{0x0, 0x18, 0xfa00, {0x0, &(0x7f00000014c0), 0x106, 0x8}}, 0x20) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000001380)={0x0, 0xfffffffffffffffe, 0x3b, 0x1, @buffer={0x0, 0x1000, &(0x7f0000000280)=""/4096}, &(0x7f0000001280)="32c5493515fdecafd4aafd92fef9f78ebb2214926a562f67d4f07e61c9941f93f9ab82e77dfc96a6ad09241efb4159eb67fb5ad002d992b0a33954", &(0x7f00000012c0)=""/88, 0x37fa7909, 0x14, 0x3, &(0x7f0000001340)}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r8, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000001580)={0x7, 0x8, 0xfa00, {r8, 0x7fffffff}}, 0x10) 17:43:06 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000600)={0xc, 0x8, 0xfa00, {&(0x7f0000000480)}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f00000007c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000640), 0x3, {0xa, 0x4e24, 0x0, @private0}}}, 0x38) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000240)={0x8, 0x120, 0xfa00, {0x4, {0x3d, 0x1, "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", 0xff, 0x4, 0x6, 0x8b, 0x20, 0x5, 0x2, 0x1}, r4}}, 0x128) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffff, 0x10000}}, './file0\x00'}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r6, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010101}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r7 = gettid() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r7, 0x7, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5}, './file0/file0\x00'}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r7, r8, 0x0, 0x18, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00'}, 0x30) 17:43:06 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) (async) syz_io_uring_setup(0x5a1d, &(0x7f0000000000)={0x0, 0x7d92, 0x2, 0x0, 0x14, 0x0, r1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (async) r2 = syz_clone3(&(0x7f0000000600)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x5}, &(0x7f00000004c0)=""/140, 0xfec2, &(0x7f0000000580)=""/31, &(0x7f00000005c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7, {r0}}, 0x58) (async) r3 = gettid() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r3, 0x7, 0xffffffffffffffff, 0x0) (async) r4 = gettid() (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000780)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x78, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS, @IPVS_DEST_ATTR_FWD_METHOD={0x6b}, @IPVS_DEST_ATTR_ADDR={0x0, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x0, 0x9, 0xda5}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x78}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x22002068}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x74, r7, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7ff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xe1a2}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x10000050}, 0x4) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r4, 0x7, r1, 0x0) (async) r8 = gettid() (async) r9 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r9, 0x1, 0x1, 0x0, 0x0) (async) syz_clone3(&(0x7f00000006c0)={0x204000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x2c}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000300)=""/225, &(0x7f0000000680)=[0x0, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, r3, r4, r8], 0x8, {r9}}, 0x58) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup/syz0\x00', 0x200002, 0x0) 17:43:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x444380, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)={0x84, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010102}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48000}, 0x4040080) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0000000014000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40800020}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x20000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000010}, 0x8080) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1ff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5658}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x12}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) 17:43:06 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x80400, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) 17:43:06 executing program 4: bind$isdn(0xffffffffffffffff, &(0x7f0000000040)={0x22, 0x6, 0x3, 0x9}, 0x6) r0 = syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xffff, 0x65a450aa}}, './file0\x00'}) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), 0x4) (async) syz_io_uring_setup(0x1a6a, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 17:43:06 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x55b302, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_io_uring_setup(0x7d2b, &(0x7f0000000140)={0x0, 0x6db, 0x0, 0x1, 0x59, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) fcntl$getownex(r2, 0x10, &(0x7f0000000240)) (async) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) (async) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000001000000180000020a12f690820888c9e880874f43715285d7f7a202a8cd74746b735fd0593547c761767d0b0000c4c3f6835b05d6aba9ea06656a288890bbbe1f524f29458146775c792d43cff7221850fd630e2798018d5f10b7cfed6f142c4de9e5adf228ee4b96ac393459ddeec28f72bf5ea66e40ebec952a9610715edb25267efc149997b0d16e", @ANYRES32=r1, @ANYBLOB="95ffffff020000002e2f66696c653000"]) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r4, 0x80045519, &(0x7f0000000040)=0x1ff) (async, rerun: 64) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 64) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000001500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000014c0), 0x106, 0x8}}, 0x20) (async) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) (async) ioctl$SG_IO(r6, 0x2285, &(0x7f0000001380)={0x0, 0xfffffffffffffffe, 0x3b, 0x1, @buffer={0x0, 0x1000, &(0x7f0000000280)=""/4096}, &(0x7f0000001280)="32c5493515fdecafd4aafd92fef9f78ebb2214926a562f67d4f07e61c9941f93f9ab82e77dfc96a6ad09241efb4159eb67fb5ad002d992b0a33954", &(0x7f00000012c0)=""/88, 0x37fa7909, 0x14, 0x3, &(0x7f0000001340)}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r8, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000001580)={0x7, 0x8, 0xfa00, {r8, 0x7fffffff}}, 0x10) 17:43:06 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async, rerun: 64) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 64) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) (async) syz_io_uring_setup(0x5a1d, &(0x7f0000000000)={0x0, 0x7d92, 0x2, 0x0, 0x14, 0x0, r1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (async) r2 = syz_clone3(&(0x7f0000000600)={0x400, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x5}, &(0x7f00000004c0)=""/140, 0xfec2, &(0x7f0000000580)=""/31, &(0x7f00000005c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7, {r0}}, 0x58) (async) r3 = gettid() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r3, 0x7, 0xffffffffffffffff, 0x0) r4 = gettid() (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000780)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x78, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS, @IPVS_DEST_ATTR_FWD_METHOD={0x6b}, @IPVS_DEST_ATTR_ADDR={0x0, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x0, 0x9, 0xda5}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x78}}, 0x0) (async, rerun: 64) sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x22002068}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x74, r7, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7ff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xe1a2}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x10000050}, 0x4) (rerun: 64) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r4, 0x7, r1, 0x0) (async) r8 = gettid() (async) r9 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r9, 0x1, 0x1, 0x0, 0x0) (async, rerun: 64) syz_clone3(&(0x7f00000006c0)={0x204000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x2c}, &(0x7f0000000200)=""/207, 0xcf, &(0x7f0000000300)=""/225, &(0x7f0000000680)=[0x0, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, r3, r4, r8], 0x8, {r9}}, 0x58) (async, rerun: 64) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup/syz0\x00', 0x200002, 0x0) [ 1878.256760][ T629] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 17:43:07 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 32) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x444380, 0x0) (rerun: 32) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)={0x84, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010102}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48000}, 0x4040080) (async, rerun: 32) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) (async, rerun: 32) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0000000014000000"], 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40800020}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x20000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000010}, 0x8080) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1ff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5658}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x12}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) 17:43:07 