Extracting prog: 46m2.08004966s Minimizing prog: 56m53.573664302s Simplifying prog options: 18m18.531953393s Extracting C: 9m8.87056065s Simplifying C: 0s 30 programs, 3 VMs, timeouts [15s 1m40s 6m0s] extracting reproducer from 30 programs single: executing 5 programs separately with timeout 15s testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_crypto-socket$packet-socket$packet-ioctl$ifreq_SIOCGIFINDEX_batadv_mesh-sendto$packet-sendmsg$nl_crypto-bpf$BPF_BTF_GET_FD_BY_ID-bpf$PROG_LOAD_XDP-ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL-bpf$PROG_LOAD-recvmsg-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD-socket$pppl2tp-socket$inet6_udp-ppoll-connect$pppl2tp-close-shutdown-bpf$PROG_LOAD-socket$pppl2tp-connect$pppl2tp-ioctl$PPPIOCGL2TPSTATS-bpf$BPF_RAW_TRACEPOINT_OPEN-syz_genetlink_get_family_id$devlink-openat$cgroup_ro-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-write$cgroup_int detailed listing: executing program 0: r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$packet(0x11, 0x0, 0x300) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="00000806", 0x4, 0x0, &(0x7f0000000080)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_crypto(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="e800000012000b3600000000000000007874732d63617374362d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1252cb264afe28ddd7900000000000000ff01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800010000"], 0xe8}}, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0x4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="190000eca42cedf3c23408000000080018110000", @ANYRES32, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4}, 0x90) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x0, 0x2, 0x3, 0x5, 0x5e, @mcast2, @local, 0x7, 0x20, 0x0, 0x88a6}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xa9}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000000200)=""/41, 0x29}, {&(0x7f0000000280)=""/109, 0x6d}, {&(0x7f0000000300)=""/208, 0xd0}, {0x0}], 0x6, &(0x7f0000000540)=""/30, 0x1e}, 0x40000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ppoll(&(0x7f0000000400)=[{r10, 0x3082}, {r8, 0x5008}, {r5, 0x100}], 0x3, &(0x7f0000000640)={0x0, 0x989680}, &(0x7f0000000680)={[0x5]}, 0x8) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r9) shutdown(r9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002100)={0x11, 0x14, &(0x7f0000001b00)=@raw=[@map_idx={0x18, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @jmp={0x5, 0x1, 0xc, 0x6, 0x6, 0x80, 0x4}, @ldst={0x3, 0x3, 0x2, 0x9, 0xb}, @ldst={0x2, 0x3, 0x4, 0x4, 0xa, 0xfffffffffffffffe, 0xfffffffffffffff0}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f00000009c0)='GPL\x00', 0x4937, 0xa5, &(0x7f0000001bc0)=""/165, 0x40f00, 0x2, '\x00', r6, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001c80)={0x2, 0x0, 0x8, 0x80000001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000020c0)=[0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x90) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x0, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r11, 0x8004745a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='ext4_ext_show_extent\x00', r8}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000840), 0xffffffffffffffff) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x2, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) write$cgroup_int(r12, &(0x7f0000000000), 0x400000) program did not crash testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$ifreq_SIOCGIFINDEX_team-socket$nl_netfilter-sendmsg$IPSET_CMD_SWAP-syz_init_net_socket$bt_hci-socket$nl_crypto-socket-setsockopt$MRT6_INIT-setsockopt$MRT6_DONE-ioctl$sock_bt_hci-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$nl_generic-socket$inet6_tcp-setsockopt$inet6_int-sendto$inet6-socket$nl_generic-syz_genetlink_get_family_id$devlink-sendmsg$DEVLINK_CMD_PORT_GET-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-sendmsg$nl_generic-socket$nl_route-socket$tipc-sendmsg$nl_route detailed listing: executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x40, 0x6, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_crypto(0x10, 0x3, 0x15) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_DONE(r4, 0x29, 0xcb, 0x0, 0x0) ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f0000000000)="c2a5") r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000000206010100000000000000000000000005000100070000000900020073797a30000000001c00078005001500100000000800124000000000080008400000202113000300686173683a6e65742c696661636500000500050002000000050004"], 0x68}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x21, &(0x7f0000000000)=0x101, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x20004000, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000100000001800000390000000e0001006e657464777673696d0000000f0002006e657464657673696d3000000800736298e46532568df6d5988cee4fa7263900000000000e0001006e657464657673696d000039b16a9930211d4064"], 0x64}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2f22}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x78) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000a00000000ee6c38301231310000000000000000000000000000495b84d67bdca4232cc5d96d7af419e29a1c8e03d22e2cd655fcefe5f3ea405202f9e89e2b5a7bda00"/82], 0x20}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000002eeed88696", @ANYRES32=r1], 0x20}}, 0x0) program did not crash testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-sendmsg$inet-sendmsg$kcm-bpf$PROG_LOAD-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$MAP_DELETE_ELEM-sendmsg$inet-socket$inet6_sctp-socket-sendmsg$nl_route-sendmmsg$inet6-shutdown-socket$nl_generic-ioctl$sock_SIOCGIFINDEX_80211-socket-setsockopt$inet6_group_source_req-socket-setsockopt$inet6_group_source_req-setsockopt$inet6_group_source_req-setsockopt$inet6_group_source_req-close-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_NEW_INTERFACE-getsockopt$inet_sctp6_SCTP_RTOINFO detailed listing: executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000600)="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", 0x147}, {&(0x7f0000000fc0)="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", 0x46d}], 0x2}, 0x8400) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r1}, 0x38) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000cc0)="02"}, 0x20) (async) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000840)="f0", 0x1}], 0x1}, 0x0) (async, rerun: 64) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) (async, rerun: 64) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff"], 0x30}}, 0x0) sendmmsg$inet6(r2, &(0x7f000000c640)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)='p', 0x1}], 0x1}}], 0x1, 0x0) (async) shutdown(r2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x7}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) (async) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r5) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1831a5fde71e009dd335a1627d00", @ANYBLOB="b6a21c93f0cdb876918e3c9e93c78bf398cbabde1ff3b93c2700ea41e231cc90d6b9decd97c1902c0e6b605daa8aec452939adddd343463efd15e92ce415c2ccb36fc358f800251eea5d27a53cd80ed40bf678e9ef0635312c571ed9ba62426ebea4b05439009ef9f227043740143246fba48fd6de0e436c6f9722f6e241fa1938cd0449c15fe295f24db851e79cfd14367b370d0cbe3bf80698e56e119847e97b1a51e8cbdce14256ede0887dc254379d961d741bdc68f6a117a0207efd6591a8ae7b5346440726ac29221d68c365c1266678b1ca7c1a6473d53a5760b5", @ANYBLOB="0100000000000000000006000000080001000000000008000300", @ANYRES32=r4, @ANYBLOB="0a00e800080211000001007d90dbb323aabd184a"], 0x38}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x83, &(0x7f0000000140), &(0x7f0000000100)=0x10) program did not crash testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-ioctl$ifreq_SIOCGIFINDEX_team-syz_80211_inject_frame-bpf$BPF_BTF_LOAD-bpf$MAP_CREATE-bpf$BPF_GET_PROG_INFO-bpf$BPF_GET_BTF_INFO-bpf$BPF_BTF_LOAD-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD-sendmsg$nl_route-bpf$BPF_BTF_GET_NEXT_ID-ioctl$sock_kcm_SIOCKCMCLONE-syz_genetlink_get_family_id$devlink-socket$rxrpc detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) syz_80211_inject_frame(0x0, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x5a}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x6dfa, 0x9, 0x0, 0x18, 0x1, 0x3, '\x00', 0x0, r2, 0x3, 0x5, 0x3}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0xf, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xd7, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r2, 0x20, &(0x7f0000000680)={&(0x7f0000000600)=""/32, 0x20, 0x0, &(0x7f0000000640)=""/60, 0x3c}}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f0000000a80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd4, 0xd4, 0x3, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @union={0xf, 0x3, 0x0, 0x5, 0x0, 0x1, [{0x0, 0x3, 0x80}, {0x5, 0x0, 0x8}, {0xe, 0x3, 0x8e}]}, @ptr={0x2, 0x0, 0x0, 0x2, 0x5}, @struct={0xc, 0x1, 0x0, 0x4, 0x1, 0x10001, [{0xe, 0x5, 0x3}]}, @enum={0xe, 0x9, 0x0, 0x6, 0x4, [{0x5, 0xa6}, {0x8, 0x20}, {0xc, 0x80000000}, {0x2, 0x6}, {0x8, 0x6}, {0xc, 0x4}, {0xa, 0x2}, {0xd, 0x8}, {0x7, 0x4}]}, @var={0xa, 0x0, 0x0, 0xe, 0x4}, @var={0x2, 0x0, 0x0, 0xe, 0x4}]}, {0x0, [0x61]}}, &(0x7f0000000b80)=""/120, 0xef, 0x78, 0x100, 0x3}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r7, 0x0, 0xa002a0}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x23, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x12c8, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x9}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xcf}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000009c0)='syzkaller\x00', 0x343, 0x70, &(0x7f0000000a00)=""/112, 0x41000, 0x40, '\x00', r4, 0x25, r6, 0x8, &(0x7f0000000c40)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000c80)={0x4, 0x2, 0xc3a8, 0xfff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d40)=[r3, r7, 0xffffffffffffffff], 0x0, 0x10, 0x81d8}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x12, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4ed, 0x0, 0x0, 0x0, 0x80000000}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @exit, @exit, @jmp={0x5, 0x1, 0x7, 0x2, 0xb, 0xc, 0x1}]}, &(0x7f00000001c0)='syzkaller\x00', 0x101, 0x87, &(0x7f00000002c0)=""/135, 0x41000, 0x19, '\x00', r4, 0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000740)=[{0x0, 0x3, 0x6, 0xc}, {0x0, 0x4, 0xa, 0xa}, {0x2, 0x2, 0xe, 0xa}, {0x3, 0x3, 0x4, 0xf}, {0x5, 0x2, 0x8, 0x8}, {0x5, 0x7fff, 0xc, 0x8}, {0x3, 0x1, 0x4, 0x6}, {0x3, 0x4, 0x3, 0x9}], 0x10, 0x5}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_IFNAME={0x14, 0x3, 'wlan1\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000700)={0x2}, 0x8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) socket$rxrpc(0x21, 0x2, 0xa) program did not crash testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-bind$inet6-listen-socket$inet_dccp-connect$inet-getsockopt$inet_int detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf9, &(0x7f0000000080), &(0x7f00000000c0)=0x4) program did not crash single: failed to extract reproducer bisect: bisecting 30 programs with base timeout 15s testing program (duration=22s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 6, 6, 6, 6, 21, 6, 10, 11, 30, 30, 3, 12, 21, 18, 5, 30, 30, 13, 2, 3, 30, 15, 30, 6, 17, 25, 24, 4, 28] detailed listing: executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf9, &(0x7f0000000080), &(0x7f00000000c0)=0x4) executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf9, &(0x7f0000000080), &(0x7f00000000c0)=0x4) executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf9, &(0x7f0000000080), &(0x7f00000000c0)=0x4) executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf9, &(0x7f0000000080), &(0x7f00000000c0)=0x4) executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf9, &(0x7f0000000080), &(0x7f00000000c0)=0x4) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) listen(r1, 0x20000005) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002e00)={{}, 0x0, &(0x7f0000002dc0)='%pS \x00'}, 0x20) r4 = socket$inet_smc(0x2b, 0x1, 0x0) close(r4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000002000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002d00)={&(0x7f0000002cc0)=@ipv6_getaddr={0x2c, 0x16, 0x200, 0x70bd2a, 0x0, {0xa, 0x1f, 0x10, 0xc8}, [@IFA_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4804}, 0x404c044) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe1f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf9, &(0x7f0000000080), &(0x7f00000000c0)=0x4) executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="85cab4259e92bd160000000000000000c3600000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x93, &(0x7f0000000100)=""/147}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0xfffffffffffffffd, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000460000657464657673696d0000000f0002006e657464657673696d30000008008e00030000000c008f0007000000000000000c0090000d03000000000000000000000000fc0bc3a8cf01c16fb7b8d8c70bf588d214033b456c8ae93ab50c96321a09fa54176e4b57dfec9fc1ca3e0a3094a0236a6516971244526021f40e23cae02b870bbe1a484206bfbb42ad2cb38d8b4df53877a485377d98f2cdc3201bb3470dfa401d19ba9f8dc516faf61fc397f5d5f21c1b0b8e1973671c329c9d90ad930d7fc12099764170b416b7fc0f6cec668edaa10c18509cd0e26b9ee1466c"], 0x54}}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6000, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000010101010000000000000000020000000400018018"], 0x44}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0xc, 0xa6820000}, 0xafe6) executing program 1: sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x1) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000000)={0x29}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)={0x0, 0xa2, "61dd08f28f1c69b174e13bc8f092b131edd99676e5005a89e713f4c0ee3073ea8091ff71f26bf8a8be91a58856357346186ebebd5d9d1866b61f87811688712d9063623ec27dfb36ae4062aee794a8d138587e08c6a59503862c1c4eae8ee1aa7f6bf67b75c66d9e654364c2a48f9f92ebd51e1b999639df1dc50b47057bb3c08e1ce5430477de99aeb3447cc5acb12e625882290a73bb822acab6081e7835f89048"}, &(0x7f0000000280)=0xaa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r4, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write(r4, &(0x7f0000000000)='\"', 0x1) recvmmsg(r4, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e20, 0x7ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5a}}, 0x2, 0x101, 0x400, 0x4, 