Extracting prog: 2h29m47.396378284s Minimizing prog: 48m8.732482086s Simplifying prog options: 0s Extracting C: 2m30.89030667s Simplifying C: 29m7.467492505s extracting reproducer from 30 programs testing a last program of every proc single: executing 5 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_sctp-mkdirat-openat-socket$nl_generic-socket$nl_netfilter-socket$nl_netfilter-sendmsg$NFT_MSG_GETSET-bind$inet6-listen-socket$nl_netfilter-sendmsg$IPSET_CMD_ADD detailed listing: executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c0040}, 0x408c4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sysctl-write$sysctl-socket$inet_mptcp-fcntl$setstatus-setsockopt$sock_linger-setsockopt$SO_BINDTODEVICE-bind$inet-connect$inet-syz_extract_tcp_res$synack-syz_emit_ethernet-getsockopt$inet_mptcp_MPTCP_INFO-sendto$inet-socket$nl_generic-syz_genetlink_get_family_id$mptcp-socket$inet6_udp-sendto$inet6 detailed listing: executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sysctl-write$sysctl-socket$inet_mptcp-fcntl$setstatus-setsockopt$sock_linger-setsockopt$SO_BINDTODEVICE-bind$inet-connect$inet-syz_extract_tcp_res$synack-syz_emit_ethernet-getsockopt$inet_mptcp_MPTCP_INFO-sendto$inet-socket$nl_generic-openat$kvm-ioctl$KVM_CREATE_VM-syz_genetlink_get_family_id$mptcp-socket$inet6_udp-sendto$inet6 detailed listing: executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80102, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r5, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$netlink-socket$nl_generic-timer_create-socket$netlink-socket-sendmsg$IPVS_CMD_SET_INFO-getsockname$packet-sendmsg$nl_route-sendmsg$nl_route-fcntl$lock-mprotect-timer_settime-socket-setsockopt$MRT6_INIT-syz_open_dev$radio-syz_io_uring_setup-io_uring_enter-socket$inet6-sendto$inet6-writev-mmap-rt_sigtimedwait-openat$dsp1-ioctl$SNDCTL_DSP_GETOSPACE-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-socket-sendmsg$nl_route_sched-sendmsg$NL80211_CMD_SET_TID_CONFIG detailed listing: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="180000001e0001002abd7000fedbdf2507001480e0fadd578a76004ce6d2058c78dc8db33e86d3aadceca5d6743a48bc49916aa3d0d34ce73a4112edf38250dda064fe50397de53d4c84a12491567990af7f26f89f6cbb07586df5"], 0x18}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000010001fff000000000100000000000000", @ANYRES32=r5, @ANYRES8=r2, @ANYRES32=r0, @ANYRESOCT=r2], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000340)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000380), 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f0000000680), 0x4) syz_open_dev$radio(0x0, 0x0, 0x2) r7 = syz_io_uring_setup(0xf01, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r7, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000780)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) writev(r8, &(0x7f00000007c0)=[{&(0x7f0000000800)="01", 0x1}], 0x1) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f00000003c0)={[0x7ff]}, 0x0, 0x0, 0x8) r9 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1c280, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r9, 0x8010500c, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001000)=@newchain={0x64, 0x64, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xe, 0x3}, {0xfff1, 0x6}, {0xb, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff]}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x20}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @random="be4fe094fd0f"}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x80}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRESDEC, @ANYBLOB="000000008900000008000300", @ANYRES32=r10, @ANYBLOB="18001d801400008006000500480000000500090000000000"], 0x34}, 0x1, 0x0, 0x0, 0x220288d1}, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$lan78xx-socket$nl_generic-sendmsg$nl_generic-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_open_dev$dri-ioctl$DRM_IOCTL_GET_CLIENT-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_connect$uac2-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io$lan78xx detailed listing: executing program 0: r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x5b05b05b05b0660, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000040000901feffffff0000000004710000040042800c0001800600060008"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000400)={0x20, 0x35}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000600), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc02864cf, &(0x7f0000000680)) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000500)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000540)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac2(0x8d4ffd4123e09dcf, 0xae, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x499, 0x1038, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c, 0x3, 0x1, 0x9, 0x0, 0x3, {0x8, 0xb, 0x0, 0x2, 0x1, 0x3, 0x20, 0x40}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7f, 0x1, 0x1a, 0x7f}, [@effect_unit={0x11, 0x24, 0x7, 0x4, 0x4, 0x4, [0x2, 0x0, 0x1, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x3f7, 0x0, 0x3, 0x90, {0x8, 0x25, 0x1, 0x80, 0x3, 0x6, 0x202}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x6, 0x2, 0xf3, 0x6, "89", "bfe1a4"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9e, 0x2, 0x4, 0x5, "b941fde7b00423f9"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x1, 0x2, 0x8, {0x8, 0x25, 0x1, 0x80, 0x0, 0x6, 0x8}}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x81, 0x4, 0x4, 0x8}, 0x53, &(0x7f0000000140)={0x5, 0xf, 0x53, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x3b, 0x3, 0x5, 0xf00f, 0xeff5, [0xc00f, 0xff3fc0, 0x1feff30]}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x7, 0x2, 0x4}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x7, 0xf00f, 0x62, [0xff0030, 0x30, 0x0, 0xff0000]}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x8, 0xf00, 0x1000, [0xffc0cf]}]}, 0x5, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1c0a}}]}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000007c0)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash single: failed to extract reproducer bisect: bisecting 30 programs with base timeout 30s testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 10, 1, 30, 4, 28, 27, 14, 4, 25, 2, 30, 16, 4, 21, 22, 19, 11, 19, 2, 14, 18, 21, 30, 4, 26, 27, 18, 16, 11] detailed listing: executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000006c0)={0x1, &(0x7f0000000700)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) syz_80211_inject_frame(&(0x7f0000000640)=@broadcast, &(0x7f0000002b00)=ANY=[], 0x358) (fail_nth: 5) executing program 1: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) rseq(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x9, 0x7, 0x7ffc0001}]}) unshare(0x22020600) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400004002080104104d000000000000010000087039bdc031e4db1067e03ccb383e29d475440592249ae432622b2f1032fb709055f60e848f2f3ff9821633cc0aec80f3a917f13c9b738009"], 0x14}, 0x1, 0x0, 0x0, 0x2404c005}, 0x20040004) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) executing program 1: syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) executing program 3: r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000080)=@l={0x92, 0x0, 0xc0, 0xa}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000020c0)={0x10003, 0x0, 0xf0000000, 0x1000, &(0x7f0000200000/0x1000)=nil}) r4 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000002100)={0x0, &(0x7f0000002140)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1e, {0x0, "66ba3412eef4"}}, @nested_set_state_pages={0x140, 0x28, {0x0, 0x0, @arbitrary=0xf0000000}}, @nested_vmlaunch={0x12f, 0x18}], 0x8e}) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r5, 0x3, 0x11, r4, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_assert_syzos_kvm_exit$x86(r6, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip6_tables_matches\x00') sendfile(r7, r8, 0x0, 0x80000000) openat$incfs(r8, &(0x7f0000000140)='.pending_reads\x00', 0x10000, 0x20) r9 = syz_create_resource$kvm_nested_state(&(0x7f0000002200)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_GET_NESTED_STATE_res(r4, 0xc080aebe, r9) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000004280)={0x2710, 0x0, 0xf0000000}) r10 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_buf(r10, 0x1, 0x1c, 0x0, &(0x7f0000000180)) ioctl$KVM_SET_NESTED_STATE_res(r4, 0x4080aebf, r9) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') lseek(r11, 0x2000, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) syz_kvm_assert_syzos_kvm_exit$x86(r6, 0x11) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_assert_syzos_kvm_exit$x86(r6, 0x11) r12 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$XFS_IOC_GOINGDOWN(r12, 0x8004587d, &(0x7f0000000000)=0x5) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, &(0x7f00000001c0)=0x2, 0x4) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYRESHEX=r1, @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4090) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x27c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000400)={&(0x7f000018e000/0x3000)=nil, &(0x7f00000da000/0x4000)=nil, 0x3000}) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000000)=0xfffffffa, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x5400, 0x3f00) (fail_nth: 5) sendto$inet(r1, 0x0, 0x0, 0x28040041, &(0x7f0000000080)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="17", 0x1}], 0x1}, 0x48c0) recvmmsg(r1, &(0x7f0000000300), 0x40000000000026c, 0x0, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0xe2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000440)={0xc0, 0x0, 0xe9a3523dacc11ba7}) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r3, 0xaec7) rseq(0x0, 0x0, 0x0, 0x0) semget(0x0, 0x0, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r1 = syz_io_uring_setup(0x112, &(0x7f0000000200)={0x0, 0x5a87, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000340)='n', 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000480)) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rthdr={{0x18, 0x29, 0x39, {0x2b, 0x0, 0x2, 0xf7}}}], 0x18}, 0x200008d0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001bc0), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r2, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000001c80)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000001cc0)='\x00', 0x0}, 0x48) openat$dir(0xffffffffffffff9c, &(0x7f0000001d00)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000001d40)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001d80)='smaps_rollup\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_procfs(0x0, &(0x7f0000001dc0)='net/netstat\x00') r3 = gettid() timer_create(0x0, 0x0, &(0x7f0000001e00)) ptrace$pokeuser(0x6, r3, 0x3, 0xec9c) connect$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x1, 0x2, 0x10, {0xa, 0x4e23, 0x39, @empty, 0xfffff200}}, 0x24) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) r5 = syz_open_dev$vbi(&(0x7f0000001e40), 0x1, 0x2) ioctl$VIDIOC_ENUMOUTPUT(r5, 0xc0485630, &(0x7f0000001e80)={0x1, "ac74841675e4aedde850ee5b2910d1e16305d9a7f9c8a7076ece23ddca3c191d", 0x3, 0x21c, 0xff, 0x200000, 0x4}) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e23, 0x180000, @dev={0xfe, 0x80, '\x00', 0x43}, 0x9}, 0x1c, 0x0, 0x0, 0x0, 0x50}, 0x340880c4) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_PARM(r6, 0xc0cc5616, &(0x7f0000000380)={0x0, @capture={0x0, 0x0, {0xfffffffa, 0x3}, 0x8, 0x1}}) executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x8) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x20}) recvfrom$l2tp(r0, 0x0, 0x0, 0x40, &(0x7f0000001640)={0x2, 0x0, @initdev}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x50}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000280)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1}) executing program 1: r0 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000200000040480b0510000101020001090239000201008032090400000000000000090401000000000000090401010300000000070501024000000705810240000007058201"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000480), 0x1, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000004c0)={0x100, 0x0, 0x0, 0x14, 0x4}) (fail_nth: 6) executing program 4: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000001c0)='1', 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x1001}) r2 = socket$key(0xf, 0x3, 0x2) r3 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x7ffffffe, r2, &(0x7f0000000140)={0x10000001}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x1001}) r5 = landlock_create_ruleset(&(0x7f0000000080)={0x7615, 0x2, 0x2, 0x4010, 0x2}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f00000000c0), 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'syzkaller1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000380)={&(0x7f00000003c0), 0xc, &(0x7f0000000400)={&(0x7f0000000440)=@setlink={0x20, 0x13, 0x5, 0x70bc95, 0x0, {0x0, 0x0, 0x0, r7, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={&(0x7f00000004c0), 0xc, &(0x7f0000000500)={&(0x7f0000000540)=@ipv4_newaddr={0x28, 0x14, 0x405, 0x70bc96, 0x0, {0x2, 0x18, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @private=0xa010101}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010101}]}, 0x28}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000580)={&(0x7f00000005c0), 0xc, &(0x7f0000000600)={&(0x7f0000000640)=@setlink={0x20, 0x13, 0x5, 0x70bc97, 0x0, {0x0, 0x0, 0x0, r8, 0x1, 0x1}}, 0x20}}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000100)=0xf8, 0x4) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x294}]}) socket$nl_netfilter(0x10, 0x3, 0xc) write$tun(r1, &(0x7f00000009c0)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x64, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @rand_addr=0x64010102}, {0x4e20, 0x4e21, 0xc, 0x0, @opaque='ABCD'}}}, 0x20) write$tun(r1, &(0x7f0000000a40)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @rand_addr=0x64010102}, {0x4e20, 0x4e21, 0xc, 0x0, @opaque='IJKL'}}}, 0x20) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}}, 0x0) executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x40) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000680)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x8000, 0x0) socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000700)={0x2, 0x0, @local}, 0x10) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000780)={0x3, 0x2, 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r4, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000040000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000100000000000000440005000000000000000000000000000000000000000002320000000a000000fc010000000000000000000000000000000000000100"/180], 0xfc}}, 0x0) connect$inet(r3, &(0x7f0000000940)={0x2, 0x4, @broadcast}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000980)={0x84, @local, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000009c0)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0xa, 0xc, 0x56}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 32) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0xfd8b, 0x5}) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async, rerun: 32) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) (rerun: 32) write$dsp(r1, &(0x7f0000000180)="5cba91a4", 0xffffffd9) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffff9]}, 0x0, 0x8) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) (async, rerun: 64) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000240)=0x1) (rerun: 64) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x9) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0xbc}, 0x1, 0x0, 0x0, 0xc0}, 0x0) executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) executing program 2: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000001c0)='1', 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x1001}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x1001}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f00000003c0), 0xc, &(0x7f0000000400)={&(0x7f0000000440)=@setlink={0x20, 0x13, 0x5, 0x70bc95, 0x0, {0x0, 0x0, 0x0, r4, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f00000004c0), 0xc, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001400055996bc70000000000002180000", @ANYRES32=r4, @ANYBLOB="080002000a010101080001000a010101"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={&(0x7f00000005c0), 0xc, &(0x7f0000000600)={&(0x7f0000000640)=@setlink={0x20, 0x13, 0x5, 0x70bc97, 0x0, {0x0, 0x0, 0x0, r5, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={&(0x7f00000006c0), 0xc, &(0x7f0000000700)={&(0x7f0000000a80)=ANY=[@ANYBLOB="280000001400050498bc70000000000002180000", @ANYRES32=r5, @ANYBLOB="08000200640131b80800010064810101126c221e0f9d94889911eb8bd4813885d93c7b21c7f94b0d239c7f879c1cb410cb588917489de623307e1ee7960d8fe7781828c6f70582bc392595a5910bdac2b63cad8539fff47113cfa5b6e6663d95543f304fbbb6e7b275ae2e49df6678a321099d12c3eb6af08fa7f5fcf2f6079184ec63a86bf375d37eae4cd953fb70953b09d58b9b528c12a87aeef07e68ffddb4c94f0a20af5d35934c90c351eba1cb0c56bd7151e58689404be9db1b326a39f73c74c69b0f0b39cc3aff5eca49f97459c597ff1bc1c33450"], 0x28}}, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000000)={0x3, 0x5}, 0x0) fsopen(&(0x7f0000000040)='mqueue\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)={0x110, 0x26, 0x301, 0x270bd1d, 0x25dfdbfa, {0x1}, [@nested={0xfc, 0x131, 0x0, 0x1, [@typed={0xf5, 0x65, 0x0, 0x0, @str='}&/\x00\x847o\x8a\xad6[\xab\xd2\xa0}=\xde8S[\x89\xa0\xc1\x04\xa4\x190\xcb\x92\xfe|\xcf0\xd3\xbd\xa81\xd0\x8e\x0f\x12\x1ba\xe2`O\x14 \xe48\t\xdb\xdd\x92\xfd\xbe\n\xdd\xa7~\"\x8e\xbe\xc0\x1d\x1cv\xb4\x02K6\xbb\xd9\b{\xb5\x10\xb8e#{F0(\xec\x8b\x1d#\x8c\xde\x12\t\x18\x1e\xa2*\x98~@\xe0\x83\x9c\x9ea\x87f\xc9\xe5\x80+\xc8xZ=\xf0\x8b\x8c\x8bdn\x18_\xca\x139\xb0\x12\n\xd6oK5\xc2\xads@\xcdX\xa3\x80\xf3\x7f\xba\v\x83l\xebq\x89\xa6\tS\xdd:J\x88\x96O\xecj\xcc\\\xff\xa4\xf6V\xf4\x98\x14w,\xb1o\xd7\xa9\tNR\xf9\xee.Gn\xc5\xea\x94\x16\xf4Y4}\x84\x12-r\xd5\t\x81\x00gMOvM\xf8\x17\xc6K\x9b\xb9\xcdY\xbeI\xa6e$\x11[\x90\x96\x84#\x9a@\x02\x00\xd8\x06\xd0t\x89\xe0 z\xf2\x98C\x03\xa6'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000042}, 0x48c0) fchdir(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000a00)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x65, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010102, @private=0xa010102}, {0x4e21, 0x4e20, 0xc, 0x0, @opaque='EFGH'}}}, 0x20) write$tun(r1, &(0x7f0000000a40)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @rand_addr=0x64010102}, {0x4e20, 0x4e21, 0xc, 0x0, @opaque='IJKL'}}}, 0x20) executing program 4: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000001c0)='1', 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x1001}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x1001}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f00000003c0), 0xc, &(0x7f0000000400)={&(0x7f0000000440)=@setlink={0x20, 0x13, 0x5, 0x70bc95, 0x0, {0x0, 0x0, 0x0, r4, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f00000004c0), 0xc, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001400055996bc70000000000002180000", @ANYRES32=r4, @ANYBLOB="080002000a010101080001000a010101"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={&(0x7f00000005c0), 0xc, &(0x7f0000000600)={&(0x7f0000000640)=@setlink={0x20, 0x13, 0x5, 0x70bc97, 0x0, {0x0, 0x0, 0x0, r5, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={&(0x7f00000006c0), 0xc, &(0x7f0000000700)={&(0x7f0000000a80)=ANY=[@ANYBLOB="280000001400050498bc70000000000002180000", @ANYRES32=r5, @ANYBLOB="08000200640131b80800010064810101126c221e0f9d94889911eb8bd4813885d93c7b21c7f94b0d239c7f879c1cb410cb588917489de623307e1ee7960d8fe7781828c6f70582bc392595a5910bdac2b63cad8539fff47113cfa5b6e6663d95543f304fbbb6e7b275ae2e49df6678a321099d12c3eb6af08fa7f5fcf2f6079184ec63a86bf375d37eae4cd953fb70953b09d58b9b528c12a87aeef07e68ffddb4c94f0a20af5d35934c90c351eba1cb0c56bd7151e58689404be9db1b326a39f73c74c69b0f0b39cc3aff5eca49f97459c597ff1bc1c33450"], 0x28}}, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000000)={0x3, 0x5}, 0x0) r6 = fsopen(&(0x7f0000000040)='mqueue\x00', 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)={0x110, 0x26, 0x301, 0x270bd1d, 0x25dfdbfa, {0x1}, [@nested={0xfc, 0x131, 0x0, 0x1, [@typed={0xf5, 0x65, 0x0, 0x0, @str='}&/\x00\x847o\x8a\xad6[\xab\xd2\xa0}=\xde8S[\x89\xa0\xc1\x04\xa4\x190\xcb\x92\xfe|\xcf0\xd3\xbd\xa81\xd0\x8e\x0f\x12\x1ba\xe2`O\x14 \xe48\t\xdb\xdd\x92\xfd\xbe\n\xdd\xa7~\"\x8e\xbe\xc0\x1d\x1cv\xb4\x02K6\xbb\xd9\b{\xb5\x10\xb8e#{F0(\xec\x8b\x1d#\x8c\xde\x12\t\x18\x1e\xa2*\x98~@\xe0\x83\x9c\x9ea\x87f\xc9\xe5\x80+\xc8xZ=\xf0\x8b\x8c\x8bdn\x18_\xca\x139\xb0\x12\n\xd6oK5\xc2\xads@\xcdX\xa3\x80\xf3\x7f\xba\v\x83l\xebq\x89\xa6\tS\xdd:J\x88\x96O\xecj\xcc\\\xff\xa4\xf6V\xf4\x98\x14w,\xb1o\xd7\xa9\tNR\xf9\xee.Gn\xc5\xea\x94\x16\xf4Y4}\x84\x12-r\xd5\t\x81\x00gMOvM\xf8\x17\xc6K\x9b\xb9\xcdY\xbeI\xa6e$\x11[\x90\x96\x84#\x9a@\x02\x00\xd8\x06\xd0t\x89\xe0 z\xf2\x98C\x03\xa6'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000042}, 0x48c0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000a00)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x65, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010102, @private=0xa010102}, {0x4e21, 0x4e20, 0xc, 0x0, @opaque='EFGH'}}}, 0x20) write$tun(r1, &(0x7f0000000a40)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @rand_addr=0x64010102}, {0x4e20, 0x4e21, 0xc, 0x0, @opaque='IJKL'}}}, 0x20) executing program 3: r0 = syz_open_dev$video(&(0x7f0000000300), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000340)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='mode\x00', &(0x7f0000000280)='7', 0x0) statx(r5, &(0x7f00000002c0)='./file0\x00', 0x100, 0x4, &(0x7f0000000400)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x260048f4}, 0x20004810) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x3}, @IFLA_GTP_FD0={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x2000c000) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_ublk_setup_io_uring(0x1f, 0x0, 0x0, 0x0, &(0x7f0000000280)) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg$inet(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="17172e3a1c9579fda62f4a", 0xb}, {&(0x7f00000000c0)="936e1e294c", 0x5}], 0x2}}], 0x1, 0x20810) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000300)={0xa, @pix_mp={0xeaac, 0x0, 0x34565348, 0x5, 0x9, [{0x9, 0x200}, {0x1ff, 0x200}, {0x453, 0x3}, {0x5, 0x3}, {0x8, 0xa}, {0xfffffffc, 0x6}, {0x1ff, 0xeb03}, {0x6, 0x7def}], 0x8, 0x78, 0x1, 0x2, 0x6}}) syz_ublk_setup_queues(r1, 0x0, 0x0, 0x0, 0x7ffffffe, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)={0x2c, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0x3a, 0x0, 0x0, @u64=0x7fff8}]}, 0x2c}], 0x1}, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x5) ioctl$KVM_CAP_X86_DISABLE_EXITS(r5, 0x4068aea3, &(0x7f0000000400)={0x8f, 0x0, 0x2}) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}}, 0x0) executing program 1: r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x5b05b05b05b0660, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000040000901feffffff0000000004710000040042800c0001800600060008"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000400)={0x20, 0x35}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000600), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc02864cf, &(0x7f0000000680)) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000500)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000540)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac2(0x8d4ffd4123e09dcf, 0xae, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x499, 0x1038, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c, 0x3, 0x1, 0x9, 0x0, 0x3, {0x8, 0xb, 0x0, 0x2, 0x1, 0x3, 0x20, 0x40}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7f, 0x1, 0x1a, 0x7f}, [@effect_unit={0x11, 0x24, 0x7, 0x4, 0x4, 0x4, [0x2, 0x0, 0x1, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x3f7, 0x0, 0x3, 0x90, {0x8, 0x25, 0x1, 0x80, 0x3, 0x6, 0x202}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x6, 0x2, 0xf3, 0x6, "89", "bfe1a4"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9e, 0x2, 0x4, 0x5, "b941fde7b00423f9"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x1, 0x2, 0x8, {0x8, 0x25, 0x1, 0x80, 0x0, 0x6, 0x8}}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x81, 0x4, 0x4, 0x8}, 0x53, &(0x7f0000000140)={0x5, 0xf, 0x53, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x3b, 0x3, 0x5, 0xf00f, 0xeff5, [0xc00f, 0xff3fc0, 0x1feff30]}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x7, 0x2, 0x4}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x7, 0xf00f, 0x62, [0xff0030, 0x30, 0x0, 0xff0000]}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x8, 0xf00, 0x1000, [0xffc0cf]}]}, 0x5, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1c0a}}]}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000007c0)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000840)='ns\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0x2a102211, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r4, 0x802c550a, &(0x7f0000000200)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x1, 0x2, 0x6dd4, 0x1, 0x3, 0x0}) setpgid(r3, r3) setpgid(0x0, r3) wait4(r3, 0x0, 0x2, 0x0) capget(&(0x7f0000000080)={0x19980330, r3}, &(0x7f0000000180)={0x6, 0x8, 0x200, 0x1, 0xcf9, 0x7fe00000}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x128}, 0x0) getdents64(r0, 0x0, 0x0) r5 = syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, &(0x7f0000010980), 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000010bc0)={0x0, 0x0, &(0x7f0000010c00)={&(0x7f0000010c40)=ANY=[@ANYBLOB="14000000100001000000000000000400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40540700002c0000000b0a01030100000000000000020900010073797a310091dbb5961b1da5ca61a27f0000000c0010400000000000000002140000001100010000"], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000010d00)={'dummy0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000010d40)={0x0, 0x0, &(0x7f0000010d80)={&(0x7f0000010dc0)=ANY=[@ANYBLOB="2c0000001400b59527bd7000ffdbdf250a4000c8", @ANYRES32=r8, @ANYBLOB="140002"], 0x2c}}, 0x400c0c0) sendmmsg$unix(r1, &(0x7f00000110c0)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000002c0)="a82acd3471c560f6a44a5d702682195e56c5fb4a9c55af6d61216a18de5927f99ca264b6c55fdd73523f336343d1ba9d7ac023026ff672d3ed51af1f3d87625a", 0x40}], 0x1}}, {{&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000480)="c667dfd0a217bcbab3b6e0284a12aa81012a517260e830e6bba2bd6b6310778645b03bd1809a137854a0175376d21f464c65ce6f34027295fb03f494fb48487846b939f77d4fad4bd5c0760c701fe2b6f26f98a75d08215a34340a8e51dea174133dfadced10da419e9135354f923ee1fb0966ca84731acfab56b6e663ea2e9729d94e93556ad1ffd97cb34a97349580f6858b3925ba7fa5", 0x98}, {&(0x7f0000000600)="e45aa5189007ebcb18bfaf64323a2e73f13bf073467a2afe5773f4f8a945e7f925ce76a8b23d0ced56ca6942c44d1263b54a7a43d9c90259ba61621a7401d407f0ec0cff05fd795d3d58616c7eca933e48bed82352d6288f498c07db48c99b2f7598529978ed5b4e44974211bf92e903b2397fc7f6fb7977a7dfdf6869aa6af09fc5e45cc684a2ef6661e581c4b1f7ed47b963717f44f6eccb303b1f39b9657c7c12492d4346b20d1f0f7cd8a225bb6cdd34218e7fc11f", 0xb7}], 0x2, &(0x7f00000093c0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r4, 0xffffffffffffffff, r0, r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, r4, r0, r0, r2, r2]}}], 0xd0, 0xc8d0}}, {{&(0x7f00000094c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000009b40)=[{&(0x7f0000009540)}, {0x0}, {&(0x7f00000096c0)="440b8dded3ddb88872add9b99a343b472aec2d", 0x13}, {&(0x7f0000009700)="08d000ad89019e377fe7f0f182cbc4d726434b46f931f4633373c697e0f4f9a1d3a5d71a74f1378f514dffb21570dc4da6fa1a84fa96d4cac59a6305d28f8f939e2cecc0b5d244200cf6b7f1587179559e14ce941e6e3995cbd99035ae196c8c897d7fc77b899cef5c8a87eb0715459708594d86190afe8c75543c1f2021f051098f0fca3e8604f3c7d8942369906e973cfa04f0d675fb", 0x97}, {&(0x7f00000097c0)="925dfd5509a2d5deefe10613f65c8b6f0766c377769e16a9dd97e346da4bed0fbfc82131514ad1647e5bb718ec4eac1427779308e39bb9b3863271b11ec5fa9d743d1a7c2b945685c25345aafb19947c52dc7803c7", 0x55}, {&(0x7f0000009840)="d39e67dd45e2dd08aab9412bff284cde3d174e4d41b3c59cdc20e446ea891b9597f66ca9", 0x24}, {&(0x7f00000098c0)="9b617591498b3fe9c4c766662d8bd91d95f68cd3f36c18fa38068b35ef18a4a4370a1cc615d73be0ddaa9001734b9e316b85c8f7dddd3a26cbf7e10f88ad2aa8b5332e56eb95cb8bba5d4d7e18225ff33f51ecbd26621ae6385388718de14eb011b6f91df5caf42643d01c7977e88b88bb583fdd3c8892296356b75ca84fb34ba4a7efd03650bcbb2877a96aad9a69fc55887288", 0x94}, {&(0x7f0000009a40)}], 0x8, 0x0, 0x0, 0x80}}, {{&(0x7f0000009c00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000009d80)=[{&(0x7f0000009c80)="6ad534aaeb51c336f090f70394f49e8fb7b2d0eba63b127a51129da1e6aafd5e7844c73670c6997129a84b2a5ed52491c7229c72d8c78d4b60699815fe6f12074faf3206ef1ff7c66f4d2158a37907ef8d27a9efed0a1c9fce", 0x59}, {0x0}], 0x2, &(0x7f0000010500)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x60, 0x240008c4}}, {{&(0x7f0000010580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000010880)=[{&(0x7f0000010600)="de9665b62b839dbf6ba9cb30845e5e4cffe7d3bfecdbf23f3da2aa4f4b06d177cd73a95c8612ab00bb72edee6440a265339a34dfce6a843f461588e346a4f770e93d3b4df92b4b358498236e018dc7ed46ab893d6f29f8ed52c937c911", 0x5d}, {&(0x7f0000010680)="72fc2c20b81e651d0b1241dfd53fa6501b793c5faa3739", 0x17}, {&(0x7f00000106c0)="d8856813d68a89bbd58dd9c9cf60e449be7b72f977d86e63348a1e8c186a0d1d03d6d4eb818c14596397145cfb9190fe2317a1f8746ed0027120575a0c54d4bb0c3554672f3677e280ef13904f99d73b651682a9688218cb8c23cce0891f81397b1fd5c5c6071465ce297c6fd86411e548b3d0548cd0bbb7045407d31fd2fa9a69458be35366d3a36d3cb935e13cf8aeb8ecd26b43f0bd7617cc545d75ea24bba14f04b1f3e1e2b8429e1f8cc5fa63182ee15857d5358515c809", 