Warning: Permanently added '10.128.1.106' (ED25519) to the list of known hosts. 2024/03/19 02:16:44 fuzzer started 2024/03/19 02:16:44 dialing manager at 10.128.0.163:30015 [ 26.472123][ T28] audit: type=1400 audit(1710814604.805:82): avc: denied { node_bind } for pid=3071 comm="syz-fuzzer" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 26.492722][ T28] audit: type=1400 audit(1710814604.805:83): avc: denied { name_bind } for pid=3071 comm="syz-fuzzer" src=6060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 26.763335][ T28] audit: type=1400 audit(1710814605.095:84): avc: denied { mounton } for pid=3078 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.766032][ T3078] cgroup: Unknown subsys name 'net' [ 26.786066][ T28] audit: type=1400 audit(1710814605.105:85): avc: denied { mount } for pid=3078 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.814194][ T28] audit: type=1400 audit(1710814605.125:86): avc: denied { unmount } for pid=3078 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.946878][ T3078] cgroup: Unknown subsys name 'rlimit' [ 27.036863][ T28] audit: type=1400 audit(1710814605.375:87): avc: denied { mounton } for pid=3078 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.061763][ T28] audit: type=1400 audit(1710814605.375:88): avc: denied { mount } for pid=3078 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.077147][ T3079] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.085202][ T28] audit: type=1400 audit(1710814605.375:89): avc: denied { create } for pid=3078 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.114350][ T28] audit: type=1400 audit(1710814605.375:90): avc: denied { write } for pid=3078 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.134706][ T28] audit: type=1400 audit(1710814605.375:91): avc: denied { read } for pid=3078 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 2024/03/19 02:16:45 syscalls: 2893 2024/03/19 02:16:45 code coverage: enabled 2024/03/19 02:16:45 comparison tracing: enabled 2024/03/19 02:16:45 extra coverage: enabled 2024/03/19 02:16:45 delay kcov mmap: enabled 2024/03/19 02:16:45 setuid sandbox: enabled 2024/03/19 02:16:45 namespace sandbox: enabled 2024/03/19 02:16:45 Android sandbox: enabled 2024/03/19 02:16:45 fault injection: enabled 2024/03/19 02:16:45 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2024/03/19 02:16:45 net packet injection: enabled 2024/03/19 02:16:45 net device setup: enabled 2024/03/19 02:16:45 concurrency sanitizer: enabled 2024/03/19 02:16:45 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/03/19 02:16:45 NIC VF setup: PCI device 0000:00:11.0 is not available 2024/03/19 02:16:45 USB emulation: /dev/raw-gadget does not exist 2024/03/19 02:16:45 hci packet injection: /dev/vhci does not exist 2024/03/19 02:16:45 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 2024/03/19 02:16:45 802.15.4 emulation: enabled 2024/03/19 02:16:45 swap file: enabled [ 27.238533][ T3078] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2024/03/19 02:16:46 suppressing KCSAN reports in functions: '__xa_clear_mark' 'do_sys_poll' '__mod_memcg_lruvec_state' 2024/03/19 02:16:46 fetching corpus: 0, signal 0/2000 (executing program) 2024/03/19 02:16:46 fetching corpus: 49, signal 13725/4000 (executing program) 2024/03/19 02:16:47 fetching corpus: 99, signal 18563/6000 (executing program) 2024/03/19 02:16:47 fetching corpus: 149, signal 25152/8000 (executing program) 2024/03/19 02:16:47 fetching corpus: 198, signal 31984/10000 (executing program) 2024/03/19 02:16:47 fetching corpus: 247, signal 36480/12000 (executing program) 2024/03/19 02:16:47 fetching corpus: 297, signal 40125/14000 (executing program) 2024/03/19 02:16:47 fetching corpus: 347, signal 42439/16000 (executing program) 2024/03/19 02:16:47 fetching corpus: 396, signal 44987/18000 (executing program) 2024/03/19 02:16:47 fetching corpus: 444, signal 47347/20000 (executing program) 2024/03/19 02:16:47 fetching corpus: 494, signal 50588/22000 (executing program) 2024/03/19 02:16:47 fetching corpus: 544, signal 52189/24000 (executing program) 2024/03/19 02:16:47 fetching corpus: 594, signal 54773/26000 (executing program) 2024/03/19 02:16:47 fetching corpus: 644, signal 56388/28000 (executing program) 2024/03/19 02:16:47 fetching corpus: 694, signal 58566/30000 (executing program) 2024/03/19 02:16:47 fetching corpus: 744, signal 60222/32000 (executing program) 2024/03/19 02:16:47 fetching corpus: 794, signal 62233/34000 (executing program) 2024/03/19 02:16:47 fetching corpus: 843, signal 63379/36000 (executing program) 2024/03/19 02:16:47 fetching corpus: 893, signal 64781/38000 (executing program) 2024/03/19 02:16:47 fetching corpus: 943, signal 66851/40000 (executing program) 2024/03/19 02:16:47 fetching corpus: 993, signal 68802/42000 (executing program) 2024/03/19 02:16:47 fetching corpus: 1043, signal 70124/44000 (executing program) 2024/03/19 02:16:47 fetching corpus: 1093, signal 71732/46000 (executing program) 2024/03/19 02:16:47 fetching corpus: 1143, signal 73163/48000 (executing program) 2024/03/19 02:16:47 fetching corpus: 1193, signal 74718/50000 (executing program) 2024/03/19 02:16:47 fetching corpus: 1243, signal 76013/52000 (executing program) 2024/03/19 02:16:47 fetching corpus: 1293, signal 77317/54000 (executing program) 2024/03/19 02:16:48 fetching corpus: 1343, signal 78781/56000 (executing program) 2024/03/19 02:16:48 fetching corpus: 1393, signal 80148/58000 (executing program) 2024/03/19 02:16:48 fetching corpus: 1443, signal 81414/60000 (executing program) 2024/03/19 02:16:48 fetching corpus: 1493, signal 82975/62000 (executing program) 2024/03/19 02:16:48 fetching corpus: 1542, signal 84316/64000 (executing program) 2024/03/19 02:16:48 fetching corpus: 1591, signal 85527/66000 (executing program) 2024/03/19 02:16:48 fetching corpus: 1641, signal 86263/68000 (executing program) 2024/03/19 02:16:48 fetching corpus: 1691, signal 87971/70000 (executing program) 2024/03/19 02:16:48 fetching corpus: 1741, signal 89085/72000 (executing program) 2024/03/19 02:16:48 fetching corpus: 1791, signal 90158/74000 (executing program) 2024/03/19 02:16:48 fetching corpus: 1841, signal 91084/76000 (executing program) 2024/03/19 02:16:48 fetching corpus: 1891, signal 91883/78000 (executing program) 2024/03/19 02:16:48 fetching corpus: 1941, signal 92880/80000 (executing program) 2024/03/19 02:16:48 fetching corpus: 1990, signal 94112/82000 (executing program) 2024/03/19 02:16:48 fetching corpus: 2040, signal 95009/84000 (executing program) 2024/03/19 02:16:48 fetching corpus: 2090, signal 96319/86000 (executing program) 2024/03/19 02:16:48 fetching corpus: 2140, signal 96967/88000 (executing program) 2024/03/19 02:16:48 fetching corpus: 2190, signal 97772/90000 (executing program) 2024/03/19 02:16:48 fetching corpus: 2240, signal 98454/92000 (executing program) 2024/03/19 02:16:48 fetching corpus: 2290, signal 100534/93999 (executing program) 2024/03/19 02:16:48 fetching corpus: 2340, signal 101095/95999 (executing program) 2024/03/19 02:16:49 fetching corpus: 2390, signal 101767/97999 (executing program) 2024/03/19 02:16:49 fetching corpus: 2440, signal 102720/99999 (executing program) 2024/03/19 02:16:49 fetching corpus: 2490, signal 103512/101999 (executing program) 2024/03/19 02:16:49 fetching corpus: 2540, signal 104163/103999 (executing program) 2024/03/19 02:16:49 fetching corpus: 2590, signal 104817/105999 (executing program) 2024/03/19 02:16:49 fetching corpus: 2640, signal 105475/107999 (executing program) 2024/03/19 02:16:49 fetching corpus: 2690, signal 106163/109999 (executing program) 2024/03/19 02:16:49 fetching corpus: 2740, signal 106730/111999 (executing program) 2024/03/19 02:16:49 fetching corpus: 2790, signal 107460/113999 (executing program) 2024/03/19 02:16:49 fetching corpus: 2840, signal 108018/115999 (executing program) 2024/03/19 02:16:49 fetching corpus: 2890, signal 108854/117999 (executing program) 2024/03/19 02:16:49 fetching corpus: 2940, signal 109484/119999 (executing program) 2024/03/19 02:16:49 fetching corpus: 2990, signal 110157/121999 (executing program) 2024/03/19 02:16:49 fetching corpus: 3040, signal 110943/123999 (executing program) 2024/03/19 02:16:49 fetching corpus: 3090, signal 111771/125999 (executing program) 2024/03/19 02:16:49 fetching corpus: 3140, signal 112381/127999 (executing program) 2024/03/19 02:16:49 fetching corpus: 3190, signal 113111/129999 (executing program) 2024/03/19 02:16:49 fetching corpus: 3240, signal 113875/131999 (executing program) 2024/03/19 02:16:49 fetching corpus: 3282, signal 114468/133999 (executing program) 2024/03/19 02:16:49 fetching corpus: 3283, signal 114470/135999 (executing program) 2024/03/19 02:16:49 fetching corpus: 3283, signal 114470/137944 (executing program) 2024/03/19 02:16:49 fetching corpus: 3283, signal 114470/137944 (executing program) 2024/03/19 02:16:49 starting 5 fuzzer processes [ 31.572321][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 31.572334][ T28] audit: type=1400 audit(1710814609.865:96): avc: denied { execmem } for pid=3083 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 31.617492][ T28] audit: type=1400 audit(1710814609.935:97): avc: denied { append } for pid=2761 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.639596][ T28] audit: type=1400 audit(1710814609.935:98): avc: denied { open } for pid=2761 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.662030][ T28] audit: type=1400 audit(1710814609.935:99): avc: denied { getattr } for pid=2761 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.684657][ T28] audit: type=1400 audit(1710814609.955:100): avc: denied { read } for pid=3089 comm="syz-executor.0" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 31.706041][ T28] audit: type=1400 audit(1710814609.955:101): avc: denied { open } for pid=3089 comm="syz-executor.0" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 31.729768][ T28] audit: type=1400 audit(1710814609.955:102): avc: denied { mounton } for pid=3089 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 31.751905][ T28] audit: type=1400 audit(1710814609.955:103): avc: denied { module_request } for pid=3089 comm="syz-executor.0" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 31.844826][ T28] audit: type=1400 audit(1710814610.045:104): avc: denied { sys_module } for pid=3092 comm="syz-executor.4" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 31.965267][ T3099] ================================================================== [ 31.973469][ T3099] BUG: KCSAN: data-race in pcpu_alloc / pcpu_block_update_hint_alloc [ 31.981549][ T3099] [ 31.983900][ T3099] read-write to 0xffffffff883d04dc of 4 bytes by task 3092 on cpu 0: [ 31.991966][ T3099] pcpu_block_update_hint_alloc+0x5db/0x6a0 [ 31.997882][ T3099] pcpu_alloc_area+0x49f/0x4d0 [ 32.002665][ T3099] pcpu_alloc+0x4b3/0x10d0 [ 32.007086][ T3099] __alloc_percpu+0x24/0x30 [ 32.011600][ T3099] gro_cells_init+0x2d/0x180 [ 32.016207][ T3099] ip_tunnel_init+0x174/0x280 [ 32.020895][ T3099] vti_tunnel_init+0xb2/0xc0 [ 32.025542][ T3099] register_netdevice+0x220/0xde0 [ 32.030597][ T3099] __ip_tunnel_create+0x1c5/0x270 [ 32.035633][ T3099] ip_tunnel_init_net+0x183/0x3c0 [ 32.040663][ T3099] vti_init_net+0x39/0xf0 [ 32.044993][ T3099] ops_init+0x201/0x2d0 [ 32.049155][ T3099] setup_net+0x2ea/0x7c0 [ 32.053421][ T3099] copy_net_ns+0x389/0x520 [ 32.057842][ T3099] create_new_namespaces+0x228/0x430 [ 32.063135][ T3099] unshare_nsproxy_namespaces+0xe6/0x120 [ 32.068773][ T3099] ksys_unshare+0x3da/0x720 [ 32.073276][ T3099] __x64_sys_unshare+0x1f/0x30 [ 32.078043][ T3099] do_syscall_64+0xd3/0x1d0 [ 32.082556][ T3099] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 32.088446][ T3099] [ 32.090763][ T3099] read to 0xffffffff883d04dc of 4 bytes by task 3099 on cpu 1: [ 32.098299][ T3099] pcpu_alloc+0x9aa/0x10d0 [ 32.102724][ T3099] __alloc_percpu+0x24/0x30 [ 32.107227][ T3099] synproxy_net_init+0xe5/0x1a0 [ 32.112085][ T3099] ops_init+0x201/0x2d0 [ 32.116246][ T3099] setup_net+0x2ea/0x7c0 [ 32.120508][ T3099] copy_net_ns+0x389/0x520 [ 32.124930][ T3099] create_new_namespaces+0x228/0x430 [ 32.130217][ T3099] unshare_nsproxy_namespaces+0xe6/0x120 [ 32.135859][ T3099] ksys_unshare+0x3da/0x720 [ 32.140390][ T3099] __x64_sys_unshare+0x1f/0x30 [ 32.145212][ T3099] do_syscall_64+0xd3/0x1d0 [ 32.149726][ T3099] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 32.155623][ T3099] [ 32.157938][ T3099] value changed: 0x00000004 -> 0x00000003 [ 32.163644][ T3099] [ 32.165957][ T3099] Reported by Kernel Concurrency Sanitizer on: [ 32.172094][ T3099] CPU: 1 PID: 3099 Comm: syz-executor.3 Not tainted 6.8.0-syzkaller-11567-gb3603fcb79b1 #0 [ 32.182076][ T3099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 32.192129][ T3099] ================================================================== [ 32.308422][ T3099] chnl_net:caif_netlink_parms(): no params data found [ 32.323386][ T3092] chnl_net:caif_netlink_parms(): no params data found [ 32.427033][ T3091] chnl_net:caif_netlink_parms(): no params data found [ 32.459088][ T3099] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.466197][ T3099] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.473548][ T3099] bridge_slave_0: entered allmulticast mode [ 32.480246][ T3099] bridge_slave_0: entered promiscuous mode [ 32.494094][ T3098] chnl_net:caif_netlink_parms(): no params data found [ 32.515121][ T3099] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.522219][ T3099] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.544872][ T3099] bridge_slave_1: entered allmulticast mode [ 32.551921][ T3099] bridge_slave_1: entered promiscuous mode [ 32.574332][ T3092] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.581600][ T3092] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.588987][ T3092] bridge_slave_0: entered allmulticast mode [ 32.595625][ T3092] bridge_slave_0: entered promiscuous mode [ 32.602986][ T3092] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.610137][ T3092] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.617323][ T3092] bridge_slave_1: entered allmulticast mode [ 32.623855][ T3092] bridge_slave_1: entered promiscuous mode [ 32.646870][ T3099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.678810][ T3099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.689809][ T3092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.714155][ T3089] chnl_net:caif_netlink_parms(): no params data found [ 32.735644][ T3092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.745917][ T3091] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.752985][ T3091] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.760612][ T3091] bridge_slave_0: entered allmulticast mode [ 32.768037][ T3091] bridge_slave_0: entered promiscuous mode [ 32.784255][ T3099] team0: Port device team_slave_0 added [ 32.791852][ T3099] team0: Port device team_slave_1 added [ 32.808439][ T3091] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.815568][ T3091] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.823198][ T3091] bridge_slave_1: entered allmulticast mode [ 32.830801][ T3091] bridge_slave_1: entered promiscuous mode [ 32.851849][ T3092] team0: Port device team_slave_0 added [ 32.859178][ T3092] team0: Port device team_slave_1 added [ 32.876625][ T3098] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.883723][ T3098] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.892245][ T3098] bridge_slave_0: entered allmulticast mode [ 32.899017][ T3098] bridge_slave_0: entered promiscuous mode [ 32.923578][ T3091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.933735][ T3098] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.940853][ T3098] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.949843][ T3098] bridge_slave_1: entered allmulticast mode [ 32.956425][ T3098] bridge_slave_1: entered promiscuous mode [ 32.969169][ T3099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.976192][ T3099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.002151][ T3099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.015392][ T3091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.043636][ T3092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.050861][ T3092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.076866][ T3092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.105236][ T3098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.114644][ T3099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.121641][ T3099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.147588][ T3099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.165128][ T3089] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.172283][ T3089] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.181074][ T3089] bridge_slave_0: entered allmulticast mode [ 33.187577][ T3089] bridge_slave_0: entered promiscuous mode [ 33.194377][ T3092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.201445][ T3092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.227400][ T3092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.240507][ T3098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.252713][ T3091] team0: Port device team_slave_0 added [ 33.259626][ T3089] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.266788][ T3089] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.274026][ T3089] bridge_slave_1: entered allmulticast mode [ 33.280823][ T3089] bridge_slave_1: entered promiscuous mode [ 33.291592][ T3091] team0: Port device team_slave_1 added [ 33.340390][ T3098] team0: Port device team_slave_0 added [ 33.347975][ T3089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.359262][ T3099] hsr_slave_0: entered promiscuous mode [ 33.365574][ T3099] hsr_slave_1: entered promiscuous mode [ 33.385076][ T3098] team0: Port device team_slave_1 added [ 33.391776][ T3089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.407415][ T3091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.414424][ T3091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.440484][ T3091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.460659][ T3092] hsr_slave_0: entered promiscuous mode [ 33.466873][ T3092] hsr_slave_1: entered promiscuous mode [ 33.472841][ T3092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.481973][ T3092] Cannot create hsr debugfs directory [ 33.506492][ T3091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.513451][ T3091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.543893][ T3091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.568428][ T3089] team0: Port device team_slave_0 added [ 33.577974][ T3098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.584955][ T3098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.610908][ T3098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.622027][ T3098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.629143][ T3098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.632376][ T28] audit: type=1400 audit(1710814611.965:105): avc: denied { remove_name } for pid=2761 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.655198][ T3098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.689311][ T3089] team0: Port device team_slave_1 added [ 33.727349][ T3089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.734320][ T3089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.760258][ T3089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.771392][ T3089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.778453][ T3089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.804446][ T3089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.821984][ T3091] hsr_slave_0: entered promiscuous mode [ 33.827847][ T3091] hsr_slave_1: entered promiscuous mode [ 33.833702][ T3091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.841555][ T3091] Cannot create hsr debugfs directory [ 33.865546][ T3098] hsr_slave_0: entered promiscuous mode [ 33.871551][ T3098] hsr_slave_1: entered promiscuous mode [ 33.877449][ T3098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.885056][ T3098] Cannot create hsr debugfs directory [ 33.911580][ T3089] hsr_slave_0: entered promiscuous mode [ 33.917561][ T3089] hsr_slave_1: entered promiscuous mode [ 33.923403][ T3089] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.931081][ T3089] Cannot create hsr debugfs directory [ 33.977842][ T3099] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.987386][ T3099] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.010988][ T3099] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.020210][ T3099] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.058877][ T3092] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.070297][ T3092] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.079044][ T3092] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.088000][ T3092] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.121977][ T3091] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.131038][ T3091] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.160902][ T3089] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.169665][ T3091] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.179156][ T3091] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.196010][ T3099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.203933][ T3089] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.213219][ T3089] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.222148][ T3089] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.257874][ T3098] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.267370][ T3099] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.278614][ T3098] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.287054][ T3098] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.304389][ T3164] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.311554][ T3164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.324305][ T3098] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.371992][ T3171] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.379271][ T3171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.395484][ T3099] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.406531][ T3099] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.436746][ T3092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.467955][ T3092] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.477400][ T3089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.495348][ T3098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.516827][ T3089] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.527239][ T3174] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.534385][ T3174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.551930][ T3099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.565534][ T3091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.574477][ T3174] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.581559][ T3174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.614259][ T3092] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.624675][ T3092] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.639257][ T3098] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.650211][ T3164] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.657391][ T3164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.668809][ T3164] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.675935][ T3164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.722945][ T3164] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.730141][ T3164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.743664][ T3091] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.758797][ T3171] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.765948][ T3171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.799614][ T3092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.819480][ T3164] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.826589][ T3164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.850161][ T3174] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.857295][ T3174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.883573][ T3098] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.894010][ T3098] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.936754][ T3089] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.947231][ T3089] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.021376][ T3099] veth0_vlan: entered promiscuous mode [ 35.056836][ T3099] veth1_vlan: entered promiscuous mode [ 35.071876][ T3098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.102970][ T3089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.149596][ T3091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.161009][ T3099] veth0_macvtap: entered promiscuous mode [ 35.195558][ T3099] veth1_macvtap: entered promiscuous mode [ 35.232387][ T3092] veth0_vlan: entered promiscuous mode [ 35.251465][ T3099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.273223][ T3092] veth1_vlan: entered promiscuous mode [ 35.295664][ T3099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.304131][ T3099] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.312959][ T3099] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.321845][ T3099] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.330670][ T3099] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.354270][ T3092] veth0_macvtap: entered promiscuous mode [ 35.374362][ T3092] veth1_macvtap: entered promiscuous mode [ 35.395784][ T3098] veth0_vlan: entered promiscuous mode [ 35.420017][ T3092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.430578][ T3092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.446962][ T3092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.455325][ T3089] veth0_vlan: entered promiscuous mode [ 35.463393][ T3089] veth1_vlan: entered promiscuous mode 02:16:53 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0xb, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x0}]}]}, 0x54}}, 0x0) [ 35.482367][ T3098] veth1_vlan: entered promiscuous mode [ 35.490304][ T3091] veth0_vlan: entered promiscuous mode [ 35.508428][ T3091] veth1_vlan: entered promiscuous mode [ 35.520894][ T3092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 02:16:53 executing program 3: r0 = add_key$keyring(&(0x7f0000001240), &(0x7f0000001280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000000)=@chain={'key_or_keyring:', r0}) [ 35.531353][ T3092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.549938][ T3092] batman_adv: batadv0: Interface activated: batadv_slave_1 02:16:53 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0xb, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x0}]}]}, 0x54}}, 0x0) 02:16:53 executing program 3: r0 = add_key$keyring(&(0x7f0000001240), &(0x7f0000001280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000000)=@chain={'key_or_keyring:', r0}) [ 35.582417][ T3091] veth0_macvtap: entered promiscuous mode [ 35.590449][ T3092] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.599347][ T3092] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.608203][ T3092] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.617094][ T3092] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 02:16:54 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0xb, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x0}]}]}, 0x54}}, 0x0) [ 35.653754][ T3091] veth1_macvtap: entered promiscuous mode [ 35.670854][ T3098] veth0_macvtap: entered promiscuous mode [ 35.692648][ T3098] veth1_macvtap: entered promiscuous mode 02:16:54 executing program 3: r0 = add_key$keyring(&(0x7f0000001240), &(0x7f0000001280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000000)=@chain={'key_or_keyring:', r0}) [ 35.708990][ T3089] veth0_macvtap: entered promiscuous mode [ 35.746979][ T3098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 02:16:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}}}, 0xb8}}, 0x0) 02:16:54 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0xb, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x0}]}]}, 0x54}}, 0x0) [ 35.757616][ T3098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.767507][ T3098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.777973][ T3098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.794161][ T3098] batman_adv: batadv0: Interface activated: batadv_slave_0 02:16:54 executing program 3: r0 = add_key$keyring(&(0x7f0000001240), &(0x7f0000001280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000000)=@chain={'key_or_keyring:', r0}) [ 35.810460][ T3089] veth1_macvtap: entered promiscuous mode [ 35.831720][ T3091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.842325][ T3091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 02:16:54 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x6, &(0x7f0000000540)=@framed={{}, [@alu, @alu, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, 0x0}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000040)={@private0, 0x0, r4}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@rand_addr=' \x01\x00', @private1, @local, 0x1, 0x7c, 0x0, 0x0, 0x800005, 0x0, r4}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000070000000000c5adfcf4561a1600000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = fsmount(0xffffffffffffffff, 0x0, 0x71) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r8, &(0x7f00000002c0), &(0x7f00000003c0)=@udp6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x6, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x0, 0x2, 0x7, 0x9, 0x4, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xb, 0x3, 0x3f}, 0x10, 0x0, r5, 0x0, &(0x7f0000000300)=[0x1, r6, r7, r8]}, 0x90) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r9, 0x0, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, '.\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r12, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r13, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}]}, 0x1c}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r10, 0x8936, &(0x7f0000000640)={@private0, 0x71, r14}) sendmsg$nl_route(r9, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@ipv6_newnexthop={0x2c, 0x68, 0x300, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x2d}, [@NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x8014) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 02:16:54 executing program 4: r0 = add_key$keyring(&(0x7f0000001240), &(0x7f0000001280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000000)=@chain={'key_or_keyring:', r0}) 02:16:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}}}, 0xb8}}, 0x0) [ 35.852291][ T3091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.862744][ T3091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.872719][ T3091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.883203][ T3091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.910155][ T3091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.918561][ T3098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.929148][ T3098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.938984][ T3098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.949471][ T3098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.964923][ T3098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.998660][ T3091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 02:16:54 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x7fffffff, 0x1300, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) [ 36.009217][ T3091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.019139][ T3091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.029690][ T3091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.039552][ T3091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.050009][ T3091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 02:16:54 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}}}, 0xb8}}, 0x0) 02:16:54 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x6, &(0x7f0000000540)=@framed={{}, [@alu, @alu, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, 0x0}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000040)={@private0, 0x0, r4}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@rand_addr=' \x01\x00', @private1, @local, 0x1, 0x7c, 0x0, 0x0, 0x800005, 0x0, r4}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000070000000000c5adfcf4561a1600000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = fsmount(0xffffffffffffffff, 0x0, 0x71) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r8, &(0x7f00000002c0), &(0x7f00000003c0)=@udp6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x6, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x0, 0x2, 0x7, 0x9, 0x4, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xb, 0x3, 0x3f}, 0x10, 0x0, r5, 0x0, &(0x7f0000000300)=[0x1, r6, r7, r8]}, 0x90) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r9, 0x0, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, '.\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r12, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r13, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}]}, 0x1c}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r10, 0x8936, &(0x7f0000000640)={@private0, 0x71, r14}) sendmsg$nl_route(r9, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@ipv6_newnexthop={0x2c, 0x68, 0x300, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x2d}, [@NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x8014) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) [ 36.067900][ T3091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.110288][ T3089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.120894][ T3089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.130739][ T3089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.141356][ T3089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 02:16:54 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x6, &(0x7f0000000540)=@framed={{}, [@alu, @alu, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, 0x0}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000040)={@private0, 0x0, r4}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@rand_addr=' \x01\x00', @private1, @local, 0x1, 0x7c, 0x0, 0x0, 0x800005, 0x0, r4}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000070000000000c5adfcf4561a1600000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = fsmount(0xffffffffffffffff, 0x0, 0x71) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r8, &(0x7f00000002c0), &(0x7f00000003c0)=@udp6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x6, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x0, 0x2, 0x7, 0x9, 0x4, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xb, 0x3, 0x3f}, 0x10, 0x0, r5, 0x0, &(0x7f0000000300)=[0x1, r6, r7, r8]}, 0x90) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r9, 0x0, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, '.\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r12, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r13, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}]}, 0x1c}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r10, 0x8936, &(0x7f0000000640)={@private0, 0x71, r14}) sendmsg$nl_route(r9, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@ipv6_newnexthop={0x2c, 0x68, 0x300, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x2d}, [@NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x8014) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) [ 36.151231][ T3089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.161697][ T3089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.171545][ T3089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.182005][ T3089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.198447][ T3089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.210553][ T3098] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.219371][ T3098] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.228086][ T3098] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.236857][ T3098] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.250272][ T3089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.260861][ T3089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.270821][ T3089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.281506][ T3089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.291397][ T3089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.301879][ T3089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.311847][ T3089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.322345][ T3089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.335312][ T3089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.343550][ T3091] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.352454][ T3091] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.361273][ T3091] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.370040][ T3091] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.379610][ T3266] syz-executor.4 (3266) used greatest stack depth: 11456 bytes left [ 36.395175][ T3089] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 02:16:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}}}, 0xb8}}, 0x0) 02:16:54 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x6, &(0x7f0000000540)=@framed={{}, [@alu, @alu, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, 0x0}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000040)={@private0, 0x0, r4}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@rand_addr=' \x01\x00', @private1, @local, 0x1, 0x7c, 0x0, 0x0, 0x800005, 0x0, r4}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000070000000000c5adfcf4561a1600000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = fsmount(0xffffffffffffffff, 0x0, 0x71) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r8, &(0x7f00000002c0), &(0x7f00000003c0)=@udp6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x6, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x0, 0x2, 0x7, 0x9, 0x4, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xb, 0x3, 0x3f}, 0x10, 0x0, r5, 0x0, &(0x7f0000000300)=[0x1, r6, r7, r8]}, 0x90) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r9, 0x0, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, '.