validate+0x88/0x360 net/ethtool/pse-pd.c:230 ethnl_default_set_doit+0x2b5/0x910 net/ethtool/netlink.c:683 genl_family_rcv_msg_doit net/netlink/genetlink.c:1115 [inline] genl_family_rcv_msg net/netlink/genetlink.c:1195 [inline] genl_rcv_msg+0xb14/0xec0 net/netlink/genetlink.c:1210 netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2550 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1219 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline] netlink_unicast+0x7f6/0x990 net/netlink/af_netlink.c:1357 netlink_sendmsg+0x8e4/0xcb0 net/netlink/af_netlink.c:1901 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:745 ____sys_sendmsg+0x525/0x7d0 net/socket.c:2597 ___sys_sendmsg net/socket.c:2651 [inline] __sys_sendmsg+0x2b0/0x3a0 net/socket.c:2680 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f3ffab77f49 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffe64208d68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f3ffab77f49 RDX: 0000000000000000 RSI: 0000000020000700 RDI: 0000000000000003 RBP: 00000000000f4240 R08: 0000000000000001 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe64208dc0 R13: 00007f3ffabc5406 R14: 0000000000000003 R15: 00007ffe64208da0 final repro crashed as (corrupted=false): ------------[ cut here ]------------ RTNL: assertion failed at net/ethtool/netlink.c (218) WARNING: CPU: 1 PID: 5234 at net/ethtool/netlink.c:218 ethnl_req_get_phydev+0x1f2/0x220 net/ethtool/netlink.c:218 Modules linked in: CPU: 1 UID: 0 PID: 5234 Comm: syz-executor386 Not tainted 6.11.0-rc4-syzkaller-00565-gf9db28bb09f4 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 RIP: 0010:ethnl_req_get_phydev+0x1f2/0x220 net/ethtool/netlink.c:218 Code: cc cc cc cc e8 bf ac ca f7 c6 05 52 01 39 06 01 90 48 c7 c7 00 9b 11 8d 48 c7 c6 80 99 11 8d ba da 00 00 00 e8 9f d3 8c f7 90 <0f> 0b 90 90 e9 4c fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 7e RSP: 0018:ffffc90003377318 EFLAGS: 00010246 RAX: 388b48be279fee00 RBX: ffffc900033773e0 RCX: ffff888027535a00 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: 0000000000000000 R08: ffffffff8155b4d2 R09: 1ffff1101726519a R10: dffffc0000000000 R11: ffffed101726519b R12: ffffc900033775f0 R13: dffffc0000000000 R14: ffff88801f8ea414 R15: ffffc90003377740 FS: 0000555588309380(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffe64207cf8 CR3: 0000000011dcc000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ethnl_set_pse_validate+0x88/0x360 net/ethtool/pse-pd.c:230 ethnl_default_set_doit+0x2b5/0x910 net/ethtool/netlink.c:683 genl_family_rcv_msg_doit net/netlink/genetlink.c:1115 [inline] genl_family_rcv_msg net/netlink/genetlink.c:1195 [inline] genl_rcv_msg+0xb14/0xec0 net/netlink/genetlink.c:1210 netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2550 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1219 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline] netlink_unicast+0x7f6/0x990 net/netlink/af_netlink.c:1357 netlink_sendmsg+0x8e4/0xcb0 net/netlink/af_netlink.c:1901 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:745 ____sys_sendmsg+0x525/0x7d0 net/socket.c:2597 ___sys_sendmsg net/socket.c:2651 [inline] __sys_sendmsg+0x2b0/0x3a0 net/socket.c:2680 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f3ffab77f49 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffe64208d68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f3ffab77f49 RDX: 0000000000000000 RSI: 0000000020000700 RDI: 0000000000000003 RBP: 00000000000f4240 R08: 0000000000000001 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe64208dc0 R13: 00007f3ffabc5406 R14: 0000000000000003 R15: 00007ffe64208da0