0xba}, {&(0x7f0000010780)="a23d75ab265aa1c0e1914ea604a3d2afb720aa81c069a60f191f2a6dd88d5cde2dbf5f6fd64e504c57b04c9439fd3e6cace8759931c221a650a3b3ea49bc731faab853981963a68150b3f4d450e25dea261a6389cc10446f355bae22905a6e300806e0d11bf22b893cc25deb6827f9f24df517d407a443c5f4388eb4dbb791fe7f9be0bd0f907743f54921724e8b58a1200b8cd834c0429f717397fcdffc5313b1d7b4b492e9439daa", 0xa9}, {&(0x7f0000010840)="c40a462d00b23478884fc9f426f180ad405322eeccf422f324543626a2", 0x1d}], 0x5, &(0x7f0000011000)=[@rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, r5]}}, @rights={{0x28, 0x1, 0x1, [r2, r4, r0, r6, r2, r0]}}, @rights={{0x2c, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4, r7, r4]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}], 0x98, 0x4000080}}], 0x5, 0x44810) executing program 0: syz_mount_image$fuse(0x0, 0x0, 0x80400, &(0x7f0000002dc0)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x0, 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x7fffffff, 0x0, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x102) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) socket$inet(0x2, 0x2, 0x1) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth0_to_batadv\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0x13, 0x7, 0x9, 0xffffffff}}) (async) fsopen(&(0x7f0000000100)='gfs2\x00', 0x1) (async) socket$inet(0x2, 0x4000000000000001, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0x8, 0xfa04, 0xc8, 0x6c02, 0x1f8, 0x194, 0x194, 0x1f8, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x7}, {0xffffffffffffffff}], 0x1, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000017c0)=ANY=[@ANYBLOB="b80100001700010025bd700000000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb000000000000000000000000ff0100000000000000000000000000014e210000000200"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000007903173f00000000aaff010000000000000000fffffffa000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000200000000000000feffffffffffffff000000000000000000000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000000000000000ffdfffffffffffff080000000000000002000000000000000200000200000000f9ffffff38000000000000000000000044000500fc010000000000000000000000000001000004d332000000020000002001000000000000000000000000000004350800050206000700000001000000080000002c00130020010000000000000000000000000002ac1e090100000000000000000000000000000000000000001f0008"], 0x1b8}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) setrlimit(0xb, 0x0) (async) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000040)) executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="180000001e0001002abd7000fedbdf2507001480e0fadd578a76004ce6d2058c78dc8db33e86d3aadceca5d6743a48bc49916aa3d0d34ce73a4112edf38250dda064fe50397de53d4c84a12491567990af7f26f89f6cbb07586df5"], 0x18}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000010001fff000000000100000000000000", @ANYRES32=r5, @ANYRES8=r2, @ANYRES32=r0, @ANYRESOCT=r2], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000340)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000380), 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f0000000680), 0x4) syz_open_dev$radio(0x0, 0x0, 0x2) r7 = syz_io_uring_setup(0xf01, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r7, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000780)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) writev(r8, &(0x7f00000007c0)=[{&(0x7f0000000800)="01", 0x1}], 0x1) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f00000003c0)={[0x7ff]}, 0x0, 0x0, 0x8) r9 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1c280, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r9, 0x8010500c, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001000)=@newchain={0x64, 0x64, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xe, 0x3}, {0xfff1, 0x6}, {0xb, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff]}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x20}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @random="be4fe094fd0f"}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x80}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRESDEC, @ANYBLOB="000000008900000008000300", @ANYRES32=r10, @ANYBLOB="18001d801400008006000500480000000500090000000000"], 0x34}, 0x1, 0x0, 0x0, 0x220288d1}, 0x0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000540), 0x0, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x4, 0xd, 0x4, 0x0, 0x2}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x6000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="e00100000000000000000000aa06000032548343f47d9738c9654a818cfbf090a2814af003c9fb6fec13787cf0a0c011dd0bf2182916b01789"], 0x1e0}}], 0x1, 0x4000004) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4ea2, 0x0, @remote, 0x3}, 0x1c) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r2, &(0x7f0000000ac0)={0x0, 0x953a, &(0x7f0000000b00)=[{&(0x7f0000000b40)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r4 = open(&(0x7f0000000b80)='.\x00', 0x80000, 0x103) getdents(r4, &(0x7f0000000bc0)=""/184, 0xb8) getdents(r4, &(0x7f0000000c80)=""/184, 0xb8) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000e40)={0x24, r5, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write(r6, &(0x7f00000002c0)='nqn=testnqn,transport=rdma,traddr=172.20.20.24,trsvcid=4', 0x38) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x6000, 0x1) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000340)={0x1, 0x2}, 0x4) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000380)={0x2, 0x7}, 0x4) socket$rxrpc(0x21, 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r1 = syz_io_uring_setup(0x112, &(0x7f0000000200)={0x0, 0x5a87, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000340)='n', 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000480)) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rthdr={{0x18, 0x29, 0x39, {0x2b, 0x0, 0x2, 0xf7}}}], 0x18}, 0x200008d0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001bc0), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r2, 0x0, 0x8, 0x0, &(0x7f0000001c80)="5c71f91b05c41355", 0x0, 0x1, 0x0, 0x1, 0x0, &(0x7f0000001cc0)='\x00', 0x0}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000001d00)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000001d40)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001d80)='smaps_rollup\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_procfs(0x0, &(0x7f0000001dc0)='net/netstat\x00') r3 = gettid() timer_create(0x0, 0x0, &(0x7f0000001e00)) ptrace$pokeuser(0x6, r3, 0x3, 0xec9c) connect$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x1, 0x2, 0x10, {0xa, 0x4e23, 0x39, @empty, 0xfffff200}}, 0x24) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000080)=0x2014, 0x4) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000001e80)={0x1, "ac74841675e4aedde850ee5b2910d1e16305d9a7f9c8a7076ece23ddca3c191d", 0x3, 0x21c, 0xff, 0x200000, 0x4}) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e23, 0x180000, @dev={0xfe, 0x80, '\x00', 0x43}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="280000000000000029000000040000002b010000000000000108000000000000000000000000000024000000000000002900"], 0x50}, 0x340880c4) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_PARM(r5, 0xc0cc5616, &(0x7f0000000380)={0x0, @capture={0x0, 0x0, {0xfffffffa, 0x3}, 0x8, 0x1}}) executing program 2: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80102, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r5, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c0040}, 0x408c4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) program did not crash replaying the whole log did not cause a kernel crash single: executing 5 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_sctp-mkdirat-openat-socket$nl_generic-socket$nl_netfilter-socket$nl_netfilter-sendmsg$NFT_MSG_GETSET-bind$inet6-listen-socket$nl_netfilter-sendmsg$IPSET_CMD_ADD detailed listing: executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c0040}, 0x408c4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sysctl-write$sysctl-socket$inet_mptcp-fcntl$setstatus-setsockopt$sock_linger-setsockopt$SO_BINDTODEVICE-bind$inet-connect$inet-syz_extract_tcp_res$synack-syz_emit_ethernet-getsockopt$inet_mptcp_MPTCP_INFO-sendto$inet-socket$nl_generic-syz_genetlink_get_family_id$mptcp-socket$inet6_udp-sendto$inet6 detailed listing: executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sysctl-write$sysctl-socket$inet_mptcp-fcntl$setstatus-setsockopt$sock_linger-setsockopt$SO_BINDTODEVICE-bind$inet-connect$inet-syz_extract_tcp_res$synack-syz_emit_ethernet-getsockopt$inet_mptcp_MPTCP_INFO-sendto$inet-socket$nl_generic-openat$kvm-ioctl$KVM_CREATE_VM-syz_genetlink_get_family_id$mptcp-socket$inet6_udp-sendto$inet6 detailed listing: executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80102, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r5, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$netlink-socket$nl_generic-timer_create-socket$netlink-socket-sendmsg$IPVS_CMD_SET_INFO-getsockname$packet-sendmsg$nl_route-sendmsg$nl_route-fcntl$lock-mprotect-timer_settime-socket-setsockopt$MRT6_INIT-syz_open_dev$radio-syz_io_uring_setup-io_uring_enter-socket$inet6-sendto$inet6-writev-mmap-rt_sigtimedwait-openat$dsp1-ioctl$SNDCTL_DSP_GETOSPACE-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-socket-sendmsg$nl_route_sched-sendmsg$NL80211_CMD_SET_TID_CONFIG detailed listing: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="180000001e0001002abd7000fedbdf2507001480e0fadd578a76004ce6d2058c78dc8db33e86d3aadceca5d6743a48bc49916aa3d0d34ce73a4112edf38250dda064fe50397de53d4c84a12491567990af7f26f89f6cbb07586df5"], 0x18}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000010001fff000000000100000000000000", @ANYRES32=r5, @ANYRES8=r2, @ANYRES32=r0, @ANYRESOCT=r2], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000340)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000380), 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f0000000680), 0x4) syz_open_dev$radio(0x0, 0x0, 0x2) r7 = syz_io_uring_setup(0xf01, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r7, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000780)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) writev(r8, &(0x7f00000007c0)=[{&(0x7f0000000800)="01", 0x1}], 0x1) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f00000003c0)={[0x7ff]}, 0x0, 0x0, 0x8) r9 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1c280, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r9, 0x8010500c, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001000)=@newchain={0x64, 0x64, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xe, 0x3}, {0xfff1, 0x6}, {0xb, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff]}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x20}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @random="be4fe094fd0f"}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x80}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRESDEC, @ANYBLOB="000000008900000008000300", @ANYRES32=r10, @ANYBLOB="18001d801400008006000500480000000500090000000000"], 0x34}, 0x1, 0x0, 0x0, 0x220288d1}, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$lan78xx-socket$nl_generic-sendmsg$nl_generic-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_open_dev$dri-ioctl$DRM_IOCTL_GET_CLIENT-syz_usb_control_io$lan78xx-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_connect$uac2-syz_usb_control_io$lan78xx-syz_usb_control_io-syz_usb_control_io$lan78xx detailed listing: executing program 0: r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x5b05b05b05b0660, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000040000901feffffff0000000004710000040042800c0001800600060008"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000400)={0x20, 0x35}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000600), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc02864cf, &(0x7f0000000680)) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000500)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000540)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac2(0x8d4ffd4123e09dcf, 0xae, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x499, 0x1038, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c, 0x3, 0x1, 0x9, 0x0, 0x3, {0x8, 0xb, 0x0, 0x2, 0x1, 0x3, 0x20, 0x40}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7f, 0x1, 0x1a, 0x7f}, [@effect_unit={0x11, 0x24, 0x7, 0x4, 0x4, 0x4, [0x2, 0x0, 0x1, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x3f7, 0x0, 0x3, 0x90, {0x8, 0x25, 0x1, 0x80, 0x3, 0x6, 0x202}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x6, 0x2, 0xf3, 0x6, "89", "bfe1a4"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9e, 0x2, 0x4, 0x5, "b941fde7b00423f9"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x1, 0x2, 0x8, {0x8, 0x25, 0x1, 0x80, 0x0, 0x6, 0x8}}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x81, 0x4, 0x4, 0x8}, 0x53, &(0x7f0000000140)={0x5, 0xf, 0x53, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x3b, 0x3, 0x5, 0xf00f, 0xeff5, [0xc00f, 0xff3fc0, 0x1feff30]}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x7, 0x2, 0x4}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x7, 0xf00f, 0x62, [0xff0030, 0x30, 0x0, 0xff0000]}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x8, 0xf00, 0x1000, [0xffc0cf]}]}, 0x5, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1c0a}}]}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000007c0)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash single: failed to extract reproducer bisect: bisecting 30 programs with base timeout 1m40s testing program (duration=1m47s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 10, 1, 30, 4, 28, 27, 14, 4, 25, 2, 30, 16, 4, 21, 22, 19, 11, 19, 2, 14, 18, 21, 30, 4, 26, 27, 18, 16, 11] detailed listing: executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000006c0)={0x1, &(0x7f0000000700)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) syz_80211_inject_frame(&(0x7f0000000640)=@broadcast, &(0x7f0000002b00)=ANY=[], 0x358) (fail_nth: 5) executing program 1: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) rseq(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x9, 0x7, 0x7ffc0001}]}) unshare(0x22020600) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400004002080104104d000000000000010000087039bdc031e4db1067e03ccb383e29d475440592249ae432622b2f1032fb709055f60e848f2f3ff9821633cc0aec80f3a917f13c9b738009"], 0x14}, 0x1, 0x0, 0x0, 0x2404c005}, 0x20040004) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) executing program 1: syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) executing program 3: r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000080)=@l={0x92, 0x0, 0xc0, 0xa}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000020c0)={0x10003, 0x0, 0xf0000000, 0x1000, &(0x7f0000200000/0x1000)=nil}) r4 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000002100)={0x0, &(0x7f0000002140)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1e, {0x0, "66ba3412eef4"}}, @nested_set_state_pages={0x140, 0x28, {0x0, 0x0, @arbitrary=0xf0000000}}, @nested_vmlaunch={0x12f, 0x18}], 0x8e}) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r5, 0x3, 0x11, r4, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_assert_syzos_kvm_exit$x86(r6, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip6_tables_matches\x00') sendfile(r7, r8, 0x0, 0x80000000) openat$incfs(r8, &(0x7f0000000140)='.pending_reads\x00', 0x10000, 0x20) r9 = syz_create_resource$kvm_nested_state(&(0x7f0000002200)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_GET_NESTED_STATE_res(r4, 0xc080aebe, r9) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000004280)={0x2710, 0x0, 0xf0000000}) r10 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_buf(r10, 0x1, 0x1c, 0x0, &(0x7f0000000180)) ioctl$KVM_SET_NESTED_STATE_res(r4, 0x4080aebf, r9) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') lseek(r11, 0x2000, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) syz_kvm_assert_syzos_kvm_exit$x86(r6, 0x11) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_assert_syzos_kvm_exit$x86(r6, 0x11) r12 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$XFS_IOC_GOINGDOWN(r12, 0x8004587d, &(0x7f0000000000)=0x5) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, &(0x7f00000001c0)=0x2, 0x4) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYRESHEX=r1, @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4090) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x27c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000400)={&(0x7f000018e000/0x3000)=nil, &(0x7f00000da000/0x4000)=nil, 0x3000}) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000000)=0xfffffffa, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x5400, 0x3f00) (fail_nth: 5) sendto$inet(r1, 0x0, 0x0, 0x28040041, &(0x7f0000000080)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="17", 0x1}], 0x1}, 0x48c0) recvmmsg(r1, &(0x7f0000000300), 0x40000000000026c, 0x0, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0xe2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000440)={0xc0, 0x0, 0xe9a3523dacc11ba7}) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r3, 0xaec7) rseq(0x0, 0x0, 0x0, 0x0) semget(0x0, 0x0, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r1 = syz_io_uring_setup(0x112, &(0x7f0000000200)={0x0, 0x5a87, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000340)='n', 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000480)) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rthdr={{0x18, 0x29, 0x39, {0x2b, 0x0, 0x2, 0xf7}}}], 0x18}, 0x200008d0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001bc0), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r2, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000001c80)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000001cc0)='\x00', 0x0}, 0x48) openat$dir(0xffffffffffffff9c, &(0x7f0000001d00)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000001d40)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001d80)='smaps_rollup\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_procfs(0x0, &(0x7f0000001dc0)='net/netstat\x00') r3 = gettid() timer_create(0x0, 0x0, &(0x7f0000001e00)) ptrace$pokeuser(0x6, r3, 0x3, 0xec9c) connect$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x1, 0x2, 0x10, {0xa, 0x4e23, 0x39, @empty, 0xfffff200}}, 0x24) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) r5 = syz_open_dev$vbi(&(0x7f0000001e40), 0x1, 0x2) ioctl$VIDIOC_ENUMOUTPUT(r5, 0xc0485630, &(0x7f0000001e80)={0x1, "ac74841675e4aedde850ee5b2910d1e16305d9a7f9c8a7076ece23ddca3c191d", 0x3, 0x21c, 0xff, 0x200000, 0x4}) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e23, 0x180000, @dev={0xfe, 0x80, '\x00', 0x43}, 0x9}, 0x1c, 0x0, 0x0, 0x0, 0x50}, 0x340880c4) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_PARM(r6, 0xc0cc5616, &(0x7f0000000380)={0x0, @capture={0x0, 0x0, {0xfffffffa, 0x3}, 0x8, 0x1}}) executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x8) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x20}) recvfrom$l2tp(r0, 0x0, 0x0, 0x40, &(0x7f0000001640)={0x2, 0x0, @initdev}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x50}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000280)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1}) executing program 1: r0 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000200000040480b0510000101020001090239000201008032090400000000000000090401000000000000090401010300000000070501024000000705810240000007058201"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000480), 0x1, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000004c0)={0x100, 0x0, 0x0, 0x14, 0x4}) (fail_nth: 6) executing program 4: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000001c0)='1', 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x1001}) r2 = socket$key(0xf, 0x3, 0x2) r3 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x7ffffffe, r2, &(0x7f0000000140)={0x10000001}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x1001}) r5 = landlock_create_ruleset(&(0x7f0000000080)={0x7615, 0x2, 0x2, 0x4010, 0x2}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f00000000c0), 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'syzkaller1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000380)={&(0x7f00000003c0), 0xc, &(0x7f0000000400)={&(0x7f0000000440)=@setlink={0x20, 0x13, 0x5, 0x70bc95, 0x0, {0x0, 0x0, 0x0, r7, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={&(0x7f00000004c0), 0xc, &(0x7f0000000500)={&(0x7f0000000540)=@ipv4_newaddr={0x28, 0x14, 0x405, 0x70bc96, 0x0, {0x2, 0x18, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @private=0xa010101}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010101}]}, 0x28}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000580)={&(0x7f00000005c0), 0xc, &(0x7f0000000600)={&(0x7f0000000640)=@setlink={0x20, 0x13, 0x5, 0x70bc97, 0x0, {0x0, 0x0, 0x0, r8, 0x1, 0x1}}, 0x20}}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000100)=0xf8, 0x4) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x294}]}) socket$nl_netfilter(0x10, 0x3, 0xc) write$tun(r1, &(0x7f00000009c0)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x64, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @rand_addr=0x64010102}, {0x4e20, 0x4e21, 0xc, 0x0, @opaque='ABCD'}}}, 0x20) write$tun(r1, &(0x7f0000000a40)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @rand_addr=0x64010102}, {0x4e20, 0x4e21, 0xc, 0x0, @opaque='IJKL'}}}, 0x20) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}}, 0x0) executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x40) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000680)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x8000, 0x0) socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000700)={0x2, 0x0, @local}, 0x10) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000780)={0x3, 0x2, 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r4, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000040000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000100000000000000440005000000000000000000000000000000000000000002320000000a000000fc010000000000000000000000000000000000000100"/180], 0xfc}}, 0x0) connect$inet(r3, &(0x7f0000000940)={0x2, 0x4, @broadcast}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000980)={0x84, @local, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000009c0)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0xa, 0xc, 0x56}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 32) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0xfd8b, 0x5}) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async, rerun: 32) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) (rerun: 32) write$dsp(r1, &(0x7f0000000180)="5cba91a4", 0xffffffd9) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffff9]}, 0x0, 0x8) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) (async, rerun: 64) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000240)=0x1) (rerun: 64) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x9) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0xbc}, 0x1, 0x0, 0x0, 0xc0}, 0x0) executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) executing program 2: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000001c0)='1', 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x1001}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x1001}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f00000003c0), 0xc, &(0x7f0000000400)={&(0x7f0000000440)=@setlink={0x20, 0x13, 0x5, 0x70bc95, 0x0, {0x0, 0x0, 0x0, r4, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f00000004c0), 0xc, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001400055996bc70000000000002180000", @ANYRES32=r4, @ANYBLOB="080002000a010101080001000a010101"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={&(0x7f00000005c0), 0xc, &(0x7f0000000600)={&(0x7f0000000640)=@setlink={0x20, 0x13, 0x5, 0x70bc97, 0x0, {0x0, 0x0, 0x0, r5, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={&(0x7f00000006c0), 0xc, &(0x7f0000000700)={&(0x7f0000000a80)=ANY=[@ANYBLOB="280000001400050498bc70000000000002180000", @ANYRES32=r5, @ANYBLOB="08000200640131b80800010064810101126c221e0f9d94889911eb8bd4813885d93c7b21c7f94b0d239c7f879c1cb410cb588917489de623307e1ee7960d8fe7781828c6f70582bc392595a5910bdac2b63cad8539fff47113cfa5b6e6663d95543f304fbbb6e7b275ae2e49df6678a321099d12c3eb6af08fa7f5fcf2f6079184ec63a86bf375d37eae4cd953fb70953b09d58b9b528c12a87aeef07e68ffddb4c94f0a20af5d35934c90c351eba1cb0c56bd7151e58689404be9db1b326a39f73c74c69b0f0b39cc3aff5eca49f97459c597ff1bc1c33450"], 0x28}}, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000000)={0x3, 0x5}, 0x0) fsopen(&(0x7f0000000040)='mqueue\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)={0x110, 0x26, 0x301, 0x270bd1d, 0x25dfdbfa, {0x1}, [@nested={0xfc, 0x131, 0x0, 0x1, [@typed={0xf5, 0x65, 0x0, 0x0, @str='}&/\x00\x847o\x8a\xad6[\xab\xd2\xa0}=\xde8S[\x89\xa0\xc1\x04\xa4\x190\xcb\x92\xfe|\xcf0\xd3\xbd\xa81\xd0\x8e\x0f\x12\x1ba\xe2`O\x14 \xe48\t\xdb\xdd\x92\xfd\xbe\n\xdd\xa7~\"\x8e\xbe\xc0\x1d\x1cv\xb4\x02K6\xbb\xd9\b{\xb5\x10\xb8e#{F0(\xec\x8b\x1d#\x8c\xde\x12\t\x18\x1e\xa2*\x98~@\xe0\x83\x9c\x9ea\x87f\xc9\xe5\x80+\xc8xZ=\xf0\x8b\x8c\x8bdn\x18_\xca\x139\xb0\x12\n\xd6oK5\xc2\xads@\xcdX\xa3\x80\xf3\x7f\xba\v\x83l\xebq\x89\xa6\tS\xdd:J\x88\x96O\xecj\xcc\\\xff\xa4\xf6V\xf4\x98\x14w,\xb1o\xd7\xa9\tNR\xf9\xee.Gn\xc5\xea\x94\x16\xf4Y4}\x84\x12-r\xd5\t\x81\x00gMOvM\xf8\x17\xc6K\x9b\xb9\xcdY\xbeI\xa6e$\x11[\x90\x96\x84#\x9a@\x02\x00\xd8\x06\xd0t\x89\xe0 z\xf2\x98C\x03\xa6'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000042}, 0x48c0) fchdir(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000a00)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x65, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010102, @private=0xa010102}, {0x4e21, 0x4e20, 0xc, 0x0, @opaque='EFGH'}}}, 0x20) write$tun(r1, &(0x7f0000000a40)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @rand_addr=0x64010102}, {0x4e20, 0x4e21, 0xc, 0x0, @opaque='IJKL'}}}, 0x20) executing program 4: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000001c0)='1', 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x1001}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x1001}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f00000003c0), 0xc, &(0x7f0000000400)={&(0x7f0000000440)=@setlink={0x20, 0x13, 0x5, 0x70bc95, 0x0, {0x0, 0x0, 0x0, r4, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f00000004c0), 0xc, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001400055996bc70000000000002180000", @ANYRES32=r4, @ANYBLOB="080002000a010101080001000a010101"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={&(0x7f00000005c0), 0xc, &(0x7f0000000600)={&(0x7f0000000640)=@setlink={0x20, 0x13, 0x5, 0x70bc97, 0x0, {0x0, 0x0, 0x0, r5, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={&(0x7f00000006c0), 0xc, &(0x7f0000000700)={&(0x7f0000000a80)=ANY=[@ANYBLOB="280000001400050498bc70000000000002180000", @ANYRES32=r5, @ANYBLOB="08000200640131b80800010064810101126c221e0f9d94889911eb8bd4813885d93c7b21c7f94b0d239c7f879c1cb410cb588917489de623307e1ee7960d8fe7781828c6f70582bc392595a5910bdac2b63cad8539fff47113cfa5b6e6663d95543f304fbbb6e7b275ae2e49df6678a321099d12c3eb6af08fa7f5fcf2f6079184ec63a86bf375d37eae4cd953fb70953b09d58b9b528c12a87aeef07e68ffddb4c94f0a20af5d35934c90c351eba1cb0c56bd7151e58689404be9db1b326a39f73c74c69b0f0b39cc3aff5eca49f97459c597ff1bc1c33450"], 0x28}}, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000000)={0x3, 0x5}, 0x0) r6 = fsopen(&(0x7f0000000040)='mqueue\x00', 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)={0x110, 0x26, 0x301, 0x270bd1d, 0x25dfdbfa, {0x1}, [@nested={0xfc, 0x131, 0x0, 0x1, [@typed={0xf5, 0x65, 0x0, 0x0, @str='}&/\x00\x847o\x8a\xad6[\xab\xd2\xa0}=\xde8S[\x89\xa0\xc1\x04\xa4\x190\xcb\x92\xfe|\xcf0\xd3\xbd\xa81\xd0\x8e\x0f\x12\x1ba\xe2`O\x14 \xe48\t\xdb\xdd\x92\xfd\xbe\n\xdd\xa7~\"\x8e\xbe\xc0\x1d\x1cv\xb4\x02K6\xbb\xd9\b{\xb5\x10\xb8e#{F0(\xec\x8b\x1d#\x8c\xde\x12\t\x18\x1e\xa2*\x98~@\xe0\x83\x9c\x9ea\x87f\xc9\xe5\x80+\xc8xZ=\xf0\x8b\x8c\x8bdn\x18_\xca\x139\xb0\x12\n\xd6oK5\xc2\xads@\xcdX\xa3\x80\xf3\x7f\xba\v\x83l\xebq\x89\xa6\tS\xdd:J\x88\x96O\xecj\xcc\\\xff\xa4\xf6V\xf4\x98\x14w,\xb1o\xd7\xa9\tNR\xf9\xee.Gn\xc5\xea\x94\x16\xf4Y4}\x84\x12-r\xd5\t\x81\x00gMOvM\xf8\x17\xc6K\x9b\xb9\xcdY\xbeI\xa6e$\x11[\x90\x96\x84#\x9a@\x02\x00\xd8\x06\xd0t\x89\xe0 z\xf2\x98C\x03\xa6'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000042}, 0x48c0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000a00)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x65, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010102, @private=0xa010102}, {0x4e21, 0x4e20, 0xc, 0x0, @opaque='EFGH'}}}, 0x20) write$tun(r1, &(0x7f0000000a40)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @rand_addr=0x64010102}, {0x4e20, 0x4e21, 0xc, 0x0, @opaque='IJKL'}}}, 0x20) executing program 3: r0 = syz_open_dev$video(&(0x7f0000000300), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000340)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='mode\x00', &(0x7f0000000280)='7', 0x0) statx(r5, &(0x7f00000002c0)='./file0\x00', 0x100, 0x4, &(0x7f0000000400)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x260048f4}, 0x20004810) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x3}, @IFLA_GTP_FD0={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x2000c000) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_ublk_setup_io_uring(0x1f, 0x0, 0x0, 0x0, &(0x7f0000000280)) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg$inet(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="17172e3a1c9579fda62f4a", 