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x80400, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) 17:43:07 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0)={0x0, 0x100000}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 17:43:07 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:07 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x80400, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) 17:43:07 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000600)={0xc, 0x8, 0xfa00, {&(0x7f0000000480)}}, 0x10) (async) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f00000007c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000640), 0x3, {0xa, 0x4e24, 0x0, @private0}}}, 0x38) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000240)={0x8, 0x120, 0xfa00, {0x4, {0x3d, 0x1, "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", 0xff, 0x4, 0x6, 0x8b, 0x20, 0x5, 0x2, 0x1}, r4}}, 0x128) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffff, 0x10000}}, './file0\x00'}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r6, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010101}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async) r7 = gettid() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r7, 0x7, 0xffffffffffffffff, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5}, './file0/file0\x00'}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r7, r8, 0x0, 0x18, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00'}, 0x30) 17:43:07 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x55b302, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_io_uring_setup(0x7d2b, &(0x7f0000000140)={0x0, 0x6db, 0x0, 0x1, 0x59, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) fcntl$getownex(r2, 0x10, &(0x7f0000000240)) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000001000000180000020a12f690820888c9e880874f43715285d7f7a202a8cd74746b735fd0593547c761767d0b0000c4c3f6835b05d6aba9ea06656a288890bbbe1f524f29458146775c792d43cff7221850fd630e2798018d5f10b7cfed6f142c4de9e5adf228ee4b96ac393459ddeec28f72bf5ea66e40ebec952a9610715edb25267efc149997b0d16e", @ANYRES32=r1, @ANYBLOB="95ffffff020000002e2f66696c653000"]) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r4, 0x80045519, &(0x7f0000000040)=0x1ff) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000001500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000014c0), 0x106, 0x8}}, 0x20) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000001380)={0x0, 0xfffffffffffffffe, 0x3b, 0x1, @buffer={0x0, 0x1000, &(0x7f0000000280)=""/4096}, &(0x7f0000001280)="32c5493515fdecafd4aafd92fef9f78ebb2214926a562f67d4f07e61c9941f93f9ab82e77dfc96a6ad09241efb4159eb67fb5ad002d992b0a33954", &(0x7f00000012c0)=""/88, 0x37fa7909, 0x14, 0x3, &(0x7f0000001340)}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r8, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000001580)={0x7, 0x8, 0xfa00, {r8, 0x7fffffff}}, 0x10) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x55b302, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) syz_io_uring_setup(0x7d2b, &(0x7f0000000140)={0x0, 0x6db, 0x0, 0x1, 0x59, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) (async) fcntl$getownex(r2, 0x10, &(0x7f0000000240)) (async) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000001000000180000020a12f690820888c9e880874f43715285d7f7a202a8cd74746b735fd0593547c761767d0b0000c4c3f6835b05d6aba9ea06656a288890bbbe1f524f29458146775c792d43cff7221850fd630e2798018d5f10b7cfed6f142c4de9e5adf228ee4b96ac393459ddeec28f72bf5ea66e40ebec952a9610715edb25267efc149997b0d16e", @ANYRES32=r1, @ANYBLOB="95ffffff020000002e2f66696c653000"]) (async) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, 0x0, 0x0) (async) ioctl$USBDEVFS_RELEASE_PORT(r4, 0x80045519, &(0x7f0000000040)=0x1ff) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000001500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000014c0), 0x106, 0x8}}, 0x20) (async) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) (async) ioctl$SG_IO(r6, 0x2285, &(0x7f0000001380)={0x0, 0xfffffffffffffffe, 0x3b, 0x1, @buffer={0x0, 0x1000, &(0x7f0000000280)=""/4096}, &(0x7f0000001280)="32c5493515fdecafd4aafd92fef9f78ebb2214926a562f67d4f07e61c9941f93f9ab82e77dfc96a6ad09241efb4159eb67fb5ad002d992b0a33954", &(0x7f00000012c0)=""/88, 0x37fa7909, 0x14, 0x3, &(0x7f0000001340)}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r8, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000001580)={0x7, 0x8, 0xfa00, {r8, 0x7fffffff}}, 0x10) (async) 17:43:07 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0)={0x0, 0x100000}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 17:43:07 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) (async) 17:43:07 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) read$rfkill(r0, &(0x7f0000000000), 0x8) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) write$qrtrtun(r0, &(0x7f00000000c0)="d9c32541a1916f22c878c657aa355a9430fe5ad541f9a0787a2e7867784771f9395e6e412c1fb4f921d1e05120819ba31f841485cea37595044bcf4fa8ed9c98bddb4b9d1d5510249579561a00cfcd8a6d617e36f9d3f14d9bb09ecc7518cb30b9ef6347e7f6f82d1b776409ea0248ca9a5d05de5b62a9ca5630fe2c10c7e08f67f3c43dab397767fae965775a150a1a74e8055d1360b117aefc265b22ba4c9fa30ad2a8519ee9343cdbbbc359ca547fe156f08b20db358f7550789c45a0", 0xbe) 17:43:07 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x444380, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)={0x84, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010102}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48000}, 0x4040080) (async) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0000000014000000"], 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40800020}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x20000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000010}, 0x8080) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1ff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5658}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x12}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) 17:43:07 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) read$rfkill(r0, &(0x7f0000000000), 0x8) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) write$qrtrtun(r0, &(0x7f00000000c0)="d9c32541a1916f22c878c657aa355a9430fe5ad541f9a0787a2e7867784771f9395e6e412c1fb4f921d1e05120819ba31f841485cea37595044bcf4fa8ed9c98bddb4b9d1d5510249579561a00cfcd8a6d617e36f9d3f14d9bb09ecc7518cb30b9ef6347e7f6f82d1b776409ea0248ca9a5d05de5b62a9ca5630fe2c10c7e08f67f3c43dab397767fae965775a150a1a74e8055d1360b117aefc265b22ba4c9fa30ad2a8519ee9343cdbbbc359ca547fe156f08b20db358f7550789c45a0", 0xbe) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) read$rfkill(r0, &(0x7f0000000000), 0x8) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) (async) write$qrtrtun(r0, &(0x7f00000000c0)="d9c32541a1916f22c878c657aa355a9430fe5ad541f9a0787a2e7867784771f9395e6e412c1fb4f921d1e05120819ba31f841485cea37595044bcf4fa8ed9c98bddb4b9d1d5510249579561a00cfcd8a6d617e36f9d3f14d9bb09ecc7518cb30b9ef6347e7f6f82d1b776409ea0248ca9a5d05de5b62a9ca5630fe2c10c7e08f67f3c43dab397767fae965775a150a1a74e8055d1360b117aefc265b22ba4c9fa30ad2a8519ee9343cdbbbc359ca547fe156f08b20db358f7550789c45a0", 0xbe) (async) 17:43:07 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) (async) 17:43:07 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0)={0x0, 0x100000}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 17:43:07 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) read$rfkill(r0, &(0x7f0000000000), 0x8) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) (async) write$qrtrtun(r0, &(0x7f00000000c0)="d9c32541a1916f22c878c657aa355a9430fe5ad541f9a0787a2e7867784771f9395e6e412c1fb4f921d1e05120819ba31f841485cea37595044bcf4fa8ed9c98bddb4b9d1d5510249579561a00cfcd8a6d617e36f9d3f14d9bb09ecc7518cb30b9ef6347e7f6f82d1b776409ea0248ca9a5d05de5b62a9ca5630fe2c10c7e08f67f3c43dab397767fae965775a150a1a74e8055d1360b117aefc265b22ba4c9fa30ad2a8519ee9343cdbbbc359ca547fe156f08b20db358f7550789c45a0", 0xbe) 17:43:07 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000600)={0xc, 0x8, 0xfa00, {&(0x7f0000000480)}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f00000007c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000640), 0x3, {0xa, 0x4e24, 0x0, @private0}}}, 0x38) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000240)={0x8, 0x120, 0xfa00, {0x4, {0x3d, 0x1, "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", 0xff, 0x4, 0x6, 0x8b, 0x20, 0x5, 0x2, 0x1}, r4}}, 0x128) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffff, 0x10000}}, './file0\x00'}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r6, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010101}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r7 = gettid() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r7, 0x7, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5}, './file0/file0\x00'}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r7, r8, 0x0, 0x18, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00'}, 0x30) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000600)={0xc, 0x8, 0xfa00, {&(0x7f0000000480)}}, 0x10) (async) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f00000007c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000640), 0x3, {0xa, 0x4e24, 0x0, @private0}}}, 