\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r12, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r13, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}]}, 0x1c}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r10, 0x8936, &(0x7f0000000640)={@private0, 0x71, r14}) sendmsg$nl_route(r9, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@ipv6_newnexthop={0x2c, 0x68, 0x300, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x2d}, [@NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x8014) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) [ 36.403912][ T3089] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.412697][ T3089] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.421540][ T3089] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 02:16:54 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x6, &(0x7f0000000540)=@framed={{}, [@alu, @alu, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, 0x0}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000040)={@private0, 0x0, r4}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@rand_addr=' \x01\x00', @private1, @local, 0x1, 0x7c, 0x0, 0x0, 0x800005, 0x0, r4}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000070000000000c5adfcf4561a1600000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = fsmount(0xffffffffffffffff, 0x0, 0x71) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r8, &(0x7f00000002c0), &(0x7f00000003c0)=@udp6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x6, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x0, 0x2, 0x7, 0x9, 0x4, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xb, 0x3, 0x3f}, 0x10, 0x0, r5, 0x0, &(0x7f0000000300)=[0x1, r6, r7, r8]}, 0x90) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r9, 0x0, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, '.\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r12, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r13, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}]}, 0x1c}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r10, 0x8936, &(0x7f0000000640)={@private0, 0x71, r14}) sendmsg$nl_route(r9, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@ipv6_newnexthop={0x2c, 0x68, 0x300, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x2d}, [@NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x8014) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 02:16:54 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x6, &(0x7f0000000540)=@framed={{}, [@alu, @alu, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, 0x0}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000040)={@private0, 0x0, r4}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@rand_addr=' \x01\x00', @private1, @local, 0x1, 0x7c, 0x0, 0x0, 0x800005, 0x0, r4}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000070000000000c5adfcf4561a1600000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = fsmount(0xffffffffffffffff, 0x0, 0x71) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r8, &(0x7f00000002c0), &(0x7f00000003c0)=@udp6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x6, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x0, 0x2, 0x7, 0x9, 0x4, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xb, 0x3, 0x3f}, 0x10, 0x0, r5, 0x0, &(0x7f0000000300)=[0x1, r6, r7, r8]}, 0x90) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r9, 0x0, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, '.\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r12, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r13, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}]}, 0x1c}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r10, 0x8936, &(0x7f0000000640)={@private0, 0x71, r14}) sendmsg$nl_route(r9, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@ipv6_newnexthop={0x2c, 0x68, 0x300, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x2d}, [@NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x8014) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 02:16:54 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x6, &(0x7f0000000540)=@framed={{}, [@alu, @alu, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, 0x0}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000040)={@private0, 0x0, r4}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@rand_addr=' \x01\x00', @private1, @local, 0x1, 0x7c, 0x0, 0x0, 0x800005, 0x0, r4}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000070000000000c5adfcf4561a1600000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = fsmount(0xffffffffffffffff, 0x0, 0x71) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r8, &(0x7f00000002c0), &(0x7f00000003c0)=@udp6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x6, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x0, 0x2, 0x7, 0x9, 0x4, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xb, 0x3, 0x3f}, 0x10, 0x0, r5, 0x0, &(0x7f0000000300)=[0x1, r6, r7, r8]}, 0x90) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r9, 0x0, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, '.\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r12, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r13, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}]}, 0x1c}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r10, 0x8936, &(0x7f0000000640)={@private0, 0x71, r14}) sendmsg$nl_route(r9, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@ipv6_newnexthop={0x2c, 0x68, 0x300, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x2d}, [@NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x8014) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 02:16:54 executing program 0: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="2500000002"], 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r4 = socket(0x1, 0x803, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r7, 0x25, 0x0, @void}, 0x10) [ 36.582225][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 36.582259][ T28] audit: type=1400 audit(1710814614.915:132): avc: denied { create } for pid=3280 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 02:16:54 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @empty}], 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f00000003c0)=0x90) 02:16:54 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/24, 0x18}], 0x1, 0x4013d, 0x0) 02:16:55 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x6, &(0x7f0000000540)=@framed={{}, [@alu, @alu, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, 0x0}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000040)={@private0, 0x0, r4}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@rand_addr=' \x01\x00', @private1, @local, 0x1, 0x7c, 0x0, 0x0, 0x800005, 0x0, r4}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000070000000000c5adfcf4561a1600000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = fsmount(0xffffffffffffffff, 0x0, 0x71) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r8, &(0x7f00000002c0), &(0x7f00000003c0)=@udp6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x6, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x0, 0x2, 0x7, 0x9, 0x4, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xb, 0x3, 0x3f}, 0x10, 0x0, r5, 0x0, &(0x7f0000000300)=[0x1, r6, r7, r8]}, 0x90) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r9, 0x0, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, '.\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r12, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r13, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}]}, 0x1c}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r10, 0x8936, &(0x7f0000000640)={@private0, 0x71, r14}) sendmsg$nl_route(r9, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@ipv6_newnexthop={0x2c, 0x68, 0x300, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x2d}, [@NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x8014) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 02:16:55 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x6, &(0x7f0000000540)=@framed={{}, [@alu, @alu, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, 0x0}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000040)={@private0, 0x0, r4}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@rand_addr=' \x01\x00', @private1, @local, 0x1, 0x7c, 0x0, 0x0, 0x800005, 0x0, r4}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000070000000000c5adfcf4561a1600000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = fsmount(0xffffffffffffffff, 0x0, 0x71) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r8, &(0x7f00000002c0), &(0x7f00000003c0)=@udp6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x6, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x0, 0x2, 0x7, 0x9, 0x4, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xb, 0x3, 0x3f}, 0x10, 0x0, r5, 0x0, &(0x7f0000000300)=[0x1, r6, r7, r8]}, 0x90) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r9, 0x0, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, '.