0xb}, {&(0x7f00000000c0)="936e1e294c", 0x5}], 0x2}}], 0x1, 0x20810) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000300)={0xa, @pix_mp={0xeaac, 0x0, 0x34565348, 0x5, 0x9, [{0x9, 0x200}, {0x1ff, 0x200}, {0x453, 0x3}, {0x5, 0x3}, {0x8, 0xa}, {0xfffffffc, 0x6}, {0x1ff, 0xeb03}, {0x6, 0x7def}], 0x8, 0x78, 0x1, 0x2, 0x6}}) syz_ublk_setup_queues(r1, 0x0, 0x0, 0x0, 0x7ffffffe, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)={0x2c, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0x3a, 0x0, 0x0, @u64=0x7fff8}]}, 0x2c}], 0x1}, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x5) ioctl$KVM_CAP_X86_DISABLE_EXITS(r5, 0x4068aea3, &(0x7f0000000400)={0x8f, 0x0, 0x2}) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}}, 0x0) executing program 1: r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x5b05b05b05b0660, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000040000901feffffff0000000004710000040042800c0001800600060008"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000400)={0x20, 0x35}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000600), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc02864cf, &(0x7f0000000680)) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000500)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000540)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac2(0x8d4ffd4123e09dcf, 0xae, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x499, 0x1038, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c, 0x3, 0x1, 0x9, 0x0, 0x3, {0x8, 0xb, 0x0, 0x2, 0x1, 0x3, 0x20, 0x40}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7f, 0x1, 0x1a, 0x7f}, [@effect_unit={0x11, 0x24, 0x7, 0x4, 0x4, 0x4, [0x2, 0x0, 0x1, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x3f7, 0x0, 0x3, 0x90, {0x8, 0x25, 0x1, 0x80, 0x3, 0x6, 0x202}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x6, 0x2, 0xf3, 0x6, "89", "bfe1a4"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9e, 0x2, 0x4, 0x5, "b941fde7b00423f9"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x1, 0x2, 0x8, {0x8, 0x25, 0x1, 0x80, 0x0, 0x6, 0x8}}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x81, 0x4, 0x4, 0x8}, 0x53, &(0x7f0000000140)={0x5, 0xf, 0x53, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x3b, 0x3, 0x5, 0xf00f, 0xeff5, [0xc00f, 0xff3fc0, 0x1feff30]}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x7, 0x2, 0x4}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x7, 0xf00f, 0x62, [0xff0030, 0x30, 0x0, 0xff0000]}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x8, 0xf00, 0x1000, [0xffc0cf]}]}, 0x5, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1c0a}}]}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000007c0)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000840)='ns\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0x2a102211, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r4, 0x802c550a, &(0x7f0000000200)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x1, 0x2, 0x6dd4, 0x1, 0x3, 0x0}) setpgid(r3, r3) setpgid(0x0, r3) wait4(r3, 0x0, 0x2, 0x0) capget(&(0x7f0000000080)={0x19980330, r3}, &(0x7f0000000180)={0x6, 0x8, 0x200, 0x1, 0xcf9, 0x7fe00000}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x128}, 0x0) getdents64(r0, 0x0, 0x0) r5 = syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, &(0x7f0000010980), 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000010bc0)={0x0, 0x0, &(0x7f0000010c00)={&(0x7f0000010c40)=ANY=[@ANYBLOB="14000000100001000000000000000400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40540700002c0000000b0a01030100000000000000020900010073797a310091dbb5961b1da5ca61a27f0000000c0010400000000000000002140000001100010000"], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000010d00)={'dummy0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000010d40)={0x0, 0x0, &(0x7f0000010d80)={&(0x7f0000010dc0)=ANY=[@ANYBLOB="2c0000001400b59527bd7000ffdbdf250a4000c8", @ANYRES32=r8, @ANYBLOB="140002"], 0x2c}}, 0x400c0c0) sendmmsg$unix(r1, &(0x7f00000110c0)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000002c0)="a82acd3471c560f6a44a5d702682195e56c5fb4a9c55af6d61216a18de5927f99ca264b6c55fdd73523f336343d1ba9d7ac023026ff672d3ed51af1f3d87625a", 0x40}], 0x1}}, {{&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000480)="c667dfd0a217bcbab3b6e0284a12aa81012a517260e830e6bba2bd6b6310778645b03bd1809a137854a0175376d21f464c65ce6f34027295fb03f494fb48487846b939f77d4fad4bd5c0760c701fe2b6f26f98a75d08215a34340a8e51dea174133dfadced10da419e9135354f923ee1fb0966ca84731acfab56b6e663ea2e9729d94e93556ad1ffd97cb34a97349580f6858b3925ba7fa5", 0x98}, {&(0x7f0000000600)="e45aa5189007ebcb18bfaf64323a2e73f13bf073467a2afe5773f4f8a945e7f925ce76a8b23d0ced56ca6942c44d1263b54a7a43d9c90259ba61621a7401d407f0ec0cff05fd795d3d58616c7eca933e48bed82352d6288f498c07db48c99b2f7598529978ed5b4e44974211bf92e903b2397fc7f6fb7977a7dfdf6869aa6af09fc5e45cc684a2ef6661e581c4b1f7ed47b963717f44f6eccb303b1f39b9657c7c12492d4346b20d1f0f7cd8a225bb6cdd34218e7fc11f", 0xb7}], 0x2, &(0x7f00000093c0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r4, 0xffffffffffffffff, r0, r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, r4, r0, r0, r2, r2]}}], 0xd0, 0xc8d0}}, {{&(0x7f00000094c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000009b40)=[{&(0x7f0000009540)}, {0x0}, {&(0x7f00000096c0)="440b8dded3ddb88872add9b99a343b472aec2d", 0x13}, {&(0x7f0000009700)="08d000ad89019e377fe7f0f182cbc4d726434b46f931f4633373c697e0f4f9a1d3a5d71a74f1378f514dffb21570dc4da6fa1a84fa96d4cac59a6305d28f8f939e2cecc0b5d244200cf6b7f1587179559e14ce941e6e3995cbd99035ae196c8c897d7fc77b899cef5c8a87eb0715459708594d86190afe8c75543c1f2021f051098f0fca3e8604f3c7d8942369906e973cfa04f0d675fb", 0x97}, {&(0x7f00000097c0)="925dfd5509a2d5deefe10613f65c8b6f0766c377769e16a9dd97e346da4bed0fbfc82131514ad1647e5bb718ec4eac1427779308e39bb9b3863271b11ec5fa9d743d1a7c2b945685c25345aafb19947c52dc7803c7", 0x55}, {&(0x7f0000009840)="d39e67dd45e2dd08aab9412bff284cde3d174e4d41b3c59cdc20e446ea891b9597f66ca9", 0x24}, {&(0x7f00000098c0)="9b617591498b3fe9c4c766662d8bd91d95f68cd3f36c18fa38068b35ef18a4a4370a1cc615d73be0ddaa9001734b9e316b85c8f7dddd3a26cbf7e10f88ad2aa8b5332e56eb95cb8bba5d4d7e18225ff33f51ecbd26621ae6385388718de14eb011b6f91df5caf42643d01c7977e88b88bb583fdd3c8892296356b75ca84fb34ba4a7efd03650bcbb2877a96aad9a69fc55887288", 0x94}, {&(0x7f0000009a40)}], 0x8, 0x0, 0x0, 0x80}}, {{&(0x7f0000009c00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000009d80)=[{&(0x7f0000009c80)="6ad534aaeb51c336f090f70394f49e8fb7b2d0eba63b127a51129da1e6aafd5e7844c73670c6997129a84b2a5ed52491c7229c72d8c78d4b60699815fe6f12074faf3206ef1ff7c66f4d2158a37907ef8d27a9efed0a1c9fce", 0x59}, {0x0}], 0x2, &(0x7f0000010500)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x60, 0x240008c4}}, {{&(0x7f0000010580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000010880)=[{&(0x7f0000010600)="de9665b62b839dbf6ba9cb30845e5e4cffe7d3bfecdbf23f3da2aa4f4b06d177cd73a95c8612ab00bb72edee6440a265339a34dfce6a843f461588e346a4f770e93d3b4df92b4b358498236e018dc7ed46ab893d6f29f8ed52c937c911", 0x5d}, {&(0x7f0000010680)="72fc2c20b81e651d0b1241dfd53fa6501b793c5faa3739", 0x17}, {&(0x7f00000106c0)="d8856813d68a89bbd58dd9c9cf60e449be7b72f977d86e63348a1e8c186a0d1d03d6d4eb818c14596397145cfb9190fe2317a1f8746ed0027120575a0c54d4bb0c3554672f3677e280ef13904f99d73b651682a9688218cb8c23cce0891f81397b1fd5c5c6071465ce297c6fd86411e548b3d0548cd0bbb7045407d31fd2fa9a69458be35366d3a36d3cb935e13cf8aeb8ecd26b43f0bd7617cc545d75ea24bba14f04b1f3e1e2b8429e1f8cc5fa63182ee15857d5358515c809", 0xba}, {&(0x7f0000010780)="a23d75ab265aa1c0e1914ea604a3d2afb720aa81c069a60f191f2a6dd88d5cde2dbf5f6fd64e504c57b04c9439fd3e6cace8759931c221a650a3b3ea49bc731faab853981963a68150b3f4d450e25dea261a6389cc10446f355bae22905a6e300806e0d11bf22b893cc25deb6827f9f24df517d407a443c5f4388eb4dbb791fe7f9be0bd0f907743f54921724e8b58a1200b8cd834c0429f717397fcdffc5313b1d7b4b492e9439daa", 0xa9}, {&(0x7f0000010840)="c40a462d00b23478884fc9f426f180ad405322eeccf422f324543626a2", 0x1d}], 0x5, &(0x7f0000011000)=[@rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, r5]}}, @rights={{0x28, 0x1, 0x1, [r2, r4, r0, r6, r2, r0]}}, @rights={{0x2c, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4, r7, r4]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}], 0x98, 0x4000080}}], 0x5, 0x44810) executing program 0: syz_mount_image$fuse(0x0, 0x0, 0x80400, &(0x7f0000002dc0)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x0, 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x7fffffff, 0x0, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x102) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) socket$inet(0x2, 0x2, 0x1) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth0_to_batadv\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0x13, 0x7, 0x9, 0xffffffff}}) (async) fsopen(&(0x7f0000000100)='gfs2\x00', 0x1) (async) socket$inet(0x2, 0x4000000000000001, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0x8, 0xfa04, 0xc8, 0x6c02, 0x1f8, 0x194, 0x194, 0x1f8, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x7}, {0xffffffffffffffff}], 0x1, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000017c0)=ANY=[@ANYBLOB="b80100001700010025bd700000000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb000000000000000000000000ff0100000000000000000000000000014e210000000200"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000007903173f00000000aaff010000000000000000fffffffa000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000200000000000000feffffffffffffff000000000000000000000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000000000000000ffdfffffffffffff080000000000000002000000000000000200000200000000f9ffffff38000000000000000000000044000500fc010000000000000000000000000001000004d332000000020000002001000000000000000000000000000004350800050206000700000001000000080000002c00130020010000000000000000000000000002ac1e090100000000000000000000000000000000000000001f0008"], 0x1b8}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) setrlimit(0xb, 0x0) (async) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000040)) executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="180000001e0001002abd7000fedbdf2507001480e0fadd578a76004ce6d2058c78dc8db33e86d3aadceca5d6743a48bc49916aa3d0d34ce73a4112edf38250dda064fe50397de53d4c84a12491567990af7f26f89f6cbb07586df5"], 0x18}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000010001fff000000000100000000000000", @ANYRES32=r5, @ANYRES8=r2, @ANYRES32=r0, @ANYRESOCT=r2], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000340)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000380), 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f0000000680), 0x4) syz_open_dev$radio(0x0, 0x0, 0x2) r7 = syz_io_uring_setup(0xf01, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r7, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000780)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) writev(r8, &(0x7f00000007c0)=[{&(0x7f0000000800)="01", 0x1}], 0x1) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f00000003c0)={[0x7ff]}, 0x0, 0x0, 0x8) r9 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1c280, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r9, 0x8010500c, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001000)=@newchain={0x64, 0x64, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xe, 0x3}, {0xfff1, 0x6}, {0xb, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff]}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x20}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @random="be4fe094fd0f"}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x80}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRESDEC, @ANYBLOB="000000008900000008000300", @ANYRES32=r10, @ANYBLOB="18001d801400008006000500480000000500090000000000"], 0x34}, 0x1, 0x0, 0x0, 0x220288d1}, 0x0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000540), 0x0, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x4, 0xd, 0x4, 0x0, 0x2}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x6000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="e00100000000000000000000aa06000032548343f47d9738c9654a818cfbf090a2814af003c9fb6fec13787cf0a0c011dd0bf2182916b01789"], 0x1e0}}], 0x1, 0x4000004) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4ea2, 0x0, @remote, 0x3}, 0x1c) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r2, &(0x7f0000000ac0)={0x0, 0x953a, &(0x7f0000000b00)=[{&(0x7f0000000b40)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r4 = open(&(0x7f0000000b80)='.\x00', 0x80000, 0x103) getdents(r4, &(0x7f0000000bc0)=""/184, 0xb8) getdents(r4, &(0x7f0000000c80)=""/184, 0xb8) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000e40)={0x24, r5, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write(r6, &(0x7f00000002c0)='nqn=testnqn,transport=rdma,traddr=172.20.20.24,trsvcid=4', 0x38) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x6000, 0x1) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000340)={0x1, 0x2}, 0x4) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000380)={0x2, 0x7}, 0x4) socket$rxrpc(0x21, 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r1 = syz_io_uring_setup(0x112, &(0x7f0000000200)={0x0, 0x5a87, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000340)='n', 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000480)) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rthdr={{0x18, 0x29, 0x39, {0x2b, 0x0, 0x2, 0xf7}}}], 0x18}, 0x200008d0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001bc0), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r2, 0x0, 0x8, 0x0, &(0x7f0000001c80)="5c71f91b05c41355", 0x0, 0x1, 0x0, 0x1, 0x0, &(0x7f0000001cc0)='\x00', 0x0}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000001d00)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000001d40)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001d80)='smaps_rollup\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_procfs(0x0, &(0x7f0000001dc0)='net/netstat\x00') r3 = gettid() timer_create(0x0, 0x0, &(0x7f0000001e00)) ptrace$pokeuser(0x6, r3, 0x3, 0xec9c) connect$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x1, 0x2, 0x10, {0xa, 0x4e23, 0x39, @empty, 0xfffff200}}, 0x24) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000080)=0x2014, 0x4) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000001e80)={0x1, "ac74841675e4aedde850ee5b2910d1e16305d9a7f9c8a7076ece23ddca3c191d", 0x3, 0x21c, 0xff, 0x200000, 0x4}) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e23, 0x180000, @dev={0xfe, 0x80, '\x00', 0x43}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="280000000000000029000000040000002b010000000000000108000000000000000000000000000024000000000000002900"], 0x50}, 0x340880c4) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_PARM(r5, 0xc0cc5616, &(0x7f0000000380)={0x0, @capture={0x0, 0x0, {0xfffffffa, 0x3}, 0x8, 0x1}}) executing program 2: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80102, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r5, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c0040}, 0x408c4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) program crashed: WARNING in xfrm_output_resume bisect: bisecting 30 programs bisect: split chunks (needed=false): <30> bisect: split chunk #0 of len 30 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=1m45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 30, 16, 4, 21, 22, 19, 11, 19, 2, 14, 18, 21, 30, 4, 26, 27, 18, 16, 11] detailed listing: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}}, 0x0) executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x40) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000680)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x8000, 0x0) socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000700)={0x2, 0x0, @local}, 0x10) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000780)={0x3, 0x2, 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r4, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000040000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000100000000000000440005000000000000000000000000000000000000000002320000000a000000fc010000000000000000000000000000000000000100"/180], 0xfc}}, 0x0) connect$inet(r3, &(0x7f0000000940)={0x2, 0x4, @broadcast}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000980)={0x84, @local, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000009c0)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0xa, 0xc, 0x56}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 32) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0xfd8b, 0x5}) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async, rerun: 32) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) (rerun: 32) write$dsp(r1, &(0x7f0000000180)="5cba91a4", 0xffffffd9) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffff9]}, 0x0, 0x8) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) (async, rerun: 64) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000240)=0x1) (rerun: 64) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x9) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0xbc}, 0x1, 0x0, 0x0, 0xc0}, 0x0) executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) executing program 2: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000001c0)='1', 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x1001}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x1001}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f00000003c0), 0xc, &(0x7f0000000400)={&(0x7f0000000440)=@setlink={0x20, 0x13, 0x5, 0x70bc95, 0x0, {0x0, 0x0, 0x0, r4, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f00000004c0), 0xc, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001400055996bc70000000000002180000", @ANYRES32=r4, @ANYBLOB="080002000a010101080001000a010101"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={&(0x7f00000005c0), 0xc, &(0x7f0000000600)={&(0x7f0000000640)=@setlink={0x20, 0x13, 0x5, 0x70bc97, 0x0, {0x0, 0x0, 0x0, r5, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={&(0x7f00000006c0), 0xc, &(0x7f0000000700)={&(0x7f0000000a80)=ANY=[@ANYBLOB="280000001400050498bc70000000000002180000", @ANYRES32=r5, @ANYBLOB="08000200640131b80800010064810101126c221e0f9d94889911eb8bd4813885d93c7b21c7f94b0d239c7f879c1cb410cb588917489de623307e1ee7960d8fe7781828c6f70582bc392595a5910bdac2b63cad8539fff47113cfa5b6e6663d95543f304fbbb6e7b275ae2e49df6678a321099d12c3eb6af08fa7f5fcf2f6079184ec63a86bf375d37eae4cd953fb70953b09d58b9b528c12a87aeef07e68ffddb4c94f0a20af5d35934c90c351eba1cb0c56bd7151e58689404be9db1b326a39f73c74c69b0f0b39cc3aff5eca49f97459c597ff1bc1c33450"], 0x28}}, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000000)={0x3, 0x5}, 0x0) fsopen(&(0x7f0000000040)='mqueue\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)={0x110, 0x26, 0x301, 0x270bd1d, 0x25dfdbfa, {0x1}, [@nested={0xfc, 0x131, 0x0, 0x1, [@typed={0xf5, 0x65, 0x0, 0x0, @str='}&/\x00\x847o\x8a\xad6[\xab\xd2\xa0}=\xde8S[\x89\xa0\xc1\x04\xa4\x190\xcb\x92\xfe|\xcf0\xd3\xbd\xa81\xd0\x8e\x0f\x12\x1ba\xe2`O\x14 \xe48\t\xdb\xdd\x92\xfd\xbe\n\xdd\xa7~\"\x8e\xbe\xc0\x1d\x1cv\xb4\x02K6\xbb\xd9\b{\xb5\x10\xb8e#{F0(\xec\x8b\x1d#\x8c\xde\x12\t\x18\x1e\xa2*\x98~@\xe0\x83\x9c\x9ea\x87f\xc9\xe5\x80+\xc8xZ=\xf0\x8b\x8c\x8bdn\x18_\xca\x139\xb0\x12\n\xd6oK5\xc2\xads@\xcdX\xa3\x80\xf3\x7f\xba\v\x83l\xebq\x89\xa6\tS\xdd:J\x88\x96O\xecj\xcc\\\xff\xa4\xf6V\xf4\x98\x14w,\xb1o\xd7\xa9\tNR\xf9\xee.Gn\xc5\xea\x94\x16\xf4Y4}\x84\x12-r\xd5\t\x81\x00gMOvM\xf8\x17\xc6K\x9b\xb9\xcdY\xbeI\xa6e$\x11[\x90\x96\x84#\x9a@\x02\x00\xd8\x06\xd0t\x89\xe0 z\xf2\x98C\x03\xa6'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000042}, 0x48c0) fchdir(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000a00)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x65, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010102, @private=0xa010102}, {0x4e21, 0x4e20, 0xc, 0x0, @opaque='EFGH'}}}, 0x20) write$tun(r1, &(0x7f0000000a40)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @rand_addr=0x64010102}, {0x4e20, 0x4e21, 0xc, 0x0, @opaque='IJKL'}}}, 0x20) executing program 4: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000001c0)='1', 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x1001}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x1001}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f00000003c0), 0xc, &(0x7f0000000400)={&(0x7f0000000440)=@setlink={0x20, 0x13, 0x5, 0x70bc95, 0x0, {0x0, 0x0, 0x0, r4, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f00000004c0), 0xc, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001400055996bc70000000000002180000", @ANYRES32=r4, @ANYBLOB="080002000a010101080001000a010101"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={&(0x7f00000005c0), 0xc, &(0x7f0000000600)={&(0x7f0000000640)=@setlink={0x20, 0x13, 0x5, 0x70bc97, 0x0, {0x0, 0x0, 0x0, r5, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={&(0x7f00000006c0), 0xc, &(0x7f0000000700)={&(0x7f0000000a80)=ANY=[@ANYBLOB="280000001400050498bc70000000000002180000", @ANYRES32=r5, @ANYBLOB="08000200640131b80800010064810101126c221e0f9d94889911eb8bd4813885d93c7b21c7f94b0d239c7f879c1cb410cb588917489de623307e1ee7960d8fe7781828c6f70582bc392595a5910bdac2b63cad8539fff47113cfa5b6e6663d95543f304fbbb6e7b275ae2e49df6678a321099d12c3eb6af08fa7f5fcf2f6079184ec63a86bf375d37eae4cd953fb70953b09d58b9b528c12a87aeef07e68ffddb4c94f0a20af5d35934c90c351eba1cb0c56bd7151e58689404be9db1b326a39f73c74c69b0f0b39cc3aff5eca49f97459c597ff1bc1c33450"], 0x28}}, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000000)={0x3, 0x5}, 0x0) r6 = fsopen(&(0x7f0000000040)='mqueue\x00', 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)={0x110, 0x26, 0x301, 0x270bd1d, 0x25dfdbfa, {0x1}, [@nested={0xfc, 0x131, 0x0, 0x1, [@typed={0xf5, 0x65, 0x0, 0x0, @str='}&/\x00\x847o\x8a\xad6[\xab\xd2\xa0}=\xde8S[\x89\xa0\xc1\x04\xa4\x190\xcb\x92\xfe|\xcf0\xd3\xbd\xa81\xd0\x8e\x0f\x12\x1ba\xe2`O\x14 \xe48\t\xdb\xdd\x92\xfd\xbe\n\xdd\xa7~\"\x8e\xbe\xc0\x1d\x1cv\xb4\x02K6\xbb\xd9\b{\xb5\x10\xb8e#{F0(\xec\x8b\x1d#\x8c\xde\x12\t\x18\x1e\xa2*\x98~@\xe0\x83\x9c\x9ea\x87f\xc9\xe5\x80+\xc8xZ=\xf0\x8b\x8c\x8bdn\x18_\xca\x139\xb0\x12\n\xd6oK5\xc2\xads@\xcdX\xa3\x80\xf3\x7f\xba\v\x83l\xebq\x89\xa6\tS\xdd:J\x88\x96O\xecj\xcc\\\xff\xa4\xf6V\xf4\x98\x14w,\xb1o\xd7\xa9\tNR\xf9\xee.Gn\xc5\xea\x94\x16\xf4Y4}\x84\x12-r\xd5\t\x81\x00gMOvM\xf8\x17\xc6K\x9b\xb9\xcdY\xbeI\xa6e$\x11[\x90\x96\x84#\x9a@\x02\x00\xd8\x06\xd0t\x89\xe0 z\xf2\x98C\x03\xa6'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000042}, 0x48c0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000a00)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x65, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010102, @private=0xa010102}, {0x4e21, 0x4e20, 0xc, 0x0, @opaque='EFGH'}}}, 0x20) write$tun(r1, &(0x7f0000000a40)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @rand_addr=0x64010102}, {0x4e20, 0x4e21, 0xc, 0x0, @opaque='IJKL'}}}, 0x20) executing program 3: r0 = syz_open_dev$video(&(0x7f0000000300), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000340)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='mode\x00', &(0x7f0000000280)='7', 0x0) statx(r5, &(0x7f00000002c0)='./file0\x00', 0x100, 0x4, &(0x7f0000000400)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x260048f4}, 0x20004810) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x3}, @IFLA_GTP_FD0={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x2000c000) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_ublk_setup_io_uring(0x1f, 0x0, 0x0, 0x0, &(0x7f0000000280)) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg$inet(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="17172e3a1c9579fda62f4a", 0xb}, {&(0x7f00000000c0)="936e1e294c", 0x5}], 0x2}}], 0x1, 0x20810) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000300)={0xa, @pix_mp={0xeaac, 0x0, 0x34565348, 0x5, 0x9, [{0x9, 0x200}, {0x1ff, 0x200}, {0x453, 0x3}, {0x5, 0x3}, {0x8, 0xa}, {0xfffffffc, 0x6}, {0x1ff, 0xeb03}, {0x6, 0x7def}], 0x8, 0x78, 0x1, 0x2, 0x6}}) syz_ublk_setup_queues(r1, 0x0, 0x0, 0x0, 0x7ffffffe, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)={0x2c, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0x3a, 0x0, 0x0, @u64=0x7fff8}]}, 0x2c}], 0x1}, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x5) ioctl$KVM_CAP_X86_DISABLE_EXITS(r5, 0x4068aea3, &(0x7f0000000400)={0x8f, 0x0, 0x2}) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}}, 0x0) executing program 1: r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x5b05b05b05b0660, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000040000901feffffff0000000004710000040042800c0001800600060008"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000400)={0x20, 0x35}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000600), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc02864cf, &(0x7f0000000680)) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000500)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000540)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac2(0x8d4ffd4123e09dcf, 0xae, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x499, 0x1038, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c, 0x3, 0x1, 0x9, 0x0, 0x3, {0x8, 0xb, 0x0, 0x2, 0x1, 0x3, 0x20, 0x40}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7f, 0x1, 0x1a, 0x7f}, [@effect_unit={0x11, 0x24, 0x7, 0x4, 0x4, 0x4, [0x2, 0x0, 0x1, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x3f7, 0x0, 0x3, 0x90, {0x8, 0x25, 0x1, 0x80, 0x3, 0x6, 0x202}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x6, 0x2, 0xf3, 0x6, "89", "bfe1a4"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9e, 0x2, 0x4, 0x5, "b941fde7b00423f9"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x1, 0x2, 0x8, {0x8, 0x25, 0x1, 0x80, 0x0, 0x6, 0x8}}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x81, 0x4, 0x4, 0x8}, 0x53, &(0x7f0000000140)={0x5, 0xf, 0x53, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x3b, 0x3, 0x5, 0xf00f, 0xeff5, [0xc00f, 0xff3fc0, 0x1feff30]}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x7, 0x2, 0x4}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x7, 0xf00f, 0x62, [0xff0030, 0x30, 0x0, 0xff0000]}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x8, 0xf00, 0x1000, [0xffc0cf]}]}, 0x5, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1c0a}}]}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000007c0)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000840)='ns\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0x2a102211, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r4, 0x802c550a, &(0x7f0000000200)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x1, 0x2, 0x6dd4, 0x1, 0x3, 0x0}) setpgid(r3, r3) setpgid(0x0, r3) wait4(r3, 0x0, 0x2, 0x0) capget(&(0x7f0000000080)={0x19980330, r3}, &(0x7f0000000180)={0x6, 0x8, 0x200, 0x1, 0xcf9, 0x7fe00000}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x128}, 0x0) getdents64(r0, 0x0, 0x0) r5 = syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, &(0x7f0000010980), 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000010bc0)={0x0, 0x0, &(0x7f0000010c00)={&(0x7f0000010c40)=ANY=[@ANYBLOB="14000000100001000000000000000400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40540700002c0000000b0a01030100000000000000020900010073797a310091dbb5961b1da5ca61a27f0000000c0010400000000000000002140000001100010000"], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000010d00)={'dummy0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000010d40)={0x0, 0x0, &(0x7f0000010d80)={&(0x7f0000010dc0)=ANY=[@ANYBLOB="2c0000001400b59527bd7000ffdbdf250a4000c8", @ANYRES32=r8, @ANYBLOB="140002"], 0x2c}}, 0x400c0c0) sendmmsg$unix(r1, &(0x7f00000110c0)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000002c0)="a82acd3471c560f6a44a5d702682195e56c5fb4a9c55af6d61216a18de5927f99ca264b6c55fdd73523f336343d1ba9d7ac023026ff672d3ed51af1f3d87625a", 0x40}], 0x1}}, {{&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000480)="c667dfd0a217bcbab3b6e0284a12aa81012a517260e830e6bba2bd6b6310778645b03bd1809a137854a0175376d21f464c65ce6f34027295fb03f494fb48487846b939f77d4fad4bd5c0760c701fe2b6f26f98a75d08215a34340a8e51dea174133dfadced10da419e9135354f923ee1fb0966ca84731acfab56b6e663ea2e9729d94e93556ad1ffd97cb34a97349580f6858b3925ba7fa5", 0x98}, {&(0x7f0000000600)="e45aa5189007ebcb18bfaf64323a2e73f13bf073467a2afe5773f4f8a945e7f925ce76a8b23d0ced56ca6942c44d1263b54a7a43d9c90259ba61621a7401d407f0ec0cff05fd795d3d58616c7eca933e48bed82352d6288f498c07db48c99b2f7598529978ed5b4e44974211bf92e903b2397fc7f6fb7977a7dfdf6869aa6af09fc5e45cc684a2ef6661e581c4b1f7ed47b963717f44f6eccb303b1f39b9657c7c12492d4346b20d1f0f7cd8a225bb6cdd34218e7fc11f", 0xb7}], 0x2, &(0x7f00000093c0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r4, 0xffffffffffffffff, r0, r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, r4, r0, r0, r2, r2]}}], 0xd0, 0xc8d0}}, {{&(0x7f00000094c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000009b40)=[{&(0x7f0000009540)}, {0x0}, {&(0x7f00000096c0)="440b8dded3ddb88872add9b99a343b472aec2d", 0x13}, {&(0x7f0000009700)="08d000ad89019e377fe7f0f182cbc4d726434b46f931f4633373c697e0f4f9a1d3a5d71a74f1378f514dffb21570dc4da6fa1a84fa96d4cac59a6305d28f8f939e2cecc0b5d244200cf6b7f1587179559e14ce941e6e3995cbd99035ae196c8c897d7fc77b899cef5c8a87eb0715459708594d86190afe8c75543c1f2021f051098f0fca3e8604f3c7d8942369906e973cfa04f0d675fb", 0x97}, {&(0x7f00000097c0)="925dfd5509a2d5deefe10613f65c8b6f0766c377769e16a9dd97e346da4bed0fbfc82131514ad1647e5bb718ec4eac1427779308e39bb9b3863271b11ec5fa9d743d1a7c2b945685c25345aafb19947c52dc7803c7", 0x55}, {&(0x7f0000009840)="d39e67dd45e2dd08aab9412bff284cde3d174e4d41b3c59cdc20e446ea891b9597f66ca9", 