0x38) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000240)={0x8, 0x120, 0xfa00, {0x4, {0x3d, 0x1, "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", 0xff, 0x4, 0x6, 0x8b, 0x20, 0x5, 0x2, 0x1}, r4}}, 0x128) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffff, 0x10000}}, './file0\x00'}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz1\x00', 0x200002, 0x0) (async) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$FOU_CMD_ADD(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r6, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010101}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async) gettid() (async) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r7, 0x7, 0xffffffffffffffff, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5}, './file0/file0\x00'}) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r7, r8, 0x0, 0x18, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00'}, 0x30) (async) 17:43:07 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x793402, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:07 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x133042, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0)=[{{0x4}, {0x0, 0x0, 0x0, 0x1}}, {{0x3, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x2}, {0x4, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x2, 0x1}}], 0x20) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000040)=0x100000000) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:07 executing program 4: syz_io_uring_setup(0x85edc, &(0x7f00000002c0)={0x0, 0x0, 0x10, 0x1, 0x80000000}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x463f, &(0x7f0000000040)={0x0, 0x562c, 0x4, 0x3, 0x186}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 17:43:07 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) io_uring_setup(0x1597, &(0x7f0000000400)={0x0, 0xf72, 0x8}) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) 17:43:07 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x793402, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:07 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xffff2c47}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x3, 0x40000000, 0x101, 0x1025, r1, 0xfffffffc, '\x00', 0x0, r1, 0x0, 0x2, 0x2}, 0x48) 17:43:07 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x133042, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0)=[{{0x4}, {0x0, 0x0, 0x0, 0x1}}, {{0x3, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x2}, {0x4, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x2, 0x1}}], 0x20) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000040)=0x100000000) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x133042, 0x0) (async) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0)=[{{0x4}, {0x0, 0x0, 0x0, 0x1}}, {{0x3, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x2}, {0x4, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x2, 0x1}}], 0x20) (async) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000040)=0x100000000) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) 17:43:07 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x793402, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:07 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xffff2c47}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x3, 0x40000000, 0x101, 0x1025, r1, 0xfffffffc, '\x00', 0x0, r1, 0x0, 0x2, 0x2}, 0x48) 17:43:07 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) io_uring_setup(0x1597, &(0x7f0000000400)={0x0, 0xf72, 0x8}) (async, rerun: 64) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) (rerun: 64) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) 17:43:07 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x133042, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0)=[{{0x4}, {0x0, 0x0, 0x0, 0x1}}, {{0x3, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x2}, {0x4, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x2, 0x1}}], 0x20) (async) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000040)=0x100000000) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:07 executing program 4: syz_io_uring_setup(0x85edc, &(0x7f00000002c0)={0x0, 0x0, 0x10, 0x1, 0x80000000}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x463f, &(0x7f0000000040)={0x0, 0x562c, 0x4, 0x3, 0x186}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) syz_io_uring_setup(0x85edc, &(0x7f00000002c0)={0x0, 0x0, 0x10, 0x1, 0x80000000}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) syz_io_uring_setup(0x463f, &(0x7f0000000040)={0x0, 0x562c, 0x4, 0x3, 0x186}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) 17:43:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r1, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x4c}}, 0x4004000) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x7ffff000) 17:43:07 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x47, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x51, 0x3, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0x0, 0x7, {0x1e, 0x2}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1c}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4840}, 0x20000800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x40000002}) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:07 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async, rerun: 64) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 64) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x47, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x51, 0x3, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0x0, 0x7, {0x1e, 0x2}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1c}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4840}, 0x20000800) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x40000002}) (async, rerun: 32) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) (rerun: 32) 17:43:07 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xffff2c47}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x3, 0x40000000, 0x101, 0x1025, r1, 0xfffffffc, '\x00', 0x0, r1, 0x0, 0x2, 0x2}, 0x48) 17:43:07 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x690340, 0x0) bind$isdn(r0, &(0x7f0000000040)={0x22, 0x80, 0x4b, 0x81}, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x106, &(0x7f0000000440)=""/262, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000000c0)={0x6}) openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.memory_migrate\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:07 executing program 4: syz_io_uring_setup(0x85edc, &(0x7f00000002c0)={0x0, 0x0, 0x10, 0x1, 0x80000000}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x463f, &(0x7f0000000040)={0x0, 0x562c, 0x4, 0x3, 0x186}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) syz_io_uring_setup(0x85edc, &(0x7f00000002c0)={0x0, 0x0, 0x10, 0x1, 0x80000000}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) syz_io_uring_setup(0x463f, &(0x7f0000000040)={0x0, 0x562c, 0x4, 0x3, 0x186}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) 17:43:07 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) io_uring_setup(0x1597, &(0x7f0000000400)={0x0, 0xf72, 0x8}) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) io_uring_setup(0x1597, &(0x7f0000000400)={0x0, 0xf72, 0x8}) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async) 17:43:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) (async, rerun: 32) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r1, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x4c}}, 0x4004000) (async) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x7ffff000) 17:43:07 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xba9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x68880) r1 = accept4$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0x0, @fixed}, &(0x7f00000002c0)=0xe, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f00000003c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000", @ANYRES16=0x0, @ANYBLOB="08002abd7000fcdbdf2511000000050038000000000008000b000001000008000600", @ANYRES32=0x0, @ANYBLOB="05002e0001000000080039000400000008002b0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x811}, 0x4000050) 17:43:07 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:07 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x690340, 0x0) bind$isdn(r0, &(0x7f0000000040)={0x22, 0x80, 0x4b, 0x81}, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x106, &(0x7f0000000440)=""/262, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000000c0)={0x6}) openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.memory_migrate\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x690340, 0x0) (async) bind$isdn(r0, &(0x7f0000000040)={0x22, 0x80, 0x4b, 0x81}, 0x6) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x106, &(0x7f0000000440)=""/262, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000000c0)={0x6}) (async) openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.memory_migrate\x00', 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) (async) 17:43:08 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) r0 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0xffff}, 0x4) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 17:43:08 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x47, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x51, 