\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r12, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r13, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}]}, 0x1c}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r10, 0x8936, &(0x7f0000000640)={@private0, 0x71, r14}) sendmsg$nl_route(r9, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@ipv6_newnexthop={0x2c, 0x68, 0x300, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x2d}, [@NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x8014) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) [ 36.635626][ T28] audit: type=1400 audit(1710814614.925:133): avc: denied { ioctl } for pid=3280 comm="syz-executor.0" path="socket:[2791]" dev="sockfs" ino=2791 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 02:16:55 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x6, &(0x7f0000000540)=@framed={{}, [@alu, @alu, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, 0x0}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000040)={@private0, 0x0, r4}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@rand_addr=' \x01\x00', @private1, @local, 0x1, 0x7c, 0x0, 0x0, 0x800005, 0x0, r4}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000070000000000c5adfcf4561a1600000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = fsmount(0xffffffffffffffff, 0x0, 0x71) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r8, &(0x7f00000002c0), &(0x7f00000003c0)=@udp6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x6, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x0, 0x2, 0x7, 0x9, 0x4, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xb, 0x3, 0x3f}, 0x10, 0x0, r5, 0x0, &(0x7f0000000300)=[0x1, r6, r7, r8]}, 0x90) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r9, 0x0, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, '.\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r12, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r13, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}]}, 0x1c}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r10, 0x8936, &(0x7f0000000640)={@private0, 0x71, r14}) sendmsg$nl_route(r9, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@ipv6_newnexthop={0x2c, 0x68, 0x300, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x2d}, [@NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x8014) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 02:16:55 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x6, &(0x7f0000000540)=@framed={{}, [@alu, @alu, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, 0x0}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000040)={@private0, 0x0, r4}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@rand_addr=' \x01\x00', @private1, @local, 0x1, 0x7c, 0x0, 0x0, 0x800005, 0x0, r4}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000070000000000c5adfcf4561a1600000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = fsmount(0xffffffffffffffff, 0x0, 0x71) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r8, &(0x7f00000002c0), &(0x7f00000003c0)=@udp6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x6, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x0, 0x2, 0x7, 0x9, 0x4, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xb, 0x3, 0x3f}, 0x10, 0x0, r5, 0x0, &(0x7f0000000300)=[0x1, r6, r7, r8]}, 0x90) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r9, 0x0, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, '.\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r12, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r13, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}]}, 0x1c}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r10, 0x8936, &(0x7f0000000640)={@private0, 0x71, r14}) sendmsg$nl_route(r9, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@ipv6_newnexthop={0x2c, 0x68, 0x300, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x2d}, [@NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x8014) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) [ 36.765278][ T28] audit: type=1400 audit(1710814615.015:134): avc: denied { write } for pid=3287 comm="syz-executor.1" name="arp" dev="proc" ino=4026532575 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 36.788240][ T28] audit: type=1400 audit(1710814615.025:135): avc: denied { setopt } for pid=3286 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 36.808122][ T28] audit: type=1400 audit(1710814615.025:136): avc: denied { name_bind } for pid=3286 comm="syz-executor.2" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 36.830618][ T28] audit: type=1400 audit(1710814615.025:137): avc: denied { write } for pid=3286 comm="syz-executor.2" laddr=::ffff:0.0.0.0 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 02:16:55 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x6, &(0x7f0000000540)=@framed={{}, [@alu, @alu, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, 0x0}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000040)={@private0, 0x0, r4}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@rand_addr=' \x01\x00', @private1, @local, 0x1, 0x7c, 0x0, 0x0, 0x800005, 0x0, r4}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000070000000000c5adfcf4561a1600000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = fsmount(0xffffffffffffffff, 0x0, 0x71) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r8, &(0x7f00000002c0), &(0x7f00000003c0)=@udp6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x6, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x0, 0x2, 0x7, 0x9, 0x4, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xb, 0x3, 0x3f}, 0x10, 0x0, r5, 0x0, &(0x7f0000000300)=[0x1, r6, r7, r8]}, 0x90) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r9, 0x0, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, '.\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r12, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r13, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}]}, 0x1c}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r10, 0x8936, &(0x7f0000000640)={@private0, 0x71, r14}) sendmsg$nl_route(r9, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@ipv6_newnexthop={0x2c, 0x68, 0x300, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x2d}, [@NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x8014) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 02:16:55 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x6, &(0x7f0000000540)=@framed={{}, [@alu, @alu, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, 0x0}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000040)={@private0, 0x0, r4}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@rand_addr=' \x01\x00', @private1, @local, 0x1, 0x7c, 0x0, 0x0, 0x800005, 0x0, r4}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000070000000000c5adfcf4561a1600000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = fsmount(0xffffffffffffffff, 0x0, 0x71) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r8, &(0x7f00000002c0), &(0x7f00000003c0)=@udp6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x6, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x0, 0x2, 0x7, 0x9, 0x4, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xb, 0x3, 0x3f}, 0x10, 0x0, r5, 0x0, &(0x7f0000000300)=[0x1, r6, r7, r8]}, 0x90) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r9, 0x0, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, '.\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r12, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r13, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}]}, 0x1c}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r10, 0x8936, &(0x7f0000000640)={@private0, 0x71, r14}) sendmsg$nl_route(r9, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@ipv6_newnexthop={0x2c, 0x68, 0x300, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x2d}, [@NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x8014) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 02:16:55 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x6, &(0x7f0000000540)=@framed={{}, [@alu, @alu, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, 0x0}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000040)={@private0, 0x0, r4}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@rand_addr=' \x01\x00', @private1, @local, 0x1, 0x7c, 0x0, 0x0, 0x800005, 0x0, r4}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000070000000000c5adfcf4561a1600000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = fsmount(0xffffffffffffffff, 0x0, 0x71) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r8, &(0x7f00000002c0), &(0x7f00000003c0)=@udp6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x6, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x0, 0x2, 0x7, 0x9, 0x4, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xb, 0x3, 0x3f}, 0x10, 0x0, r5, 0x0, &(0x7f0000000300)=[0x1, r6, r7, r8]}, 0x90) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r9, 0x0, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, '.