0x24}, {&(0x7f00000098c0)="9b617591498b3fe9c4c766662d8bd91d95f68cd3f36c18fa38068b35ef18a4a4370a1cc615d73be0ddaa9001734b9e316b85c8f7dddd3a26cbf7e10f88ad2aa8b5332e56eb95cb8bba5d4d7e18225ff33f51ecbd26621ae6385388718de14eb011b6f91df5caf42643d01c7977e88b88bb583fdd3c8892296356b75ca84fb34ba4a7efd03650bcbb2877a96aad9a69fc55887288", 0x94}, {&(0x7f0000009a40)}], 0x8, 0x0, 0x0, 0x80}}, {{&(0x7f0000009c00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000009d80)=[{&(0x7f0000009c80)="6ad534aaeb51c336f090f70394f49e8fb7b2d0eba63b127a51129da1e6aafd5e7844c73670c6997129a84b2a5ed52491c7229c72d8c78d4b60699815fe6f12074faf3206ef1ff7c66f4d2158a37907ef8d27a9efed0a1c9fce", 0x59}, {0x0}], 0x2, &(0x7f0000010500)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x60, 0x240008c4}}, {{&(0x7f0000010580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000010880)=[{&(0x7f0000010600)="de9665b62b839dbf6ba9cb30845e5e4cffe7d3bfecdbf23f3da2aa4f4b06d177cd73a95c8612ab00bb72edee6440a265339a34dfce6a843f461588e346a4f770e93d3b4df92b4b358498236e018dc7ed46ab893d6f29f8ed52c937c911", 0x5d}, {&(0x7f0000010680)="72fc2c20b81e651d0b1241dfd53fa6501b793c5faa3739", 0x17}, {&(0x7f00000106c0)="d8856813d68a89bbd58dd9c9cf60e449be7b72f977d86e63348a1e8c186a0d1d03d6d4eb818c14596397145cfb9190fe2317a1f8746ed0027120575a0c54d4bb0c3554672f3677e280ef13904f99d73b651682a9688218cb8c23cce0891f81397b1fd5c5c6071465ce297c6fd86411e548b3d0548cd0bbb7045407d31fd2fa9a69458be35366d3a36d3cb935e13cf8aeb8ecd26b43f0bd7617cc545d75ea24bba14f04b1f3e1e2b8429e1f8cc5fa63182ee15857d5358515c809", 0xba}, {&(0x7f0000010780)="a23d75ab265aa1c0e1914ea604a3d2afb720aa81c069a60f191f2a6dd88d5cde2dbf5f6fd64e504c57b04c9439fd3e6cace8759931c221a650a3b3ea49bc731faab853981963a68150b3f4d450e25dea261a6389cc10446f355bae22905a6e300806e0d11bf22b893cc25deb6827f9f24df517d407a443c5f4388eb4dbb791fe7f9be0bd0f907743f54921724e8b58a1200b8cd834c0429f717397fcdffc5313b1d7b4b492e9439daa", 0xa9}, {&(0x7f0000010840)="c40a462d00b23478884fc9f426f180ad405322eeccf422f324543626a2", 0x1d}], 0x5, &(0x7f0000011000)=[@rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, r5]}}, @rights={{0x28, 0x1, 0x1, [r2, r4, r0, r6, r2, r0]}}, @rights={{0x2c, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4, r7, r4]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}], 0x98, 0x4000080}}], 0x5, 0x44810) executing program 0: syz_mount_image$fuse(0x0, 0x0, 0x80400, &(0x7f0000002dc0)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x0, 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x7fffffff, 0x0, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x102) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) socket$inet(0x2, 0x2, 0x1) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth0_to_batadv\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0x13, 0x7, 0x9, 0xffffffff}}) (async) fsopen(&(0x7f0000000100)='gfs2\x00', 0x1) (async) socket$inet(0x2, 0x4000000000000001, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0x8, 0xfa04, 0xc8, 0x6c02, 0x1f8, 0x194, 0x194, 0x1f8, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x7}, {0xffffffffffffffff}], 0x1, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000017c0)=ANY=[@ANYBLOB="b80100001700010025bd700000000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb000000000000000000000000ff0100000000000000000000000000014e210000000200"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000007903173f00000000aaff010000000000000000fffffffa000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000200000000000000feffffffffffffff000000000000000000000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000000000000000ffdfffffffffffff080000000000000002000000000000000200000200000000f9ffffff38000000000000000000000044000500fc010000000000000000000000000001000004d332000000020000002001000000000000000000000000000004350800050206000700000001000000080000002c00130020010000000000000000000000000002ac1e090100000000000000000000000000000000000000001f0008"], 0x1b8}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) setrlimit(0xb, 0x0) (async) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000040)) executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="180000001e0001002abd7000fedbdf2507001480e0fadd578a76004ce6d2058c78dc8db33e86d3aadceca5d6743a48bc49916aa3d0d34ce73a4112edf38250dda064fe50397de53d4c84a12491567990af7f26f89f6cbb07586df5"], 0x18}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000010001fff000000000100000000000000", @ANYRES32=r5, @ANYRES8=r2, @ANYRES32=r0, @ANYRESOCT=r2], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000340)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000380), 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f0000000680), 0x4) syz_open_dev$radio(0x0, 0x0, 0x2) r7 = syz_io_uring_setup(0xf01, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r7, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000780)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) writev(r8, &(0x7f00000007c0)=[{&(0x7f0000000800)="01", 0x1}], 0x1) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f00000003c0)={[0x7ff]}, 0x0, 0x0, 0x8) r9 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1c280, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r9, 0x8010500c, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001000)=@newchain={0x64, 0x64, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xe, 0x3}, {0xfff1, 0x6}, {0xb, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff]}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x20}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @random="be4fe094fd0f"}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x80}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRESDEC, @ANYBLOB="000000008900000008000300", @ANYRES32=r10, @ANYBLOB="18001d801400008006000500480000000500090000000000"], 0x34}, 0x1, 0x0, 0x0, 0x220288d1}, 0x0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000540), 0x0, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x4, 0xd, 0x4, 0x0, 0x2}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x6000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="e00100000000000000000000aa06000032548343f47d9738c9654a818cfbf090a2814af003c9fb6fec13787cf0a0c011dd0bf2182916b01789"], 0x1e0}}], 0x1, 0x4000004) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4ea2, 0x0, @remote, 0x3}, 0x1c) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r2, &(0x7f0000000ac0)={0x0, 0x953a, &(0x7f0000000b00)=[{&(0x7f0000000b40)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r4 = open(&(0x7f0000000b80)='.\x00', 0x80000, 0x103) getdents(r4, &(0x7f0000000bc0)=""/184, 0xb8) getdents(r4, &(0x7f0000000c80)=""/184, 0xb8) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000e40)={0x24, r5, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write(r6, &(0x7f00000002c0)='nqn=testnqn,transport=rdma,traddr=172.20.20.24,trsvcid=4', 0x38) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x6000, 0x1) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000340)={0x1, 0x2}, 0x4) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000380)={0x2, 0x7}, 0x4) socket$rxrpc(0x21, 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r1 = syz_io_uring_setup(0x112, &(0x7f0000000200)={0x0, 0x5a87, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000340)='n', 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000480)) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rthdr={{0x18, 0x29, 0x39, {0x2b, 0x0, 0x2, 0xf7}}}], 0x18}, 0x200008d0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9e09000000000000000a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a42a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a175e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436c101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521b3ebb0cc52f49129b204eb99b6150e320c9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d255be1ed66d9051f22614d1f62734d6780393e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f231200743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069fbff63a06578d6d184f5de7bfb6aa800016996d536256c02294cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e7005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9c9e5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde3885b06548862de809d3dae3cccf109f7c78e8479a345e805e47dfa82caed44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1bfeb51f5c65a907f2217d5f80c580dc31b0963ff953ce09148e8dfe3a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e97c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20ab2b5baa1b07b16e81f278e54a479f1a068658e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4657b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce798c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f7c6294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b13287615b972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0590000130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80c4014ff11d9dbceba41d8dfce410333a054e82b1d050331c5bc4acb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6b93d28db8ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a82632ff3a9a48ff805202ae9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dae1028d1bc68b6336eb1a5d18f6148354df7e60a489dc543ccdee1fff9d8f8d78844f0c6a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d6410000000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2cea0d6269ffc8580a01e9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168eabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2835d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95bad8f8ed85cd5b03a7352a0fb83398566d1bc133582ce2d95636cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef47b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c32f5fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538bccd48a0325aa9b151855c800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b3145bf54a851f3c08931d4c2c32bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c929e7de4e9620000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da208e9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45a4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d50270a1deec1a6d7441d0b5b8d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656db528f81f6a9465d2c94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be1881000000000000006fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bb24ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855c5c95ef5c83b18b23517ca935a0fa1b630d70c4ca4029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17e0000815a42318151feaad37f7abf9bfa0bcac3c1934854b3f6dc6de835952ebdda297dd3b29c07c69888cf029271449e035edc8a4459705f222bda537481e66ce3c665129f9829524eca8b5bef27adde96bd3ee95da4a176deff3408da050fe8d512e5a19379b403ee11d010bf86d0af4ac5c2057709b18cff438d0d58810670b222dfeb317bb935f925d2a070e68a701fd4316a677bb513c9476f25969097c165ca1705473341ea03f259dc5bee6a2d2e05176965192941abfae36b3a1e30784e6532c96ab971c5706a88b6f66860e31098b5b788788aad67507ffab2184a950065c1337259b63135fa060fc5ce3e4f6cdfb64f40e1a90351a01fd3d70f9dde03c335a931e58b8570316590ae22c7de567260849049e963ee15db15f592abb24111a219f0d128ceaf19764d92755abc9c313f65e7a220e64bb0d7139ce59da85bc710cea0c6553b336763bd3e39c2374b86885a32cdfae817196a7850257ead09f3e30e676b51062bb9000000000000000000000000000000000000000000000000000000aefb12dd3507c8dd24490bf9de062cd166a4dad6b9f2e53bad342546e546f6dece81d53cf717bd91ad72f4da82018f43259899e53e0b69a92180f1345699045fd23689e66d21d13be1a2d20eb1ce23eda84a63855173ca7f51d436306c"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001bc0), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r2, 0x0, 0x8, 0x0, &(0x7f0000001c80)="5c71f91b05c41355", 0x0, 0x1, 0x0, 0x1, 0x0, &(0x7f0000001cc0)='\x00', 0x0}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000001d00)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000001d40)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001d80)='smaps_rollup\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_procfs(0x0, &(0x7f0000001dc0)='net/netstat\x00') r3 = gettid() timer_create(0x0, 0x0, &(0x7f0000001e00)) ptrace$pokeuser(0x6, r3, 0x3, 0xec9c) connect$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x1, 0x2, 0x10, {0xa, 0x4e23, 0x39, @empty, 0xfffff200}}, 0x24) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000080)=0x2014, 0x4) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000001e80)={0x1, "ac74841675e4aedde850ee5b2910d1e16305d9a7f9c8a7076ece23ddca3c191d", 0x3, 0x21c, 0xff, 0x200000, 0x4}) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e23, 0x180000, @dev={0xfe, 0x80, '\x00', 0x43}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="280000000000000029000000040000002b010000000000000108000000000000000000000000000024000000000000002900"], 0x50}, 0x340880c4) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_PARM(r5, 0xc0cc5616, &(0x7f0000000380)={0x0, @capture={0x0, 0x0, {0xfffffffa, 0x3}, 0x8, 0x1}}) executing program 2: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80102, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r5, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c0040}, 0x408c4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) program crashed: WARNING in xfrm_output_resume bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 18, 21, 30, 4, 26, 27, 18, 16, 11] detailed listing: executing program 1: r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x5b05b05b05b0660, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000040000901feffffff0000000004710000040042800c0001800600060008"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000400)={0x20, 0x35}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000600), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc02864cf, &(0x7f0000000680)) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000500)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000540)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac2(0x8d4ffd4123e09dcf, 0xae, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x499, 0x1038, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c, 0x3, 0x1, 0x9, 0x0, 0x3, {0x8, 0xb, 0x0, 0x2, 0x1, 0x3, 0x20, 0x40}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7f, 0x1, 0x1a, 0x7f}, [@effect_unit={0x11, 0x24, 0x7, 0x4, 0x4, 0x4, [0x2, 0x0, 0x1, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x3f7, 0x0, 0x3, 0x90, {0x8, 0x25, 0x1, 0x80, 0x3, 0x6, 0x202}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x6, 0x2, 0xf3, 0x6, "89", "bfe1a4"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9e, 0x2, 0x4, 0x5, "b941fde7b00423f9"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x1, 0x2, 0x8, {0x8, 0x25, 0x1, 0x80, 0x0, 0x6, 0x8}}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x81, 0x4, 0x4, 0x8}, 0x53, &(0x7f0000000140)={0x5, 0xf, 0x53, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x3b, 0x3, 0x5, 0xf00f, 0xeff5, [0xc00f, 0xff3fc0, 0x1feff30]}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x7, 0x2, 0x4}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x7, 0xf00f, 0x62, [0xff0030, 0x30, 0x0, 0xff0000]}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x8, 0xf00, 0x1000, [0xffc0cf]}]}, 0x5, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1c0a}}]}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000007c0)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000840)='ns\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0x2a102211, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r4, 0x802c550a, &(0x7f0000000200)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x1, 0x2, 0x6dd4, 0x1, 0x3, 0x0}) setpgid(r3, r3) setpgid(0x0, r3) wait4(r3, 0x0, 0x2, 0x0) capget(&(0x7f0000000080)={0x19980330, r3}, &(0x7f0000000180)={0x6, 0x8, 0x200, 0x1, 0xcf9, 0x7fe00000}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x128}, 0x0) getdents64(r0, 0x0, 0x0) r5 = syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, &(0x7f0000010980), 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000010bc0)={0x0, 0x0, &(0x7f0000010c00)={&(0x7f0000010c40)=ANY=[@ANYBLOB="14000000100001000000000000000400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40540700002c0000000b0a01030100000000000000020900010073797a310091dbb5961b1da5ca61a27f0000000c0010400000000000000002140000001100010000"], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000010d00)={'dummy0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000010d40)={0x0, 0x0, &(0x7f0000010d80)={&(0x7f0000010dc0)=ANY=[@ANYBLOB="2c0000001400b59527bd7000ffdbdf250a4000c8", @ANYRES32=r8, @ANYBLOB="140002"], 0x2c}}, 0x400c0c0) sendmmsg$unix(r1, &(0x7f00000110c0)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000002c0)="a82acd3471c560f6a44a5d702682195e56c5fb4a9c55af6d61216a18de5927f99ca264b6c55fdd73523f336343d1ba9d7ac023026ff672d3ed51af1f3d87625a", 0x40}], 0x1}}, {{&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000480)="c667dfd0a217bcbab3b6e0284a12aa81012a517260e830e6bba2bd6b6310778645b03bd1809a137854a0175376d21f464c65ce6f34027295fb03f494fb48487846b939f77d4fad4bd5c0760c701fe2b6f26f98a75d08215a34340a8e51dea174133dfadced10da419e9135354f923ee1fb0966ca84731acfab56b6e663ea2e9729d94e93556ad1ffd97cb34a97349580f6858b3925ba7fa5", 0x98}, {&(0x7f0000000600)="e45aa5189007ebcb18bfaf64323a2e73f13bf073467a2afe5773f4f8a945e7f925ce76a8b23d0ced56ca6942c44d1263b54a7a43d9c90259ba61621a7401d407f0ec0cff05fd795d3d58616c7eca933e48bed82352d6288f498c07db48c99b2f7598529978ed5b4e44974211bf92e903b2397fc7f6fb7977a7dfdf6869aa6af09fc5e45cc684a2ef6661e581c4b1f7ed47b963717f44f6eccb303b1f39b9657c7c12492d4346b20d1f0f7cd8a225bb6cdd34218e7fc11f", 0xb7}], 0x2, &(0x7f00000093c0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r4, 0xffffffffffffffff, r0, r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, r4, r0, r0, r2, r2]}}], 0xd0, 0xc8d0}}, {{&(0x7f00000094c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000009b40)=[{&(0x7f0000009540)}, {0x0}, {&(0x7f00000096c0)="440b8dded3ddb88872add9b99a343b472aec2d", 0x13}, {&(0x7f0000009700)="08d000ad89019e377fe7f0f182cbc4d726434b46f931f4633373c697e0f4f9a1d3a5d71a74f1378f514dffb21570dc4da6fa1a84fa96d4cac59a6305d28f8f939e2cecc0b5d244200cf6b7f1587179559e14ce941e6e3995cbd99035ae196c8c897d7fc77b899cef5c8a87eb0715459708594d86190afe8c75543c1f2021f051098f0fca3e8604f3c7d8942369906e973cfa04f0d675fb", 0x97}, {&(0x7f00000097c0)="925dfd5509a2d5deefe10613f65c8b6f0766c377769e16a9dd97e346da4bed0fbfc82131514ad1647e5bb718ec4eac1427779308e39bb9b3863271b11ec5fa9d743d1a7c2b945685c25345aafb19947c52dc7803c7", 0x55}, {&(0x7f0000009840)="d39e67dd45e2dd08aab9412bff284cde3d174e4d41b3c59cdc20e446ea891b9597f66ca9", 0x24}, {&(0x7f00000098c0)="9b617591498b3fe9c4c766662d8bd91d95f68cd3f36c18fa38068b35ef18a4a4370a1cc615d73be0ddaa9001734b9e316b85c8f7dddd3a26cbf7e10f88ad2aa8b5332e56eb95cb8bba5d4d7e18225ff33f51ecbd26621ae6385388718de14eb011b6f91df5caf42643d01c7977e88b88bb583fdd3c8892296356b75ca84fb34ba4a7efd03650bcbb2877a96aad9a69fc55887288", 0x94}, {&(0x7f0000009a40)}], 0x8, 0x0, 0x0, 0x80}}, {{&(0x7f0000009c00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000009d80)=[{&(0x7f0000009c80)="6ad534aaeb51c336f090f70394f49e8fb7b2d0eba63b127a51129da1e6aafd5e7844c73670c6997129a84b2a5ed52491c7229c72d8c78d4b60699815fe6f12074faf3206ef1ff7c66f4d2158a37907ef8d27a9efed0a1c9fce", 0x59}, {0x0}], 0x2, &(0x7f0000010500)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x60, 0x240008c4}}, {{&(0x7f0000010580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000010880)=[{&(0x7f0000010600)="de9665b62b839dbf6ba9cb30845e5e4cffe7d3bfecdbf23f3da2aa4f4b06d177cd73a95c8612ab00bb72edee6440a265339a34dfce6a843f461588e346a4f770e93d3b4df92b4b358498236e018dc7ed46ab893d6f29f8ed52c937c911", 0x5d}, {&(0x7f0000010680)="72fc2c20b81e651d0b1241dfd53fa6501b793c5faa3739", 0x17}, {&(0x7f00000106c0)="d8856813d68a89bbd58dd9c9cf60e449be7b72f977d86e63348a1e8c186a0d1d03d6d4eb818c14596397145cfb9190fe2317a1f8746ed0027120575a0c54d4bb0c3554672f3677e280ef13904f99d73b651682a9688218cb8c23cce0891f81397b1fd5c5c6071465ce297c6fd86411e548b3d0548cd0bbb7045407d31fd2fa9a69458be35366d3a36d3cb935e13cf8aeb8ecd26b43f0bd7617cc545d75ea24bba14f04b1f3e1e2b8429e1f8cc5fa63182ee15857d5358515c809", 0xba}, {&(0x7f0000010780)="a23d75ab265aa1c0e1914ea604a3d2afb720aa81c069a60f191f2a6dd88d5cde2dbf5f6fd64e504c57b04c9439fd3e6cace8759931c221a650a3b3ea49bc731faab853981963a68150b3f4d450e25dea261a6389cc10446f355bae22905a6e300806e0d11bf22b893cc25deb6827f9f24df517d407a443c5f4388eb4dbb791fe7f9be0bd0f907743f54921724e8b58a1200b8cd834c0429f717397fcdffc5313b1d7b4b492e9439daa", 0xa9}, {&(0x7f0000010840)="c40a462d00b23478884fc9f426f180ad405322eeccf422f324543626a2", 0x1d}], 0x5, &(0x7f0000011000)=[@rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, r5]}}, @rights={{0x28, 0x1, 0x1, [r2, r4, r0, r6, r2, r0]}}, @rights={{0x2c, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4, r7, r4]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}], 0x98, 0x4000080}}], 0x5, 0x44810) executing program 0: syz_mount_image$fuse(0x0, 0x0, 0x80400, &(0x7f0000002dc0)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x0, 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x7fffffff, 0x0, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x102) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) socket$inet(0x2, 0x2, 0x1) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth0_to_batadv\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0x13, 0x7, 0x9, 0xffffffff}}) (async) fsopen(&(0x7f0000000100)='gfs2\x00', 0x1) (async) socket$inet(0x2, 0x4000000000000001, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0x8, 0xfa04, 0xc8, 0x6c02, 0x1f8, 0x194, 0x194, 0x1f8, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x7}, {0xffffffffffffffff}], 0x1, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000017c0)=ANY=[@ANYBLOB="b80100001700010025bd700000000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb000000000000000000000000ff0100000000000000000000000000014e210000000200"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000007903173f00000000aaff010000000000000000fffffffa000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000200000000000000feffffffffffffff000000000000000000000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000000000000000ffdfffffffffffff080000000000000002000000000000000200000200000000f9ffffff38000000000000000000000044000500fc010000000000000000000000000001000004d332000000020000002001000000000000000000000000000004350800050206000700000001000000080000002c00130020010000000000000000000000000002ac1e090100000000000000000000000000000000000000001f0008"], 0x1b8}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) setrlimit(0xb, 0x0) (async) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000040)) executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="180000001e0001002abd7000fedbdf2507001480e0fadd578a76004ce6d2058c78dc8db33e86d3aadceca5d6743a48bc49916aa3d0d34ce73a4112edf38250dda064fe50397de53d4c84a12491567990af7f26f89f6cbb07586df5"], 0x18}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000010001fff000000000100000000000000", @ANYRES32=r5, @ANYRES8=r2, @ANYRES32=r0, @ANYRESOCT=r2], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000340)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000380), 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f0000000680), 0x4) syz_open_dev$radio(0x0, 0x0, 0x2) r7 = syz_io_uring_setup(0xf01, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r7, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000780)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) writev(r8, &(0x7f00000007c0)=[{&(0x7f0000000800)="01", 0x1}], 0x1) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f00000003c0)={[0x7ff]}, 0x0, 0x0, 0x8) r9 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1c280, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r9, 0x8010500c, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001000)=@newchain={0x64, 0x64, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xe, 0x3}, {0xfff1, 0x6}, {0xb, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff]}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x20}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @random="be4fe094fd0f"}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x80}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRESDEC, @ANYBLOB="000000008900000008000300", @ANYRES32=r10, @ANYBLOB="18001d801400008006000500480000000500090000000000"], 0x34}, 0x1, 0x0, 0x0, 0x220288d1}, 0x0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000540), 0x0, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x4, 0xd, 0x4, 0x0, 0x2}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x6000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="e00100000000000000000000aa06000032548343f47d9738c9654a818cfbf090a2814af003c9fb6fec13787cf0a0c011dd0bf2182916b01789"], 0x1e0}}], 0x1, 0x4000004) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4ea2, 0x0, @remote, 0x3}, 0x1c) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r2, &(0x7f0000000ac0)={0x0, 0x953a, &(0x7f0000000b00)=[{&(0x7f0000000b40)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r4 = open(&(0x7f0000000b80)='.\x00', 0x80000, 0x103) getdents(r4, &(0x7f0000000bc0)=""/184, 0xb8) getdents(r4, &(0x7f0000000c80)=""/184, 0xb8) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000e40)={0x24, r5, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write(r6, &(0x7f00000002c0)='nqn=testnqn,transport=rdma,traddr=172.20.20.24,trsvcid=4', 0x38) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x6000, 0x1) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000340)={0x1, 0x2}, 0x4) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000380)={0x2, 0x7}, 0x4) socket$rxrpc(0x21, 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r1 = syz_io_uring_setup(0x112, &(0x7f0000000200)={0x0, 0x5a87, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000340)='n', 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000480)) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rthdr={{0x18, 0x29, 0x39, {0x2b, 0x0, 0x2, 0xf7}}}], 0x18}, 0x200008d0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9e09000000000000000a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a42a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a175e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436c101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521b3ebb0cc52f49129b204eb99b6150e320c9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d255be1ed66d9051f22614d1f62734d6780393e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f231200743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069fbff63a06578d6d184f5de7bfb6aa800016996d536256c02294cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e7005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9c9e5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde3885b06548862de809d3dae3cccf109f7c78e8479a345e805e47dfa82caed44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1bfeb51f5c65a907f2217d5f80c580dc31b0963ff953ce09148e8dfe3a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e97c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20ab2b5baa1b07b16e81f278e54a479f1a068658e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4657b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce798c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f7c6294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b13287615b972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0590000130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80c4014ff11d9dbceba41d8dfce410333a054e82b1d050331c5bc4acb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6b93d28db8ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a82632ff3a9a48ff805202ae9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dae1028d1bc68b6336eb1a5d18f6148354df7e60a489dc543ccdee1fff9d8f8d78844f0c6a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d6410000000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2cea0d6269ffc8580a01e9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168eabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2835d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95bad8f8ed85cd5b03a7352a0fb83398566d1bc133582ce2d95636cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef47b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c32f5fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538bccd48a0325aa9b151855c800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b3145bf54a851f3c08931d4c2c32bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c929e7de4e9620000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da208e9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45a4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d50270a1deec1a6d7441d0b5b8d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656db528f81f6a9465d2c94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be1881000000000000006fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bb24ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855c5c95ef5c83b18b23517ca935a0fa1b630d70c4ca4029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17e0000815a42318151feaad37f7abf9bfa0bcac3c1934854b3f6dc6de835952ebdda297dd3b29c07c69888cf029271449e035edc8a4459705f222bda537481e66ce3c665129f9829524eca8b5bef27adde96bd3ee95da4a176deff3408da050fe8d512e5a19379b403ee11d010bf86d0af4ac5c2057709b18cff438d0d58810670b222dfeb317bb935f925d2a070e68a701fd4316a677bb513c9476f25969097c165ca1705473341ea03f259dc5bee6a2d2e05176965192941abfae36b3a1e30784e6532c96ab971c5706a88b6f66860e31098b5b788788aad67507ffab2184a950065c1337259b63135fa060fc5ce3e4f6cdfb64f40e1a90351a01fd3d70f9dde03c335a931e58b8570316590ae22c7de567260849049e963ee15db15f592abb24111a219f0d128ceaf19764d92755abc9c313f65e7a220e64bb0d7139ce59da85bc710cea0c6553b336763bd3e39c2374b86885a32cdfae817196a7850257ead09f3e30e676b51062bb9000000000000000000000000000000000000000000000000000000aefb12dd3507c8dd24490bf9de062cd166a4dad6b9f2e53bad342546e546f6dece81d53cf717bd91ad72f4da82018f43259899e53e0b69a92180f1345699045fd23689e66d21d13be1a2d20eb1ce23eda84a63855173ca7f51d436306c"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001bc0), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r2, 