0x3, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0x0, 0x7, {0x1e, 0x2}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1c}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4840}, 0x20000800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x40000002}) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:08 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) (async) 17:43:08 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xba9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x68880) r1 = accept4$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0x0, @fixed}, &(0x7f00000002c0)=0xe, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f00000003c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000", @ANYRES16=0x0, @ANYBLOB="08002abd7000fcdbdf2511000000050038000000000008000b000001000008000600", @ANYRES32=0x0, @ANYBLOB="05002e0001000000080039000400000008002b0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x811}, 0x4000050) 17:43:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r1, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x4c}}, 0x4004000) (async) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x7ffff000) 17:43:08 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x690340, 0x0) bind$isdn(r0, &(0x7f0000000040)={0x22, 0x80, 0x4b, 0x81}, 0x6) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x106, &(0x7f0000000440)=""/262, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000000c0)={0x6}) (async, rerun: 64) openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.memory_migrate\x00', 0x2, 0x0) (async, rerun: 64) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:08 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) r0 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0xffff}, 0x4) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 17:43:08 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xba9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x68880) (async) r1 = accept4$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0x0, @fixed}, &(0x7f00000002c0)=0xe, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan0\x00'}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f00000003c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000", @ANYRES16=0x0, @ANYBLOB="08002abd7000fcdbdf2511000000050038000000000008000b000001000008000600", @ANYRES32=0x0, @ANYBLOB="05002e0001000000080039000400000008002b0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x811}, 0x4000050) 17:43:08 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb0, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1000}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10000}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x100}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4063d73d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x841}, 0x20000001) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10}, 0x18) 17:43:08 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x92902, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x600}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xffffffff}}, './file0\x00'}) r2 = socket(0x22, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000140)=r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0xfffffffffffffd3d) 17:43:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x5421, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x7ffff000) 17:43:08 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb0, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1000}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10000}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x100}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4063d73d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x841}, 0x20000001) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10}, 0x18) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb0, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1000}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10000}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x100}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4063d73d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x841}, 0x20000001) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10}, 0x18) (async) 17:43:08 executing program 5: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xaa, 0x8}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="200027bd7000ffdbdf250f00000008002c000000000005002e00d5f947449445a831e29d86e7bf18580000000005"], 0x34}, 0x1, 0x0, 0x0, 0x4004005}, 0x40000) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x7ffffffff000) 17:43:08 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x92902, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x600}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xffffffff}}, './file0\x00'}) (async) r2 = socket(0x22, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) (async) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000140)=r1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, 0x0, 0x0) (async) fcntl$getownex(r3, 0x10, &(0x7f00000000c0)) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0xfffffffffffffd3d) 17:43:08 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:08 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) r0 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0xffff}, 0x4) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) socket(0x0, 0x0, 0x3ff) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r0) (async) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0xffff}, 0x4) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) 17:43:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x5421, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x7ffff000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TUNSETQUEUE(r0, 0x5421, 0x0) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x7ffff000) (async) 17:43:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x5421, 0x0) (async) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x7ffff000) 17:43:08 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x92902, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x600}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xffffffff}}, './file0\x00'}) r2 = socket(0x22, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) (async) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000140)=r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, 0x0, 0x0) (async) fcntl$getownex(r3, 0x10, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0xfffffffffffffd3d) 17:43:08 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb0, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1000}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10000}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x100}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4063d73d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x841}, 0x20000001) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10}, 0x18) 17:43:08 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) syz_io_uring_setup(0x274e, &(0x7f00000000c0)={0x0, 0xbb94, 0x0, 0x1, 0x379, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000180), 0x4, 0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x5, 0x30, {"b944118ec1b1f5e187ecf5e7dfef2b5d"}, 0x5, 0x248, 0x80000001}}}, 0xa0) 17:43:08 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2304, 0x80000001, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x440603, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000040)=0x5) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000080)) 17:43:08 executing program 5: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xaa, 0x8}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="200027bd7000ffdbdf250f00000008002c000000000005002e00d5f947449445a831e29d86e7bf18580000000005"], 0x34}, 0x1, 0x0, 0x0, 0x4004005}, 0x40000) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x7ffffffff000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xaa, 0x8}}, './file0\x00'}) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="200027bd7000ffdbdf250f00000008002c000000000005002e00d5f947449445a831e29d86e7bf18580000000005"], 0x34}, 0x1, 0x0, 0x0, 0x4004005}, 0x40000) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x7ffffffff000) (async) 17:43:08 executing program 4: syz_io_uring_setup(0x1a6c, &(0x7f00000000c0)={0x0, 0xed8a, 0x1, 0x0, 0x53}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 17:43:08 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x10001, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) 17:43:08 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) syz_io_uring_setup(0x274e, &(0x7f00000000c0)={0x0, 0xbb94, 0x0, 0x1, 0x379, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000180), 0x4, 0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x5, 0x30, {"b944118ec1b1f5e187ecf5e7dfef2b5d"}, 0x5, 0x248, 0x80000001}}}, 0xa0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) syz_io_uring_setup(0x274e, &(0x7f00000000c0)={0x0, 0xbb94, 0x0, 0x1, 0x379, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000180), 0x4, 0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x5, 0x30, {"b944118ec1b1f5e187ecf5e7dfef2b5d"}, 0x5, 0x248, 0x80000001}}}, 