0x3}, &(0x7f0000000040)=0x98) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x14, &(0x7f0000001140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000850000002a000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000206050000000000000000000000000005000400000000000900020073797a32000000001400078005001400010000000800084000000000050005000200000005000100060000000c000300686173683a6970"], 0x58}}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000380)={r5, 0x60, "16095830cd386c7da76e42bf41de6639318649210a6d80b94e6f573b404e375476592c197b1feeedff9a6aad7a678dc19701e9829196febdb1ddc1e157dd837bcbdd70246a0ad4577d2256240a503194ae89d6706a8211a7f3521e82794b9386"}, &(0x7f0000000080)=0x68) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wg0\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c000000100001040000000000000f0000000000c768c27a716c0d472d85e57c590db07e676121774a168473318fbc5430971b3a", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001400ffff0000"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000380)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000003c0)={0x0, 0x45, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0504000000000000000004000000053f0000", @ANYRES16=r4, @ANYBLOB="400008807c0000800700000000000000ac1414aa000000000000000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39220600060000006ee3"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4040011) r7 = socket$inet(0x2, 0x2000000000003, 0x2) bind$inet(r7, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="4c000000150097f87059ae08060c04000287ac1414a8a69d35a2cca84708f7abca1bac1414aabd5c493872f750375ed08a560400000003c48f93b82a03000000461ee3a318732fab16f45d2d8600000000000000000000a5501de19cab91b6d835d56508e432d4573db4d840a380ca21096bc01148e84fdbc4831db45284b1780408c5e53f140f387dc4d54fda616dede9e159b22a5e9857226f2d24541f3c411e46b6b6518121db8f5682d2b84aebeee9d9b44297d3d7f41669aaa40648dc27dd25220752c21e5024af871f04c336", 0xcf}], 0x1}, 0x50) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r2, &(0x7f0000000000)) close(r2) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r11 = socket$inet_sctp(0x2, 0x5, 0x84) r12 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r13 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r11, 0x84, 0x1, &(0x7f00000003c0)={r14}, 0x14) r15 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup=r15, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a31000000000800024000000006"], 0x50}}, 0x0) executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001580)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d25b213bda84c8172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958"], 0x0}, 0x90) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000008400002000000000620000000000000020000000000000008400000008000000"], 0x38}, 0x41) executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x2, 0x0, &(0x7f0000000100)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x8, 0x5, 0x101, 0x1}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000000440)=""/192, 0xc0, 0x0, &(0x7f0000000500)=""/73, 0x49}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x14, &(0x7f00000005c0)=ANY=[@ANYRES32=r1, @ANYRES64=r1, @ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000240)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x12, 0xffffffffffffffff, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, r2, r1, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) listen(r1, 0x20000005) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002e00)={{}, 0x0, &(0x7f0000002dc0)='%pS \x00'}, 0x20) r4 = socket$inet_smc(0x2b, 0x1, 0x0) close(r4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000002000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002d00)={&(0x7f0000002cc0)=@ipv6_getaddr={0x2c, 0x16, 0x200, 0x70bd2a, 0x0, {0xa, 0x1f, 0x10, 0xc8}, [@IFA_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4804}, 0x404c044) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe1f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xc0241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'pim6reg0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffffffffffff, "b747c2e817f5d89ab3eb2581647a3380aeb53bd509933a5776ae64060c1e4043", 0x52, 0x5, 0x4, 0x100}, 0x3c) bind$packet(r5, &(0x7f00000000c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="e4bb98e2876d"}, 0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206010800000000000000000000000014000780080011400000000005001500020000000500010006000000050005000a00000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x49) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="380040bbfa706058529981efb2061e66e900002def2a6c093d3fb314aa550001000000", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="00000000fc00000000000000000000000000000086dd0000"], 0x38}, 0x1, 0xf00}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'ip6gretap0\x00', @link_local}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd090032000300300000006000000001002f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb3b7e6656de"], 0xfdef) executing program 0: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x6c, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000001000030400e2ffffffffff0700000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006970766c616e0000140002800600020000000000060001000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000140)={0x0, 0x27, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r2, 0x1, 0x0, 0x0, {0x9}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x3c}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f00000002c0)=[@in={0x2, 0x0, @rand_addr=0x64010102}], 0x10) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x0, 0x7) socket(0x200000000000011, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c832, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@empty, @in=@broadcast, 0x4e22, 0xfffe, 0x4, 0x0, 0x2, 0x0, 0x20}, {}, {0x0, 0x0, 0xffffffffffffffff}, 0xfffffffd}, {{@in=@empty}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x2}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'pim6reg\x00'}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0x116d962d5f73552, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r5, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000c00)=""/4111, 0xd80}], 0x1}}], 0x1, 0x122, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) shutdown(0xffffffffffffffff, 0x0) executing program 2: socket$pppoe(0x18, 0x1, 0x0) (async) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000000900060000000000000000dab200000001000002000000028000000100000000000000034000000000000002800000010001000000"], 0x20}}, 0x0) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, 0x0, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x24}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = socket$inet6(0xa, 0x80001, 0x0) (async) unshare(0x20000400) r4 = socket$unix(0x1, 0x5, 0x0) connect$unix(r4, 0x0, 0x0) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="010000ef103b04000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000af4557c3000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000001000000010000000a000000000000000000000000000000000000000000000000000000000000000000000000140000000000000000000065e6950e831108cf4971560b15d700"/276], 0x110) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000500)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000100000000000018110000", @ANYBLOB="2598ccde00000000b70800004e9d00007b8af8ff00000000bfa20000fbff000007020000f8fffffdb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) (async) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) ioctl$int_in(r6, 0x5452, &(0x7f0000000040)=0x10000) (async) recvmmsg(r6, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r6, r5, 0x0, 0xffefffff) (async) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080), 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024"], 0x21c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f00000020c0)=ANY=[@ANYBLOB], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000ee0000000000000000000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0x17, 0x0, 0x0) executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001580)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d25b213bda84c8172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958"], 0x0}, 0x90) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000008400002000000000620000000000000020000000000000008400000008000000"], 0x38}, 0x41) executing program 2: socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="660a0000000000006111730000000000000052e13e2c12c17d28cdccb7178ecf34ed6feaecf485437d880d9abd50d49bbc6434cfb957a711"], &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000100)={0xaf294b17a31401d5}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000010c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000001000)=""/140, 0xfb, 0x8c, 0x1, 0x80}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001180)={0x6, 0x34, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000100000000000000050000007848feff040001008d5b00010100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800008f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018200000", @ANYRES32=r0, @ANYBLOB="000000000200000018160000", @ANYBLOB="aadcf1e2d619e2f14a055f46a26970126721d5128b9cbb879cfaa0aa4611cd47dfb69cb77e08ef524fc306b2bf6815b3de43dcc64ca84fe10fb94d38c20768ae36d0e30b310b3b2872d45775e978efeda2bd60ff892f9e6ad814ae7052256aa0e8a3e576fdd4b520db62a7d39a86699476cbbe34e47ba92c51ae28162e6bff150623d0", @ANYBLOB="000000000000000097983000f0ffffff850000000a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300160400000085000000060000008520000005000000183700000400000000000000000000009500000000000000"], &(0x7f0000000e40)='syzkaller\x00', 0x7f, 0x42, &(0x7f0000000e80)=""/66, 0x41100, 0xf6747c251ca71fd9, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000001100)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=[r0]}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@bloom_filter={0x1e, 0x0, 0x0, 0x6, 0x2, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x0, 0x9}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000f00000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500020600000008223b5b7f000000000000", @ANYRES32=r6, @ANYBLOB="0800050008000000"], 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000300), 0x6e) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r10, @ANYBLOB="00001000252155b21c0012000c000100626f6e6400"], 0x3c}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000010000400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000500", @ANYRES32=r10, @ANYBLOB="0800fb20bc5776ed6992985bbe0a00", @ANYRES32=r10, @ANYBLOB], 0x30}}, 0x0) executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', r0, 0x4000, r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x1f, 0x0, &(0x7f0000000100)) unshare(0x4000400) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) unshare(0x2000600) bind$alg(r3, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(blake2b-160-generic)\x00'}, 0x58) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) openat$cgroup_ro(r0, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x1, 0x0, {0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6}}}}]}, 0x38}}, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x2, 0xfffffffe, @mcast1, 0x18}, 0x1c) (async) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0xffffffffffffffba, &(0x7f0000004640)={&(0x7f0000000600)=@newqdisc={0x58, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x5e1f89a7bb6bc599}]}}}]}, 0x58}}, 0x0) (async) r8 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e30, 0x8}, 0x1c) (async) listen(r8, 0x400) (async) r9 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r10 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r10, 0x0, 0x24, &(0x7f0000000040)={@empty, @local, @local}, 0xc) (async) sendto$inet(r9, &(0x7f0000000080)='!', 0xffc3, 0x0, 0x0, 0x0) accept$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x0) (async) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) syz_emit_ethernet(0x7e, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES8=r6, @ANYBLOB="a4c3c7933211f235b48d23f1091c7e6fea9601de87567002f92145dd29c4f57dfcdb1187ebfbc7fddc7172f1aede588e5dc17c2ad1410ef0d3cb74bd30f86b7d7c3d90b836aaa19f43257765409e65d06d6a8e3d7394997665ca87b34bcfb1d6bf0481813b97c4affc4f1e28217ae741cecfd7cf"], 0x0) (async) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_int(r11, &(0x7f0000000140)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f0000000340)=ANY=[@ANYBLOB='N-N:N/N'], 0x6a) (async) socket$kcm(0x10, 0x3, 0x10) (async) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}}) executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f000001be80)={0x0, 0x0, &(0x7f000001be40)={&(0x7f0000001d00)=@deltfilter={0x11a0, 0x2d, 0x0, 0x0, 0x0, {}, [@f_rsvp={{0x9}, {0x238, 0x2, [@TCA_RSVP_CLASSID={0x8}, @TCA_RSVP_ACT={0x21c, 0x6, [@m_skbedit={0xa4, 0x0, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x4}}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x2d, 0x6, "c6a494f3f45b1e00e67fc9a922ad45bd5962ea0c97f175346c07bad2fb9ada91ec827db61cfb8dab70"}, {0xc}, {0xc}}}, @m_ct={0xd0, 0x0, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8}, @TCA_CT_ACTION={0x6}, @TCA_CT_NAT_PORT_MAX={0x6}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @empty}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @empty}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}, @TCA_CT_NAT_PORT_MAX={0x6}, @TCA_CT_LABELS_MASK={0x14, 0x8, "d2c273ebc450fec1ec08500a02de9677"}]}, {0x4d, 0x6, "f38e2eb5efabe3b1f6197aa76ef97c58a777a6467891d4b5e98708399c5e41e7b1c5cbd000dda961eb5485897a61d1fdb516e7503c6b2a9a7f27db63b32e621307db45a95aca099bd8"}, {0xc}, {0xc}}}, @m_mpls={0xa4, 0x0, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_TTL={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6}, @TCA_MPLS_PROTO={0x6}, @TCA_MPLS_PROTO={0x6}, @TCA_MPLS_PROTO={0x6}, @TCA_MPLS_TTL={0x5}, @TCA_MPLS_BOS={0x5}]}, {0x2d, 0x6, "4d814c539ac71a2913db2a2967e92c5093f38e60e533227631b4219bbe1edd7e2ddcbdb3c835e61e65"}, {0xc}, {0xc}}}]}, @TCA_RSVP_CLASSID={0x8}, @TCA_RSVP_DST={0x8, 0x2, @multicast2}]}}, @f_tcindex={{0xc}, {0xf2c, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x74d7}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x4b60}, @TCA_TCINDEX_ACT={0xef8, 0x7, [@m_sample={0xa4, 0x1b, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3f, 0x3492, 0x7, 0x8b, 0x400}}]}, {0x5f, 0x6, "8f9c4581086ae7824f16a1b240735814307f58d23b92ef7d62f1453e82a4de9be955e072dfd64eeac440d424d040ca9613044d13b5c3de86acc5542d0afec52a7283d1ef860057fb171c7edf9d2ebf30c1559a9582300dfcfd3fde"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_pedit={0xe50, 0x0, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{}, [{0x10001, 