0x0, 0x8, 0x0, &(0x7f0000001c80)="5c71f91b05c41355", 0x0, 0x1, 0x0, 0x1, 0x0, &(0x7f0000001cc0)='\x00', 0x0}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000001d00)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000001d40)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001d80)='smaps_rollup\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_procfs(0x0, &(0x7f0000001dc0)='net/netstat\x00') r3 = gettid() timer_create(0x0, 0x0, &(0x7f0000001e00)) ptrace$pokeuser(0x6, r3, 0x3, 0xec9c) connect$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x1, 0x2, 0x10, {0xa, 0x4e23, 0x39, @empty, 0xfffff200}}, 0x24) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000080)=0x2014, 0x4) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000001e80)={0x1, "ac74841675e4aedde850ee5b2910d1e16305d9a7f9c8a7076ece23ddca3c191d", 0x3, 0x21c, 0xff, 0x200000, 0x4}) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e23, 0x180000, @dev={0xfe, 0x80, '\x00', 0x43}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="280000000000000029000000040000002b010000000000000108000000000000000000000000000024000000000000002900"], 0x50}, 0x340880c4) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_PARM(r5, 0xc0cc5616, &(0x7f0000000380)={0x0, @capture={0x0, 0x0, {0xfffffffa, 0x3}, 0x8, 0x1}}) executing program 2: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80102, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r5, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c0040}, 0x408c4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) program did not crash bisect: testing without sub-chunk 3/3 testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 30, 16, 4, 21, 22, 19, 11, 19, 2] detailed listing: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}}, 0x0) executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x40) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000680)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x8000, 0x0) socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000700)={0x2, 0x0, @local}, 0x10) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000780)={0x3, 0x2, 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r4, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000040000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000100000000000000440005000000000000000000000000000000000000000002320000000a000000fc010000000000000000000000000000000000000100"/180], 0xfc}}, 0x0) connect$inet(r3, &(0x7f0000000940)={0x2, 0x4, @broadcast}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000980)={0x84, @local, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000009c0)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0xa, 0xc, 0x56}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 32) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0xfd8b, 0x5}) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async, rerun: 32) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) (rerun: 32) write$dsp(r1, &(0x7f0000000180)="5cba91a4", 0xffffffd9) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffff9]}, 0x0, 0x8) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) (async, rerun: 64) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000240)=0x1) (rerun: 64) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x9) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0xbc}, 0x1, 0x0, 0x0, 0xc0}, 0x0) executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) executing program 2: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000001c0)='1', 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x1001}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x1001}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f00000003c0), 0xc, &(0x7f0000000400)={&(0x7f0000000440)=@setlink={0x20, 0x13, 0x5, 0x70bc95, 0x0, {0x0, 0x0, 0x0, r4, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f00000004c0), 0xc, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001400055996bc70000000000002180000", @ANYRES32=r4, @ANYBLOB="080002000a010101080001000a010101"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={&(0x7f00000005c0), 0xc, &(0x7f0000000600)={&(0x7f0000000640)=@setlink={0x20, 0x13, 0x5, 0x70bc97, 0x0, {0x0, 0x0, 0x0, r5, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={&(0x7f00000006c0), 0xc, &(0x7f0000000700)={&(0x7f0000000a80)=ANY=[@ANYBLOB="280000001400050498bc70000000000002180000", @ANYRES32=r5, @ANYBLOB="08000200640131b80800010064810101126c221e0f9d94889911eb8bd4813885d93c7b21c7f94b0d239c7f879c1cb410cb588917489de623307e1ee7960d8fe7781828c6f70582bc392595a5910bdac2b63cad8539fff47113cfa5b6e6663d95543f304fbbb6e7b275ae2e49df6678a321099d12c3eb6af08fa7f5fcf2f6079184ec63a86bf375d37eae4cd953fb70953b09d58b9b528c12a87aeef07e68ffddb4c94f0a20af5d35934c90c351eba1cb0c56bd7151e58689404be9db1b326a39f73c74c69b0f0b39cc3aff5eca49f97459c597ff1bc1c33450"], 0x28}}, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000000)={0x3, 0x5}, 0x0) fsopen(&(0x7f0000000040)='mqueue\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)={0x110, 0x26, 0x301, 0x270bd1d, 0x25dfdbfa, {0x1}, [@nested={0xfc, 0x131, 0x0, 0x1, [@typed={0xf5, 0x65, 0x0, 0x0, @str='}&/\x00\x847o\x8a\xad6[\xab\xd2\xa0}=\xde8S[\x89\xa0\xc1\x04\xa4\x190\xcb\x92\xfe|\xcf0\xd3\xbd\xa81\xd0\x8e\x0f\x12\x1ba\xe2`O\x14 \xe48\t\xdb\xdd\x92\xfd\xbe\n\xdd\xa7~\"\x8e\xbe\xc0\x1d\x1cv\xb4\x02K6\xbb\xd9\b{\xb5\x10\xb8e#{F0(\xec\x8b\x1d#\x8c\xde\x12\t\x18\x1e\xa2*\x98~@\xe0\x83\x9c\x9ea\x87f\xc9\xe5\x80+\xc8xZ=\xf0\x8b\x8c\x8bdn\x18_\xca\x139\xb0\x12\n\xd6oK5\xc2\xads@\xcdX\xa3\x80\xf3\x7f\xba\v\x83l\xebq\x89\xa6\tS\xdd:J\x88\x96O\xecj\xcc\\\xff\xa4\xf6V\xf4\x98\x14w,\xb1o\xd7\xa9\tNR\xf9\xee.Gn\xc5\xea\x94\x16\xf4Y4}\x84\x12-r\xd5\t\x81\x00gMOvM\xf8\x17\xc6K\x9b\xb9\xcdY\xbeI\xa6e$\x11[\x90\x96\x84#\x9a@\x02\x00\xd8\x06\xd0t\x89\xe0 z\xf2\x98C\x03\xa6'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000042}, 0x48c0) fchdir(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000a00)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x65, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010102, @private=0xa010102}, {0x4e21, 0x4e20, 0xc, 0x0, @opaque='EFGH'}}}, 0x20) write$tun(r1, &(0x7f0000000a40)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @rand_addr=0x64010102}, {0x4e20, 0x4e21, 0xc, 0x0, @opaque='IJKL'}}}, 0x20) executing program 4: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000001c0)='1', 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x1001}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x1001}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f00000003c0), 0xc, &(0x7f0000000400)={&(0x7f0000000440)=@setlink={0x20, 0x13, 0x5, 0x70bc95, 0x0, {0x0, 0x0, 0x0, r4, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f00000004c0), 0xc, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001400055996bc70000000000002180000", @ANYRES32=r4, @ANYBLOB="080002000a010101080001000a010101"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={&(0x7f00000005c0), 0xc, &(0x7f0000000600)={&(0x7f0000000640)=@setlink={0x20, 0x13, 0x5, 0x70bc97, 0x0, {0x0, 0x0, 0x0, r5, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={&(0x7f00000006c0), 0xc, &(0x7f0000000700)={&(0x7f0000000a80)=ANY=[@ANYBLOB="280000001400050498bc70000000000002180000", @ANYRES32=r5, @ANYBLOB="08000200640131b80800010064810101126c221e0f9d94889911eb8bd4813885d93c7b21c7f94b0d239c7f879c1cb410cb588917489de623307e1ee7960d8fe7781828c6f70582bc392595a5910bdac2b63cad8539fff47113cfa5b6e6663d95543f304fbbb6e7b275ae2e49df6678a321099d12c3eb6af08fa7f5fcf2f6079184ec63a86bf375d37eae4cd953fb70953b09d58b9b528c12a87aeef07e68ffddb4c94f0a20af5d35934c90c351eba1cb0c56bd7151e58689404be9db1b326a39f73c74c69b0f0b39cc3aff5eca49f97459c597ff1bc1c33450"], 0x28}}, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000000)={0x3, 0x5}, 0x0) r6 = fsopen(&(0x7f0000000040)='mqueue\x00', 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)={0x110, 0x26, 0x301, 0x270bd1d, 0x25dfdbfa, {0x1}, [@nested={0xfc, 0x131, 0x0, 0x1, [@typed={0xf5, 0x65, 0x0, 0x0, @str='}&/\x00\x847o\x8a\xad6[\xab\xd2\xa0}=\xde8S[\x89\xa0\xc1\x04\xa4\x190\xcb\x92\xfe|\xcf0\xd3\xbd\xa81\xd0\x8e\x0f\x12\x1ba\xe2`O\x14 \xe48\t\xdb\xdd\x92\xfd\xbe\n\xdd\xa7~\"\x8e\xbe\xc0\x1d\x1cv\xb4\x02K6\xbb\xd9\b{\xb5\x10\xb8e#{F0(\xec\x8b\x1d#\x8c\xde\x12\t\x18\x1e\xa2*\x98~@\xe0\x83\x9c\x9ea\x87f\xc9\xe5\x80+\xc8xZ=\xf0\x8b\x8c\x8bdn\x18_\xca\x139\xb0\x12\n\xd6oK5\xc2\xads@\xcdX\xa3\x80\xf3\x7f\xba\v\x83l\xebq\x89\xa6\tS\xdd:J\x88\x96O\xecj\xcc\\\xff\xa4\xf6V\xf4\x98\x14w,\xb1o\xd7\xa9\tNR\xf9\xee.Gn\xc5\xea\x94\x16\xf4Y4}\x84\x12-r\xd5\t\x81\x00gMOvM\xf8\x17\xc6K\x9b\xb9\xcdY\xbeI\xa6e$\x11[\x90\x96\x84#\x9a@\x02\x00\xd8\x06\xd0t\x89\xe0 z\xf2\x98C\x03\xa6'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000042}, 0x48c0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000a00)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x65, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010102, @private=0xa010102}, {0x4e21, 0x4e20, 0xc, 0x0, @opaque='EFGH'}}}, 0x20) write$tun(r1, &(0x7f0000000a40)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @rand_addr=0x64010102}, {0x4e20, 0x4e21, 0xc, 0x0, @opaque='IJKL'}}}, 0x20) executing program 3: r0 = syz_open_dev$video(&(0x7f0000000300), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000340)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='mode\x00', &(0x7f0000000280)='7', 0x0) statx(r5, &(0x7f00000002c0)='./file0\x00', 0x100, 0x4, &(0x7f0000000400)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x260048f4}, 0x20004810) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x3}, @IFLA_GTP_FD0={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x2000c000) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_ublk_setup_io_uring(0x1f, 0x0, 0x0, 0x0, &(0x7f0000000280)) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg$inet(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="17172e3a1c9579fda62f4a", 0xb}, {&(0x7f00000000c0)="936e1e294c", 0x5}], 0x2}}], 0x1, 0x20810) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000300)={0xa, @pix_mp={0xeaac, 0x0, 0x34565348, 0x5, 0x9, [{0x9, 0x200}, {0x1ff, 0x200}, {0x453, 0x3}, {0x5, 0x3}, {0x8, 0xa}, {0xfffffffc, 0x6}, {0x1ff, 0xeb03}, {0x6, 0x7def}], 0x8, 0x78, 0x1, 0x2, 0x6}}) syz_ublk_setup_queues(r1, 0x0, 0x0, 0x0, 0x7ffffffe, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)={0x2c, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0x3a, 0x0, 0x0, @u64=0x7fff8}]}, 0x2c}], 0x1}, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x5) ioctl$KVM_CAP_X86_DISABLE_EXITS(r5, 0x4068aea3, &(0x7f0000000400)={0x8f, 0x0, 0x2}) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}}, 0x0) program did not crash bisect: split chunks (needed=true): <10>, <10> bisect: split chunk #0 of len 10 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [22, 19, 11, 19, 2, 14, 18, 21, 30, 4, 26, 27, 18, 16, 11] detailed listing: executing program 4: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000001c0)='1', 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x1001}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x1001}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f00000003c0), 0xc, &(0x7f0000000400)={&(0x7f0000000440)=@setlink={0x20, 0x13, 0x5, 0x70bc95, 0x0, {0x0, 0x0, 0x0, r4, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f00000004c0), 0xc, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001400055996bc70000000000002180000", @ANYRES32=r4, @ANYBLOB="080002000a010101080001000a010101"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={&(0x7f00000005c0), 0xc, &(0x7f0000000600)={&(0x7f0000000640)=@setlink={0x20, 0x13, 0x5, 0x70bc97, 0x0, {0x0, 0x0, 0x0, r5, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={&(0x7f00000006c0), 0xc, &(0x7f0000000700)={&(0x7f0000000a80)=ANY=[@ANYBLOB="280000001400050498bc70000000000002180000", @ANYRES32=r5, @ANYBLOB="08000200640131b80800010064810101126c221e0f9d94889911eb8bd4813885d93c7b21c7f94b0d239c7f879c1cb410cb588917489de623307e1ee7960d8fe7781828c6f70582bc392595a5910bdac2b63cad8539fff47113cfa5b6e6663d95543f304fbbb6e7b275ae2e49df6678a321099d12c3eb6af08fa7f5fcf2f6079184ec63a86bf375d37eae4cd953fb70953b09d58b9b528c12a87aeef07e68ffddb4c94f0a20af5d35934c90c351eba1cb0c56bd7151e58689404be9db1b326a39f73c74c69b0f0b39cc3aff5eca49f97459c597ff1bc1c33450"], 0x28}}, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000000)={0x3, 0x5}, 0x0) r6 = fsopen(&(0x7f0000000040)='mqueue\x00', 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)={0x110, 0x26, 0x301, 0x270bd1d, 0x25dfdbfa, {0x1}, [@nested={0xfc, 0x131, 0x0, 0x1, [@typed={0xf5, 0x65, 0x0, 0x0, @str='}&/\x00\x847o\x8a\xad6[\xab\xd2\xa0}=\xde8S[\x89\xa0\xc1\x04\xa4\x190\xcb\x92\xfe|\xcf0\xd3\xbd\xa81\xd0\x8e\x0f\x12\x1ba\xe2`O\x14 \xe48\t\xdb\xdd\x92\xfd\xbe\n\xdd\xa7~\"\x8e\xbe\xc0\x1d\x1cv\xb4\x02K6\xbb\xd9\b{\xb5\x10\xb8e#{F0(\xec\x8b\x1d#\x8c\xde\x12\t\x18\x1e\xa2*\x98~@\xe0\x83\x9c\x9ea\x87f\xc9\xe5\x80+\xc8xZ=\xf0\x8b\x8c\x8bdn\x18_\xca\x139\xb0\x12\n\xd6oK5\xc2\xads@\xcdX\xa3\x80\xf3\x7f\xba\v\x83l\xebq\x89\xa6\tS\xdd:J\x88\x96O\xecj\xcc\\\xff\xa4\xf6V\xf4\x98\x14w,\xb1o\xd7\xa9\tNR\xf9\xee.Gn\xc5\xea\x94\x16\xf4Y4}\x84\x12-r\xd5\t\x81\x00gMOvM\xf8\x17\xc6K\x9b\xb9\xcdY\xbeI\xa6e$\x11[\x90\x96\x84#\x9a@\x02\x00\xd8\x06\xd0t\x89\xe0 z\xf2\x98C\x03\xa6'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000042}, 0x48c0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000a00)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x65, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010102, @private=0xa010102}, {0x4e21, 0x4e20, 0xc, 0x0, @opaque='EFGH'}}}, 0x20) write$tun(r1, &(0x7f0000000a40)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @rand_addr=0x64010102}, {0x4e20, 0x4e21, 0xc, 0x0, @opaque='IJKL'}}}, 0x20) executing program 3: r0 = syz_open_dev$video(&(0x7f0000000300), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000340)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='mode\x00', &(0x7f0000000280)='7', 0x0) statx(r5, &(0x7f00000002c0)='./file0\x00', 0x100, 0x4, &(0x7f0000000400)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x260048f4}, 0x20004810) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x3}, @IFLA_GTP_FD0={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x2000c000) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_ublk_setup_io_uring(0x1f, 0x0, 0x0, 0x0, &(0x7f0000000280)) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg$inet(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="17172e3a1c9579fda62f4a", 0xb}, {&(0x7f00000000c0)="936e1e294c", 0x5}], 0x2}}], 0x1, 0x20810) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000300)={0xa, @pix_mp={0xeaac, 0x0, 0x34565348, 0x5, 0x9, [{0x9, 0x200}, {0x1ff, 0x200}, {0x453, 0x3}, {0x5, 0x3}, {0x8, 0xa}, {0xfffffffc, 0x6}, {0x1ff, 0xeb03}, {0x6, 0x7def}], 0x8, 0x78, 0x1, 0x2, 0x6}}) syz_ublk_setup_queues(r1, 0x0, 0x0, 0x0, 0x7ffffffe, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)={0x2c, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0x3a, 0x0, 0x0, @u64=0x7fff8}]}, 0x2c}], 0x1}, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x5) ioctl$KVM_CAP_X86_DISABLE_EXITS(r5, 0x4068aea3, &(0x7f0000000400)={0x8f, 0x0, 0x2}) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}}, 0x0) executing program 1: r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x5b05b05b05b0660, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000040000901feffffff0000000004710000040042800c0001800600060008"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000400)={0x20, 0x35}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000600), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc02864cf, &(0x7f0000000680)) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000500)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000540)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac2(0x8d4ffd4123e09dcf, 0xae, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x499, 0x1038, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c, 0x3, 0x1, 0x9, 0x0, 0x3, {0x8, 0xb, 0x0, 0x2, 0x1, 0x3, 0x20, 0x40}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7f, 0x1, 0x1a, 0x7f}, [@effect_unit={0x11, 0x24, 0x7, 0x4, 0x4, 0x4, [0x2, 0x0, 0x1, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x3f7, 0x0, 0x3, 0x90, {0x8, 0x25, 0x1, 0x80, 0x3, 0x6, 0x202}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x6, 0x2, 0xf3, 0x6, "89", "bfe1a4"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9e, 0x2, 0x4, 0x5, "b941fde7b00423f9"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x1, 0x2, 0x8, {0x8, 0x25, 0x1, 0x80, 0x0, 0x6, 0x8}}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x81, 0x4, 0x4, 0x8}, 0x53, &(0x7f0000000140)={0x5, 0xf, 0x53, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x3b, 0x3, 0x5, 0xf00f, 0xeff5, [0xc00f, 0xff3fc0, 0x1feff30]}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x7, 0x2, 0x4}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x7, 0xf00f, 0x62, [0xff0030, 0x30, 0x0, 0xff0000]}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x8, 0xf00, 0x1000, [0xffc0cf]}]}, 0x5, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1c0a}}]}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000007c0)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000840)='ns\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0x2a102211, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r4, 0x802c550a, &(0x7f0000000200)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x1, 0x2, 0x6dd4, 0x1, 0x3, 0x0}) setpgid(r3, r3) setpgid(0x0, r3) wait4(r3, 0x0, 0x2, 0x0) capget(&(0x7f0000000080)={0x19980330, r3}, &(0x7f0000000180)={0x6, 0x8, 0x200, 0x1, 0xcf9, 0x7fe00000}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x128}, 0x0) getdents64(r0, 0x0, 0x0) r5 = syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, &(0x7f0000010980), 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000010bc0)={0x0, 0x0, &(0x7f0000010c00)={&(0x7f0000010c40)=ANY=[@ANYBLOB="14000000100001000000000000000400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40540700002c0000000b0a01030100000000000000020900010073797a310091dbb5961b1da5ca61a27f0000000c0010400000000000000002140000001100010000"], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000010d00)={'dummy0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000010d40)={0x0, 0x0, &(0x7f0000010d80)={&(0x7f0000010dc0)=ANY=[@ANYBLOB="2c0000001400b59527bd7000ffdbdf250a4000c8", @ANYRES32=r8, @ANYBLOB="140002"], 0x2c}}, 0x400c0c0) sendmmsg$unix(r1, &(0x7f00000110c0)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000002c0)="a82acd3471c560f6a44a5d702682195e56c5fb4a9c55af6d61216a18de5927f99ca264b6c55fdd73523f336343d1ba9d7ac023026ff672d3ed51af1f3d87625a", 0x40}], 0x1}}, {{&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000480)="c667dfd0a217bcbab3b6e0284a12aa81012a517260e830e6bba2bd6b6310778645b03bd1809a137854a0175376d21f464c65ce6f34027295fb03f494fb48487846b939f77d4fad4bd5c0760c701fe2b6f26f98a75d08215a34340a8e51dea174133dfadced10da419e9135354f923ee1fb0966ca84731acfab56b6e663ea2e9729d94e93556ad1ffd97cb34a97349580f6858b3925ba7fa5", 0x98}, {&(0x7f0000000600)="e45aa5189007ebcb18bfaf64323a2e73f13bf073467a2afe5773f4f8a945e7f925ce76a8b23d0ced56ca6942c44d1263b54a7a43d9c90259ba61621a7401d407f0ec0cff05fd795d3d58616c7eca933e48bed82352d6288f498c07db48c99b2f7598529978ed5b4e44974211bf92e903b2397fc7f6fb7977a7dfdf6869aa6af09fc5e45cc684a2ef6661e581c4b1f7ed47b963717f44f6eccb303b1f39b9657c7c12492d4346b20d1f0f7cd8a225bb6cdd34218e7fc11f", 0xb7}], 0x2, &(0x7f00000093c0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r4, 0xffffffffffffffff, r0, r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, r4, r0, r0, r2, r2]}}], 0xd0, 0xc8d0}}, {{&(0x7f00000094c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000009b40)=[{&(0x7f0000009540)}, {0x0}, {&(0x7f00000096c0)="440b8dded3ddb88872add9b99a343b472aec2d", 0x13}, {&(0x7f0000009700)="08d000ad89019e377fe7f0f182cbc4d726434b46f931f4633373c697e0f4f9a1d3a5d71a74f1378f514dffb21570dc4da6fa1a84fa96d4cac59a6305d28f8f939e2cecc0b5d244200cf6b7f1587179559e14ce941e6e3995cbd99035ae196c8c897d7fc77b899cef5c8a87eb0715459708594d86190afe8c75543c1f2021f051098f0fca3e8604f3c7d8942369906e973cfa04f0d675fb", 0x97}, {&(0x7f00000097c0)="925dfd5509a2d5deefe10613f65c8b6f0766c377769e16a9dd97e346da4bed0fbfc82131514ad1647e5bb718ec4eac1427779308e39bb9b3863271b11ec5fa9d743d1a7c2b945685c25345aafb19947c52dc7803c7", 0x55}, {&(0x7f0000009840)="d39e67dd45e2dd08aab9412bff284cde3d174e4d41b3c59cdc20e446ea891b9597f66ca9", 0x24}, {&(0x7f00000098c0)="9b617591498b3fe9c4c766662d8bd91d95f68cd3f36c18fa38068b35ef18a4a4370a1cc615d73be0ddaa9001734b9e316b85c8f7dddd3a26cbf7e10f88ad2aa8b5332e56eb95cb8bba5d4d7e18225ff33f51ecbd26621ae6385388718de14eb011b6f91df5caf42643d01c7977e88b88bb583fdd3c8892296356b75ca84fb34ba4a7efd03650bcbb2877a96aad9a69fc55887288", 0x94}, {&(0x7f0000009a40)}], 0x8, 0x0, 0x0, 0x80}}, {{&(0x7f0000009c00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000009d80)=[{&(0x7f0000009c80)="6ad534aaeb51c336f090f70394f49e8fb7b2d0eba63b127a51129da1e6aafd5e7844c73670c6997129a84b2a5ed52491c7229c72d8c78d4b60699815fe6f12074faf3206ef1ff7c66f4d2158a37907ef8d27a9efed0a1c9fce", 0x59}, {0x0}], 0x2, &(0x7f0000010500)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x60, 0x240008c4}}, {{&(0x7f0000010580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000010880)=[{&(0x7f0000010600)="de9665b62b839dbf6ba9cb30845e5e4cffe7d3bfecdbf23f3da2aa4f4b06d177cd73a95c8612ab00bb72edee6440a265339a34dfce6a843f461588e346a4f770e93d3b4df92b4b358498236e018dc7ed46ab893d6f29f8ed52c937c911", 0x5d}, {&(0x7f0000010680)="72fc2c20b81e651d0b1241dfd53fa6501b793c5faa3739", 0x17}, {&(0x7f00000106c0)="d8856813d68a89bbd58dd9c9cf60e449be7b72f977d86e63348a1e8c186a0d1d03d6d4eb818c14596397145cfb9190fe2317a1f8746ed0027120575a0c54d4bb0c3554672f3677e280ef13904f99d73b651682a9688218cb8c23cce0891f81397b1fd5c5c6071465ce297c6fd86411e548b3d0548cd0bbb7045407d31fd2fa9a69458be35366d3a36d3cb935e13cf8aeb8ecd26b43f0bd7617cc545d75ea24bba14f04b1f3e1e2b8429e1f8cc5fa63182ee15857d5358515c809", 0xba}, {&(0x7f0000010780)="a23d75ab265aa1c0e1914ea604a3d2afb720aa81c069a60f191f2a6dd88d5cde2dbf5f6fd64e504c57b04c9439fd3e6cace8759931c221a650a3b3ea49bc731faab853981963a68150b3f4d450e25dea261a6389cc10446f355bae22905a6e300806e0d11bf22b893cc25deb6827f9f24df517d407a443c5f4388eb4dbb791fe7f9be0bd0f907743f54921724e8b58a1200b8cd834c0429f717397fcdffc5313b1d7b4b492e9439daa", 0xa9}, {&(0x7f0000010840)="c40a462d00b23478884fc9f426f180ad405322eeccf422f324543626a2", 0x1d}], 0x5, &(0x7f0000011000)=[@rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, r5]}}, @rights={{0x28, 0x1, 0x1, [r2, r4, r0, r6, r2, r0]}}, @rights={{0x2c, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4, r7, r4]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}], 0x98, 0x4000080}}], 0x5, 0x44810) executing program 0: syz_mount_image$fuse(0x0, 0x0, 0x80400, &(0x7f0000002dc0)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x0, 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x7fffffff, 0x0, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x102) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) socket$inet(0x2, 0x2, 0x1) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth0_to_batadv\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0x13, 0x7, 0x9, 0xffffffff}}) (async) fsopen(&(0x7f0000000100)='gfs2\x00', 0x1) (async) socket$inet(0x2, 0x4000000000000001, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0x8, 0xfa04, 0xc8, 0x6c02, 0x1f8, 0x194, 0x194, 0x1f8, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x7}, {0xffffffffffffffff}], 0x1, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000017c0)=ANY=[@ANYBLOB="b80100001700010025bd700000000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb000000000000000000000000ff0100000000000000000000000000014e210000000200"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000007903173f00000000aaff010000000000000000fffffffa000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000200000000000000feffffffffffffff000000000000000000000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000000000000000ffdfffffffffffff080000000000000002000000000000000200000200000000f9ffffff38000000000000000000000044000500fc010000000000000000000000000001000004d332000000020000002001000000000000000000000000000004350800050206000700000001000000080000002c00130020010000000000000000000000000002ac1e090100000000000000000000000000000000000000001f0008"], 0x1b8}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) setrlimit(0xb, 0x0) (async) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000040)) executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="180000001e0001002abd7000fedbdf2507001480e0fadd578a76004ce6d2058c78dc8db33e86d3aadceca5d6743a48bc49916aa3d0d34ce73a4112edf38250dda064fe50397de53d4c84a12491567990af7f26f89f6cbb07586df5"], 0x18}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000010001fff000000000100000000000000", @ANYRES32=r5, @ANYRES8=r2, @ANYRES32=r0, @ANYRESOCT=r2], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000340)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000380), 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f0000000680), 0x4) syz_open_dev$radio(0x0, 0x0, 0x2) r7 = syz_io_uring_setup(0xf01, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r7, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000780)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) writev(r8, &(0x7f00000007c0)=[{&(0x7f0000000800)="01", 0x1}], 0x1) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f00000003c0)={[0x7ff]}, 0x0, 0x0, 0x8) r9 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1c280, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r9, 0x8010500c, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001000)=@newchain={0x64, 0x64, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xe, 0x3}, {0xfff1, 0x6}, {0xb, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff]}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x20}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @random="be4fe094fd0f"}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x80}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRESDEC, @ANYBLOB="000000008900000008000300", @ANYRES32=r10, @ANYBLOB="18001d801400008006000500480000000500090000000000"], 0x34}, 0x1, 0x0, 0x0, 0x220288d1}, 0x0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000540), 0x0, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x4, 0xd, 0x4, 0x0, 0x2}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x6000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="e00100000000000000000000aa06000032548343f47d9738c9654a818cfbf090a2814af003c9fb6fec13787cf0a0c011dd0bf2182916b01789"], 0x1e0}}], 0x1, 0x4000004) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4ea2, 0x0, @remote, 0x3}, 0x1c) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r2, &(0x7f0000000ac0)={0x0, 0x953a, &(0x7f0000000b00)=[{&(0x7f0000000b40)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r4 = open(&(0x7f0000000b80)='.