0xa0) (async) 17:43:08 executing program 1: socket$packet(0x11, 0x2, 0x300) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:08 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2304, 0x80000001, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x440603, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000040)=0x5) (async) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000080)) 17:43:08 executing program 5: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xaa, 0x8}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="200027bd7000ffdbdf250f00000008002c000000000005002e00d5f947449445a831e29d86e7bf18580000000005"], 0x34}, 0x1, 0x0, 0x0, 0x4004005}, 0x40000) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x7ffffffff000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xaa, 0x8}}, './file0\x00'}) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="200027bd7000ffdbdf250f00000008002c000000000005002e00d5f947449445a831e29d86e7bf18580000000005"], 0x34}, 0x1, 0x0, 0x0, 0x4004005}, 0x40000) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x7ffffffff000) (async) 17:43:08 executing program 1: socket$packet(0x11, 0x2, 0x300) (async) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:08 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) syz_io_uring_setup(0x274e, &(0x7f00000000c0)={0x0, 0xbb94, 0x0, 0x1, 0x379, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000180), 0x4, 0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x5, 0x30, {"b944118ec1b1f5e187ecf5e7dfef2b5d"}, 0x5, 0x248, 0x80000001}}}, 0xa0) 17:43:08 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2304, 0x80000001, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) (async) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x440603, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000040)=0x5) (async) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000080)) 17:43:08 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x10001, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x10001, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) (async) 17:43:08 executing program 4: syz_io_uring_setup(0x1a6c, &(0x7f00000000c0)={0x0, 0xed8a, 0x1, 0x0, 0x53}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 17:43:08 executing program 1: socket$packet(0x11, 0x2, 0x300) (async) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:08 executing program 4: syz_io_uring_setup(0x1a6c, &(0x7f00000000c0)={0x0, 0xed8a, 0x1, 0x0, 0x53}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 17:43:08 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x452442, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x84, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xda5}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x8c, r2, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x34}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x19}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x44, 0x20}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4c22}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x4040800) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x200408d0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="500072a7", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fcdbdf250300000006000a004e2100000500020000000000050002000a000000060001004e210000050004000000000004000500060001004e22000008000800ac1414bb"], 0x50}, 0x1, 0x0, 0x0, 0x2004c000}, 0x800) 17:43:08 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000040)=0x7a20) 17:43:08 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5a3602, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:08 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x10001, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x10001, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) (async) 17:43:08 executing program 3: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0900000000085c002e2f66696c653000c911dce563c34e726b6c51dac397b7d94c4de2b100cf727f52ace3ad59207f4994639b83e55cb8c7f2532321dd8ce0e4271d68539c7903fb15a0849d9f2158b410bb300bb892b1b846f76c0b8b55eb501db43902aaf786cb9d7939fe223d6bc2ab9f130938adab0b631e6d34"]) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000040)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x404a00, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f00000000c0)={0x80000000}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x7fff, 0x0, 0x0, 0x0, r1, 0xff, '\x00', 0x0, r1, 0x1, 0x5, 0x3, 0xb}, 0x48) 17:43:08 executing program 3: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0900000000085c002e2f66696c653000c911dce563c34e726b6c51dac397b7d94c4de2b100cf727f52ace3ad59207f4994639b83e55cb8c7f2532321dd8ce0e4271d68539c7903fb15a0849d9f2158b410bb300bb892b1b846f76c0b8b55eb501db43902aaf786cb9d7939fe223d6bc2ab9f130938adab0b631e6d34"]) (async, rerun: 32) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000040)) (async, rerun: 32) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x404a00, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f00000000c0)={0x80000000}) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x7fff, 0x0, 0x0, 0x0, r1, 0xff, '\x00', 0x0, r1, 0x1, 0x5, 0x3, 0xb}, 0x48) (rerun: 64) 17:43:08 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000040)=0x7a20) 17:43:08 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5a3602, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:08 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x1c, 0x24, 0x200, 0x70bd2d, 0x25dfdbfb, 0x5, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8800) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) 17:43:08 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) syz_io_uring_setup(0x1a6c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x34, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x40}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000050) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x40, 0x5}}, './file0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000380), 0x0) 17:43:08 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x452442, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x84, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xda5}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x8c, r2, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x34}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x19}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x44, 0x20}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4c22}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x4040800) (async) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x200408d0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) (async) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="500072a7", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fcdbdf250300000006000a004e2100000500020000000000050002000a000000060001004e210000050004000000000004000500060001004e22000008000800ac1414bb"], 0x50}, 0x1, 0x0, 0x0, 0x2004c000}, 0x800) 17:43:08 executing program 3: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0900000000085c002e2f66696c653000c911dce563c34e726b6c51dac397b7d94c4de2b100cf727f52ace3ad59207f4994639b83e55cb8c7f2532321dd8ce0e4271d68539c7903fb15a0849d9f2158b410bb300bb892b1b846f76c0b8b55eb501db43902aaf786cb9d7939fe223d6bc2ab9f130938adab0b631e6d34"]) (async) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000040)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x404a00, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f00000000c0)={0x80000000}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x7fff, 0x0, 0x0, 0x0, r1, 0xff, '\x00', 0x0, r1, 0x1, 0x5, 0x3, 0xb}, 0x48) 17:43:08 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) (async) syz_io_uring_setup(0x1a6c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x34, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x40}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000050) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x40, 0x5}}, './file0\x00'}) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000380), 0x0) 17:43:08 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5a3602, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:08 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000040)=0x7a20) 17:43:08 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x452442, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x84, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xda5}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x8c, r2, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x34}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x19}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x44, 0x20}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4c22}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x4040800) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x200408d0) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="500072a7", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fcdbdf250300000006000a004e2100000500020000000000050002000a000000060001004e210000050004000000000004000500060001004e22000008000800ac1414bb"], 0x50}, 0x1, 0x0, 0x0, 0x2004c000}, 0x800) 17:43:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="36947596", @ANYRES16=r1, @ANYBLOB="010000000000000000000200000006000100000000000500030000000000050002000a000000"], 