0xb5, 0x5, 0xa, 0x8, 0x579b9096}, {0x9, 0x4, 0x6, 0xfa, 0x7fff, 0x5}, {0x401, 0x50, 0x0, 0x100, 0x800, 0x80}, {0xd29, 0x3, 0x6, 0x40, 0x0, 0x1}, {0xf22, 0xe3, 0x6, 0x2, 0xfffffffc, 0x5}, {0xfffff001, 0xc5f9, 0x1, 0x519, 0x3, 0x8001}, {0x5, 0x3, 0x1a29fb4, 0x7c, 0xfffffffb, 0x2}, {0x8b3, 0x6, 0x3, 0x9, 0xa847, 0xb9b}, {0x4, 0xb5, 0x8001, 0x5d, 0x6, 0x9}, {0x5, 0x8, 0x6, 0x1, 0x7, 0x7fff}, {0x9, 0x2, 0x9, 0x10001, 0x5, 0x17ce}, {0xa600, 0x3, 0x3, 0x5, 0x91, 0x3e74}, {0x36, 0x7, 0x5, 0x80000001, 0x2, 0x10001}, {0x20, 0x7, 0x10001, 0x2, 0xffffffff, 0x9}, {0xffff, 0x91, 0x352, 0x401, 0x3, 0x20}, {0x8, 0x41, 0x2, 0x9, 0x6, 0x9}, {0x1, 0xed40, 0x3, 0x3, 0x6, 0x538e}, {0x3ff, 0x3f, 0xe3, 0x3, 0x5, 0xd0}, {0x7f, 0x8783, 0x7fff, 0x1, 0x0, 0x8}, {0x1, 0x50b, 0x3, 0x8, 0x7, 0xffff}, {0xc00, 0x7ff, 0x9, 0x9, 0xffffff33, 0x9be}, {0x3, 0x9, 0x3ff, 0x3, 0x1, 0x9}, {0x2, 0x4, 0x7fffffff, 0x1, 0x3, 0x8}, {0xfffffffd, 0x8, 0x1, 0xfff, 0x59a44136, 0x627}, {0x8, 0x5, 0x3, 0xcb, 0x0, 0x2}, {0x6, 0x9, 0xffffffd8, 0x5, 0x6}, {0x9, 0x1, 0x2, 0x7, 0x689, 0xa0}, {0x3, 0x200, 0x200, 0x2, 0x6, 0xa4ff}, {0xffff, 0x6, 0x0, 0x7, 0xb3c5, 0x401}, {0xcf, 0x100, 0x8ff, 0x438, 0x1, 0x6}, {0x49, 0x400, 0x1f, 0x4, 0xc000, 0x1}, {0xffffff00, 0x4, 0x5, 0x0, 0x3, 0x20000000}, {0x8, 0x1, 0x7a, 0xa9, 0x9, 0xffff}, {0x77b2276, 0x2, 0x0, 0x1, 0x3f, 0x8}, {0x8, 0x6, 0x6, 0x3ff, 0x6}, {0x7ff, 0x800, 0x2, 0x1, 0x3, 0x2}, {0x7, 0x8, 0xff, 0x7f, 0x7ff, 0x8001}, {0xfff, 0x80, 0x1f, 0xb9b, 0x6fc8, 0x1}, {0x4599, 0x7, 0x0, 0x9, 0x20, 0xeb}, {0x2, 0x4000, 0x400, 0xffffffff, 0x6, 0x7}, {0x1000, 0xf0, 0x0, 0xdff6, 0x9, 0x2}, {0x7, 0x1ff, 0x3, 0x1, 0x3, 0x7}, {0x10001, 0xb8a, 0x5, 0x0, 0x1ff, 0x8}, {0x6b, 0x1000, 0x400, 0x5, 0x0, 0x9}, {0x8001, 0x0, 0x7fffffff, 0x7, 0x7fffffff, 0xffffff0b}, {0x1ff, 0x81, 0xf43, 0x1f, 0x5, 0xafa}, {0xcb, 0xffffffff, 0x3, 0x4, 0x9d5, 0xfffffffb}, {0xda5c, 0x1, 0x9f1, 0x7fffffff, 0x81a, 0xffffffff}, {0x9, 0x9, 0x2, 0xdca9, 0x9000, 0x1000}, {0x2, 0x100, 0x7, 0x8, 0x0, 0x4}, {0x3, 0x80000001, 0x9b6, 0x1, 0x401, 0x7}, {0x7, 0x8, 0x6, 0xffffff7a, 0x2, 0x8}, {0x8001, 0x5, 0x6, 0x2}, {0x35cf, 0x6fcd, 0x2, 0x9, 0x0, 0x9}, {0xca, 0x7fff, 0x96, 0x3, 0x4, 0xfffffffb}, {0x6fb, 0x0, 0x19, 0x6, 0x1, 0x400}, {0x1, 0x3, 0x3, 0x9ba0, 0x3, 0xcf}, {0x200, 0x800, 0x3ace631b, 0x6, 0xb6, 0x7fff}, {0x400, 0x7f, 0x7, 0x0, 0xfffff610, 0x3800000}, {0x1000, 0x6, 0x3, 0x3f, 0x1, 0x2}, {0x65, 0x1, 0xfffffffc, 0x3, 0x279a, 0x14}, {0x2, 0xffffffff, 0x6, 0x8, 0x591, 0x8}, {0x491, 0x7, 0x7, 0x400, 0x3, 0xfff}, {0x7fff, 0x1, 0x57d, 0x4, 0x800, 0x48a}, {0x2, 0x8, 0x1, 0x10000, 0x401}, {0x6, 0x4, 0xfffff40c, 0x5, 0x8, 0x6ab2}, {0x6, 0xc6, 0xa275, 0xb0, 0x100, 0x1}, {0x8, 0x6, 0x9, 0xfff, 0x8}, {0xfffff000, 0x7, 0xfffffff8, 0x7, 0x2, 0x200}, {0x6, 0x4, 0x6d, 0x100, 0x3f, 0x4}, {0x5, 0x5, 0x9, 0x0, 0x400, 0x934}, {0x6, 0x2, 0x1f, 0x8, 0x81, 0xc40f}, {0x4, 0xc2b, 0xfffffff8, 0x7, 0x8000, 0xffffff50}, {0x5, 0xffffff81, 0x401, 0x3, 0x7, 0x400}, {0x100, 0x8, 0xfffffffa, 0x4, 0x6, 0x10001}, {0x6, 0x10000, 0x17, 0x8c, 0xfffffff8, 0x7ff}, {0x62067c13, 0x8, 0x6, 0x8, 0x5}, {0x7ee, 0x0, 0x0, 0x4, 0x10001, 0x80000000}, {0x5f81, 0xa28f, 0x6, 0xfffffffc, 0x800, 0x10001}, {0x1000, 0x7, 0x6, 0x8000, 0xfb03, 0x3ff}, {0x800, 0xfffffffe, 0x9, 0x7fffffff, 0x8, 0x5f1}, {0x1, 0x7, 0x4e83, 0x7fffffff, 0xffff}, {0xffff, 0x5, 0x1, 0x1, 0x0, 0x1ff}, {0x7, 0x2, 0xde, 0x6, 0x2, 0x6}, {0x101, 0xfffffffb, 0x4, 0x6, 0x8000, 0x1f8}, {0x1, 0x0, 0x3, 0x9, 0x4, 0x8}, {0xfffffff9, 0x7, 0x3f, 0x6483, 0x401}, {0x4, 0x9, 0x81, 0x7, 0x8, 0x1}, {0x8, 0xffffffdf, 0x8, 0x9, 0xfffffff9, 0x800}, {0x7, 0x3, 0x8, 0x1, 0xeac, 0x1}, {0x7, 0x314e, 0x0, 0x5}, {0x57f9, 0xe1, 0x7, 0x0, 0xa04, 0x6}, {0x6, 0x481, 0x5, 0x7, 0x684d8ac2}, {0x401, 0x401, 0x0, 0x8, 0x7fffffff, 0x3}, {0x4ad2, 0x1c9f, 0x5135e19b, 0x1, 0x7, 0x800}, {0x9, 0x8000, 0x3}, {0x9f1, 0x9, 0x8, 0x1452df82, 0x2, 0x101}, {0x1, 0x0, 0x6b2, 0x7, 0x5, 0x59f}, {0x5, 0xf36a, 0x3917, 0x9, 0xff, 0x2}, {0x6e, 0x2, 0x1, 0x0, 0x45, 0x7}, {0x400, 0x3ff, 0x1, 0x8, 0x0, 0x9}, {0x1, 0x0, 0x7, 0x3, 0xffffffff}, {0x603ad109, 0xb2, 0x5, 0x3, 0x5, 0x3}, {0x81, 0xf6e, 0xff, 0x400, 0x5}, {0x72, 0x0, 0x80000000, 0xff, 0x7fffffff, 0x8}, {0x2, 0x9, 0x1000, 0x9, 0x8001, 0x3}, {0xde, 0x400, 0x8, 0xff, 0x0, 0x20000}, {0x1bd74c1e, 0x6, 0xfffffffd, 0x3, 0x9, 0x33cf}, {0x0, 0x5, 0x8, 0x8, 0x5, 0x8}, {0x1, 0x400, 0x5, 0x9, 0x9, 0x1}, {0x7ff, 0x9, 0x2, 0x2, 0x6, 0x3}, {0x605, 0x3, 0x9, 0x616d066d, 0xfffffffe, 0x8}, {0x8, 0xfcb, 0x10001, 0x1350, 0x6, 0x3}, {0x4eb, 0x1f, 0x14, 0x4514adca, 0x1, 0x8}, {0x1, 0x2, 0x5, 0xff, 0x3ff, 0x704}, {0xff, 0x2000000, 0x3, 0xa4ab, 0x0, 0xea}, {0x5, 0x7ff, 0x5, 0x7, 0x0, 0x6}, {0x3, 0x5, 0x2, 0x7fff, 0x3, 0x5a9d6e4}], [{0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x2}, {0x2}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x3, 0x1}, {0x3}, {0x4}, {0x4, 0x1}, {}, {0x6}, {0x5, 0x1}, {0x1}, {0x7}, {0x4}, {0x3}, {0x2}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x1}, {}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0xdb3e77ce7302add}, {0x2}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x4}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {}, {0x2}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x3}, {0x5}, {0x0, 0x1}, {0xa, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x6}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x2}, {0x3, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x11a0}}, 0x0) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f00000001c0)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}, 0x0) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) syz_80211_inject_frame(0x0, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x5a}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x6dfa, 0x9, 0x0, 0x18, 0x1, 0x3, '\x00', 0x0, r2, 0x3, 0x5, 0x3}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0xf, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xd7, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r2, 0x20, &(0x7f0000000680)={&(0x7f0000000600)=""/32, 0x20, 0x0, &(0x7f0000000640)=""/60, 0x3c}}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f0000000a80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd4, 0xd4, 0x3, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @union={0xf, 0x3, 0x0, 0x5, 0x0, 0x1, [{0x0, 0x3, 0x80}, {0x5, 0x0, 0x8}, {0xe, 0x3, 0x8e}]}, @ptr={0x2, 0x0, 0x0, 0x2, 0x5}, @struct={0xc, 0x1, 0x0, 0x4, 0x1, 0x10001, [{0xe, 0x5, 0x3}]}, @enum={0xe, 0x9, 0x0, 0x6, 0x4, [{0x5, 0xa6}, {0x8, 0x20}, {0xc, 0x80000000}, {0x2, 0x6}, {0x8, 0x6}, {0xc, 0x4}, {0xa, 0x2}, {0xd, 0x8}, {0x7, 0x4}]}, @var={0xa, 0x0, 0x0, 0xe, 0x4}, @var={0x2, 0x0, 0x0, 0xe, 0x4}]}, {0x0, [0x61]}}, &(0x7f0000000b80)=""/120, 0xef, 0x78, 0x100, 0x3}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r7, 0x0, 0xa002a0}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x23, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x12c8, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x9}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xcf}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000009c0)='syzkaller\x00', 0x343, 0x70, &(0x7f0000000a00)=""/112, 0x41000, 0x40, '\x00', r4, 0x25, r6, 0x8, &(0x7f0000000c40)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000c80)={0x4, 0x2, 0xc3a8, 0xfff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d40)=[r3, r7, 0xffffffffffffffff], 0x0, 0x10, 0x81d8}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x12, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4ed, 0x0, 0x0, 0x0, 0x80000000}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @exit, @exit, @jmp={0x5, 0x1, 0x7, 0x2, 0xb, 0xc, 0x1}]}, &(0x7f00000001c0)='syzkaller\x00', 0x101, 0x87, &(0x7f00000002c0)=""/135, 0x41000, 0x19, '\x00', r4, 0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000740)=[{0x0, 0x3, 0x6, 0xc}, {0x0, 0x4, 0xa, 0xa}, {0x2, 0x2, 0xe, 0xa}, {0x3, 0x3, 0x4, 0xf}, {0x5, 0x2, 0x8, 0x8}, {0x5, 0x7fff, 0xc, 0x8}, {0x3, 0x1, 0x4, 0x6}, {0x3, 0x4, 0x3, 0x9}], 0x10, 0x5}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_IFNAME={0x14, 0x3, 'wlan1\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000700)={0x2}, 0x8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) socket$rxrpc(0x21, 0x2, 0xa) executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000600)="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", 0x147}, {&(0x7f0000000fc0)="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", 0x46d}], 0x2}, 0x8400) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r1}, 0x38) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000cc0)="02"}, 0x20) (async) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000840)="f0", 0x1}], 0x1}, 0x0) (async, rerun: 64) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) (async, rerun: 64) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff"], 0x30}}, 0x0) sendmmsg$inet6(r2, &(0x7f000000c640)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)='p', 0x1}], 0x1}}], 0x1, 0x0) (async) shutdown(r2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x7}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) (async) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r5) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1831a5fde71e009dd335a1627d00", @ANYBLOB="b6a21c93f0cdb876918e3c9e93c78bf398cbabde1ff3b93c2700ea41e231cc90d6b9decd97c1902c0e6b605daa8aec452939adddd343463efd15e92ce415c2ccb36fc358f800251eea5d27a53cd80ed40bf678e9ef0635312c571ed9ba62426ebea4b05439009ef9f227043740143246fba48fd6de0e436c6f9722f6e241fa1938cd0449c15fe295f24db851e79cfd14367b370d0cbe3bf80698e56e119847e97b1a51e8cbdce14256ede0887dc254379d961d741bdc68f6a117a0207efd6591a8ae7b5346440726ac29221d68c365c1266678b1ca7c1a6473d53a5760b5", @ANYBLOB="0100000000000000000006000000080001000000000008000300", @ANYRES32=r4, @ANYBLOB="0a00e800080211000001007d90dbb323aabd184a"], 0x38}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x83, &(0x7f0000000140), &(0x7f0000000100)=0x10) executing program 2: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x40, 0x6, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_crypto(0x10, 0x3, 0x15) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_DONE(r4, 0x29, 0xcb, 0x0, 0x0) ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f0000000000)="c2a5") r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000000206010100000000000000000000000005000100070000000900020073797a30000000001c00078005001500100000000800124000000000080008400000202113000300686173683a6e65742c696661636500000500050002000000050004"], 0x68}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x21, &(0x7f0000000000)=0x101, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x20004000, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000100000001800000390000000e0001006e657464777673696d0000000f0002006e657464657673696d3000000800736298e46532568df6d5988cee4fa7263900000000000e0001006e657464657673696d000039b16a9930211d4064"], 0x64}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2f22}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x78) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000a00000000ee6c38301231310000000000000000000000000000495b84d67bdca4232cc5d96d7af419e29a1c8e03d22e2cd655fcefe5f3ea405202f9e89e2b5a7bda00"/82], 0x20}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000002eeed88696", @ANYRES32=r1], 0x20}}, 0x0) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x600, 0x0, 'cryptd(blake2b-160-generic)\x00'}, 0x58) executing program 0: r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$packet(0x11, 0x0, 0x300) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="00000806", 0x4, 0x0, &(0x7f0000000080)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_crypto(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="e800000012000b3600000000000000007874732d63617374362d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1252cb264afe28ddd7900000000000000ff01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800010000"], 0xe8}}, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0x4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="190000eca42cedf3c23408000000080018110000", @ANYRES32, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4}, 0x90) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x0, 0x2, 0x3, 0x5, 0x5e, @mcast2, @local, 0x7, 0x20, 0x0, 0x88a6}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xa9}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000000200)=""/41, 0x29}, {&(0x7f0000000280)=""/109, 0x6d}, {&(0x7f0000000300)=""/208, 0xd0}, {0x0}], 0x6, &(0x7f0000000540)=""/30, 0x1e}, 0x40000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ppoll(&(0x7f0000000400)=[{r10, 0x3082}, {r8, 0x5008}, {r5, 0x100}], 0x3, &(0x7f0000000640)={0x0, 0x989680}, &(0x7f0000000680)={[0x5]}, 0x8) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r9) shutdown(r9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002100)={0x11, 0x14, &(0x7f0000001b00)=@raw=[@map_idx={0x18, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @jmp={0x5, 0x1, 0xc, 0x6, 0x6, 0x80, 0x4}, @ldst={0x3, 0x3, 0x2, 0x9, 0xb}, @ldst={0x2, 0x3, 0x4, 0x4, 0xa, 0xfffffffffffffffe, 0xfffffffffffffff0}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f00000009c0)='GPL\x00', 0x4937, 0xa5, &(0x7f0000001bc0)=""/165, 0x40f00, 0x2, '\x00', r6, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001c80)={0x2, 0x0, 0x8, 0x80000001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000020c0)=[0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x90) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x0, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r11, 0x8004745a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='ext4_ext_show_extent\x00', r8}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000840), 0xffffffffffffffff) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x2, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) write$cgroup_int(r12, &(0x7f0000000000), 0x400000) program did not crash replaying the whole log did not cause a kernel crash single: executing 5 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_crypto-socket$packet-socket$packet-ioctl$ifreq_SIOCGIFINDEX_batadv_mesh-sendto$packet-sendmsg$nl_crypto-bpf$BPF_BTF_GET_FD_BY_ID-bpf$PROG_LOAD_XDP-ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL-bpf$PROG_LOAD-recvmsg-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD-socket$pppl2tp-socket$inet6_udp-ppoll-connect$pppl2tp-close-shutdown-bpf$PROG_LOAD-socket$pppl2tp-connect$pppl2tp-ioctl$PPPIOCGL2TPSTATS-bpf$BPF_RAW_TRACEPOINT_OPEN-syz_genetlink_get_family_id$devlink-openat$cgroup_ro-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-write$cgroup_int detailed