\x00', 0x80000, 0x103) getdents(r4, &(0x7f0000000bc0)=""/184, 0xb8) getdents(r4, &(0x7f0000000c80)=""/184, 0xb8) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000e40)={0x24, r5, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write(r6, &(0x7f00000002c0)='nqn=testnqn,transport=rdma,traddr=172.20.20.24,trsvcid=4', 0x38) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x6000, 0x1) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000340)={0x1, 0x2}, 0x4) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000380)={0x2, 0x7}, 0x4) socket$rxrpc(0x21, 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r1 = syz_io_uring_setup(0x112, &(0x7f0000000200)={0x0, 0x5a87, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000340)='n', 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000480)) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rthdr={{0x18, 0x29, 0x39, {0x2b, 0x0, 0x2, 0xf7}}}], 0x18}, 0x200008d0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9e09000000000000000a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a42a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a175e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436c101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521b3ebb0cc52f49129b204eb99b6150e320c9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d255be1ed66d9051f22614d1f62734d6780393e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f231200743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069fbff63a06578d6d184f5de7bfb6aa800016996d536256c02294cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e7005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9c9e5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde3885b06548862de809d3dae3cccf109f7c78e8479a345e805e47dfa82caed44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1bfeb51f5c65a907f2217d5f80c580dc31b0963ff953ce09148e8dfe3a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e97c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20ab2b5baa1b07b16e81f278e54a479f1a068658e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4657b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce798c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f7c6294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b13287615b972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0590000130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80c4014ff11d9dbceba41d8dfce410333a054e82b1d050331c5bc4acb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6b93d28db8ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a82632ff3a9a48ff805202ae9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dae1028d1bc68b6336eb1a5d18f6148354df7e60a489dc543ccdee1fff9d8f8d78844f0c6a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d6410000000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2cea0d6269ffc8580a01e9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168eabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2835d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95bad8f8ed85cd5b03a7352a0fb83398566d1bc133582ce2d95636cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef47b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c32f5fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538bccd48a0325aa9b151855c800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b3145bf54a851f3c08931d4c2c32bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c929e7de4e9620000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da208e9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45a4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d50270a1deec1a6d7441d0b5b8d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656db528f81f6a9465d2c94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be1881000000000000006fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bb24ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855c5c95ef5c83b18b23517ca935a0fa1b630d70c4ca4029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17e0000815a42318151feaad37f7abf9bfa0bcac3c1934854b3f6dc6de835952ebdda297dd3b29c07c69888cf029271449e035edc8a4459705f222bda537481e66ce3c665129f9829524eca8b5bef27adde96bd3ee95da4a176deff3408da050fe8d512e5a19379b403ee11d010bf86d0af4ac5c2057709b18cff438d0d58810670b222dfeb317bb935f925d2a070e68a701fd4316a677bb513c9476f25969097c165ca1705473341ea03f259dc5bee6a2d2e05176965192941abfae36b3a1e30784e6532c96ab971c5706a88b6f66860e31098b5b788788aad67507ffab2184a950065c1337259b63135fa060fc5ce3e4f6cdfb64f40e1a90351a01fd3d70f9dde03c335a931e58b8570316590ae22c7de567260849049e963ee15db15f592abb24111a219f0d128ceaf19764d92755abc9c313f65e7a220e64bb0d7139ce59da85bc710cea0c6553b336763bd3e39c2374b86885a32cdfae817196a7850257ead09f3e30e676b51062bb9000000000000000000000000000000000000000000000000000000aefb12dd3507c8dd24490bf9de062cd166a4dad6b9f2e53bad342546e546f6dece81d53cf717bd91ad72f4da82018f43259899e53e0b69a92180f1345699045fd23689e66d21d13be1a2d20eb1ce23eda84a63855173ca7f51d436306c"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001bc0), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r2, 0x0, 0x8, 0x0, &(0x7f0000001c80)="5c71f91b05c41355", 0x0, 0x1, 0x0, 0x1, 0x0, &(0x7f0000001cc0)='\x00', 0x0}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000001d00)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000001d40)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001d80)='smaps_rollup\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_procfs(0x0, &(0x7f0000001dc0)='net/netstat\x00') r3 = gettid() timer_create(0x0, 0x0, &(0x7f0000001e00)) ptrace$pokeuser(0x6, r3, 0x3, 0xec9c) connect$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x1, 0x2, 0x10, {0xa, 0x4e23, 0x39, @empty, 0xfffff200}}, 0x24) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000080)=0x2014, 0x4) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000001e80)={0x1, "ac74841675e4aedde850ee5b2910d1e16305d9a7f9c8a7076ece23ddca3c191d", 0x3, 0x21c, 0xff, 0x200000, 0x4}) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e23, 0x180000, @dev={0xfe, 0x80, '\x00', 0x43}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="280000000000000029000000040000002b010000000000000108000000000000000000000000000024000000000000002900"], 0x50}, 0x340880c4) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_PARM(r5, 0xc0cc5616, &(0x7f0000000380)={0x0, @capture={0x0, 0x0, {0xfffffffa, 0x3}, 0x8, 0x1}}) executing program 2: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80102, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r5, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c0040}, 0x408c4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 30, 16, 4, 21, 14, 18, 21, 30, 4, 26, 27, 18, 16, 11] detailed listing: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}}, 0x0) executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x40) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000680)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x8000, 0x0) socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000700)={0x2, 0x0, @local}, 0x10) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000780)={0x3, 0x2, 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r4, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000040000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000100000000000000440005000000000000000000000000000000000000000002320000000a000000fc010000000000000000000000000000000000000100"/180], 0xfc}}, 0x0) connect$inet(r3, &(0x7f0000000940)={0x2, 0x4, @broadcast}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000980)={0x84, @local, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000009c0)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0xa, 0xc, 0x56}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 32) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0xfd8b, 0x5}) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async, rerun: 32) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) (rerun: 32) write$dsp(r1, &(0x7f0000000180)="5cba91a4", 0xffffffd9) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffff9]}, 0x0, 0x8) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) (async, rerun: 64) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000240)=0x1) (rerun: 64) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x9) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0xbc}, 0x1, 0x0, 0x0, 0xc0}, 0x0) executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) executing program 2: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000001c0)='1', 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x1001}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x1001}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f00000003c0), 0xc, &(0x7f0000000400)={&(0x7f0000000440)=@setlink={0x20, 0x13, 0x5, 0x70bc95, 0x0, {0x0, 0x0, 0x0, r4, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f00000004c0), 0xc, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001400055996bc70000000000002180000", @ANYRES32=r4, @ANYBLOB="080002000a010101080001000a010101"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={&(0x7f00000005c0), 0xc, &(0x7f0000000600)={&(0x7f0000000640)=@setlink={0x20, 0x13, 0x5, 0x70bc97, 0x0, {0x0, 0x0, 0x0, r5, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={&(0x7f00000006c0), 0xc, &(0x7f0000000700)={&(0x7f0000000a80)=ANY=[@ANYBLOB="280000001400050498bc70000000000002180000", @ANYRES32=r5, @ANYBLOB="08000200640131b80800010064810101126c221e0f9d94889911eb8bd4813885d93c7b21c7f94b0d239c7f879c1cb410cb588917489de623307e1ee7960d8fe7781828c6f70582bc392595a5910bdac2b63cad8539fff47113cfa5b6e6663d95543f304fbbb6e7b275ae2e49df6678a321099d12c3eb6af08fa7f5fcf2f6079184ec63a86bf375d37eae4cd953fb70953b09d58b9b528c12a87aeef07e68ffddb4c94f0a20af5d35934c90c351eba1cb0c56bd7151e58689404be9db1b326a39f73c74c69b0f0b39cc3aff5eca49f97459c597ff1bc1c33450"], 0x28}}, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000000)={0x3, 0x5}, 0x0) fsopen(&(0x7f0000000040)='mqueue\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)={0x110, 0x26, 0x301, 0x270bd1d, 0x25dfdbfa, {0x1}, [@nested={0xfc, 0x131, 0x0, 0x1, [@typed={0xf5, 0x65, 0x0, 0x0, @str='}&/\x00\x847o\x8a\xad6[\xab\xd2\xa0}=\xde8S[\x89\xa0\xc1\x04\xa4\x190\xcb\x92\xfe|\xcf0\xd3\xbd\xa81\xd0\x8e\x0f\x12\x1ba\xe2`O\x14 \xe48\t\xdb\xdd\x92\xfd\xbe\n\xdd\xa7~\"\x8e\xbe\xc0\x1d\x1cv\xb4\x02K6\xbb\xd9\b{\xb5\x10\xb8e#{F0(\xec\x8b\x1d#\x8c\xde\x12\t\x18\x1e\xa2*\x98~@\xe0\x83\x9c\x9ea\x87f\xc9\xe5\x80+\xc8xZ=\xf0\x8b\x8c\x8bdn\x18_\xca\x139\xb0\x12\n\xd6oK5\xc2\xads@\xcdX\xa3\x80\xf3\x7f\xba\v\x83l\xebq\x89\xa6\tS\xdd:J\x88\x96O\xecj\xcc\\\xff\xa4\xf6V\xf4\x98\x14w,\xb1o\xd7\xa9\tNR\xf9\xee.Gn\xc5\xea\x94\x16\xf4Y4}\x84\x12-r\xd5\t\x81\x00gMOvM\xf8\x17\xc6K\x9b\xb9\xcdY\xbeI\xa6e$\x11[\x90\x96\x84#\x9a@\x02\x00\xd8\x06\xd0t\x89\xe0 z\xf2\x98C\x03\xa6'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000042}, 0x48c0) fchdir(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000a00)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x65, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010102, @private=0xa010102}, {0x4e21, 0x4e20, 0xc, 0x0, @opaque='EFGH'}}}, 0x20) write$tun(r1, &(0x7f0000000a40)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @rand_addr=0x64010102}, {0x4e20, 0x4e21, 0xc, 0x0, @opaque='IJKL'}}}, 0x20) executing program 1: r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x5b05b05b05b0660, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000040000901feffffff0000000004710000040042800c0001800600060008"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000400)={0x20, 0x35}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000600), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc02864cf, &(0x7f0000000680)) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000500)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000540)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac2(0x8d4ffd4123e09dcf, 0xae, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x499, 0x1038, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c, 0x3, 0x1, 0x9, 0x0, 0x3, {0x8, 0xb, 0x0, 0x2, 0x1, 0x3, 0x20, 0x40}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7f, 0x1, 0x1a, 0x7f}, [@effect_unit={0x11, 0x24, 0x7, 0x4, 0x4, 0x4, [0x2, 0x0, 0x1, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x3f7, 0x0, 0x3, 0x90, {0x8, 0x25, 0x1, 0x80, 0x3, 0x6, 0x202}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x6, 0x2, 0xf3, 0x6, "89", "bfe1a4"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9e, 0x2, 0x4, 0x5, "b941fde7b00423f9"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x1, 0x2, 0x8, {0x8, 0x25, 0x1, 0x80, 0x0, 0x6, 0x8}}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x81, 0x4, 0x4, 0x8}, 0x53, &(0x7f0000000140)={0x5, 0xf, 0x53, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x3b, 0x3, 0x5, 0xf00f, 0xeff5, [0xc00f, 0xff3fc0, 0x1feff30]}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x7, 0x2, 0x4}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x7, 0xf00f, 0x62, [0xff0030, 0x30, 0x0, 0xff0000]}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x8, 0xf00, 0x1000, [0xffc0cf]}]}, 0x5, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1c0a}}]}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000007c0)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000840)='ns\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0x2a102211, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r4, 0x802c550a, &(0x7f0000000200)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x1, 0x2, 0x6dd4, 0x1, 0x3, 0x0}) setpgid(r3, r3) setpgid(0x0, r3) wait4(r3, 0x0, 0x2, 0x0) capget(&(0x7f0000000080)={0x19980330, r3}, &(0x7f0000000180)={0x6, 0x8, 0x200, 0x1, 0xcf9, 0x7fe00000}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x128}, 0x0) getdents64(r0, 0x0, 0x0) r5 = syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, &(0x7f0000010980), 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000010bc0)={0x0, 0x0, &(0x7f0000010c00)={&(0x7f0000010c40)=ANY=[@ANYBLOB="14000000100001000000000000000400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40540700002c0000000b0a01030100000000000000020900010073797a310091dbb5961b1da5ca61a27f0000000c0010400000000000000002140000001100010000"], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000010d00)={'dummy0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000010d40)={0x0, 0x0, &(0x7f0000010d80)={&(0x7f0000010dc0)=ANY=[@ANYBLOB="2c0000001400b59527bd7000ffdbdf250a4000c8", @ANYRES32=r8, @ANYBLOB="140002"], 0x2c}}, 0x400c0c0) sendmmsg$unix(r1, &(0x7f00000110c0)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000002c0)="a82acd3471c560f6a44a5d702682195e56c5fb4a9c55af6d61216a18de5927f99ca264b6c55fdd73523f336343d1ba9d7ac023026ff672d3ed51af1f3d87625a", 0x40}], 0x1}}, {{&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000480)="c667dfd0a217bcbab3b6e0284a12aa81012a517260e830e6bba2bd6b6310778645b03bd1809a137854a0175376d21f464c65ce6f34027295fb03f494fb48487846b939f77d4fad4bd5c0760c701fe2b6f26f98a75d08215a34340a8e51dea174133dfadced10da419e9135354f923ee1fb0966ca84731acfab56b6e663ea2e9729d94e93556ad1ffd97cb34a97349580f6858b3925ba7fa5", 0x98}, {&(0x7f0000000600)="e45aa5189007ebcb18bfaf64323a2e73f13bf073467a2afe5773f4f8a945e7f925ce76a8b23d0ced56ca6942c44d1263b54a7a43d9c90259ba61621a7401d407f0ec0cff05fd795d3d58616c7eca933e48bed82352d6288f498c07db48c99b2f7598529978ed5b4e44974211bf92e903b2397fc7f6fb7977a7dfdf6869aa6af09fc5e45cc684a2ef6661e581c4b1f7ed47b963717f44f6eccb303b1f39b9657c7c12492d4346b20d1f0f7cd8a225bb6cdd34218e7fc11f", 0xb7}], 0x2, &(0x7f00000093c0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r4, 0xffffffffffffffff, r0, r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, r4, r0, r0, r2, r2]}}], 0xd0, 0xc8d0}}, {{&(0x7f00000094c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000009b40)=[{&(0x7f0000009540)}, {0x0}, {&(0x7f00000096c0)="440b8dded3ddb88872add9b99a343b472aec2d", 0x13}, {&(0x7f0000009700)="08d000ad89019e377fe7f0f182cbc4d726434b46f931f4633373c697e0f4f9a1d3a5d71a74f1378f514dffb21570dc4da6fa1a84fa96d4cac59a6305d28f8f939e2cecc0b5d244200cf6b7f1587179559e14ce941e6e3995cbd99035ae196c8c897d7fc77b899cef5c8a87eb0715459708594d86190afe8c75543c1f2021f051098f0fca3e8604f3c7d8942369906e973cfa04f0d675fb", 0x97}, {&(0x7f00000097c0)="925dfd5509a2d5deefe10613f65c8b6f0766c377769e16a9dd97e346da4bed0fbfc82131514ad1647e5bb718ec4eac1427779308e39bb9b3863271b11ec5fa9d743d1a7c2b945685c25345aafb19947c52dc7803c7", 0x55}, {&(0x7f0000009840)="d39e67dd45e2dd08aab9412bff284cde3d174e4d41b3c59cdc20e446ea891b9597f66ca9", 0x24}, {&(0x7f00000098c0)="9b617591498b3fe9c4c766662d8bd91d95f68cd3f36c18fa38068b35ef18a4a4370a1cc615d73be0ddaa9001734b9e316b85c8f7dddd3a26cbf7e10f88ad2aa8b5332e56eb95cb8bba5d4d7e18225ff33f51ecbd26621ae6385388718de14eb011b6f91df5caf42643d01c7977e88b88bb583fdd3c8892296356b75ca84fb34ba4a7efd03650bcbb2877a96aad9a69fc55887288", 0x94}, {&(0x7f0000009a40)}], 0x8, 0x0, 0x0, 0x80}}, {{&(0x7f0000009c00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000009d80)=[{&(0x7f0000009c80)="6ad534aaeb51c336f090f70394f49e8fb7b2d0eba63b127a51129da1e6aafd5e7844c73670c6997129a84b2a5ed52491c7229c72d8c78d4b60699815fe6f12074faf3206ef1ff7c66f4d2158a37907ef8d27a9efed0a1c9fce", 0x59}, {0x0}], 0x2, &(0x7f0000010500)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x60, 0x240008c4}}, {{&(0x7f0000010580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000010880)=[{&(0x7f0000010600)="de9665b62b839dbf6ba9cb30845e5e4cffe7d3bfecdbf23f3da2aa4f4b06d177cd73a95c8612ab00bb72edee6440a265339a34dfce6a843f461588e346a4f770e93d3b4df92b4b358498236e018dc7ed46ab893d6f29f8ed52c937c911", 0x5d}, {&(0x7f0000010680)="72fc2c20b81e651d0b1241dfd53fa6501b793c5faa3739", 0x17}, {&(0x7f00000106c0)="d8856813d68a89bbd58dd9c9cf60e449be7b72f977d86e63348a1e8c186a0d1d03d6d4eb818c14596397145cfb9190fe2317a1f8746ed0027120575a0c54d4bb0c3554672f3677e280ef13904f99d73b651682a9688218cb8c23cce0891f81397b1fd5c5c6071465ce297c6fd86411e548b3d0548cd0bbb7045407d31fd2fa9a69458be35366d3a36d3cb935e13cf8aeb8ecd26b43f0bd7617cc545d75ea24bba14f04b1f3e1e2b8429e1f8cc5fa63182ee15857d5358515c809", 0xba}, {&(0x7f0000010780)="a23d75ab265aa1c0e1914ea604a3d2afb720aa81c069a60f191f2a6dd88d5cde2dbf5f6fd64e504c57b04c9439fd3e6cace8759931c221a650a3b3ea49bc731faab853981963a68150b3f4d450e25dea261a6389cc10446f355bae22905a6e300806e0d11bf22b893cc25deb6827f9f24df517d407a443c5f4388eb4dbb791fe7f9be0bd0f907743f54921724e8b58a1200b8cd834c0429f717397fcdffc5313b1d7b4b492e9439daa", 0xa9}, {&(0x7f0000010840)="c40a462d00b23478884fc9f426f180ad405322eeccf422f324543626a2", 0x1d}], 0x5, &(0x7f0000011000)=[@rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, r5]}}, @rights={{0x28, 0x1, 0x1, [r2, r4, r0, r6, r2, r0]}}, @rights={{0x2c, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4, r7, r4]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}], 0x98, 0x4000080}}], 0x5, 0x44810) executing program 0: syz_mount_image$fuse(0x0, 0x0, 0x80400, &(0x7f0000002dc0)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x0, 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x7fffffff, 0x0, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x102) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) socket$inet(0x2, 0x2, 0x1) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth0_to_batadv\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0x13, 0x7, 0x9, 0xffffffff}}) (async) fsopen(&(0x7f0000000100)='gfs2\x00', 0x1) (async) socket$inet(0x2, 0x4000000000000001, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0x8, 0xfa04, 0xc8, 0x6c02, 0x1f8, 0x194, 0x194, 0x1f8, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x7}, {0xffffffffffffffff}], 0x1, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000017c0)=ANY=[@ANYBLOB="b80100001700010025bd700000000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb000000000000000000000000ff0100000000000000000000000000014e210000000200"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000007903173f00000000aaff010000000000000000fffffffa000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000200000000000000feffffffffffffff000000000000000000000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000000000000000ffdfffffffffffff080000000000000002000000000000000200000200000000f9ffffff38000000000000000000000044000500fc010000000000000000000000000001000004d332000000020000002001000000000000000000000000000004350800050206000700000001000000080000002c00130020010000000000000000000000000002ac1e090100000000000000000000000000000000000000001f0008"], 0x1b8}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) setrlimit(0xb, 0x0) (async) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000040)) executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="180000001e0001002abd7000fedbdf2507001480e0fadd578a76004ce6d2058c78dc8db33e86d3aadceca5d6743a48bc49916aa3d0d34ce73a4112edf38250dda064fe50397de53d4c84a12491567990af7f26f89f6cbb07586df5"], 0x18}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000010001fff000000000100000000000000", @ANYRES32=r5, @ANYRES8=r2, @ANYRES32=r0, @ANYRESOCT=r2], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000340)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000380), 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f0000000680), 0x4) syz_open_dev$radio(0x0, 0x0, 0x2) r7 = syz_io_uring_setup(0xf01, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r7, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000780)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) writev(r8, &(0x7f00000007c0)=[{&(0x7f0000000800)="01", 0x1}], 0x1) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f00000003c0)={[0x7ff]}, 0x0, 0x0, 0x8) r9 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1c280, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r9, 0x8010500c, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001000)=@newchain={0x64, 0x64, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xe, 0x3}, {0xfff1, 0x6}, {0xb, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff]}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x20}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @random="be4fe094fd0f"}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x80}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRESDEC, @ANYBLOB="000000008900000008000300", @ANYRES32=r10, @ANYBLOB="18001d801400008006000500480000000500090000000000"], 0x34}, 0x1, 0x0, 0x0, 0x220288d1}, 0x0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000540), 0x0, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x4, 0xd, 0x4, 0x0, 0x2}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x6000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="e00100000000000000000000aa06000032548343f47d9738c9654a818cfbf090a2814af003c9fb6fec13787cf0a0c011dd0bf2182916b01789"], 0x1e0}}], 0x1, 0x4000004) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4ea2, 0x0, @remote, 0x3}, 0x1c) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r2, &(0x7f0000000ac0)={0x0, 0x953a, &(0x7f0000000b00)=[{&(0x7f0000000b40)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r4 = open(&(0x7f0000000b80)='.\x00', 0x80000, 0x103) getdents(r4, &(0x7f0000000bc0)=""/184, 0xb8) getdents(r4, &(0x7f0000000c80)=""/184, 0xb8) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000e40)={0x24, r5, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write(r6, &(0x7f00000002c0)='nqn=testnqn,transport=rdma,traddr=172.20.20.24,trsvcid=4', 0x38) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x6000, 0x1) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000340)={0x1, 0x2}, 0x4) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000380)={0x2, 0x7}, 0x4) socket$rxrpc(0x21, 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r1 = syz_io_uring_setup(0x112, &(0x7f0000000200)={0x0, 0x5a87, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000340)='n', 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000480)) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rthdr={{0x18, 0x29, 0x39, {0x2b, 0x0, 0x2, 0xf7}}}], 0x18}, 0x200008d0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001bc0), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r2, 0x0, 0x8, 0x0, &(0x7f0000001c80)="5c71f91b05c41355", 0x0, 0x1, 0x0, 0x1, 0x0, &(0x7f0000001cc0)='\x00', 0x0}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000001d00)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000001d40)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001d80)='smaps_rollup\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_procfs(0x0, &(0x7f0000001dc0)='net/netstat\x00') r3 = gettid() timer_create(0x0, 0x0, &(0x7f0000001e00)) ptrace$pokeuser(0x6, r3, 0x3, 0xec9c) connect$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x1, 0x2, 0x10, {0xa, 0x4e23, 0x39, @empty, 0xfffff200}}, 0x24) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000080)=0x2014, 0x4) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000001e80)={0x1, "ac74841675e4aedde850ee5b2910d1e16305d9a7f9c8a7076ece23ddca3c191d", 0x3, 0x21c, 0xff, 0x200000, 0x4}) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e23, 0x180000, @dev={0xfe, 0x80, '\x00', 0x43}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="280000000000000029000000040000002b010000000000000108000000000000000000000000000024000000000000002900"], 0x50}, 0x340880c4) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_PARM(r5, 0xc0cc5616, &(0x7f0000000380)={0x0, @capture={0x0, 0x0, {0xfffffffa, 0x3}, 0x8, 0x1}}) executing program 2: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80102, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r5, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c0040}, 0x408c4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) program crashed: WARNING in xfrm_output_resume bisect: the chunk can be dropped bisect: split chunk #1 of len 10 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 30, 16, 4, 21, 26, 27, 18, 16, 11] detailed listing: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}}, 0x0) executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x40) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000680)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x8000, 0x0) socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000700)={0x2, 0x0, @local}, 0x10) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000780)={0x3, 0x2, 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r4, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000040000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000100000000000000440005000000000000000000000000000000000000000002320000000a000000fc010000000000000000000000000000000000000100"/180], 0xfc}}, 0x0) connect$inet(r3, &(0x7f0000000940)={0x2, 0x4, @broadcast}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000980)={0x84, @local, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000009c0)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0xa, 0xc, 0x56}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 32) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0xfd8b, 0x5}) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async, rerun: 32) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) (rerun: 32) write$dsp(r1, &(0x7f0000000180)="5cba91a4", 0xffffffd9) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffff9]}, 0x0, 0x8) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) (async, rerun: 64) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000240)=0x1) (rerun: 64) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x9) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0xbc}, 0x1, 0x0, 0x0, 0xc0}, 0x0) executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) executing program 2: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000001c0)='1', 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x1001}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x1001}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f00000003c0), 0xc, &(0x7f0000000400)={&(0x7f0000000440)=@setlink={0x20, 0x13, 0x5, 0x70bc95, 0x0, {0x0, 0x0, 0x0, r4, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f00000004c0), 0xc, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001400055996bc70000000000002180000", @ANYRES32=r4, @ANYBLOB="080002000a010101080001000a010101"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={&(0x7f00000005c0), 0xc, &(0x7f0000000600)={&(0x7f0000000640)=@setlink={0x20, 0x13, 0x5, 0x70bc97, 0x0, {0x0, 0x0, 0x0, r5, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={&(0x7f00000006c0), 0xc, &(0x7f0000000700)={&(0x7f0000000a80)=ANY=[@ANYBLOB="280000001400050498bc70000000000002180000", @ANYRES32=r5, @ANYBLOB="08000200640131b80800010064810101126c221e0f9d94889911eb8bd4813885d93c7b21c7f94b0d239c7f879c1cb410cb588917489de623307e1ee7960d8fe7781828c6f70582bc392595a5910bdac2b63cad8539fff47113cfa5b6e6663d95543f304fbbb6e7b275ae2e49df6678a321099d12c3eb6af08fa7f5fcf2f6079184ec63a86bf375d37eae4cd953fb70953b09d58b9b528c12a87aeef07e68ffddb4c94f0a20af5d35934c90c351eba1cb0c56bd7151e58689404be9db1b326a39f73c74c69b0f0b39cc3aff5eca49f97459c597ff1bc1c33450"], 0x28}}, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000000)={0x3, 0x5}, 0x0) fsopen(&(0x7f0000000040)='mqueue\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)={0x110, 0x26, 0x301, 0x270bd1d, 0x25dfdbfa, {0x1}, [@nested={0xfc, 0x131, 0x0, 0x1, [@typed={0xf5, 0x65, 0x0, 0x0, @str='}&/\x00\x847o\x8a\xad6[\xab\xd2\xa0}=\xde8S[\x89\xa0\xc1\x04\xa4\x190\xcb\x92\xfe|\xcf0\xd3\xbd\xa81\xd0\x8e\x0f\x12\x1ba\xe2`O\x14 \xe48\t\xdb\xdd\x92\xfd\xbe\n\xdd\xa7~\"\x8e\xbe\xc0\x1d\x1cv\xb4\x02K6\xbb\xd9\b{\xb5\x10\xb8e#{F0(\xec\x8b\x1d#\x8c\xde\x12\t\x18\x1e\xa2*\x98~@\xe0\x83\x9c\x9ea\x87f\xc9\xe5\x80+\xc8xZ=\xf0\x8b\x8c\x8bdn\x18_\xca\x139\xb0\x12\n\xd6oK5\xc2\xads@\xcdX\xa3\x80\xf3\x7f\xba\v\x83l\xebq\x89\xa6\tS\xdd:J\x88\x96O\xecj\xcc\\\xff\xa4\xf6V\xf4\x98\x14w,\xb1o\xd7\xa9\tNR\xf9\xee.Gn\xc5\xea\x94\x16\xf4Y4}\x84\x12-r\xd5\t\x81\x00gMOvM\xf8\x17\xc6K\x9b\xb9\xcdY\xbeI\xa6e$\x11[\x90\x96\x84#\x9a@\x02\x00\xd8\x06\xd0t\x89\xe0 z\xf2\x98C\x03\xa6'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000042}, 0x48c0) fchdir(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000a00)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x65, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010102, @private=0xa010102}, {0x4e21, 0x4e20, 0xc, 0x0, @opaque='EFGH'}}}, 0x20) write$tun(r1, &(0x7f0000000a40)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @rand_addr=0x64010102}, {0x4e20, 0x4e21, 0xc, 0x0, @opaque='IJKL'}}}, 0x20) executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000540), 0x0, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x4, 0xd, 0x4, 0x0, 0x2}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x6000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="e00100000000000000000000aa06000032548343f47d9738c9654a818cfbf090a2814af003c9fb6fec13787cf0a0c011dd0bf2182916b01789"], 0x1e0}}], 0x1, 0x4000004) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4ea2, 0x0, @remote, 0x3}, 0x1c) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r2, &(0x7f0000000ac0)={0x0, 0x953a, &(0x7f0000000b00)=[{&(0x7f0000000b40)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r4 = open(&(0x7f0000000b80)='.