0x2c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0xee, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:08 executing program 0: write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x1, 0xfa00, {0x0}}, 0x18) 17:43:08 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xf05a) 17:43:08 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async, rerun: 64) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 64) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) syz_io_uring_setup(0x1a6c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x34, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x40}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000050) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x40, 0x5}}, './file0\x00'}) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000380), 0x0) 17:43:08 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) (async) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) (async) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x1c, 0x24, 0x200, 0x70bd2d, 0x25dfdbfb, 0x5, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8800) (async, rerun: 64) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) (rerun: 64) 17:43:08 executing program 5: r0 = gettid() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, 0x0) r1 = gettid() setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000400)=0x1, 0x4) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r1, 0x7, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000380)={0x8000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x19}, &(0x7f0000000200)=""/145, 0x91, &(0x7f00000002c0)=""/124, &(0x7f0000000340)=[r0, r1, 0x0], 0x3}, 0x58) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5c200, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x7ffffffff000) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000440)=0x40) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) connect$rds(r4, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0xe5d, 0x1f}}, './file0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xf0000015}) 17:43:08 executing program 0: write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x1, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x1, 0xfa00, {0x0}}, 0x18) (async) 17:43:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 32) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="36947596", @ANYRES16=r1, @ANYBLOB="010000000000000000000200000006000100000000000500030000000000050002000a000000"], 0x2c}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0xee, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:08 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xf05a) 17:43:08 executing program 5: r0 = gettid() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, 0x0) (async) r1 = gettid() setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000400)=0x1, 0x4) (async, rerun: 64) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r1, 0x7, 0xffffffffffffffff, 0x0) (async, rerun: 64) syz_clone3(&(0x7f0000000380)={0x8000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x19}, &(0x7f0000000200)=""/145, 0x91, &(0x7f00000002c0)=""/124, &(0x7f0000000340)=[r0, r1, 0x0], 0x3}, 0x58) (async) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5c200, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x7ffffffff000) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000440)=0x40) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) connect$rds(r4, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0xe5d, 0x1f}}, './file0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xf0000015}) 17:43:08 executing program 0: write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x1, 0xfa00, {0x0}}, 0x18) 17:43:08 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xf05a) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xf05a) (async) 17:43:08 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f00000001c0)={0x4, 0x8, 0xfa00, {r0, 0x9}}, 0x10) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0)={0x0, 0x0, 0x4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000380)={0x16, 0x98, 0xfa00, {&(0x7f0000000200), 0x1, r2, 0x10, 0x0, @in6={0xa, 0x4e21, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x774}}}, 0xa0) connect$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 17:43:08 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) (async) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) (async) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x1c, 0x24, 0x200, 0x70bd2d, 0x25dfdbfb, 0x5, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8800) (async) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) 17:43:08 executing program 5: r0 = gettid() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, 0x0) (async) r1 = gettid() setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000400)=0x1, 0x4) (async) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r1, 0x7, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000380)={0x8000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x19}, &(0x7f0000000200)=""/145, 0x91, &(0x7f00000002c0)=""/124, &(0x7f0000000340)=[r0, r1, 0x0], 0x3}, 0x58) (async) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5c200, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x7ffffffff000) (async) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) (async) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000440)=0x40) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) connect$rds(r4, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0xe5d, 0x1f}}, './file0\x00'}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xf0000015}) 17:43:08 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x200580, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:08 executing program 0: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x0, 0x200, 0x70bd26, 0xd021, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xed}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="23f8a0294d0d"}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4010) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x41}}}}, 0x118) 17:43:08 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f00000001c0)={0x4, 0x8, 0xfa00, {r0, 0x9}}, 0x10) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0)={0x0, 0x0, 0x4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async, rerun: 32) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) (rerun: 64) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000380)={0x16, 0x98, 0xfa00, {&(0x7f0000000200), 0x1, r2, 0x10, 0x0, @in6={0xa, 0x4e21, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x774}}}, 0xa0) (async) connect$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 17:43:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="36947596", @ANYRES16=r1, @ANYBLOB="010000000000000000000200000006000100000000000500030000000000050002000a000000"], 0x2c}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0xee, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:08 executing program 0: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x0, 0x200, 0x70bd26, 0xd021, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xed}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="23f8a0294d0d"}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4010) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x41}}}}, 0x118) 17:43:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x4e, r1, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x20000006}, @BATADV_ATTR_VLANID={0x0, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x40) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x7ffffffff000) 17:43:08 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x200580, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x200580, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) (async) 17:43:08 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x52140, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) 17:43:08 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x200580, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:08 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xd, 0x4, 0x8001, 0x5aa3, 0x84, r0, 0x67cba181, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000c39b00000000000008000000185e0000760000000000000000000000d83840001000000018270000", @ANYRES32=r0, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x3ff, 0x20, &(0x7f0000000080)=""/32, 0x40f00, 0x2, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000100)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x0, 0x80000001, 0x1ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r2, r0, r3, r4, r0, r5, r0, r0, r6]}, 0x80) 17:43:08 executing program 0: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x0, 0x200, 0x70bd26, 0xd021, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xed}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="23f8a0294d0d"}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4010) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x41}}}}, 0x118) 17:43:08 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x52140, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x52140, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) (async) 