listing: executing program 0: r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$packet(0x11, 0x0, 0x300) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="00000806", 0x4, 0x0, &(0x7f0000000080)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_crypto(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="e800000012000b3600000000000000007874732d63617374362d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1252cb264afe28ddd7900000000000000ff01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800010000"], 0xe8}}, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0x4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="190000eca42cedf3c23408000000080018110000", @ANYRES32, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4}, 0x90) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x0, 0x2, 0x3, 0x5, 0x5e, @mcast2, @local, 0x7, 0x20, 0x0, 0x88a6}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xa9}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000000200)=""/41, 0x29}, {&(0x7f0000000280)=""/109, 0x6d}, {&(0x7f0000000300)=""/208, 0xd0}, {0x0}], 0x6, &(0x7f0000000540)=""/30, 0x1e}, 0x40000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ppoll(&(0x7f0000000400)=[{r10, 0x3082}, {r8, 0x5008}, {r5, 0x100}], 0x3, &(0x7f0000000640)={0x0, 0x989680}, &(0x7f0000000680)={[0x5]}, 0x8) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r9) shutdown(r9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002100)={0x11, 0x14, &(0x7f0000001b00)=@raw=[@map_idx={0x18, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @jmp={0x5, 0x1, 0xc, 0x6, 0x6, 0x80, 0x4}, @ldst={0x3, 0x3, 0x2, 0x9, 0xb}, @ldst={0x2, 0x3, 0x4, 0x4, 0xa, 0xfffffffffffffffe, 0xfffffffffffffff0}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f00000009c0)='GPL\x00', 0x4937, 0xa5, &(0x7f0000001bc0)=""/165, 0x40f00, 0x2, '\x00', r6, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001c80)={0x2, 0x0, 0x8, 0x80000001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000020c0)=[0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x90) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x0, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r11, 0x8004745a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='ext4_ext_show_extent\x00', r8}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000840), 0xffffffffffffffff) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x2, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) write$cgroup_int(r12, &(0x7f0000000000), 0x400000) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$ifreq_SIOCGIFINDEX_team-socket$nl_netfilter-sendmsg$IPSET_CMD_SWAP-syz_init_net_socket$bt_hci-socket$nl_crypto-socket-setsockopt$MRT6_INIT-setsockopt$MRT6_DONE-ioctl$sock_bt_hci-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$nl_generic-socket$inet6_tcp-setsockopt$inet6_int-sendto$inet6-socket$nl_generic-syz_genetlink_get_family_id$devlink-sendmsg$DEVLINK_CMD_PORT_GET-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-sendmsg$nl_generic-socket$nl_route-socket$tipc-sendmsg$nl_route detailed listing: executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x40, 0x6, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_crypto(0x10, 0x3, 0x15) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_DONE(r4, 0x29, 0xcb, 0x0, 0x0) ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f0000000000)="c2a5") r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000000206010100000000000000000000000005000100070000000900020073797a30000000001c00078005001500100000000800124000000000080008400000202113000300686173683a6e65742c696661636500000500050002000000050004"], 0x68}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x21, &(0x7f0000000000)=0x101, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x20004000, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000100000001800000390000000e0001006e657464777673696d0000000f0002006e657464657673696d3000000800736298e46532568df6d5988cee4fa7263900000000000e0001006e657464657673696d000039b16a9930211d4064"], 0x64}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2f22}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x78) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000a00000000ee6c38301231310000000000000000000000000000495b84d67bdca4232cc5d96d7af419e29a1c8e03d22e2cd655fcefe5f3ea405202f9e89e2b5a7bda00"/82], 0x20}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000002eeed88696", @ANYRES32=r1], 0x20}}, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-sendmsg$inet-sendmsg$kcm-bpf$PROG_LOAD-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$MAP_DELETE_ELEM-sendmsg$inet-socket$inet6_sctp-socket-sendmsg$nl_route-sendmmsg$inet6-shutdown-socket$nl_generic-ioctl$sock_SIOCGIFINDEX_80211-socket-setsockopt$inet6_group_source_req-socket-setsockopt$inet6_group_source_req-setsockopt$inet6_group_source_req-setsockopt$inet6_group_source_req-close-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_NEW_INTERFACE-getsockopt$inet_sctp6_SCTP_RTOINFO detailed listing: executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000600)="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", 0x147}, {&(0x7f0000000fc0)="da752f575198baaac222d34e85893d37a6bd281687872ed9151c56f415698f3fecf56eebf5edb42ed5d54e0419b2a13128d3ad19b6eed6b450aad46baaa57203e0d4f567d8d79fe07e7b3142de43e55cf69c65db2469175cf60c82f49d0f9d3f2ac908fd7099c4c4dde733a14d57f4117ed2f46aea5950ff0176d73349c2808eee62ce1c7d846ffdf65211f3192dabf5b3ac1516ad90e618d0ca9e4ac2778acabeac244f2f90af2616647e5cf8ab5e2ac404ebf2a866c8a73f68ae2cc4523e63e3a1aa5ab60a23e4c47534bda546042120c5333d91fefc68226bc9149d282937797a2fe036a58c9ecd19e54bcfb85d3f75ec7c74d86be94ef6b9191e0fa86d2a9330af3f592e24bc30b84632e5121bf04abc0e12f4073f6678ad97b786cc73b8175e35eda542e3631d283a3ca6fef91607ec7dee1b4a62bae169cc8fb64e8bdef95474f0b3c526f69ce55281e18016a4785875ba99e313fd63f66cfd36234bcc6048f25bce8cce39cf709eb10e1ea88497ff7401aae0d4a7e07f14691b6c4b75dc16e2586744317ffbb9966d8bfb16efcdf6ab308426e5c1aec6a6636122ffaca89af3b03834612b93989d0bbb251a42c1b48b86ac7162ad8d5cbf3d6cfccdc590724ff6caa85320f9d5beea2370b8c0533c19422c9097a7164651ad9d8f9cca4ea7815e53fd9c42eab1cb76b451cd3b18cf31c16d01731efd1506b844f52d2f173c825a7f8814ada5f6361a48f20250df6b98965d0c85f3df3b72b2ac49f3ed52e6fa30d7d3d54d95e8bd13ec2ed4883feb3b778d624ff0c1a3ec900671acd0ff00edc7b96d1cad51fba25565c67ce0e62302dbff8f68c0de8330c44704b2f019a7afc753538ed61f3744f286735af18a8f5e7ae3fd66e4562565b31a9e5d947a06ea69ee5f0ea97d2e832e1bbc9e74498a2f99473ef8822ad0254013fefff6c4c35d84072307633de00985a6477ff6480e75171a50915838168d3b1a5864450cc9b2fb1f71364095c0fd0c94610e4b9785dc39501ba75496d10907ada3ffa622225897c79c8e8efa27396ada49844f7664bd2eee3a156c0c89fc8ded3f1b8be73d1e60521c2789837b71fe63a320f233032f2bc0472f53165423fb6c8755e5f18ac54ea180f0486914f917f8b16b13b286248c2ed33bf7b95efc5b3c15664d036fcb721d19011d09a7efbb4863b021bd7b75c632a2bb13676a1ab1fed3f1101196625c09244c987825b515d662f4fcac27b9a4cf92ba0683b7eecbbff92c7250bf7c04bcc660840d91620bb214b46581f7f406b45019f01249be3a7ca79b97c9be7ae35f6d3594687c5207c029a2774f3a7df6681a206a59a9dd40a8f114e03f3b6a44a4e88960c9d6c79b5ac3ddfc4481ca5cdbf31816bfa9291879e0d7ea617add447d819aa30e2c3f9502c393cc9cce52dcbdac5e3c55a08a9b8ddaf52de96915f6635065a905aa94b7b20882dc3f72c3cbd2b5cab4e642b8defb3068b16582f9fad313682929d43e466c2448a9220bcdf2de3928078fbac197a7957bb9bb34e4778aca1626a984d4b1ac09517f1c353139739138fe320f5f34b17693c85e40d6f44e4750610a9e8463a4", 0x46d}], 0x2}, 0x8400) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r1}, 0x38) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000cc0)="02"}, 0x20) (async) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000840)="f0", 0x1}], 0x1}, 0x0) (async, rerun: 64) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) (async, rerun: 64) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff"], 0x30}}, 0x0) sendmmsg$inet6(r2, &(0x7f000000c640)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)='p', 0x1}], 0x1}}], 0x1, 0x0) (async) shutdown(r2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x7}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) (async) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r5) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1831a5fde71e009dd335a1627d00", @ANYBLOB="b6a21c93f0cdb876918e3c9e93c78bf398cbabde1ff3b93c2700ea41e231cc90d6b9decd97c1902c0e6b605daa8aec452939adddd343463efd15e92ce415c2ccb36fc358f800251eea5d27a53cd80ed40bf678e9ef0635312c571ed9ba62426ebea4b05439009ef9f227043740143246fba48fd6de0e436c6f9722f6e241fa1938cd0449c15fe295f24db851e79cfd14367b370d0cbe3bf80698e56e119847e97b1a51e8cbdce14256ede0887dc254379d961d741bdc68f6a117a0207efd6591a8ae7b5346440726ac29221d68c365c1266678b1ca7c1a6473d53a5760b5", @ANYBLOB="0100000000000000000006000000080001000000000008000300", @ANYRES32=r4, @ANYBLOB="0a00e800080211000001007d90dbb323aabd184a"], 0x38}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x83, &(0x7f0000000140), &(0x7f0000000100)=0x10) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-ioctl$ifreq_SIOCGIFINDEX_team-syz_80211_inject_frame-bpf$BPF_BTF_LOAD-bpf$MAP_CREATE-bpf$BPF_GET_PROG_INFO-bpf$BPF_GET_BTF_INFO-bpf$BPF_BTF_LOAD-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD-sendmsg$nl_route-bpf$BPF_BTF_GET_NEXT_ID-ioctl$sock_kcm_SIOCKCMCLONE-syz_genetlink_get_family_id$devlink-socket$rxrpc detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) syz_80211_inject_frame(0x0, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x5a}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x6dfa, 0x9, 0x0, 0x18, 0x1, 0x3, '\x00', 0x0, r2, 0x3, 0x5, 0x3}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0xf, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xd7, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r2, 0x20, &(0x7f0000000680)={&(0x7f0000000600)=""/32, 0x20, 0x0, &(0x7f0000000640)=""/60, 0x3c}}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f0000000a80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd4, 0xd4, 0x3, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @union={0xf, 0x3, 0x0, 0x5, 0x0, 0x1, [{0x0, 0x3, 0x80}, {0x5, 0x0, 0x8}, {0xe, 0x3, 0x8e}]}, @ptr={0x2, 0x0, 0x0, 0x2, 0x5}, @struct={0xc, 0x1, 0x0, 0x4, 0x1, 0x10001, [{0xe, 0x5, 0x3}]}, @enum={0xe, 0x9, 0x0, 0x6, 0x4, [{0x5, 0xa6}, {0x8, 0x20}, {0xc, 0x80000000}, {0x2, 0x6}, {0x8, 0x6}, {0xc, 0x4}, {0xa, 0x2}, {0xd, 0x8}, {0x7, 0x4}]}, @var={0xa, 0x0, 0x0, 0xe, 0x4}, @var={0x2, 0x0, 0x0, 0xe, 0x4}]}, {0x0, [0x61]}}, &(0x7f0000000b80)=""/120, 0xef, 0x78, 0x100, 0x3}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r7, 0x0, 0xa002a0}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x23, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x12c8, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x9}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xcf}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000009c0)='syzkaller\x00', 0x343, 0x70, &(0x7f0000000a00)=""/112, 0x41000, 0x40, '\x00', r4, 0x25, r6, 0x8, &(0x7f0000000c40)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000c80)={0x4, 0x2, 0xc3a8, 0xfff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d40)=[r3, r7, 0xffffffffffffffff], 0x0, 0x10, 0x81d8}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x12, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4ed, 0x0, 0x0, 0x0, 0x80000000}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @exit, @exit, @jmp={0x5, 0x1, 0x7, 0x2, 0xb, 0xc, 0x1}]}, &(0x7f00000001c0)='syzkaller\x00', 0x101, 0x87, &(0x7f00000002c0)=""/135, 0x41000, 0x19, '\x00', r4, 0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000740)=[{0x0, 0x3, 0x6, 0xc}, {0x0, 0x4, 0xa, 0xa}, {0x2, 0x2, 0xe, 0xa}, {0x3, 0x3, 0x4, 0xf}, {0x5, 0x2, 0x8, 0x8}, {0x5, 0x7fff, 0xc, 0x8}, {0x3, 0x1, 0x4, 0x6}, {0x3, 0x4, 0x3, 0x9}], 0x10, 0x5}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_IFNAME={0x14, 0x3, 'wlan1\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000700)={0x2}, 0x8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) socket$rxrpc(0x21, 0x2, 0xa) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-bind$inet6-listen-socket$inet_dccp-connect$inet-getsockopt$inet_int detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf9, &(0x7f0000000080), &(0x7f00000000c0)=0x4) program did not crash single: failed to extract reproducer bisect: bisecting 30 programs with base timeout 1m40s testing program (duration=1m47s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 6, 6, 6, 6, 21, 6, 10, 11, 30, 30, 3, 12, 21, 18, 5, 30, 30, 13, 2, 3, 30, 15, 30, 6, 17, 25, 24, 4, 28] detailed listing: executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf9, &(0x7f0000000080), &(0x7f00000000c0)=0x4) executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf9, &(0x7f0000000080), &(0x7f00000000c0)=0x4) executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf9, &(0x7f0000000080), &(0x7f00000000c0)=0x4) executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf9, &(0x7f0000000080), &(0x7f00000000c0)=0x4) executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf9, &(0x7f0000000080), &(0x7f00000000c0)=0x4) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) listen(r1, 0x20000005) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002e00)={{}, 0x0, &(0x7f0000002dc0)='%pS \x00'}, 0x20) r4 = socket$inet_smc(0x2b, 0x1, 0x0) close(r4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000002000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002d00)={&(0x7f0000002cc0)=@ipv6_getaddr={0x2c, 0x16, 0x200, 0x70bd2a, 0x0, {0xa, 0x1f, 0x10, 0xc8}, [@IFA_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4804}, 0x404c044) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe1f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf9, &(0x7f0000000080), &(0x7f00000000c0)=0x4) executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="85cab4259e92bd160000000000000000c3600000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x93, &(0x7f0000000100)=""/147}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0xfffffffffffffffd, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000460000657464657673696d0000000f0002006e657464657673696d30000008008e00030000000c008f0007000000000000000c0090000d03000000000000000000000000fc0bc3a8cf01c16fb7b8d8c70bf588d214033b456c8ae93ab50c96321a09fa54176e4b57dfec9fc1ca3e0a3094a0236a6516971244526021f40e23cae02b870bbe1a484206bfbb42ad2cb38d8b4df53877a485377d98f2cdc3201bb3470dfa401d19ba9f8dc516faf61fc397f5d5f21c1b0b8e1973671c329c9d90ad930d7fc12099764170b416b7fc0f6cec668edaa10c18509cd0e26b9ee1466c"], 0x54}}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x6000, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000010101010000000000000000020000000400018018"], 