\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r12, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r13, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}]}, 0x1c}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r10, 0x8936, &(0x7f0000000640)={@private0, 0x71, r14}) sendmsg$nl_route(r9, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@ipv6_newnexthop={0x2c, 0x68, 0x300, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x2d}, [@NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x8014) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) [ 36.853160][ T28] audit: type=1400 audit(1710814615.025:138): avc: denied { connect } for pid=3286 comm="syz-executor.2" laddr=::ffff:0.0.0.0 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 36.875887][ T28] audit: type=1400 audit(1710814615.025:139): avc: denied { name_connect } for pid=3286 comm="syz-executor.2" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 02:16:55 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x6, &(0x7f0000000540)=@framed={{}, [@alu, @alu, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, 0x0}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000040)={@private0, 0x0, r4}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@rand_addr=' \x01\x00', @private1, @local, 0x1, 0x7c, 0x0, 0x0, 0x800005, 0x0, r4}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000070000000000c5adfcf4561a1600000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = fsmount(0xffffffffffffffff, 0x0, 0x71) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r8, &(0x7f00000002c0), &(0x7f00000003c0)=@udp6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x6, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x0, 0x2, 0x7, 0x9, 0x4, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xb, 0x3, 0x3f}, 0x10, 0x0, r5, 0x0, &(0x7f0000000300)=[0x1, r6, r7, r8]}, 0x90) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r9, 0x0, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, '.\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r12, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r13, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}]}, 0x1c}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r10, 0x8936, &(0x7f0000000640)={@private0, 0x71, r14}) sendmsg$nl_route(r9, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@ipv6_newnexthop={0x2c, 0x68, 0x300, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x2d}, [@NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x8014) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 02:16:55 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x6, &(0x7f0000000540)=@framed={{}, [@alu, @alu, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, 0x0}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000040)={@private0, 0x0, r4}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@rand_addr=' \x01\x00', @private1, @local, 0x1, 0x7c, 0x0, 0x0, 0x800005, 0x0, r4}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000070000000000c5adfcf4561a1600000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = fsmount(0xffffffffffffffff, 0x0, 0x71) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r8, &(0x7f00000002c0), &(0x7f00000003c0)=@udp6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x6, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x0, 0x2, 0x7, 0x9, 0x4, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xb, 0x3, 0x3f}, 0x10, 0x0, r5, 0x0, &(0x7f0000000300)=[0x1, r6, r7, r8]}, 0x90) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r9, 0x0, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, '.\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r12, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r13, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}]}, 0x1c}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r10, 0x8936, &(0x7f0000000640)={@private0, 0x71, r14}) sendmsg$nl_route(r9, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@ipv6_newnexthop={0x2c, 0x68, 0x300, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x2d}, [@NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x8014) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) [ 36.962722][ T28] audit: type=1400 audit(1710814615.295:140): avc: denied { getopt } for pid=3286 comm="syz-executor.2" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 36.989759][ T3289] syz-executor.2 (3289) used greatest stack depth: 11048 bytes left 02:16:55 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x6, &(0x7f0000000540)=@framed={{}, [@alu, @alu, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, 0x0}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000040)={@private0, 0x0, r4}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@rand_addr=' \x01\x00', @private1, @local, 0x1, 0x7c, 0x0, 0x0, 0x800005, 0x0, r4}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000070000000000c5adfcf4561a1600000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = fsmount(0xffffffffffffffff, 0x0, 0x71) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r8, &(0x7f00000002c0), &(0x7f00000003c0)=@udp6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x6, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x0, 0x2, 0x7, 0x9, 0x4, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xb, 0x3, 0x3f}, 0x10, 0x0, r5, 0x0, &(0x7f0000000300)=[0x1, r6, r7, r8]}, 0x90) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r9, 0x0, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, '.\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r12, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r13, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}]}, 0x1c}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r10, 0x8936, &(0x7f0000000640)={@private0, 0x71, r14}) sendmsg$nl_route(r9, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@ipv6_newnexthop={0x2c, 0x68, 0x300, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x2d}, [@NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x8014) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 02:16:55 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x6, &(0x7f0000000540)=@framed={{}, [@alu, @alu, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, 0x0}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000040)={@private0, 0x0, r4}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@rand_addr=' \x01\x00', @private1, @local, 0x1, 0x7c, 0x0, 0x0, 0x800005, 0x0, r4}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000070000000000c5adfcf4561a1600000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = fsmount(0xffffffffffffffff, 0x0, 0x71) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r8, &(0x7f00000002c0), &(0x7f00000003c0)=@udp6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x6, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x0, 0x2, 0x7, 0x9, 0x4, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xb, 0x3, 0x3f}, 0x10, 0x0, r5, 0x0, &(0x7f0000000300)=[0x1, r6, r7, r8]}, 0x90) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r9, 0x0, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, '.\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r12, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r13, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}]}, 0x1c}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r10, 0x8936, &(0x7f0000000640)={@private0, 0x71, r14}) sendmsg$nl_route(r9, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@ipv6_newnexthop={0x2c, 0x68, 0x300, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x2d}, [@NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x8014) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 02:16:55 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x6, &(0x7f0000000540)=@framed={{}, [@alu, @alu, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, 0x0}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000040)={@private0, 0x0, r4}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@rand_addr=' \x01\x00', @private1, @local, 0x1, 0x7c, 0x0, 0x0, 0x800005, 0x0, r4}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000070000000000c5adfcf4561a1600000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = fsmount(0xffffffffffffffff, 0x0, 0x71) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r8, &(0x7f00000002c0), &(0x7f00000003c0)=@udp6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x6, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x0, 0x2, 0x7, 0x9, 0x4, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xb, 0x3, 0x3f}, 0x10, 0x0, r5, 0x0, &(0x7f0000000300)=[0x1, r6, r7, r8]}, 0x90) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r9, 0x0, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, '.