\x00', 0x80000, 0x103) getdents(r4, &(0x7f0000000bc0)=""/184, 0xb8) getdents(r4, &(0x7f0000000c80)=""/184, 0xb8) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000e40)={0x24, r5, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write(r6, &(0x7f00000002c0)='nqn=testnqn,transport=rdma,traddr=172.20.20.24,trsvcid=4', 0x38) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x6000, 0x1) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000340)={0x1, 0x2}, 0x4) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000380)={0x2, 0x7}, 0x4) socket$rxrpc(0x21, 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r1 = syz_io_uring_setup(0x112, &(0x7f0000000200)={0x0, 0x5a87, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000340)='n', 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000480)) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rthdr={{0x18, 0x29, 0x39, {0x2b, 0x0, 0x2, 0xf7}}}], 0x18}, 0x200008d0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001bc0), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r2, 0x0, 0x8, 0x0, &(0x7f0000001c80)="5c71f91b05c41355", 0x0, 0x1, 0x0, 0x1, 0x0, &(0x7f0000001cc0)='\x00', 0x0}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000001d00)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000001d40)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001d80)='smaps_rollup\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_procfs(0x0, &(0x7f0000001dc0)='net/netstat\x00') r3 = gettid() timer_create(0x0, 0x0, &(0x7f0000001e00)) ptrace$pokeuser(0x6, r3, 0x3, 0xec9c) connect$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x1, 0x2, 0x10, {0xa, 0x4e23, 0x39, @empty, 0xfffff200}}, 0x24) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000080)=0x2014, 0x4) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000001e80)={0x1, "ac74841675e4aedde850ee5b2910d1e16305d9a7f9c8a7076ece23ddca3c191d", 0x3, 0x21c, 0xff, 0x200000, 0x4}) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e23, 0x180000, @dev={0xfe, 0x80, '\x00', 0x43}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="280000000000000029000000040000002b010000000000000108000000000000000000000000000024000000000000002900"], 0x50}, 0x340880c4) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_PARM(r5, 0xc0cc5616, &(0x7f0000000380)={0x0, @capture={0x0, 0x0, {0xfffffffa, 0x3}, 0x8, 0x1}}) executing program 2: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80102, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r5, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c0040}, 0x408c4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) program crashed: WARNING in xfrm_output_resume bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <5>, <5> bisect: split chunk #0 of len 5 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 21, 26, 27, 18, 16, 11] detailed listing: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) executing program 2: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000001c0)='1', 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x1001}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x1001}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f00000003c0), 0xc, &(0x7f0000000400)={&(0x7f0000000440)=@setlink={0x20, 0x13, 0x5, 0x70bc95, 0x0, {0x0, 0x0, 0x0, r4, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f00000004c0), 0xc, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001400055996bc70000000000002180000", @ANYRES32=r4, @ANYBLOB="080002000a010101080001000a010101"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={&(0x7f00000005c0), 0xc, &(0x7f0000000600)={&(0x7f0000000640)=@setlink={0x20, 0x13, 0x5, 0x70bc97, 0x0, {0x0, 0x0, 0x0, r5, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={&(0x7f00000006c0), 0xc, &(0x7f0000000700)={&(0x7f0000000a80)=ANY=[@ANYBLOB="280000001400050498bc70000000000002180000", @ANYRES32=r5, @ANYBLOB="08000200640131b80800010064810101126c221e0f9d94889911eb8bd4813885d93c7b21c7f94b0d239c7f879c1cb410cb588917489de623307e1ee7960d8fe7781828c6f70582bc392595a5910bdac2b63cad8539fff47113cfa5b6e6663d95543f304fbbb6e7b275ae2e49df6678a321099d12c3eb6af08fa7f5fcf2f6079184ec63a86bf375d37eae4cd953fb70953b09d58b9b528c12a87aeef07e68ffddb4c94f0a20af5d35934c90c351eba1cb0c56bd7151e58689404be9db1b326a39f73c74c69b0f0b39cc3aff5eca49f97459c597ff1bc1c33450"], 0x28}}, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000000)={0x3, 0x5}, 0x0) fsopen(&(0x7f0000000040)='mqueue\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)={0x110, 0x26, 0x301, 0x270bd1d, 0x25dfdbfa, {0x1}, [@nested={0xfc, 0x131, 0x0, 0x1, [@typed={0xf5, 0x65, 0x0, 0x0, @str='}&/\x00\x847o\x8a\xad6[\xab\xd2\xa0}=\xde8S[\x89\xa0\xc1\x04\xa4\x190\xcb\x92\xfe|\xcf0\xd3\xbd\xa81\xd0\x8e\x0f\x12\x1ba\xe2`O\x14 \xe48\t\xdb\xdd\x92\xfd\xbe\n\xdd\xa7~\"\x8e\xbe\xc0\x1d\x1cv\xb4\x02K6\xbb\xd9\b{\xb5\x10\xb8e#{F0(\xec\x8b\x1d#\x8c\xde\x12\t\x18\x1e\xa2*\x98~@\xe0\x83\x9c\x9ea\x87f\xc9\xe5\x80+\xc8xZ=\xf0\x8b\x8c\x8bdn\x18_\xca\x139\xb0\x12\n\xd6oK5\xc2\xads@\xcdX\xa3\x80\xf3\x7f\xba\v\x83l\xebq\x89\xa6\tS\xdd:J\x88\x96O\xecj\xcc\\\xff\xa4\xf6V\xf4\x98\x14w,\xb1o\xd7\xa9\tNR\xf9\xee.Gn\xc5\xea\x94\x16\xf4Y4}\x84\x12-r\xd5\t\x81\x00gMOvM\xf8\x17\xc6K\x9b\xb9\xcdY\xbeI\xa6e$\x11[\x90\x96\x84#\x9a@\x02\x00\xd8\x06\xd0t\x89\xe0 z\xf2\x98C\x03\xa6'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000042}, 0x48c0) fchdir(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000a00)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x65, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010102, @private=0xa010102}, {0x4e21, 0x4e20, 0xc, 0x0, @opaque='EFGH'}}}, 0x20) write$tun(r1, &(0x7f0000000a40)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @rand_addr=0x64010102}, {0x4e20, 0x4e21, 0xc, 0x0, @opaque='IJKL'}}}, 0x20) executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000540), 0x0, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x4, 0xd, 0x4, 0x0, 0x2}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x6000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="e00100000000000000000000aa06000032548343f47d9738c9654a818cfbf090a2814af003c9fb6fec13787cf0a0c011dd0bf2182916b01789"], 0x1e0}}], 0x1, 0x4000004) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4ea2, 0x0, @remote, 0x3}, 0x1c) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r2, &(0x7f0000000ac0)={0x0, 0x953a, &(0x7f0000000b00)=[{&(0x7f0000000b40)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r4 = open(&(0x7f0000000b80)='.\x00', 0x80000, 0x103) getdents(r4, &(0x7f0000000bc0)=""/184, 0xb8) getdents(r4, &(0x7f0000000c80)=""/184, 0xb8) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000e40)={0x24, r5, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write(r6, &(0x7f00000002c0)='nqn=testnqn,transport=rdma,traddr=172.20.20.24,trsvcid=4', 0x38) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x6000, 0x1) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000340)={0x1, 0x2}, 0x4) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000380)={0x2, 0x7}, 0x4) socket$rxrpc(0x21, 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r1 = syz_io_uring_setup(0x112, &(0x7f0000000200)={0x0, 0x5a87, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000340)='n', 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000480)) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rthdr={{0x18, 0x29, 0x39, {0x2b, 0x0, 0x2, 0xf7}}}], 0x18}, 0x200008d0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9e09000000000000000a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a42a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a175e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436c101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521b3ebb0cc52f49129b204eb99b6150e320c9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d255be1ed66d9051f22614d1f62734d6780393e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f231200743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069fbff63a06578d6d184f5de7bfb6aa800016996d536256c02294cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e7005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9c9e5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde3885b06548862de809d3dae3cccf109f7c78e8479a345e805e47dfa82caed44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1bfeb51f5c65a907f2217d5f80c580dc31b0963ff953ce09148e8dfe3a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e97c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20ab2b5baa1b07b16e81f278e54a479f1a068658e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4657b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce798c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f7c6294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b13287615b972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0590000130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80c4014ff11d9dbceba41d8dfce410333a054e82b1d050331c5bc4acb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6b93d28db8ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a82632ff3a9a48ff805202ae9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dae1028d1bc68b6336eb1a5d18f6148354df7e60a489dc543ccdee1fff9d8f8d78844f0c6a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d6410000000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2cea0d6269ffc8580a01e9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168eabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2835d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95bad8f8ed85cd5b03a7352a0fb83398566d1bc133582ce2d95636cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef47b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c32f5fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538bccd48a0325aa9b151855c800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b3145bf54a851f3c08931d4c2c32bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c929e7de4e9620000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da208e9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45a4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d50270a1deec1a6d7441d0b5b8d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656db528f81f6a9465d2c94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be1881000000000000006fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bb24ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855c5c95ef5c83b18b23517ca935a0fa1b630d70c4ca4029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17e0000815a42318151feaad37f7abf9bfa0bcac3c1934854b3f6dc6de835952ebdda297dd3b29c07c69888cf029271449e035edc8a4459705f222bda537481e66ce3c665129f9829524eca8b5bef27adde96bd3ee95da4a176deff3408da050fe8d512e5a19379b403ee11d010bf86d0af4ac5c2057709b18cff438d0d58810670b222dfeb317bb935f925d2a070e68a701fd4316a677bb513c9476f25969097c165ca1705473341ea03f259dc5bee6a2d2e05176965192941abfae36b3a1e30784e6532c96ab971c5706a88b6f66860e31098b5b788788aad67507ffab2184a950065c1337259b63135fa060fc5ce3e4f6cdfb64f40e1a90351a01fd3d70f9dde03c335a931e58b8570316590ae22c7de567260849049e963ee15db15f592abb24111a219f0d128ceaf19764d92755abc9c313f65e7a220e64bb0d7139ce59da85bc710cea0c6553b336763bd3e39c2374b86885a32cdfae817196a7850257ead09f3e30e676b51062bb9000000000000000000000000000000000000000000000000000000aefb12dd3507c8dd24490bf9de062cd166a4dad6b9f2e53bad342546e546f6dece81d53cf717bd91ad72f4da82018f43259899e53e0b69a92180f1345699045fd23689e66d21d13be1a2d20eb1ce23eda84a63855173ca7f51d436306c"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001bc0), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r2, 0x0, 0x8, 0x0, &(0x7f0000001c80)="5c71f91b05c41355", 0x0, 0x1, 0x0, 0x1, 0x0, &(0x7f0000001cc0)='\x00', 0x0}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000001d00)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000001d40)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001d80)='smaps_rollup\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_procfs(0x0, &(0x7f0000001dc0)='net/netstat\x00') r3 = gettid() timer_create(0x0, 0x0, &(0x7f0000001e00)) ptrace$pokeuser(0x6, r3, 0x3, 0xec9c) connect$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x1, 0x2, 0x10, {0xa, 0x4e23, 0x39, @empty, 0xfffff200}}, 0x24) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000080)=0x2014, 0x4) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000001e80)={0x1, "ac74841675e4aedde850ee5b2910d1e16305d9a7f9c8a7076ece23ddca3c191d", 0x3, 0x21c, 0xff, 0x200000, 0x4}) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e23, 0x180000, @dev={0xfe, 0x80, '\x00', 0x43}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="280000000000000029000000040000002b010000000000000108000000000000000000000000000024000000000000002900"], 0x50}, 0x340880c4) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_PARM(r5, 0xc0cc5616, &(0x7f0000000380)={0x0, @capture={0x0, 0x0, {0xfffffffa, 0x3}, 0x8, 0x1}}) executing program 2: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80102, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r5, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c0040}, 0x408c4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 30, 16, 26, 27, 18, 16, 11] detailed listing: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}}, 0x0) executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x40) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000680)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x8000, 0x0) socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000700)={0x2, 0x0, @local}, 0x10) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000780)={0x3, 0x2, 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r4, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000040000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000100000000000000440005000000000000000000000000000000000000000002320000000a000000fc010000000000000000000000000000000000000100"/180], 0xfc}}, 0x0) connect$inet(r3, &(0x7f0000000940)={0x2, 0x4, @broadcast}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000980)={0x84, @local, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000009c0)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0xa, 0xc, 0x56}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 32) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0xfd8b, 0x5}) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async, rerun: 32) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) (rerun: 32) write$dsp(r1, &(0x7f0000000180)="5cba91a4", 0xffffffd9) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffff9]}, 0x0, 0x8) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) (async, rerun: 64) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000240)=0x1) (rerun: 64) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x9) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0xbc}, 0x1, 0x0, 0x0, 0xc0}, 0x0) executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000540), 0x0, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x4, 0xd, 0x4, 0x0, 0x2}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x6000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="e00100000000000000000000aa06000032548343f47d9738c9654a818cfbf090a2814af003c9fb6fec13787cf0a0c011dd0bf2182916b01789"], 0x1e0}}], 0x1, 0x4000004) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4ea2, 0x0, @remote, 0x3}, 0x1c) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r2, &(0x7f0000000ac0)={0x0, 0x953a, &(0x7f0000000b00)=[{&(0x7f0000000b40)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r4 = open(&(0x7f0000000b80)='.\x00', 0x80000, 0x103) getdents(r4, &(0x7f0000000bc0)=""/184, 0xb8) getdents(r4, &(0x7f0000000c80)=""/184, 0xb8) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000e40)={0x24, r5, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write(r6, &(0x7f00000002c0)='nqn=testnqn,transport=rdma,traddr=172.20.20.24,trsvcid=4', 0x38) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x6000, 0x1) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000340)={0x1, 0x2}, 0x4) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000380)={0x2, 0x7}, 0x4) socket$rxrpc(0x21, 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r1 = syz_io_uring_setup(0x112, &(0x7f0000000200)={0x0, 0x5a87, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000340)='n', 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000480)) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rthdr={{0x18, 0x29, 0x39, {0x2b, 0x0, 0x2, 0xf7}}}], 0x18}, 0x200008d0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001bc0), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r2, 0x0, 0x8, 0x0, &(0x7f0000001c80)="5c71f91b05c41355", 0x0, 0x1, 0x0, 0x1, 0x0, &(0x7f0000001cc0)='\x00', 0x0}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000001d00)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000001d40)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001d80)='smaps_rollup\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_procfs(0x0, &(0x7f0000001dc0)='net/netstat\x00') r3 = gettid() timer_create(0x0, 0x0, &(0x7f0000001e00)) ptrace$pokeuser(0x6, r3, 0x3, 0xec9c) connect$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x1, 0x2, 0x10, {0xa, 0x4e23, 0x39, @empty, 0xfffff200}}, 0x24) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000080)=0x2014, 0x4) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000001e80)={0x1, "ac74841675e4aedde850ee5b2910d1e16305d9a7f9c8a7076ece23ddca3c191d", 0x3, 0x21c, 0xff, 0x200000, 0x4}) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e23, 0x180000, @dev={0xfe, 0x80, '\x00', 0x43}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="280000000000000029000000040000002b010000000000000108000000000000000000000000000024000000000000002900"], 0x50}, 0x340880c4) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_PARM(r5, 0xc0cc5616, &(0x7f0000000380)={0x0, @capture={0x0, 0x0, {0xfffffffa, 0x3}, 0x8, 0x1}}) executing program 2: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80102, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r5, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c0040}, 0x408c4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) program crashed: WARNING in xfrm_output_resume bisect: the chunk can be dropped bisect: split chunk #1 of len 5 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 30, 16, 16, 11] detailed listing: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}}, 0x0) executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x40) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000680)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x8000, 0x0) socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000700)={0x2, 0x0, @local}, 0x10) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000780)={0x3, 0x2, 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r4, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000040000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000100000000000000440005000000000000000000000000000000000000000002320000000a000000fc010000000000000000000000000000000000000100"/180], 0xfc}}, 0x0) connect$inet(r3, &(0x7f0000000940)={0x2, 0x4, @broadcast}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000980)={0x84, @local, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000009c0)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0xa, 0xc, 0x56}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 32) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0xfd8b, 0x5}) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async, rerun: 32) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) (rerun: 32) write$dsp(r1, &(0x7f0000000180)="5cba91a4", 0xffffffd9) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffff9]}, 0x0, 0x8) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) (async, rerun: 64) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000240)=0x1) (rerun: 64) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x9) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0xbc}, 0x1, 0x0, 0x0, 0xc0}, 0x0) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c0040}, 0x408c4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) program crashed: WARNING in xfrm_output_resume bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <3>, <2> bisect: split chunk #0 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 16, 11] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 32) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0xfd8b, 0x5}) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async, rerun: 32) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) (rerun: 32) write$dsp(r1, &(0x7f0000000180)="5cba91a4", 0xffffffd9) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffff9]}, 0x0, 0x8) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) (async, rerun: 64) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000240)=0x1) (rerun: 64) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x9) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0xbc}, 0x1, 0x0, 0x0, 0xc0}, 0x0) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c0040}, 0x408c4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 30, 16, 11] detailed listing: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}}, 0x0) executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x40) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000680)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x8000, 0x0) socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000700)={0x2, 0x0, @local}, 0x10) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000780)={0x3, 0x2, 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r4, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000040000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000100000000000000440005000000000000000000000000000000000000000002320000000a000000fc010000000000000000000000000000000000000100"/180], 0xfc}}, 0x0) connect$inet(r3, &(0x7f0000000940)={0x2, 0x4, @broadcast}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000980)={0x84, @local, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000009c0)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0xa, 0xc, 0x56}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c0040}, 0x408c4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) program crashed: WARNING in xfrm_output_resume bisect: the chunk can be dropped bisect: split chunk #1 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 30, 11] detailed listing: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}}, 0x0) executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x40) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000680)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x8000, 0x0) socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000700)={0x2, 0x0, @local}, 0x10) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000780)={0x3, 0x2, 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r4, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000040000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000100000000000000440005000000000000000000000000000000000000000002320000000a000000fc010000000000000000000000000000000000000100"/180], 0xfc}}, 0x0) connect$inet(r3, &(0x7f0000000940)={0x2, 0x4, @broadcast}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000980)={0x84, @local, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000009c0)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0xa, 0xc, 0x56}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c0040}, 0x408c4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 30, 16] detailed listing: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}}, 0x0) executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x40) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000680)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x8000, 0x0) socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000700)={0x2, 0x0, @local}, 0x10) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000780)={0x3, 0x2, 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r4, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000040000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000100000000000000440005000000000000000000000000000000000000000002320000000a000000fc010000000000000000000000000000000000000100"/180], 0xfc}}, 0x0) connect$inet(r3, &(0x7f0000000940)={0x2, 0x4, @broadcast}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000980)={0x84, @local, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000009c0)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0xa, 0xc, 0x56}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) program crashed: WARNING in xfrm_output_resume bisect: the chunk can be dropped bisect: split chunks (needed=true): <2>, <1> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 16] detailed listing: executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x40) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000680)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x8000, 0x0) socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000700)={0x2, 0x0, @local}, 0x10) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000780)={0x3, 0x2, 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r4, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000040000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000100000000000000440005000000000000000000000000000000000000000002320000000a000000fc010000000000000000000000000000000000000100"/180], 0xfc}}, 0x0) connect$inet(r3, &(0x7f0000000940)={0x2, 0x4, @broadcast}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000980)={0x84, @local, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000009c0)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0xa, 0xc, 0x56}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) program crashed: WARNING in xfrm_output_resume bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #1 of len 1 into 2 parts bisect: no way to further split the chunk bisect: split chunks (needed=true): <1>, <1, final> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 2 programs left: executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x40) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000680)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x8000, 0x0) socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000700)={0x2, 0x0, @local}, 0x10) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000780)={0x3, 0x2, 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r4, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000040000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000100000000000000440005000000000000000000000000000000000000000002320000000a000000fc010000000000000000000000000000000000000100"/180], 0xfc}}, 0x0) connect$inet(r3, &(0x7f0000000940)={0x2, 0x4, @broadcast}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000980)={0x84, @local, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000009c0)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0xa, 0xc, 0x56}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) bisect: trying to concatenate bisect: concatenate 2 entries minimizing program #0 before concatenation testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [29, 16] detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x40) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000680)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x8000, 0x0) socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000700)={0x2, 0x0, @local}, 0x10) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000780)={0x3, 0x2, 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r4, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000040000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000100000000000000440005000000000000000000000000000000000000000002320000000a000000fc010000000000000000000000000000000000000100"/180], 0xfc}}, 0x0) connect$inet(r3, &(0x7f0000000940)={0x2, 0x4, @broadcast}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000980)={0x84, @local, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) program crashed: WARNING in xfrm_output_resume testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [28, 16] detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x40) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000680)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x8000, 0x0) socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000700)={0x2, 0x0, @local}, 0x10) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000780)={0x3, 0x2, 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r3, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000040000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000100000000000000440005000000000000000000000000000000000000000002320000000a000000fc010000000000000000000000000000000000000100"/180], 0xfc}}, 0x0) connect$inet(r2, &(0x7f0000000940)={0x2, 0x4, @broadcast}, 0x10) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) program crashed: WARNING in xfrm_output_resume testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 16] detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x40) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000680)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x8000, 0x0) socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000700)={0x2, 0x0, @local}, 0x10) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000780)={0x3, 0x2, 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r3, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000040000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000100000000000000440005000000000000000000000000000000000000000002320000000a000000fc010000000000000000000000000000000000000100"/180], 0xfc}}, 0x0) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) program crashed: WARNING in xfrm_output_resume testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [26, 16] detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x40) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000680)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x8000, 0x0) socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000700)={0x2, 0x0, @local}, 0x10) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000780)={0x3, 0x2, 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r3, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$nl_xfrm(0x10, 0x3, 0x6) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) program crashed: WARNING in xfrm_output_resume testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 16] detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x40) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000680)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x8000, 