0x44}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0xc, 0xa6820000}, 0xafe6) executing program 1: sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x1) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000000)={0x29}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)={0x0, 0xa2, "61dd08f28f1c69b174e13bc8f092b131edd99676e5005a89e713f4c0ee3073ea8091ff71f26bf8a8be91a58856357346186ebebd5d9d1866b61f87811688712d9063623ec27dfb36ae4062aee794a8d138587e08c6a59503862c1c4eae8ee1aa7f6bf67b75c66d9e654364c2a48f9f92ebd51e1b999639df1dc50b47057bb3c08e1ce5430477de99aeb3447cc5acb12e625882290a73bb822acab6081e7835f89048"}, &(0x7f0000000280)=0xaa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r4, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write(r4, &(0x7f0000000000)='\"', 0x1) recvmmsg(r4, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e20, 0x7ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5a}}, 0x2, 0x101, 0x400, 0x4, 0x3}, &(0x7f0000000040)=0x98) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x14, &(0x7f0000001140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000850000002a000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000206050000000000000000000000000005000400000000000900020073797a32000000001400078005001400010000000800084000000000050005000200000005000100060000000c000300686173683a6970"], 0x58}}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000380)={r5, 0x60, "16095830cd386c7da76e42bf41de6639318649210a6d80b94e6f573b404e375476592c197b1feeedff9a6aad7a678dc19701e9829196febdb1ddc1e157dd837bcbdd70246a0ad4577d2256240a503194ae89d6706a8211a7f3521e82794b9386"}, &(0x7f0000000080)=0x68) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wg0\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c000000100001040000000000000f0000000000c768c27a716c0d472d85e57c590db07e676121774a168473318fbc5430971b3a", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001400ffff0000"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000380)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000003c0)={0x0, 0x45, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0504000000000000000004000000053f0000", @ANYRES16=r4, @ANYBLOB="400008807c0000800700000000000000ac1414aa000000000000000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39220600060000006ee3"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4040011) r7 = socket$inet(0x2, 0x2000000000003, 0x2) bind$inet(r7, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="4c000000150097f87059ae08060c04000287ac1414a8a69d35a2cca84708f7abca1bac1414aabd5c493872f750375ed08a560400000003c48f93b82a03000000461ee3a318732fab16f45d2d8600000000000000000000a5501de19cab91b6d835d56508e432d4573db4d840a380ca21096bc01148e84fdbc4831db45284b1780408c5e53f140f387dc4d54fda616dede9e159b22a5e9857226f2d24541f3c411e46b6b6518121db8f5682d2b84aebeee9d9b44297d3d7f41669aaa40648dc27dd25220752c21e5024af871f04c336", 0xcf}], 0x1}, 0x50) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r2, &(0x7f0000000000)) close(r2) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r11 = socket$inet_sctp(0x2, 0x5, 0x84) r12 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r13 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r11, 0x84, 0x1, &(0x7f00000003c0)={r14}, 0x14) r15 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup=r15, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a31000000000800024000000006"], 0x50}}, 0x0) executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001580)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d25b213bda84c8172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958"], 0x0}, 0x90) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000008400002000000000620000000000000020000000000000008400000008000000"], 0x38}, 0x41) executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x2, 0x0, &(0x7f0000000100)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x8, 0x5, 0x101, 0x1}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000000440)=""/192, 0xc0, 0x0, &(0x7f0000000500)=""/73, 0x49}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x14, &(0x7f00000005c0)=ANY=[@ANYRES32=r1, @ANYRES64=r1, @ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000240)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x12, 0xffffffffffffffff, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, r2, r1, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) listen(r1, 0x20000005) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002e00)={{}, 0x0, &(0x7f0000002dc0)='%pS \x00'}, 0x20) r4 = socket$inet_smc(0x2b, 0x1, 0x0) close(r4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000002000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002d00)={&(0x7f0000002cc0)=@ipv6_getaddr={0x2c, 0x16, 0x200, 0x70bd2a, 0x0, {0xa, 0x1f, 0x10, 0xc8}, [@IFA_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4804}, 0x404c044) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe1f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xc0241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'pim6reg0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffffffffffff, "b747c2e817f5d89ab3eb2581647a3380aeb53bd509933a5776ae64060c1e4043", 0x52, 0x5, 0x4, 0x100}, 0x3c) bind$packet(r5, &(0x7f00000000c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="e4bb98e2876d"}, 0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206010800000000000000000000000014000780080011400000000005001500020000000500010006000000050005000a00000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x49) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="380040bbfa706058529981efb2061e66e900002def2a6c093d3fb314aa550001000000", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="00000000fc00000000000000000000000000000086dd0000"], 0x38}, 0x1, 0xf00}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'ip6gretap0\x00', @link_local}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd090032000300300000006000000001002f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb3b7e6656de"], 0xfdef) executing program 0: pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x6c, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000001000030400e2ffffffffff0700000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006970766c616e0000140002800600020000000000060001000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000140)={0x0, 0x27, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r2, 0x1, 0x0, 0x0, {0x9}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x3c}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f00000002c0)=[@in={0x2, 0x0, @rand_addr=0x64010102}], 0x10) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x0, 0x7) socket(0x200000000000011, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c832, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@empty, @in=@broadcast, 0x4e22, 0xfffe, 0x4, 0x0, 0x2, 0x0, 0x20}, {}, {0x0, 0x0, 0xffffffffffffffff}, 0xfffffffd}, {{@in=@empty}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x2}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'pim6reg\x00'}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0x116d962d5f73552, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r5, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000c00)=""/4111, 0xd80}], 0x1}}], 0x1, 0x122, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) shutdown(0xffffffffffffffff, 0x0) executing program 2: socket$pppoe(0x18, 0x1, 0x0) (async) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000000900060000000000000000dab200000001000002000000028000000100000000000000034000000000000002800000010001000000"], 0x20}}, 0x0) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, 0x0, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x24}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = socket$inet6(0xa, 0x80001, 0x0) (async) unshare(0x20000400) r4 = socket$unix(0x1, 0x5, 0x0) connect$unix(r4, 0x0, 0x0) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="010000ef103b04000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000af4557c3000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000001000000010000000a000000000000000000000000000000000000000000000000000000000000000000000000140000000000000000000065e6950e831108cf4971560b15d700"/276], 0x110) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000500)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000100000000000018110000", @ANYBLOB="2598ccde00000000b70800004e9d00007b8af8ff00000000bfa20000fbff000007020000f8fffffdb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) (async) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) ioctl$int_in(r6, 0x5452, &(0x7f0000000040)=0x10000) (async) recvmmsg(r6, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r6, r5, 0x0, 0xffefffff) (async) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080), 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024"], 0x21c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f00000020c0)=ANY=[@ANYBLOB], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000ee0000000000000000000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0x17, 0x0, 0x0) executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001580)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d25b213bda84c8172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958"], 0x0}, 0x90) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000008400002000000000620000000000000020000000000000008400000008000000"], 0x38}, 0x41) executing program 2: socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="660a0000000000006111730000000000000052e13e2c12c17d28cdccb7178ecf34ed6feaecf485437d880d9abd50d49bbc6434cfb957a711"], &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000100)={0xaf294b17a31401d5}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000010c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000001000)=""/140, 0xfb, 0x8c, 0x1, 0x80}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001180)={0x6, 0x34, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000100000000000000050000007848feff040001008d5b00010100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800008f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018200000", @ANYRES32=r0, @ANYBLOB="000000000200000018160000", @ANYBLOB="aadcf1e2d619e2f14a055f46a26970126721d5128b9cbb879cfaa0aa4611cd47dfb69cb77e08ef524fc306b2bf6815b3de43dcc64ca84fe10fb94d38c20768ae36d0e30b310b3b2872d45775e978efeda2bd60ff892f9e6ad814ae7052256aa0e8a3e576fdd4b520db62a7d39a86699476cbbe34e47ba92c51ae28162e6bff150623d0", @ANYBLOB="000000000000000097983000f0ffffff850000000a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300160400000085000000060000008520000005000000183700000400000000000000000000009500000000000000"], &(0x7f0000000e40)='syzkaller\x00', 0x7f, 0x42, &(0x7f0000000e80)=""/66, 0x41100, 0xf6747c251ca71fd9, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000001100)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=[r0]}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@bloom_filter={0x1e, 0x0, 0x0, 0x6, 0x2, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x0, 0x9}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000f00000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500020600000008223b5b7f000000000000", @ANYRES32=r6, @ANYBLOB="0800050008000000"], 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000300), 0x6e) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r10, @ANYBLOB="00001000252155b21c0012000c000100626f6e6400"], 0x3c}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000010000400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000500", @ANYRES32=r10, @ANYBLOB="0800fb20bc5776ed6992985bbe0a00", @ANYRES32=r10, @ANYBLOB], 0x30}}, 0x0) executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', r0, 0x4000, r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x1f, 0x0, &(0x7f0000000100)) unshare(0x4000400) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) unshare(0x2000600) bind$alg(r3, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(blake2b-160-generic)\x00'}, 0x58) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) openat$cgroup_ro(r0, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x1, 0x0, {0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6}}}}]}, 0x38}}, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x2, 0xfffffffe, @mcast1, 0x18}, 0x1c) (async) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0xffffffffffffffba, &(0x7f0000004640)={&(0x7f0000000600)=@newqdisc={0x58, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x5e1f89a7bb6bc599}]}}}]}, 0x58}}, 0x0) (async) r8 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e30, 0x8}, 0x1c) (async) listen(r8, 0x400) (async) r9 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r10 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r10, 0x0, 0x24, &(0x7f0000000040)={@empty, @local, @local}, 0xc) (async) sendto$inet(r9, &(0x7f0000000080)='!', 0xffc3, 0x0, 0x0, 0x0) accept$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x0) (async) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) syz_emit_ethernet(0x7e, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES8=r6, @ANYBLOB="a4c3c7933211f235b48d23f1091c7e6fea9601de87567002f92145dd29c4f57dfcdb1187ebfbc7fddc7172f1aede588e5dc17c2ad1410ef0d3cb74bd30f86b7d7c3d90b836aaa19f43257765409e65d06d6a8e3d7394997665ca87b34bcfb1d6bf0481813b97c4affc4f1e28217ae741cecfd7cf"], 0x0) (async) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_int(r11, &(0x7f0000000140)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f0000000340)=ANY=[@ANYBLOB='N-N:N/N'], 0x6a) (async) socket$kcm(0x10, 0x3, 0x10) (async) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}}) executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f000001be80)={0x0, 0x0, &(0x7f000001be40)={&(0x7f0000001d00)=@deltfilter={0x11a0, 0x2d, 0x0, 0x0, 0x0, {}, [@f_rsvp={{0x9}, {0x238, 0x2, [@TCA_RSVP_CLASSID={0x8}, @TCA_RSVP_ACT={0x21c, 0x6, [@m_skbedit={0xa4, 0x0, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x4}}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x2d, 0x6, "c6a494f3f45b1e00e67fc9a922ad45bd5962ea0c97f175346c07bad2fb9ada91ec827db61cfb8dab70"}, {0xc}, {0xc}}}, @m_ct={0xd0, 0x0, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8}, @TCA_CT_ACTION={0x6}, @TCA_CT_NAT_PORT_MAX={0x6}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @empty}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @empty}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}, @TCA_CT_NAT_PORT_MAX={0x6}, @TCA_CT_LABELS_MASK={0x14, 0x8, "d2c273ebc450fec1ec08500a02de9677"}]}, {0x4d, 