17:43:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x4e, r1, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x20000006}, @BATADV_ATTR_VLANID={0x0, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x40) (async) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x7ffffffff000) 17:43:08 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x52140, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) 17:43:08 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f00000001c0)={0x4, 0x8, 0xfa00, {r0, 0x9}}, 0x10) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0)={0x0, 0x0, 0x4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000380)={0x16, 0x98, 0xfa00, {&(0x7f0000000200), 0x1, r2, 0x10, 0x0, @in6={0xa, 0x4e21, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x774}}}, 0xa0) (async) connect$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 17:43:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x4e, r1, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x20000006}, @BATADV_ATTR_VLANID={0x0, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x40) (async) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x7ffffffff000) 17:43:08 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x78, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS, @IPVS_DEST_ATTR_FWD_METHOD={0x6b}, @IPVS_DEST_ATTR_ADDR={0x0, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x0, 0x9, 0xda5}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x78}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x8c, r3, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5bf1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x81}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x956d}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x8c}, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3ff}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) getpeername$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r5, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x101}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xbd2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffff54}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xb44}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x68}, 0x1, 0x0, 0x0, 0x80c5}, 0x800) 17:43:08 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xd, 0x4, 0x8001, 0x5aa3, 0x84, r0, 0x67cba181, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000c39b00000000000008000000185e0000760000000000000000000000d83840001000000018270000", @ANYRES32=r0, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x3ff, 0x20, &(0x7f0000000080)=""/32, 0x40f00, 0x2, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000100)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x0, 0x80000001, 0x1ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r2, r0, r3, r4, r0, r5, r0, r0, r6]}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) (async) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xd, 0x4, 0x8001, 0x5aa3, 0x84, r0, 0x67cba181, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000c39b00000000000008000000185e0000760000000000000000000000d83840001000000018270000", @ANYRES32=r0, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x3ff, 0x20, &(0x7f0000000080)=""/32, 0x40f00, 0x2, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000100)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x0, 0x80000001, 0x1ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r2, r0, r3, r4, r0, r5, r0, r0, r6]}, 0x80) (async) 17:43:08 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r1, 0x7, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f00000000c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), 0xffffffffffffffff, 0x5}}, 0x18) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, r2, &(0x7f0000000040)={r4, r0, 0x401}) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:08 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x25) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) 17:43:08 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r1, 0x7, 0xffffffffffffffff, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f00000000c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), 0xffffffffffffffff, 0x5}}, 0x18) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, 0x0, 0x0) (async) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, 0x0, 0x0) (async) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, r2, &(0x7f0000000040)={r4, r0, 0x401}) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:08 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x82580, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) 17:43:08 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x4c, r0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xb49}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x200}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c850}, 0x4000) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 17:43:08 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) r1 = gettid() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r1, 0x7, 0xffffffffffffffff, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f00000000c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), 0xffffffffffffffff, 0x5}}, 0x18) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, 0x0, 0x0) (async) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, 0x0, 0x0) (async) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, r2, &(0x7f0000000040)={r4, r0, 0x401}) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:08 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x78, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS, @IPVS_DEST_ATTR_FWD_METHOD={0x6b}, @IPVS_DEST_ATTR_ADDR={0x0, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x0, 0x9, 0xda5}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x78}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x8c, r3, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5bf1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x81}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x956d}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x8c}, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3ff}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) (async) getpeername$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r5, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x101}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xbd2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffff54}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xb44}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x68}, 0x1, 0x0, 0x0, 0x80c5}, 0x800) 17:43:08 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x25) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) 17:43:08 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x82580, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) (async) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) 17:43:08 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x4c, r0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xb49}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x200}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c850}, 0x4000) (async) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 17:43:08 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xd, 0x4, 0x8001, 0x5aa3, 0x84, r0, 0x67cba181, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000c39b00000000000008000000185e0000760000000000000000000000d83840001000000018270000", @ANYRES32=r0, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x3ff, 0x20, &(0x7f0000000080)=""/32, 0x40f00, 0x2, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000100)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x0, 0x80000001, 0x1ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r2, r0, r3, r4, r0, r5, r0, r0, r6]}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) (async) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xd, 0x4, 0x8001, 0x5aa3, 0x84, r0, 0x67cba181, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000c39b00000000000008000000185e0000760000000000000000000000d83840001000000018270000", @ANYRES32=r0, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x3ff, 0x20, &(0x7f0000000080)=""/32, 0x40f00, 0x2, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000100)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x0, 0x80000001, 0x1ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r2, r0, r3, r4, r0, r5, r0, r0, r6]}, 0x80) (async) 17:43:08 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x82580, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) (async) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) 17:43:08 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f00000001c0)={{&(0x7f00000000c0)=""/223, 0xdf}, &(0x7f0000000040), 0x20}, 0x20) r1 = socket(0x0, 0x0, 0x3ff) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f00000003c0)={0x1756, 0x5, [{0x8}, {0x8, 0x1}, {0xa, 0x1}, {0x2}, {0xa}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000200), 0x4) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000280), r1) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x8044}, 0x40085) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:08 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, 