\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r12, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r13, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}]}, 0x1c}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r10, 0x8936, &(0x7f0000000640)={@private0, 0x71, r14}) sendmsg$nl_route(r9, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@ipv6_newnexthop={0x2c, 0x68, 0x300, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x2d}, [@NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x8014) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 02:16:55 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x7fffffff, 0x1300, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 02:16:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/24, 0x18}], 0x1, 0x4013d, 0x0) 02:16:55 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x6, &(0x7f0000000540)=@framed={{}, [@alu, @alu, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, 0x0}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000040)={@private0, 0x0, r4}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@rand_addr=' \x01\x00', @private1, @local, 0x1, 0x7c, 0x0, 0x0, 0x800005, 0x0, r4}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000070000000000c5adfcf4561a1600000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = fsmount(0xffffffffffffffff, 0x0, 0x71) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r8, &(0x7f00000002c0), &(0x7f00000003c0)=@udp6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x6, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x0, 0x2, 0x7, 0x9, 0x4, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xb, 0x3, 0x3f}, 0x10, 0x0, r5, 0x0, &(0x7f0000000300)=[0x1, r6, r7, r8]}, 0x90) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r9, 0x0, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, '.\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r12, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r13, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}]}, 0x1c}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r10, 0x8936, &(0x7f0000000640)={@private0, 0x71, r14}) sendmsg$nl_route(r9, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@ipv6_newnexthop={0x2c, 0x68, 0x300, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x2d}, [@NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x8014) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 02:16:55 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x6, &(0x7f0000000540)=@framed={{}, [@alu, @alu, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, 0x0}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000040)={@private0, 0x0, r4}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@rand_addr=' \x01\x00', @private1, @local, 0x1, 0x7c, 0x0, 0x0, 0x800005, 0x0, r4}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000070000000000c5adfcf4561a1600000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = fsmount(0xffffffffffffffff, 0x0, 0x71) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r8, &(0x7f00000002c0), &(0x7f00000003c0)=@udp6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x6, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x0, 0x2, 0x7, 0x9, 0x4, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xb, 0x3, 0x3f}, 0x10, 0x0, r5, 0x0, &(0x7f0000000300)=[0x1, r6, r7, r8]}, 0x90) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r9, 0x0, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, '.\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r12, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r13, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}]}, 0x1c}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r10, 0x8936, &(0x7f0000000640)={@private0, 0x71, r14}) sendmsg$nl_route(r9, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@ipv6_newnexthop={0x2c, 0x68, 0x300, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x2d}, [@NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x8014) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 02:16:55 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x7fffffff, 0x1300, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 02:16:55 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="2500000002"], 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r4 = socket(0x1, 0x803, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r7, 0x25, 0x0, @void}, 0x10) 02:16:55 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x6, &(0x7f0000000540)=@framed={{}, [@alu, @alu, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, 0x0}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000040)={@private0, 0x0, r4}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@rand_addr=' \x01\x00', @private1, @local, 0x1, 0x7c, 0x0, 0x0, 0x800005, 0x0, r4}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000070000000000c5adfcf4561a1600000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = fsmount(0xffffffffffffffff, 0x0, 0x71) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r8, &(0x7f00000002c0), &(0x7f00000003c0)=@udp6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x6, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x0, 0x2, 0x7, 0x9, 0x4, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xb, 0x3, 0x3f}, 0x10, 0x0, r5, 0x0, &(0x7f0000000300)=[0x1, r6, r7, r8]}, 0x90) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r9, 0x0, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, '.\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r12, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r13, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}]}, 0x1c}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r10, 0x8936, &(0x7f0000000640)={@private0, 0x71, r14}) sendmsg$nl_route(r9, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@ipv6_newnexthop={0x2c, 0x68, 0x300, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x2d}, [@NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x8014) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 02:16:55 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x6, &(0x7f0000000540)=@framed={{}, [@alu, @alu, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, 0x0}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000040)={@private0, 0x0, r4}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@rand_addr=' \x01\x00', @private1, @local, 0x1, 0x7c, 0x0, 0x0, 0x800005, 0x0, r4}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000070000000000c5adfcf4561a1600000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = fsmount(0xffffffffffffffff, 0x0, 0x71) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r8, &(0x7f00000002c0), &(0x7f00000003c0)=@udp6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x6, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x0, 0x2, 0x7, 0x9, 0x4, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xb, 0x3, 0x3f}, 0x10, 0x0, r5, 0x0, &(0x7f0000000300)=[0x1, r6, r7, r8]}, 0x90) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r9, 0x0, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, '.\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r12, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r13, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}]}, 0x1c}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r10, 0x8936, &(0x7f0000000640)={@private0, 0x71, r14}) sendmsg$nl_route(r9, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@ipv6_newnexthop={0x2c, 0x68, 0x300, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x2d}, [@NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x8014) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 02:16:55 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x6, &(0x7f0000000540)=@framed={{}, [@alu, @alu, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, 0x0}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000040)={@private0, 0x0, r4}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@rand_addr=' \x01\x00', @private1, @local, 0x1, 0x7c, 0x0, 0x0, 0x800005, 0x0, r4}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000070000000000c5adfcf4561a1600000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = fsmount(0xffffffffffffffff, 0x0, 0x71) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r8, &(0x7f00000002c0), &(0x7f00000003c0)=@udp6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x6, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x0, 0x2, 0x7, 0x9, 0x4, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xb, 0x3, 0x3f}, 0x10, 0x0, r5, 0x0, &(0x7f0000000300)=[0x1, r6, r7, r8]}, 0x90) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r9, 0x0, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, '.\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r12, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r13, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}]}, 0x1c}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r10, 0x8936, &(0x7f0000000640)={@private0, 0x71, r14}) sendmsg$nl_route(r9, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@ipv6_newnexthop={0x2c, 0x68, 0x300, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x2d}, [@NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x8014) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 02:16:55 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x7fffffff, 0x1300, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 02:16:55 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/24, 0x18}], 0x1, 0x4013d, 0x0) 02:16:55 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="2500000002"], 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r4 = socket(0x1, 0x803, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r7, 0x25, 0x0, @void}, 0x10) 02:16:55 executing program 1: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="2500000002"], 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r4 = socket(0x1, 0x803, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r7, 0x25, 0x0, @void}, 0x10) 02:16:55 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @empty}], 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f00000003c0)=0x90) 02:16:55 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @empty}], 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X',