0x6, "f38e2eb5efabe3b1f6197aa76ef97c58a777a6467891d4b5e98708399c5e41e7b1c5cbd000dda961eb5485897a61d1fdb516e7503c6b2a9a7f27db63b32e621307db45a95aca099bd8"}, {0xc}, {0xc}}}, @m_mpls={0xa4, 0x0, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_TTL={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6}, @TCA_MPLS_PROTO={0x6}, @TCA_MPLS_PROTO={0x6}, @TCA_MPLS_PROTO={0x6}, @TCA_MPLS_TTL={0x5}, @TCA_MPLS_BOS={0x5}]}, {0x2d, 0x6, "4d814c539ac71a2913db2a2967e92c5093f38e60e533227631b4219bbe1edd7e2ddcbdb3c835e61e65"}, {0xc}, {0xc}}}]}, @TCA_RSVP_CLASSID={0x8}, @TCA_RSVP_DST={0x8, 0x2, @multicast2}]}}, @f_tcindex={{0xc}, {0xf2c, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x74d7}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x4b60}, @TCA_TCINDEX_ACT={0xef8, 0x7, [@m_sample={0xa4, 0x1b, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3f, 0x3492, 0x7, 0x8b, 0x400}}]}, {0x5f, 0x6, "8f9c4581086ae7824f16a1b240735814307f58d23b92ef7d62f1453e82a4de9be955e072dfd64eeac440d424d040ca9613044d13b5c3de86acc5542d0afec52a7283d1ef860057fb171c7edf9d2ebf30c1559a9582300dfcfd3fde"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_pedit={0xe50, 0x0, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{}, [{0x10001, 0xb5, 0x5, 0xa, 0x8, 0x579b9096}, {0x9, 0x4, 0x6, 0xfa, 0x7fff, 0x5}, {0x401, 0x50, 0x0, 0x100, 0x800, 0x80}, {0xd29, 0x3, 0x6, 0x40, 0x0, 0x1}, {0xf22, 0xe3, 0x6, 0x2, 0xfffffffc, 0x5}, {0xfffff001, 0xc5f9, 0x1, 0x519, 0x3, 0x8001}, {0x5, 0x3, 0x1a29fb4, 0x7c, 0xfffffffb, 0x2}, {0x8b3, 0x6, 0x3, 0x9, 0xa847, 0xb9b}, {0x4, 0xb5, 0x8001, 0x5d, 0x6, 0x9}, {0x5, 0x8, 0x6, 0x1, 0x7, 0x7fff}, {0x9, 0x2, 0x9, 0x10001, 0x5, 0x17ce}, {0xa600, 0x3, 0x3, 0x5, 0x91, 0x3e74}, {0x36, 0x7, 0x5, 0x80000001, 0x2, 0x10001}, {0x20, 0x7, 0x10001, 0x2, 0xffffffff, 0x9}, {0xffff, 0x91, 0x352, 0x401, 0x3, 0x20}, {0x8, 0x41, 0x2, 0x9, 0x6, 0x9}, {0x1, 0xed40, 0x3, 0x3, 0x6, 0x538e}, {0x3ff, 0x3f, 0xe3, 0x3, 0x5, 0xd0}, {0x7f, 0x8783, 0x7fff, 0x1, 0x0, 0x8}, {0x1, 0x50b, 0x3, 0x8, 0x7, 0xffff}, {0xc00, 0x7ff, 0x9, 0x9, 0xffffff33, 0x9be}, {0x3, 0x9, 0x3ff, 0x3, 0x1, 0x9}, {0x2, 0x4, 0x7fffffff, 0x1, 0x3, 0x8}, {0xfffffffd, 0x8, 0x1, 0xfff, 0x59a44136, 0x627}, {0x8, 0x5, 0x3, 0xcb, 0x0, 0x2}, {0x6, 0x9, 0xffffffd8, 0x5, 0x6}, {0x9, 0x1, 0x2, 0x7, 0x689, 0xa0}, {0x3, 0x200, 0x200, 0x2, 0x6, 0xa4ff}, {0xffff, 0x6, 0x0, 0x7, 0xb3c5, 0x401}, {0xcf, 0x100, 0x8ff, 0x438, 0x1, 0x6}, {0x49, 0x400, 0x1f, 0x4, 0xc000, 0x1}, {0xffffff00, 0x4, 0x5, 0x0, 0x3, 0x20000000}, {0x8, 0x1, 0x7a, 0xa9, 0x9, 0xffff}, {0x77b2276, 0x2, 0x0, 0x1, 0x3f, 0x8}, {0x8, 0x6, 0x6, 0x3ff, 0x6}, {0x7ff, 0x800, 0x2, 0x1, 0x3, 0x2}, {0x7, 0x8, 0xff, 0x7f, 0x7ff, 0x8001}, {0xfff, 0x80, 0x1f, 0xb9b, 0x6fc8, 0x1}, {0x4599, 0x7, 0x0, 0x9, 0x20, 0xeb}, {0x2, 0x4000, 0x400, 0xffffffff, 0x6, 0x7}, {0x1000, 0xf0, 0x0, 0xdff6, 0x9, 0x2}, {0x7, 0x1ff, 0x3, 0x1, 0x3, 0x7}, {0x10001, 0xb8a, 0x5, 0x0, 0x1ff, 0x8}, {0x6b, 0x1000, 0x400, 0x5, 0x0, 0x9}, {0x8001, 0x0, 0x7fffffff, 0x7, 0x7fffffff, 0xffffff0b}, {0x1ff, 0x81, 0xf43, 0x1f, 0x5, 0xafa}, {0xcb, 0xffffffff, 0x3, 0x4, 0x9d5, 0xfffffffb}, {0xda5c, 0x1, 0x9f1, 0x7fffffff, 0x81a, 0xffffffff}, {0x9, 0x9, 0x2, 0xdca9, 0x9000, 0x1000}, {0x2, 0x100, 0x7, 0x8, 0x0, 0x4}, {0x3, 0x80000001, 0x9b6, 0x1, 0x401, 0x7}, {0x7, 0x8, 0x6, 0xffffff7a, 0x2, 0x8}, {0x8001, 0x5, 0x6, 0x2}, {0x35cf, 0x6fcd, 0x2, 0x9, 0x0, 0x9}, {0xca, 0x7fff, 0x96, 0x3, 0x4, 0xfffffffb}, {0x6fb, 0x0, 0x19, 0x6, 0x1, 0x400}, {0x1, 0x3, 0x3, 0x9ba0, 0x3, 0xcf}, {0x200, 0x800, 0x3ace631b, 0x6, 0xb6, 0x7fff}, {0x400, 0x7f, 0x7, 0x0, 0xfffff610, 0x3800000}, {0x1000, 0x6, 0x3, 0x3f, 0x1, 0x2}, {0x65, 0x1, 0xfffffffc, 0x3, 0x279a, 0x14}, {0x2, 0xffffffff, 0x6, 0x8, 0x591, 0x8}, {0x491, 0x7, 0x7, 0x400, 0x3, 0xfff}, {0x7fff, 0x1, 0x57d, 0x4, 0x800, 0x48a}, {0x2, 0x8, 0x1, 0x10000, 0x401}, {0x6, 0x4, 0xfffff40c, 0x5, 0x8, 0x6ab2}, {0x6, 0xc6, 0xa275, 0xb0, 0x100, 0x1}, {0x8, 0x6, 0x9, 0xfff, 0x8}, {0xfffff000, 0x7, 0xfffffff8, 0x7, 0x2, 0x200}, {0x6, 0x4, 0x6d, 0x100, 0x3f, 0x4}, {0x5, 0x5, 0x9, 0x0, 0x400, 0x934}, {0x6, 0x2, 0x1f, 0x8, 0x81, 0xc40f}, {0x4, 0xc2b, 0xfffffff8, 0x7, 0x8000, 0xffffff50}, {0x5, 0xffffff81, 0x401, 0x3, 0x7, 0x400}, {0x100, 0x8, 0xfffffffa, 0x4, 0x6, 0x10001}, {0x6, 0x10000, 0x17, 0x8c, 0xfffffff8, 0x7ff}, {0x62067c13, 0x8, 0x6, 0x8, 0x5}, {0x7ee, 0x0, 0x0, 0x4, 0x10001, 0x80000000}, {0x5f81, 0xa28f, 0x6, 0xfffffffc, 0x800, 0x10001}, {0x1000, 0x7, 0x6, 0x8000, 0xfb03, 0x3ff}, {0x800, 0xfffffffe, 0x9, 0x7fffffff, 0x8, 0x5f1}, {0x1, 0x7, 0x4e83, 0x7fffffff, 0xffff}, {0xffff, 0x5, 0x1, 0x1, 0x0, 0x1ff}, {0x7, 0x2, 0xde, 0x6, 0x2, 0x6}, {0x101, 0xfffffffb, 0x4, 0x6, 0x8000, 0x1f8}, {0x1, 0x0, 0x3, 0x9, 0x4, 0x8}, {0xfffffff9, 0x7, 0x3f, 0x6483, 0x401}, {0x4, 0x9, 0x81, 0x7, 0x8, 0x1}, {0x8, 0xffffffdf, 0x8, 0x9, 0xfffffff9, 0x800}, {0x7, 0x3, 0x8, 0x1, 0xeac, 0x1}, {0x7, 0x314e, 0x0, 0x5}, {0x57f9, 0xe1, 0x7, 0x0, 0xa04, 0x6}, {0x6, 0x481, 0x5, 0x7, 0x684d8ac2}, {0x401, 0x401, 0x0, 0x8, 0x7fffffff, 0x3}, {0x4ad2, 0x1c9f, 0x5135e19b, 0x1, 0x7, 0x800}, {0x9, 0x8000, 0x3}, {0x9f1, 0x9, 0x8, 0x1452df82, 0x2, 0x101}, {0x1, 0x0, 0x6b2, 0x7, 0x5, 0x59f}, {0x5, 0xf36a, 0x3917, 0x9, 0xff, 0x2}, {0x6e, 0x2, 0x1, 0x0, 0x45, 0x7}, {0x400, 0x3ff, 0x1, 0x8, 0x0, 0x9}, {0x1, 0x0, 0x7, 0x3, 0xffffffff}, {0x603ad109, 0xb2, 0x5, 0x3, 0x5, 0x3}, {0x81, 0xf6e, 0xff, 0x400, 0x5}, {0x72, 0x0, 0x80000000, 0xff, 0x7fffffff, 0x8}, {0x2, 0x9, 0x1000, 0x9, 0x8001, 0x3}, {0xde, 0x400, 0x8, 0xff, 0x0, 0x20000}, {0x1bd74c1e, 0x6, 0xfffffffd, 0x3, 0x9, 0x33cf}, {0x0, 0x5, 0x8, 0x8, 0x5, 0x8}, {0x1, 0x400, 0x5, 0x9, 0x9, 0x1}, {0x7ff, 0x9, 0x2, 0x2, 0x6, 0x3}, {0x605, 0x3, 0x9, 0x616d066d, 0xfffffffe, 0x8}, {0x8, 0xfcb, 0x10001, 0x1350, 0x6, 0x3}, {0x4eb, 0x1f, 0x14, 0x4514adca, 0x1, 0x8}, {0x1, 0x2, 0x5, 0xff, 0x3ff, 0x704}, {0xff, 0x2000000, 0x3, 0xa4ab, 0x0, 0xea}, {0x5, 0x7ff, 0x5, 0x7, 0x0, 0x6}, {0x3, 0x5, 0x2, 0x7fff, 0x3, 0x5a9d6e4}], [{0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x2}, {0x2}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x3, 0x1}, {0x3}, {0x4}, {0x4, 0x1}, {}, {0x6}, {0x5, 0x1}, {0x1}, {0x7}, {0x4}, {0x3}, {0x2}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x1}, {}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0xdb3e77ce7302add}, {0x2}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x4}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {}, {0x2}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x3}, {0x5}, {0x0, 0x1}, {0xa, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x6}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x2}, {0x3, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x11a0}}, 0x0) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f00000001c0)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}, 0x0) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) syz_80211_inject_frame(0x0, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x5a}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x6dfa, 0x9, 0x0, 0x18, 0x1, 0x3, '\x00', 0x0, r2, 0x3, 0x5, 0x3}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0xf, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xd7, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r2, 0x20, &(0x7f0000000680)={&(0x7f0000000600)=""/32, 0x20, 0x0, &(0x7f0000000640)=""/60, 0x3c}}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f0000000a80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd4, 0xd4, 0x3, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @union={0xf, 0x3, 0x0, 0x5, 0x0, 0x1, [{0x0, 0x3, 0x80}, {0x5, 0x0, 0x8}, {0xe, 0x3, 0x8e}]}, @ptr={0x2, 0x0, 0x0, 0x2, 0x5}, @struct={0xc, 0x1, 0x0, 0x4, 0x1, 0x10001, [{0xe, 0x5, 0x3}]}, @enum={0xe, 0x9, 0x0, 0x6, 0x4, [{0x5, 0xa6}, {0x8, 0x20}, {0xc, 0x80000000}, {0x2, 0x6}, {0x8, 0x6}, {0xc, 0x4}, {0xa, 0x2}, {0xd, 0x8}, {0x7, 0x4}]}, @var={0xa, 0x0, 0x0, 0xe, 0x4}, @var={0x2, 0x0, 0x0, 0xe, 0x4}]}, {0x0, [0x61]}}, &(0x7f0000000b80)=""/120, 0xef, 0x78, 0x100, 0x3}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r7, 0x0, 0xa002a0}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x23, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x12c8, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x9}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xcf}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000009c0)='syzkaller\x00', 0x343, 0x70, &(0x7f0000000a00)=""/112, 0x41000, 0x40, '\x00', r4, 0x25, r6, 0x8, &(0x7f0000000c40)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000c80)={0x4, 0x2, 0xc3a8, 0xfff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d40)=[r3, r7, 0xffffffffffffffff], 0x0, 0x10, 0x81d8}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x12, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4ed, 0x0, 0x0, 0x0, 0x80000000}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @exit, @exit, @jmp={0x5, 0x1, 0x7, 0x2, 0xb, 0xc, 0x1}]}, &(0x7f00000001c0)='syzkaller\x00', 0x101, 0x87, &(0x7f00000002c0)=""/135, 0x41000, 0x19, '\x00', r4, 0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000740)=[{0x0, 0x3, 0x6, 0xc}, {0x0, 0x4, 0xa, 0xa}, {0x2, 0x2, 0xe, 0xa}, {0x3, 0x3, 0x4, 0xf}, {0x5, 0x2, 0x8, 0x8}, {0x5, 0x7fff, 0xc, 0x8}, {0x3, 0x1, 0x4, 0x6}, {0x3, 0x4, 0x3, 0x9}], 0x10, 0x5}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_IFNAME={0x14, 0x3, 'wlan1\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000700)={0x2}, 0x8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) socket$rxrpc(0x21, 0x2, 0xa) executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000600)="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", 0x147}, {&(0x7f0000000fc0)="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", 0x46d}], 0x2}, 0x8400) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r1}, 0x38) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000cc0)="02"}, 0x20) (async) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000840)="f0", 0x1}], 0x1}, 0x0) (async, rerun: 64) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) (async, rerun: 64) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff"], 0x30}}, 0x0) sendmmsg$inet6(r2, &(0x7f000000c640)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)='p', 0x1}], 0x1}}], 0x1, 0x0) (async) shutdown(r2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x7}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) (async) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r5) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1831a5fde71e009dd335a1627d00", @ANYBLOB="b6a21c93f0cdb876918e3c9e93c78bf398cbabde1ff3b93c2700ea41e231cc90d6b9decd97c1902c0e6b605daa8aec452939adddd343463efd15e92ce415c2ccb36fc358f800251eea5d27a53cd80ed40bf678e9ef0635312c571ed9ba62426ebea4b05439009ef9f227043740143246fba48fd6de0e436c6f9722f6e241fa1938cd0449c15fe295f24db851e79cfd14367b370d0cbe3bf80698e56e119847e97b1a51e8cbdce14256ede0887dc254379d961d741bdc68f6a117a0207efd6591a8ae7b5346440726ac29221d68c365c1266678b1ca7c1a6473d53a5760b5", @ANYBLOB="0100000000000000000006000000080001000000000008000300", @ANYRES32=r4, @ANYBLOB="0a00e800080211000001007d90dbb323aabd184a"], 0x38}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x83, &(0x7f0000000140), &(0x7f0000000100)=0x10) executing program 2: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x40, 0x6, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_crypto(0x10, 0x3, 0x15) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_DONE(r4, 0x29, 0xcb, 0x0, 0x0) ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f0000000000)="c2a5") r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000000206010100000000000000000000000005000100070000000900020073797a30000000001c00078005001500100000000800124000000000080008400000202113000300686173683a6e65742c696661636500000500050002000000050004"], 0x68}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x21, &(0x7f0000000000)=0x101, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x20004000, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000100000001800000390000000e0001006e657464777673696d0000000f0002006e657464657673696d3000000800736298e46532568df6d5988cee4fa7263900000000000e0001006e657464657673696d000039b16a9930211d4064"], 0x64}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2f22}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x78) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000a00000000ee6c38301231310000000000000000000000000000495b84d67bdca4232cc5d96d7af419e29a1c8e03d22e2cd655fcefe5f3ea405202f9e89e2b5a7bda00"/82], 0x20}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000002eeed88696", @ANYRES32=r1], 0x20}}, 0x0) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x600, 0x0, 'cryptd(blake2b-160-generic)\x00'}, 0x58) executing program 0: r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$packet(0x11, 0x0, 0x300) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="00000806", 0x4, 0x0, &(0x7f0000000080)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_crypto(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="e800000012000b3600000000000000007874732d63617374362d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1252cb264afe28ddd7900000000000000ff01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800010000"], 0xe8}}, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0x4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="190000eca42cedf3c23408000000080018110000", @ANYRES32, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4}, 0x90) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x0, 0x2, 0x3, 0x5, 0x5e, @mcast2, @local, 0x7, 0x20, 0x0, 0x88a6}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xa9}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000000200)=""/41, 0x29}, {&(0x7f0000000280)=""/109, 0x6d}, {&(0x7f0000000300)=""/208, 0xd0}, {0x0}], 0x6, &(0x7f0000000540)=""/30, 0x1e}, 0x40000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ppoll(&(0x7f0000000400)=[{r10, 0x3082}, {r8, 0x5008}, {r5, 0x100}], 0x3, &(0x7f0000000640)={0x0, 0x989680}, &(0x7f0000000680)={[0x5]}, 0x8) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r9) shutdown(r9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002100)={0x11, 0x14, &(0x7f0000001b00)=@raw=[@map_idx={0x18, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @jmp={0x5, 0x1, 0xc, 0x6, 0x6, 0x80, 0x4}, @ldst={0x3, 0x3, 0x2, 0x9, 0xb}, @ldst={0x2, 0x3, 0x4, 0x4, 0xa, 0xfffffffffffffffe, 0xfffffffffffffff0}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f00000009c0)='GPL\x00', 0x4937, 0xa5, &(0x7f0000001bc0)=""/165, 0x40f00, 0x2, '\x00', r6, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001c80)={0x2, 0x0, 0x8, 0x80000001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000020c0)=[0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x90) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x0, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r11, 