0x0) socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000700)={0x2, 0x0, @local}, 0x10) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000780)={0x3, 0x2, 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r3, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) program crashed: WARNING in xfrm_output_resume testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 16] detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x40) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000680)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x8000, 0x0) socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000700)={0x2, 0x0, @local}, 0x10) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000780)={0x3, 0x2, 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r3, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) program crashed: WARNING in xfrm_output_resume testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [23, 16] detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x40) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000680)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x8000, 0x0) socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000700)={0x2, 0x0, @local}, 0x10) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000780)={0x3, 0x2, 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r3, 0x0) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) program crashed: WARNING in xfrm_output_resume testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [22, 16] detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x40) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000680)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x8000, 0x0) socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000700)={0x2, 0x0, @local}, 0x10) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000780)={0x3, 0x2, 0x1}) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) program crashed: WARNING in xfrm_output_resume testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 16] detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x40) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000680)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x8000, 0x0) socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000700)={0x2, 0x0, @local}, 0x10) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) program crashed: WARNING in xfrm_output_resume testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 16] detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x40) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000680)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x8000, 0x0) socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000700)={0x2, 0x0, @local}, 0x10) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) program crashed: WARNING in xfrm_output_resume testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 16] detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x40) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000680)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x8000, 0x0) socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) socket$inet_udp(0x2, 0x2, 0x0) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) program crashed: WARNING in xfrm_output_resume testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 16] detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x40) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000680)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x8000, 0x0) socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) program crashed: WARNING in xfrm_output_resume testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [17, 16] detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x40) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000680)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x8000, 0x0) socket$kcm(0xa, 0x2, 0x0) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) program crashed: WARNING in xfrm_output_resume testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 16] detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x40) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000680)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x8000, 0x0) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) program crashed: WARNING in xfrm_output_resume testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 16] detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x40) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000680)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) program crashed: WARNING in xfrm_output_resume testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 16] detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x40) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) program crashed: WARNING in xfrm_output_resume testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 16] detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x40) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) program crashed: WARNING in corrupted testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 16] detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x40) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x10106, 0x2, 0x0) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) program crashed: WARNING in xfrm_output_resume testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 16] detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x40) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140), 0x318, 0x0) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) program crashed: WARNING in xfrm_output_resume testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 16] detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x40) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) program crashed: WARNING in xfrm_output_resume testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 16] detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) program crashed: WARNING in xfrm_output_resume testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 16] detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) program crashed: WARNING in xfrm_output_resume testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 16] detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) program crashed: WARNING in xfrm_output_resume testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 16] detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) program crashed: WARNING in xfrm_output_resume testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 16] detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) program crashed: WARNING in xfrm_output_resume testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 16] detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) program crashed: WARNING in xfrm_output_resume testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 16] detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) program crashed: WARNING in xfrm_output_resume testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 16] detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 16] detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 16] detailed listing: executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000540)="51eabc573f4c209a629c974f1b614586cd531d3fcdda52c4007818904b956e5293c9ee4c504541768ae79c36eb6265fa801551b6fc2f9c72b4350a138fbd1a39fef8b5244f3eb46e065685688b4e1ae61d5706e50318267dd1e6ba87715c4d018a8a0f2590d5401ce1b5637be7a42e3e9becfb242c1ef78d8effce7372718a29692cb5d714ec8228da21eddf9a55f552314c", 0x92, 0x4000, 0x0, 0x0) program did not crash minimized 30 calls -> 3 calls minimizing program #1 before concatenation testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 15] detailed listing: executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) socket$inet6_udp(0xa, 0x2, 0x0) program crashed: WARNING in xfrm_output_resume testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 14] detailed listing: executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) program crashed: WARNING in xfrm_output_resume testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 13] detailed listing: executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) program crashed: WARNING in xfrm_output_resume testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 12] detailed listing: executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) program crashed: WARNING in xfrm_output_resume testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 11] detailed listing: executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x60) program crashed: WARNING in xfrm_output_resume testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 10] detailed listing: executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) program crashed: WARNING in xfrm_output_resume testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 9] detailed listing: executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) program crashed: WARNING in xfrm_output_resume testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 8] detailed listing: executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) program crashed: WARNING in xfrm_output_resume testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 7] detailed listing: executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 7] detailed listing: executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 7] detailed listing: executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 7] detailed listing: executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 7] detailed listing: executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) program crashed: WARNING in xfrm_output_resume testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 6] detailed listing: executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 6] detailed listing: executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) executing program 0: openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 6] detailed listing: executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) executing program 0: write$sysctl(0xffffffffffffffff, &(0x7f00000000c0)='1', 0x1) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) program crashed: WARNING in xfrm_output_resume minimized 16 calls -> 6 calls testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$sock_linger-setsockopt$SO_BINDTODEVICE-bind$inet-connect$inet detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) program crashed: WARNING in xfrm_output_resume bisect: concatenation succeeded found reproducer with 9 syscalls minimizing guilty program testing program (duration=1m37.687301788s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$sock_linger-setsockopt$SO_BINDTODEVICE-bind$inet detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) program did not crash testing program (duration=1m37.687301788s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$sock_linger-setsockopt$SO_BINDTODEVICE-connect$inet detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) program crashed: WARNING in xfrm_output_resume testing program (duration=1m37.687301788s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$sock_linger-connect$inet detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) program did not crash testing program (duration=1m37.687301788s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$SO_BINDTODEVICE-connect$inet detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) program crashed: WARNING in xfrm_output_resume testing program (duration=1m37.687301788s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-setsockopt$SO_BINDTODEVICE-connect$inet detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f00000000c0)='1', 0x1) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) program did not crash testing program (duration=1m37.687301788s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-socket$inet_mptcp-setsockopt$SO_BINDTODEVICE-connect$inet detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) program did not crash testing program (duration=1m37.687301788s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$SO_BINDTODEVICE-connect$inet detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) program did not crash testing program (duration=1m37.687301788s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$SO_BINDTODEVICE-connect$inet detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) program did not crash testing program (duration=1m37.687301788s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$SO_BINDTODEVICE-connect$inet detailed listing: executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f00000000c0)='1', 0x1) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) program did not crash testing program (duration=1m37.687301788s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$SO_BINDTODEVICE-connect$inet detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) program did not crash testing program (duration=1m37.687301788s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$SO_BINDTODEVICE-connect$inet detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) program crashed: WARNING in xfrm_output_resume testing program (duration=1m37.687301788s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$SO_BINDTODEVICE-connect$inet detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) program did not crash testing program (duration=1m37.687301788s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$SO_BINDTODEVICE-connect$inet detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) program did not crash testing program (duration=1m37.687301788s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$SO_BINDTODEVICE-connect$inet detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0xf0, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}}, 0xf0}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) program did not crash testing program (duration=1m37.687301788s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$SO_BINDTODEVICE-connect$inet detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) program did not crash testing program (duration=1m37.687301788s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$SO_BINDTODEVICE-connect$inet detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) program crashed: WARNING in xfrm_output_resume testing program (duration=1m37.687301788s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$SO_BINDTODEVICE-connect$inet detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) program did not crash testing program (duration=1m37.687301788s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$SO_BINDTODEVICE-connect$inet detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) program did not crash testing program (duration=1m37.687301788s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$SO_BINDTODEVICE-connect$inet detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) write$sysctl(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) program crashed: WARNING in xfrm_output_resume testing program (duration=1m37.687301788s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$SO_BINDTODEVICE-connect$inet detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) write$sysctl(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) program did not crash testing program (duration=1m37.687301788s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$SO_BINDTODEVICE-connect$inet detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) write$sysctl(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) connect$inet(r1, 0x0, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=1m37.687301788s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$SO_BINDTODEVICE-connect$inet program crashed: WARNING in xfrm_output_resume simplifying C reproducer testing compiled C program (duration=1m37.687301788s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$SO_BINDTODEVICE-connect$inet program crashed: WARNING in xfrm_output_resume testing compiled C program (duration=1m37.687301788s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$SO_BINDTODEVICE-connect$inet program crashed: WARNING in xfrm_output_resume testing compiled C program (duration=1m37.687301788s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$SO_BINDTODEVICE-connect$inet program crashed: WARNING in xfrm_output_resume testing compiled C program (duration=1m37.687301788s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$SO_BINDTODEVICE-connect$inet program did not crash testing compiled C program (duration=1m37.687301788s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$SO_BINDTODEVICE-connect$inet testing compiled C program (duration=1m37.687301788s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$SO_BINDTODEVICE-connect$inet program did not crash testing compiled C program (duration=1m37.687301788s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$SO_BINDTODEVICE-connect$inet program crashed: WARNING in xfrm_output_resume testing compiled C program (duration=1m37.687301788s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$SO_BINDTODEVICE-connect$inet program crashed: WARNING in xfrm_output_resume testing compiled C program (duration=1m37.687301788s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$SO_BINDTODEVICE-connect$inet program crashed: WARNING in xfrm_output_resume testing compiled C program (duration=1m37.687301788s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$SO_BINDTODEVICE-connect$inet program crashed: WARNING in xfrm_output_resume testing compiled C program (duration=1m37.687301788s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$SO_BINDTODEVICE-connect$inet program crashed: WARNING in xfrm_output_resume testing compiled C program (duration=1m37.687301788s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$SO_BINDTODEVICE-connect$inet program crashed: WARNING in xfrm_output_resume testing compiled C program (duration=1m37.687301788s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$SO_BINDTODEVICE-connect$inet program crashed: WARNING in xfrm_output_resume testing compiled C program (duration=1m37.687301788s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$SO_BINDTODEVICE-connect$inet program crashed: WARNING in xfrm_output_resume testing compiled C program (duration=1m37.687301788s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$SO_BINDTODEVICE-connect$inet program crashed: WARNING in xfrm_output_resume testing compiled C program (duration=1m37.687301788s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$SO_BINDTODEVICE-connect$inet program crashed: WARNING in xfrm_output_resume testing compiled C program (duration=1m37.687301788s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$SO_BINDTODEVICE-connect$inet program crashed: WARNING in xfrm_output_resume testing compiled C program (duration=1m37.687301788s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$SO_BINDTODEVICE-connect$inet program crashed: WARNING in xfrm_output_resume testing program (duration=1m37.687301788s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$SO_BINDTODEVICE-connect$inet detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) write$sysctl(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) program crashed: WARNING in xfrm_output_resume validation run: crashed=true testing program (duration=1m37.687301788s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$SO_BINDTODEVICE-connect$inet detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) write$sysctl(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) program crashed: WARNING in xfrm_output_resume validation run: crashed=true testing program (duration=1m37.687301788s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-write$sysctl-socket$inet_mptcp-setsockopt$SO_BINDTODEVICE-connect$inet detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x405, 0x70bc95, 0x0, {{@in=@empty, @in=@empty}, {@in=@remote, 0x4d2, 0x32}, @in=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bc95, 0x34ff, 0x2, 0x5, 0x0, 0x20}, [@algo_aead={0x60, 0x12, @rfc4106_128={'rfc4106(gcm(aes))\x00', 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_init_delay={0x8}]}, 0x160}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newpolicy={0xfc, 0x13, 0x405, 0x70bc96, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x2, @in=@local, 0x34ff, 0x5, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) write$sysctl(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) program crashed: WARNING in xfrm_output_resume validation run: crashed=true reproducing took 3h55m21.874642753s repro crashed as (corrupted=false): ------------[ cut here ]------------ !rcu_read_lock_held() WARNING: ./include/net/dst.h:326 at skb_dst_force include/net/dst.h:326 [inline], CPU#1: rm/5986 WARNING: ./include/net/dst.h:326 at xfrm_output_one net/xfrm/xfrm_output.c:549 [inline], CPU#1: rm/5986 WARNING: ./include/net/dst.h:326 at xfrm_output_resume+0x41d9/0x64e0 net/xfrm/xfrm_output.c:597, CPU#1: rm/5986 Modules linked in: CPU: 1 UID: 0 PID: 5986 Comm: rm Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 RIP: 0010:skb_dst_force include/net/dst.h:326 [inline] RIP: 0010:xfrm_output_one net/xfrm/xfrm_output.c:549 [inline] RIP: 0010:xfrm_output_resume+0x41d9/0x64e0 net/xfrm/xfrm_output.c:597 Code: be b4 01 00 00 48 c7 c2 20 fd 53 8d e8 f0 05 07 f7 e9 aa fc ff ff e8 96 b1 2b f7 90 0f 0b 90 e9 7e ed ff ff e8 88 b1 2b f7 90 <0f> 0b 90 e9 44 e0 ff ff 48 89 df e8 c7 3c 52 fa 84 c0 0f 84 e1 00 RSP: 0018:ffffc90000a188c0 EFLAGS: 00010246 RAX: ffffffff8a9d6fa8 RBX: 0000000000000000 RCX: ffff888036f0ddc0 RDX: 8000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 RBP: ffffc90000a18b50 R08: 0000000000000100 R09: 1ffffffff237c017 R10: dffffc0000000000 R11: fffffbfff237c018 R12: dffffc0000000000 R13: ffff8880780badc8 R14: ffff88802a987210 R15: ffff88807a620780 FS: 0000000000000000(0000) GS:ffff888123509000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f8fc027d000 CR3: 00000000743d4000 CR4: 00000000003526f0 Call Trace: iptfs_output_queued net/xfrm/xfrm_iptfs.c:2325 [inline] iptfs_delay_timer+0x3803/0x4310 net/xfrm/xfrm_iptfs.c:2362 __run_hrtimer kernel/time/hrtimer.c:2079 [inline] __hrtimer_run_queues+0x3bc/0xa10 kernel/time/hrtimer.c:2136 hrtimer_run_softirq+0x1e3/0x2e0 kernel/time/hrtimer.c:2153 handle_softirqs+0x265/0x8d0 kernel/softirq.c:669 __do_softirq kernel/softirq.c:703 [inline] invoke_softirq kernel/softirq.c:542 [inline] __irq_exit_rcu+0xc6/0x220 kernel/softirq.c:786 irq_exit_rcu+0x9/0x30 kernel/softirq.c:809 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:lock_is_held_type+0x106/0x150 kernel/locking/lockdep.c:6021 Code: 1c 00 00 b8 ff ff ff ff 65 0f c1 05 2c fe db 08 83 f8 01 75 25 9c 58 a9 00 02 00 00 75 39 41 f7 c4 00 02 00 00 74 01 fb 89 d8 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 48 c7 RSP: 0018:ffffc9000388ede8 EFLAGS: 00000206 RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000046 RDX: 0000000000000000 RSI: ffffffff8e9348df RDI: ffffffff8c8ea380 RBP: 00000000ffffffff R08: 0000000000000003 R09: 0000000000000004 R10: dffffc0000000000 R11: fffffbfff387e664 R12: 0000000000000246 R13: ffff888036f0ddc0 R14: ffff88802a282800 R15: 0000000000000000 lock_is_held include/linux/lockdep.h:249 [inline] mt_locked lib/maple_tree.c:-1 [inline] mt_slot lib/maple_tree.c:676 [inline] mas_slot lib/maple_tree.c:709 [inline] mas_validate_parent_slot lib/maple_tree.c:6877 [inline] mt_validate+0x7aa/0x4260 lib/maple_tree.c:7067 validate_mm+0xd4/0x4c0 mm/vma.c:686 __split_vma+0x7c3/0x8a0 mm/vma.c:604 vms_gather_munmap_vmas+0x322/0x1370 mm/vma.c:1524 __mmap_setup mm/vma.c:2591 [inline] __mmap_region mm/vma.c:3071 [inline] mmap_region+0x90d/0x2800 mm/vma.c:3173 do_mmap+0xe0a/0x1300 mm/mmap.c:573 vm_mmap_pgoff+0x27a/0x520 mm/util.c:581 ksys_mmap_pgoff+0x4dc/0x760 mm/mmap.c:619 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x16a/0x530 arch/x86/entry/syscall_64.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f8fc05a6242 Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 RSP: 002b:00007fffb819c298 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 RAX: ffffffffffffffda RBX: 00007f8fc027a000 RCX: 00007f8fc05a6242 RDX: 0000000000000003 RSI: 0000000000002000 RDI: 00007f8fc027a000 RBP: 0000000000000812 R08: 0000000000000003 R09: 0000000000006000 R10: 0000000000000812 R11: 0000000000000206 R12: 00007fffb819c358 R13: 00007f8fc027d0c0 R14: 00007fffb819c6d0 R15: 00000ffff7033856 ---------------- Code disassembly (best guess): 0: 1c 00 sbb $0x0,%al 2: 00 b8 ff ff ff ff add %bh,-0x1(%rax) 8: 65 0f c1 05 2c fe db xadd %eax,%gs:0x8dbfe2c(%rip) # 0x8dbfe3c f: 08 10: 83 f8 01 cmp $0x1,%eax 13: 75 25 jne 0x3a 15: 9c pushf 16: 58 pop %rax 17: a9 00 02 00 00 test $0x200,%eax 1c: 75 39 jne 0x57 1e: 41 f7 c4 00 02 00 00 test $0x200,%r12d 25: 74 01 je 0x28 27: fb sti 28: 89 d8 mov %ebx,%eax * 2a: 5b pop %rbx <-- trapping instruction 2b: 41 5c pop %r12 2d: 41 5d pop %r13 2f: 41 5e pop %r14 31: 41 5f pop %r15 33: 5d pop %rbp 34: c3 ret 35: cc int3 36: cc int3 37: cc int3 38: cc int3 39: cc int3 3a: 90 nop 3b: 0f 0b ud2 3d: 90 nop 3e: 48 rex.W 3f: c7 .byte 0xc7 final repro crashed as (corrupted=false): ------------[ cut here ]------------ !rcu_read_lock_held() WARNING: ./include/net/dst.h:326 at skb_dst_force include/net/dst.h:326 [inline], CPU#1: rm/5986 WARNING: ./include/net/dst.h:326 at xfrm_output_one net/xfrm/xfrm_output.c:549 [inline], CPU#1: rm/5986 WARNING: ./include/net/dst.h:326 at xfrm_output_resume+0x41d9/0x64e0 net/xfrm/xfrm_output.c:597, CPU#1: rm/5986 Modules linked in: CPU: 1 UID: 0 PID: 5986 Comm: rm Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 RIP: 0010:skb_dst_force include/net/dst.h:326 [inline] RIP: 0010:xfrm_output_one net/xfrm/xfrm_output.c:549 [inline] RIP: 0010:xfrm_output_resume+0x41d9/0x64e0 net/xfrm/xfrm_output.c:597 Code: be b4 01 00 00 48 c7 c2 20 fd 53 8d e8 f0 05 07 f7 e9 aa fc ff ff e8 96 b1 2b f7 90 0f 0b 90 e9 7e ed ff ff e8 88 b1 2b f7 90 <0f> 0b 90 e9 44 e0 ff ff 48 89 df e8 c7 3c 52 fa 84 c0 0f 84 e1 00 RSP: 0018:ffffc90000a188c0 EFLAGS: 00010246 RAX: ffffffff8a9d6fa8 RBX: 0000000000000000 RCX: ffff888036f0ddc0 RDX: 8000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 RBP: ffffc90000a18b50 R08: 0000000000000100 R09: 1ffffffff237c017 R10: dffffc0000000000 R11: fffffbfff237c018 R12: dffffc0000000000 R13: ffff8880780badc8 R14: ffff88802a987210 R15: ffff88807a620780 FS: 0000000000000000(0000) GS:ffff888123509000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f8fc027d000 CR3: 00000000743d4000 CR4: 00000000003526f0 Call Trace: iptfs_output_queued net/xfrm/xfrm_iptfs.c:2325 [inline] iptfs_delay_timer+0x3803/0x4310 net/xfrm/xfrm_iptfs.c:2362 __run_hrtimer kernel/time/hrtimer.c:2079 [inline] __hrtimer_run_queues+0x3bc/0xa10 kernel/time/hrtimer.c:2136 hrtimer_run_softirq+0x1e3/0x2e0 kernel/time/hrtimer.c:2153 handle_softirqs+0x265/0x8d0 kernel/softirq.c:669 __do_softirq kernel/softirq.c:703 [inline] invoke_softirq kernel/softirq.c:542 [inline] __irq_exit_rcu+0xc6/0x220 kernel/softirq.c:786 irq_exit_rcu+0x9/0x30 kernel/softirq.c:809 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:lock_is_held_type+0x106/0x150 kernel/locking/lockdep.c:6021 Code: 1c 00 00 b8 ff ff ff ff 65 0f c1 05 2c fe db 08 83 f8 01 75 25 9c 58 a9 00 02 00 00 75 39 41 f7 c4 00 02 00 00 74 01 fb 89 d8 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 48 c7 RSP: 0018:ffffc9000388ede8 EFLAGS: 00000206 RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000046 RDX: 0000000000000000 RSI: ffffffff8e9348df RDI: ffffffff8c8ea380 RBP: 00000000ffffffff R08: 0000000000000003 R09: 0000000000000004 R10: dffffc0000000000 R11: fffffbfff387e664 R12: 0000000000000246 R13: ffff888036f0ddc0 R14: ffff88802a282800 R15: 0000000000000000 lock_is_held include/linux/lockdep.h:249 [inline] mt_locked lib/maple_tree.c:-1 [inline] mt_slot lib/maple_tree.c:676 [inline] mas_slot lib/maple_tree.c:709 [inline] mas_validate_parent_slot lib/maple_tree.c:6877 [inline] mt_validate+0x7aa/0x4260 lib/maple_tree.c:7067 validate_mm+0xd4/0x4c0 mm/vma.c:686 __split_vma+0x7c3/0x8a0 mm/vma.c:604 vms_gather_munmap_vmas+0x322/0x1370 mm/vma.c:1524 __mmap_setup mm/vma.c:2591 [inline] __mmap_region mm/vma.c:3071 [inline] mmap_region+0x90d/0x2800 mm/vma.c:3173 do_mmap+0xe0a/0x1300 mm/mmap.c:573 vm_mmap_pgoff+0x27a/0x520 mm/util.c:581 ksys_mmap_pgoff+0x4dc/0x760 mm/mmap.c:619 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x16a/0x530 arch/x86/entry/syscall_64.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f8fc05a6242 Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 RSP: 002b:00007fffb819c298 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 RAX: ffffffffffffffda RBX: 00007f8fc027a000 RCX: 00007f8fc05a6242 RDX: 0000000000000003 RSI: 0000000000002000 RDI: 00007f8fc027a000 RBP: 0000000000000812 R08: 0000000000000003 R09: 0000000000006000 R10: 0000000000000812 R11: 0000000000000206 R12: 00007fffb819c358 R13: 00007f8fc027d0c0 R14: 00007fffb819c6d0 R15: 00000ffff7033856 ---------------- Code disassembly (best guess): 0: 1c 00 sbb $0x0,%al 2: 00 b8 ff ff ff ff add %bh,-0x1(%rax) 8: 65 0f c1 05 2c fe db xadd %eax,%gs:0x8dbfe2c(%rip) # 0x8dbfe3c f: 08 10: 83 f8 01 cmp $0x1,%eax 13: 75 25 jne 0x3a 15: 9c pushf 16: 58 pop %rax 17: a9 00 02 00 00 test $0x200,%eax 1c: 75 39 jne 0x57 1e: 41 f7 c4 00 02 00 00 test $0x200,%r12d 25: 74 01 je 0x28 27: fb sti 28: 89 d8 mov %ebx,%eax * 2a: 5b pop %rbx <-- trapping instruction 2b: 41 5c pop %r12 2d: 41 5d pop %r13 2f: 41 5e pop %r14 31: 41 5f pop %r15 33: 5d pop %rbp 34: c3 ret 35: cc int3 36: cc int3 37: cc int3 38: cc int3 39: cc int3 3a: 90 nop 3b: 0f 0b ud2 3d: 90 nop 3e: 48 rex.W 3f: c7 .byte 0xc7