0x8004745a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='ext4_ext_show_extent\x00', r8}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000840), 0xffffffffffffffff) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x2, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) write$cgroup_int(r12, &(0x7f0000000000), 0x400000) program did not crash replaying the whole log did not cause a kernel crash single: executing 5 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_crypto-socket$packet-socket$packet-ioctl$ifreq_SIOCGIFINDEX_batadv_mesh-sendto$packet-sendmsg$nl_crypto-bpf$BPF_BTF_GET_FD_BY_ID-bpf$PROG_LOAD_XDP-ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL-bpf$PROG_LOAD-recvmsg-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD-socket$pppl2tp-socket$inet6_udp-ppoll-connect$pppl2tp-close-shutdown-bpf$PROG_LOAD-socket$pppl2tp-connect$pppl2tp-ioctl$PPPIOCGL2TPSTATS-bpf$BPF_RAW_TRACEPOINT_OPEN-syz_genetlink_get_family_id$devlink-openat$cgroup_ro-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-write$cgroup_int detailed listing: executing program 0: r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$packet(0x11, 0x0, 0x300) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="00000806", 0x4, 0x0, &(0x7f0000000080)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_crypto(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="e800000012000b3600000000000000007874732d63617374362d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1252cb264afe28ddd7900000000000000ff01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800010000"], 0xe8}}, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0x4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="190000eca42cedf3c23408000000080018110000", @ANYRES32, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4}, 0x90) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x0, 0x2, 0x3, 0x5, 0x5e, @mcast2, @local, 0x7, 0x20, 0x0, 0x88a6}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xa9}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000000200)=""/41, 0x29}, {&(0x7f0000000280)=""/109, 0x6d}, {&(0x7f0000000300)=""/208, 0xd0}, {0x0}], 0x6, &(0x7f0000000540)=""/30, 0x1e}, 0x40000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ppoll(&(0x7f0000000400)=[{r10, 0x3082}, {r8, 0x5008}, {r5, 0x100}], 0x3, &(0x7f0000000640)={0x0, 0x989680}, &(0x7f0000000680)={[0x5]}, 0x8) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r9) shutdown(r9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002100)={0x11, 0x14, &(0x7f0000001b00)=@raw=[@map_idx={0x18, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @jmp={0x5, 0x1, 0xc, 0x6, 0x6, 0x80, 0x4}, @ldst={0x3, 0x3, 0x2, 0x9, 0xb}, @ldst={0x2, 0x3, 0x4, 0x4, 0xa, 0xfffffffffffffffe, 0xfffffffffffffff0}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f00000009c0)='GPL\x00', 0x4937, 0xa5, &(0x7f0000001bc0)=""/165, 0x40f00, 0x2, '\x00', r6, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001c80)={0x2, 0x0, 0x8, 0x80000001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000020c0)=[0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x90) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x0, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r11, 0x8004745a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='ext4_ext_show_extent\x00', r8}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000840), 0xffffffffffffffff) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x2, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) write$cgroup_int(r12, &(0x7f0000000000), 0x400000) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$ifreq_SIOCGIFINDEX_team-socket$nl_netfilter-sendmsg$IPSET_CMD_SWAP-syz_init_net_socket$bt_hci-socket$nl_crypto-socket-setsockopt$MRT6_INIT-setsockopt$MRT6_DONE-ioctl$sock_bt_hci-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$nl_generic-socket$inet6_tcp-setsockopt$inet6_int-sendto$inet6-socket$nl_generic-syz_genetlink_get_family_id$devlink-sendmsg$DEVLINK_CMD_PORT_GET-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-sendmsg$nl_generic-socket$nl_route-socket$tipc-sendmsg$nl_route detailed listing: executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x40, 0x6, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_crypto(0x10, 0x3, 0x15) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_DONE(r4, 0x29, 0xcb, 0x0, 0x0) ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f0000000000)="c2a5") r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000000206010100000000000000000000000005000100070000000900020073797a30000000001c00078005001500100000000800124000000000080008400000202113000300686173683a6e65742c696661636500000500050002000000050004"], 0x68}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x21, &(0x7f0000000000)=0x101, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x20004000, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000100000001800000390000000e0001006e657464777673696d0000000f0002006e657464657673696d3000000800736298e46532568df6d5988cee4fa7263900000000000e0001006e657464657673696d000039b16a9930211d4064"], 0x64}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2f22}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x78) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000a00000000ee6c38301231310000000000000000000000000000495b84d67bdca4232cc5d96d7af419e29a1c8e03d22e2cd655fcefe5f3ea405202f9e89e2b5a7bda00"/82], 0x20}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000002eeed88696", @ANYRES32=r1], 0x20}}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-sendmsg$inet-sendmsg$kcm-bpf$PROG_LOAD-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$MAP_DELETE_ELEM-sendmsg$inet-socket$inet6_sctp-socket-sendmsg$nl_route-sendmmsg$inet6-shutdown-socket$nl_generic-ioctl$sock_SIOCGIFINDEX_80211-socket-setsockopt$inet6_group_source_req-socket-setsockopt$inet6_group_source_req-setsockopt$inet6_group_source_req-setsockopt$inet6_group_source_req-close-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_NEW_INTERFACE-getsockopt$inet_sctp6_SCTP_RTOINFO detailed listing: executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000600)="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", 0x147}, {&(0x7f0000000fc0)="da752f575198baaac222d34e85893d37a6bd281687872ed9151c56f415698f3fecf56eebf5edb42ed5d54e0419b2a13128d3ad19b6eed6b450aad46baaa57203e0d4f567d8d79fe07e7b3142de43e55cf69c65db2469175cf60c82f49d0f9d3f2ac908fd7099c4c4dde733a14d57f4117ed2f46aea5950ff0176d73349c2808eee62ce1c7d846ffdf65211f3192dabf5b3ac1516ad90e618d0ca9e4ac2778acabeac244f2f90af2616647e5cf8ab5e2ac404ebf2a866c8a73f68ae2cc4523e63e3a1aa5ab60a23e4c47534bda546042120c5333d91fefc68226bc9149d282937797a2fe036a58c9ecd19e54bcfb85d3f75ec7c74d86be94ef6b9191e0fa86d2a9330af3f592e24bc30b84632e5121bf04abc0e12f4073f6678ad97b786cc73b8175e35eda542e3631d283a3ca6fef91607ec7dee1b4a62bae169cc8fb64e8bdef95474f0b3c526f69ce55281e18016a4785875ba99e313fd63f66cfd36234bcc6048f25bce8cce39cf709eb10e1ea88497ff7401aae0d4a7e07f14691b6c4b75dc16e2586744317ffbb9966d8bfb16efcdf6ab308426e5c1aec6a6636122ffaca89af3b03834612b93989d0bbb251a42c1b48b86ac7162ad8d5cbf3d6cfccdc590724ff6caa85320f9d5beea2370b8c0533c19422c9097a7164651ad9d8f9cca4ea7815e53fd9c42eab1cb76b451cd3b18cf31c16d01731efd1506b844f52d2f173c825a7f8814ada5f6361a48f20250df6b98965d0c85f3df3b72b2ac49f3ed52e6fa30d7d3d54d95e8bd13ec2ed4883feb3b778d624ff0c1a3ec900671acd0ff00edc7b96d1cad51fba25565c67ce0e62302dbff8f68c0de8330c44704b2f019a7afc753538ed61f3744f286735af18a8f5e7ae3fd66e4562565b31a9e5d947a06ea69ee5f0ea97d2e832e1bbc9e74498a2f99473ef8822ad0254013fefff6c4c35d84072307633de00985a6477ff6480e75171a50915838168d3b1a5864450cc9b2fb1f71364095c0fd0c94610e4b9785dc39501ba75496d10907ada3ffa622225897c79c8e8efa27396ada49844f7664bd2eee3a156c0c89fc8ded3f1b8be73d1e60521c2789837b71fe63a320f233032f2bc0472f53165423fb6c8755e5f18ac54ea180f0486914f917f8b16b13b286248c2ed33bf7b95efc5b3c15664d036fcb721d19011d09a7efbb4863b021bd7b75c632a2bb13676a1ab1fed3f1101196625c09244c987825b515d662f4fcac27b9a4cf92ba0683b7eecbbff92c7250bf7c04bcc660840d91620bb214b46581f7f406b45019f01249be3a7ca79b97c9be7ae35f6d3594687c5207c029a2774f3a7df6681a206a59a9dd40a8f114e03f3b6a44a4e88960c9d6c79b5ac3ddfc4481ca5cdbf31816bfa9291879e0d7ea617add447d819aa30e2c3f9502c393cc9cce52dcbdac5e3c55a08a9b8ddaf52de96915f6635065a905aa94b7b20882dc3f72c3cbd2b5cab4e642b8defb3068b16582f9fad313682929d43e466c2448a9220bcdf2de3928078fbac197a7957bb9bb34e4778aca1626a984d4b1ac09517f1c353139739138fe320f5f34b17693c85e40d6f44e4750610a9e8463a4", 0x46d}], 0x2}, 0x8400) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r1}, 0x38) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000cc0)="02"}, 0x20) (async) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000840)="f0", 0x1}], 0x1}, 0x0) (async, rerun: 64) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) (async, rerun: 64) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff"], 0x30}}, 0x0) sendmmsg$inet6(r2, &(0x7f000000c640)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)='p', 0x1}], 0x1}}], 0x1, 0x0) (async) shutdown(r2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x7}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) (async) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r5) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1831a5fde71e009dd335a1627d00", @ANYBLOB="b6a21c93f0cdb876918e3c9e93c78bf398cbabde1ff3b93c2700ea41e231cc90d6b9decd97c1902c0e6b605daa8aec452939adddd343463efd15e92ce415c2ccb36fc358f800251eea5d27a53cd80ed40bf678e9ef0635312c571ed9ba62426ebea4b05439009ef9f227043740143246fba48fd6de0e436c6f9722f6e241fa1938cd0449c15fe295f24db851e79cfd14367b370d0cbe3bf80698e56e119847e97b1a51e8cbdce14256ede0887dc254379d961d741bdc68f6a117a0207efd6591a8ae7b5346440726ac29221d68c365c1266678b1ca7c1a6473d53a5760b5", @ANYBLOB="0100000000000000000006000000080001000000000008000300", @ANYRES32=r4, @ANYBLOB="0a00e800080211000001007d90dbb323aabd184a"], 0x38}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x83, &(0x7f0000000140), &(0x7f0000000100)=0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-ioctl$ifreq_SIOCGIFINDEX_team-syz_80211_inject_frame-bpf$BPF_BTF_LOAD-bpf$MAP_CREATE-bpf$BPF_GET_PROG_INFO-bpf$BPF_GET_BTF_INFO-bpf$BPF_BTF_LOAD-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD-sendmsg$nl_route-bpf$BPF_BTF_GET_NEXT_ID-ioctl$sock_kcm_SIOCKCMCLONE-syz_genetlink_get_family_id$devlink-socket$rxrpc detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) syz_80211_inject_frame(0x0, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x5a}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x6dfa, 0x9, 0x0, 0x18, 0x1, 0x3, '\x00', 0x0, r2, 0x3, 0x5, 0x3}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0xf, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xd7, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r2, 0x20, &(0x7f0000000680)={&(0x7f0000000600)=""/32, 0x20, 0x0, &(0x7f0000000640)=""/60, 0x3c}}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f0000000a80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd4, 0xd4, 0x3, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @union={0xf, 0x3, 0x0, 0x5, 0x0, 0x1, [{0x0, 0x3, 0x80}, {0x5, 0x0, 0x8}, {0xe, 0x3, 0x8e}]}, @ptr={0x2, 0x0, 0x0, 0x2, 0x5}, @struct={0xc, 0x1, 0x0, 0x4, 0x1, 0x10001, [{0xe, 0x5, 0x3}]}, @enum={0xe, 0x9, 0x0, 0x6, 0x4, [{0x5, 0xa6}, {0x8, 0x20}, {0xc, 0x80000000}, {0x2, 0x6}, {0x8, 0x6}, {0xc, 0x4}, {0xa, 0x2}, {0xd, 0x8}, {0x7, 0x4}]}, @var={0xa, 0x0, 0x0, 0xe, 0x4}, @var={0x2, 0x0, 0x0, 0xe, 0x4}]}, {0x0, [0x61]}}, &(0x7f0000000b80)=""/120, 0xef, 0x78, 0x100, 0x3}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r7, 0x0, 0xa002a0}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x23, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x12c8, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x9}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xcf}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000009c0)='syzkaller\x00', 0x343, 0x70, &(0x7f0000000a00)=""/112, 0x41000, 0x40, '\x00', r4, 0x25, r6, 0x8, &(0x7f0000000c40)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000c80)={0x4, 0x2, 0xc3a8, 0xfff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d40)=[r3, r7, 0xffffffffffffffff], 0x0, 0x10, 0x81d8}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x12, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4ed, 0x0, 0x0, 0x0, 0x80000000}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @exit, @exit, @jmp={0x5, 0x1, 0x7, 0x2, 0xb, 0xc, 0x1}]}, &(0x7f00000001c0)='syzkaller\x00', 0x101, 0x87, &(0x7f00000002c0)=""/135, 0x41000, 0x19, '\x00', r4, 0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000740)=[{0x0, 0x3, 0x6, 0xc}, {0x0, 0x4, 0xa, 0xa}, {0x2, 0x2, 0xe, 0xa}, {0x3, 0x3, 0x4, 0xf}, {0x5, 0x2, 0x8, 0x8}, {0x5, 0x7fff, 0xc, 0x8}, {0x3, 0x1, 0x4, 0x6}, {0x3, 0x4, 0x3, 0x9}], 0x10, 0x5}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_IFNAME={0x14, 0x3, 'wlan1\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000700)={0x2}, 0x8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) socket$rxrpc(0x21, 0x2, 0xa) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-bind$inet6-listen-socket$inet_dccp-connect$inet-getsockopt$inet_int detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf9, &(0x7f0000000080), &(0x7f00000000c0)=0x4) program crashed: lost connection to test machine single: successfully extracted reproducer found reproducer with 6 syscalls minimizing guilty program testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-bind$inet6-listen-socket$inet_dccp-connect$inet detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) program crashed: lost connection to test machine testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-bind$inet6-listen-socket$inet_dccp detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) socket$inet_dccp(0x2, 0x6, 0x0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-bind$inet6-listen-connect$inet detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-bind$inet6-socket$inet_dccp-connect$inet detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-listen-socket$inet_dccp-connect$inet detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x4) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bind$inet6-listen-socket$inet_dccp-connect$inet detailed listing: executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x4) r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) program crashed: KASAN: slab-use-after-free Read in sk_skb_reason_drop testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bind$inet6-listen-socket$inet_dccp-connect$inet detailed listing: executing program 0: bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x4) r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bind$inet6-listen-socket$inet_dccp-connect$inet detailed listing: executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x4) r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, 0x0, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bind$inet6-listen-socket$inet_dccp-connect$inet program did not crash simplifying guilty program options testing program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bind$inet6-listen-socket$inet_dccp-connect$inet detailed listing: executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x4) r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bind$inet6-listen-socket$inet_dccp-connect$inet detailed listing: executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x4) r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) program did not crash reproducing took 2h10m23.056259226s repro crashed as (corrupted=false): ================================================================== BUG: KASAN: slab-use-after-free in instrument_atomic_read include/linux/instrumented.h:68 [inline] BUG: KASAN: slab-use-after-free in atomic_read include/linux/atomic/atomic-instrumented.h:32 [inline] BUG: KASAN: slab-use-after-free in refcount_read include/linux/refcount.h:136 [inline] BUG: KASAN: slab-use-after-free in skb_unref include/linux/skbuff.h:1228 [inline] BUG: KASAN: slab-use-after-free in __sk_skb_reason_drop net/core/skbuff.c:1196 [inline] BUG: KASAN: slab-use-after-free in sk_skb_reason_drop+0x44/0x3d0 net/core/skbuff.c:1224 Read of size 4 at addr ffff888018384724 by task syz-executor.0/5194 CPU: 0 PID: 5194 Comm: syz-executor.0 Not tainted 6.10.0-rc4-syzkaller-00875-g568ebdaba637 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:114 print_address_description mm/kasan/report.c:377 [inline] print_report+0x169/0x550 mm/kasan/report.c:488 kasan_report+0x143/0x180 mm/kasan/report.c:601 kasan_check_range+0x282/0x290 mm/kasan/generic.c:189 instrument_atomic_read include/linux/instrumented.h:68 [inline] atomic_read include/linux/atomic/atomic-instrumented.h:32 [inline] refcount_read include/linux/refcount.h:136 [inline] skb_unref include/linux/skbuff.h:1228 [inline] __sk_skb_reason_drop net/core/skbuff.c:1196 [inline] sk_skb_reason_drop+0x44/0x3d0 net/core/skbuff.c:1224 kfree_skb_reason include/linux/skbuff.h:1260 [inline] kfree_skb include/linux/skbuff.h:1269 [inline] __hci_req_sync+0x631/0x950 net/bluetooth/hci_request.c:184 hci_req_sync+0xa9/0xd0 net/bluetooth/hci_request.c:206 hci_dev_cmd+0x4c5/0xa50 net/bluetooth/hci_core.c:787 sock_do_ioctl+0x158/0x460 net/socket.c:1222 sock_ioctl+0x629/0x8e0 net/socket.c:1341 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:893 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f54dc27ce0b Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 RSP: 002b:00007ffd610690f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f54dc27ce0b RDX: 00007ffd61069168 RSI: 00000000400448dd RDI: 0000000000000003 RBP: 000055555daad430 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 Allocated by task 4489: kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3f/0x80 mm/kasan/common.c:68 unpoison_slab_object mm/kasan/common.c:312 [inline] __kasan_slab_alloc+0x66/0x80 mm/kasan/common.c:338 kasan_slab_alloc include/linux/kasan.h:201 [inline] slab_post_alloc_hook mm/slub.c:3941 [inline] slab_alloc_node mm/slub.c:4001 [inline] kmem_cache_alloc_noprof+0x135/0x2a0 mm/slub.c:4008 skb_clone+0x20c/0x390 net/core/skbuff.c:2054 hci_send_cmd_sync net/bluetooth/hci_core.c:4123 [inline] hci_cmd_work+0x2a2/0x670 net/bluetooth/hci_core.c:4143 process_one_work kernel/workqueue.c:3231 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312 worker_thread+0x86d/0xd70 kernel/workqueue.c:3393 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Freed by task 4489: kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3f/0x80 mm/kasan/common.c:68 kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:579 poison_slab_object+0xe0/0x150 mm/kasan/common.c:240 __kasan_slab_free+0x37/0x60 mm/kasan/common.c:256 kasan_slab_free include/linux/kasan.h:184 [inline] slab_free_hook mm/slub.c:2196 [inline] slab_free mm/slub.c:4437 [inline] kmem_cache_free+0x145/0x350 mm/slub.c:4512 kfree_skb_reason include/linux/skbuff.h:1260 [inline] kfree_skb include/linux/skbuff.h:1269 [inline] hci_req_sync_complete+0xe8/0x290 net/bluetooth/hci_request.c:109 hci_event_packet+0xc75/0x1540 net/bluetooth/hci_event.c:7479 hci_rx_work+0x3e8/0xca0 net/bluetooth/hci_core.c:4074 process_one_work kernel/workqueue.c:3231 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312 worker_thread+0x86d/0xd70 kernel/workqueue.c:3393 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 The buggy address belongs to the object at ffff888018384640 which belongs to the cache skbuff_head_cache of size 240 The buggy address is located 228 bytes inside of freed 240-byte region [ffff888018384640, ffff888018384730) The buggy address belongs to the physical page: page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18384 flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) page_type: 0xffffefff(slab) raw: 00fff00000000000 ffff888018ae2780 ffffea000072f700 dead000000000004 raw: 0000000000000000 00000000000c000c 00000001ffffefff 0000000000000000 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 4546, tgid 4546 (udevadm), ts 31919585452, free_ts 31831647028 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x1f3/0x230 mm/page_alloc.c:1468 prep_new_page mm/page_alloc.c:1476 [inline] get_page_from_freelist+0x2e43/0x2f00 mm/page_alloc.c:3420 __alloc_pages_noprof+0x256/0x6c0 mm/page_alloc.c:4678 __alloc_pages_node_noprof include/linux/gfp.h:269 [inline] alloc_pages_node_noprof include/linux/gfp.h:296 [inline] alloc_slab_page+0x5f/0x120 mm/slub.c:2265 allocate_slab+0x5a/0x2f0 mm/slub.c:2428 new_slab mm/slub.c:2481 [inline] ___slab_alloc+0xcd1/0x14b0 mm/slub.c:3667 __slab_alloc+0x58/0xa0 mm/slub.c:3757 __slab_alloc_node mm/slub.c:3810 [inline] slab_alloc_node mm/slub.c:3989 [inline] kmem_cache_alloc_node_noprof+0x1fe/0x320 mm/slub.c:4044 __alloc_skb+0x1c3/0x440 net/core/skbuff.c:656 alloc_skb include/linux/skbuff.h:1320 [inline] alloc_uevent_skb+0x74/0x230 lib/kobject_uevent.c:289 uevent_net_broadcast_untagged lib/kobject_uevent.c:326 [inline] kobject_uevent_net_broadcast+0x2fd/0x580 lib/kobject_uevent.c:410 kobject_uevent_env+0x57d/0x8e0 lib/kobject_uevent.c:593 kobject_synth_uevent+0x4ef/0xae0 lib/kobject_uevent.c:207 uevent_store+0x4b/0x70 drivers/base/bus.c:633 kernfs_fop_write_iter+0x3a1/0x500 fs/kernfs/file.c:334 new_sync_write fs/read_write.c:497 [inline] vfs_write+0xa72/0xc90 fs/read_write.c:590 page last free pid 4546 tgid 4546 stack trace: reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1088 [inline] free_unref_page+0xd22/0xea0 mm/page_alloc.c:2583 rcu_do_batch kernel/rcu/tree.c:2535 [inline] rcu_core+0xafd/0x1830 kernel/rcu/tree.c:2809 handle_softirqs+0x2c4/0x970 kernel/softirq.c:554 __do_softirq kernel/softirq.c:588 [inline] invoke_softirq kernel/softirq.c:428 [inline] __irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637 irq_exit_rcu+0x9/0x30 kernel/softirq.c:649 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 Memory state around the buggy address: ffff888018384600: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb ffff888018384680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb >ffff888018384700: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc ^ ffff888018384780: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff888018384800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc ================================================================== final repro crashed as (corrupted=false): ================================================================== BUG: KASAN: slab-use-after-free in instrument_atomic_read include/linux/instrumented.h:68 [inline] BUG: KASAN: slab-use-after-free in atomic_read include/linux/atomic/atomic-instrumented.h:32 [inline] BUG: KASAN: slab-use-after-free in refcount_read include/linux/refcount.h:136 [inline] BUG: KASAN: slab-use-after-free in skb_unref include/linux/skbuff.h:1228 [inline] BUG: KASAN: slab-use-after-free in __sk_skb_reason_drop net/core/skbuff.c:1196 [inline] BUG: KASAN: slab-use-after-free in sk_skb_reason_drop+0x44/0x3d0 net/core/skbuff.c:1224 Read of size 4 at addr ffff888018384724 by task syz-executor.0/5194 CPU: 0 PID: 5194 Comm: syz-executor.0 Not tainted 6.10.0-rc4-syzkaller-00875-g568ebdaba637 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:114 print_address_description mm/kasan/report.c:377 [inline] print_report+0x169/0x550 mm/kasan/report.c:488 kasan_report+0x143/0x180 mm/kasan/report.c:601 kasan_check_range+0x282/0x290 mm/kasan/generic.c:189 instrument_atomic_read include/linux/instrumented.h:68 [inline] atomic_read include/linux/atomic/atomic-instrumented.h:32 [inline] refcount_read include/linux/refcount.h:136 [inline] skb_unref include/linux/skbuff.h:1228 [inline] __sk_skb_reason_drop net/core/skbuff.c:1196 [inline] sk_skb_reason_drop+0x44/0x3d0 net/core/skbuff.c:1224 kfree_skb_reason include/linux/skbuff.h:1260 [inline] kfree_skb include/linux/skbuff.h:1269 [inline] __hci_req_sync+0x631/0x950 net/bluetooth/hci_request.c:184 hci_req_sync+0xa9/0xd0 net/bluetooth/hci_request.c:206 hci_dev_cmd+0x4c5/0xa50 net/bluetooth/hci_core.c:787 sock_do_ioctl+0x158/0x460 net/socket.c:1222 sock_ioctl+0x629/0x8e0 net/socket.c:1341 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:893 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f54dc27ce0b Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 RSP: 002b:00007ffd610690f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f54dc27ce0b RDX: 00007ffd61069168 RSI: 00000000400448dd RDI: 0000000000000003 RBP: 000055555daad430 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 Allocated by task 4489: kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3f/0x80 mm/kasan/common.c:68 unpoison_slab_object mm/kasan/common.c:312 [inline] __kasan_slab_alloc+0x66/0x80 mm/kasan/common.c:338 kasan_slab_alloc include/linux/kasan.h:201 [inline] slab_post_alloc_hook mm/slub.c:3941 [inline] slab_alloc_node mm/slub.c:4001 [inline] kmem_cache_alloc_noprof+0x135/0x2a0 mm/slub.c:4008 skb_clone+0x20c/0x390 net/core/skbuff.c:2054 hci_send_cmd_sync net/bluetooth/hci_core.c:4123 [inline] hci_cmd_work+0x2a2/0x670 net/bluetooth/hci_core.c:4143 process_one_work kernel/workqueue.c:3231 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312 worker_thread+0x86d/0xd70 kernel/workqueue.c:3393 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Freed by task 4489: kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3f/0x80 mm/kasan/common.c:68 kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:579 poison_slab_object+0xe0/0x150 mm/kasan/common.c:240 __kasan_slab_free+0x37/0x60 mm/kasan/common.c:256 kasan_slab_free include/linux/kasan.h:184 [inline] slab_free_hook mm/slub.c:2196 [inline] slab_free mm/slub.c:4437 [inline] kmem_cache_free+0x145/0x350 mm/slub.c:4512 kfree_skb_reason include/linux/skbuff.h:1260 [inline] kfree_skb include/linux/skbuff.h:1269 [inline] hci_req_sync_complete+0xe8/0x290 net/bluetooth/hci_request.c:109 hci_event_packet+0xc75/0x1540 net/bluetooth/hci_event.c:7479 hci_rx_work+0x3e8/0xca0 net/bluetooth/hci_core.c:4074 process_one_work kernel/workqueue.c:3231 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312 worker_thread+0x86d/0xd70 kernel/workqueue.c:3393 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 The buggy address belongs to the object at ffff888018384640 which belongs to the cache skbuff_head_cache of size 240 The buggy address is located 228 bytes inside of freed 240-byte region [ffff888018384640, ffff888018384730) The buggy address belongs to the physical page: page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18384 flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) page_type: 0xffffefff(slab) raw: 00fff00000000000 ffff888018ae2780 ffffea000072f700 dead000000000004 raw: 0000000000000000 00000000000c000c 00000001ffffefff 0000000000000000 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 4546, tgid 4546 (udevadm), ts 31919585452, free_ts 31831647028 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x1f3/0x230 mm/page_alloc.c:1468 prep_new_page mm/page_alloc.c:1476 [inline] get_page_from_freelist+0x2e43/0x2f00 mm/page_alloc.c:3420 __alloc_pages_noprof+0x256/0x6c0 mm/page_alloc.c:4678 __alloc_pages_node_noprof include/linux/gfp.h:269 [inline] alloc_pages_node_noprof include/linux/gfp.h:296 [inline] alloc_slab_page+0x5f/0x120 mm/slub.c:2265 allocate_slab+0x5a/0x2f0 mm/slub.c:2428 new_slab mm/slub.c:2481 [inline] ___slab_alloc+0xcd1/0x14b0 mm/slub.c:3667 __slab_alloc+0x58/0xa0 mm/slub.c:3757 __slab_alloc_node mm/slub.c:3810 [inline] slab_alloc_node mm/slub.c:3989 [inline] kmem_cache_alloc_node_noprof+0x1fe/0x320 mm/slub.c:4044 __alloc_skb+0x1c3/0x440 net/core/skbuff.c:656 alloc_skb include/linux/skbuff.h:1320 [inline] alloc_uevent_skb+0x74/0x230 lib/kobject_uevent.c:289 uevent_net_broadcast_untagged lib/kobject_uevent.c:326 [inline] kobject_uevent_net_broadcast+0x2fd/0x580 lib/kobject_uevent.c:410 kobject_uevent_env+0x57d/0x8e0 lib/kobject_uevent.c:593 kobject_synth_uevent+0x4ef/0xae0 lib/kobject_uevent.c:207 uevent_store+0x4b/0x70 drivers/base/bus.c:633 kernfs_fop_write_iter+0x3a1/0x500 fs/kernfs/file.c:334 new_sync_write fs/read_write.c:497 [inline] vfs_write+0xa72/0xc90 fs/read_write.c:590 page last free pid 4546 tgid 4546 stack trace: reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1088 [inline] free_unref_page+0xd22/0xea0 mm/page_alloc.c:2583 rcu_do_batch kernel/rcu/tree.c:2535 [inline] rcu_core+0xafd/0x1830 kernel/rcu/tree.c:2809 handle_softirqs+0x2c4/0x970 kernel/softirq.c:554 __do_softirq kernel/softirq.c:588 [inline] invoke_softirq kernel/softirq.c:428 [inline] __irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637 irq_exit_rcu+0x9/0x30 kernel/softirq.c:649 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 Memory state around the buggy address: ffff888018384600: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb ffff888018384680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb >ffff888018384700: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc ^ ffff888018384780: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff888018384800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc ==================================================================