0x0, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x78, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS, @IPVS_DEST_ATTR_FWD_METHOD={0x6b}, @IPVS_DEST_ATTR_ADDR={0x0, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x0, 0x9, 0xda5}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x78}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x8c, r3, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5bf1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x81}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x956d}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x8c}, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3ff}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) getpeername$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r5, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x101}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xbd2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffff54}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xb44}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x68}, 0x1, 0x0, 0x0, 0x80c5}, 0x800) 17:43:08 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x25) (async, rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) (rerun: 32) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) [ 1879.976440][ T1118] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 17:43:08 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x4c, r0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xb49}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x200}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c850}, 0x4000) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x4c, r0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xb49}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x200}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c850}, 0x4000) (async) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) 17:43:08 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13d, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r2, 0x40}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) 17:43:08 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x2dc0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000140)=ANY=[@ANYBLOB="01005fd801877c757410ae066d39238900000900f460fd290000cf55d965aa3b8b4fa672957761bc9f67ab0dc0c58f252ac2d590db2d3b3833336f05aa9607bf1c38ca7dbb547292fd9ad78690acedcc614cce82528c1bab2e0a2a1cc02c0a138c5b55dd69981c10ee4340abe29b8c05acc88cd148738925991a2991436f6d9eed38f4346b3c6107492747a9e7c3a53302a32525b157f3e6722a", @ANYRES32=r0, @ANYBLOB="05000000000000002e2f66696c653000"]) 17:43:08 executing program 4: r0 = syz_io_uring_setup(0x6af9, &(0x7f00000002c0)={0x0, 0xae51, 0x0, 0x0, 0x2aa}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000180)=0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) r3 = syz_io_uring_setup(0x20f9, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, 0x19d, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x36}}, './file0\x00'}) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r6 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000440)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r5, r8, 0x25, 0x9}, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, 0x0, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000240)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x8, &(0x7f0000000200)=[r6, r7, r3, r5, 0xffffffffffffffff, 0xffffffffffffffff, r3, r5], 0x8, 0x0, 0x1, {0x0, r9}}, 0x6) sendmsg$FOU_CMD_GET(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x0, 0xc00, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x30}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x40c4) syz_open_dev$usbfs(&(0x7f00000001c0), 0xffffffff, 0x1) 17:43:08 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) (async) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x2dc0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000140)=ANY=[@ANYBLOB="01005fd801877c757410ae066d39238900000900f460fd290000cf55d965aa3b8b4fa672957761bc9f67ab0dc0c58f252ac2d590db2d3b3833336f05aa9607bf1c38ca7dbb547292fd9ad78690acedcc614cce82528c1bab2e0a2a1cc02c0a138c5b55dd69981c10ee4340abe29b8c05acc88cd148738925991a2991436f6d9eed38f4346b3c6107492747a9e7c3a53302a32525b157f3e6722a", @ANYRES32=r0, @ANYBLOB="05000000000000002e2f66696c653000"]) 17:43:08 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x260000, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) 17:43:08 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f00000001c0)={{&(0x7f00000000c0)=""/223, 0xdf}, &(0x7f0000000040), 0x20}, 0x20) r1 = socket(0x0, 0x0, 0x3ff) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f00000003c0)={0x1756, 0x5, [{0x8}, {0x8, 0x1}, {0xa, 0x1}, {0x2}, {0xa}]}) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000200), 0x4) (async) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000280), r1) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x8044}, 0x40085) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:08 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x20000001) 17:43:08 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13d, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r2, 0x40}}, 0x10) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) 17:43:08 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13d, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r2, 0x40}}, 0x10) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) 17:43:08 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x2dc0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000140)=ANY=[@ANYBLOB="01005fd801877c757410ae066d39238900000900f460fd290000cf55d965aa3b8b4fa672957761bc9f67ab0dc0c58f252ac2d590db2d3b3833336f05aa9607bf1c38ca7dbb547292fd9ad78690acedcc614cce82528c1bab2e0a2a1cc02c0a138c5b55dd69981c10ee4340abe29b8c05acc88cd148738925991a2991436f6d9eed38f4346b3c6107492747a9e7c3a53302a32525b157f3e6722a", @ANYRES32=r0, @ANYBLOB="05000000000000002e2f66696c653000"]) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x2dc0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000140)=ANY=[@ANYBLOB="01005fd801877c757410ae066d39238900000900f460fd290000cf55d965aa3b8b4fa672957761bc9f67ab0dc0c58f252ac2d590db2d3b3833336f05aa9607bf1c38ca7dbb547292fd9ad78690acedcc614cce82528c1bab2e0a2a1cc02c0a138c5b55dd69981c10ee4340abe29b8c05acc88cd148738925991a2991436f6d9eed38f4346b3c6107492747a9e7c3a53302a32525b157f3e6722a", @ANYRES32=r0, @ANYBLOB="05000000000000002e2f66696c653000"]) (async) 17:43:08 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x260000, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) 17:43:08 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@getsa={0x3c, 0x12, 0x300, 0x70bd25, 0x25dfdbfd, {@in6=@remote, 0x4d3, 0x2, 0x33}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x9}, @lastused={0xc, 0xf, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) 17:43:08 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f00000001c0)={{&(0x7f00000000c0)=""/223, 0xdf}, &(0x7f0000000040), 0x20}, 0x20) (async) r1 = socket(0x0, 0x0, 0x3ff) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f00000003c0)={0x1756, 0x5, [{0x8}, {0x8, 0x1}, {0xa, 0x1}, {0x2}, {0xa}]}) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) (async) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000200), 0x4) (async) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000280), r1) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x8044}, 0x40085) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:08 executing program 5: write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x7ffffffff000) [ 1880.081237][ T1179] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 17:43:08 executing program 4: r0 = syz_io_uring_setup(0x6af9, &(0x7f00000002c0)={0x0, 0xae51, 0x0, 0x0, 0x2aa}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000180)=0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) r3 = syz_io_uring_setup(0x20f9, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, 0x19d, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x36}}, './file0\x00'}) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r6 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000440)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r5, r8, 0x25, 0x9}, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, 0x0, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000240)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x8, &(0x7f0000000200)=[r6, r7, r3, r5, 0xffffffffffffffff, 0xffffffffffffffff, r3, r5], 0x8, 0x0, 0x1, {0x0, r9}}, 0x6) sendmsg$FOU_CMD_GET(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x0, 0xc00, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x30}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x40c4) syz_open_dev$usbfs(&(0x7f00000001c0), 0xffffffff, 0x1) syz_io_uring_setup(0x6af9, &(0x7f00000002c0)={0x0, 0xae51, 0x0, 0x0, 0x2aa}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000180), 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) (async) syz_io_uring_setup(0x20f9, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, 0x19d, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x36}}, './file0\x00'}) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getpeername$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000440)=0x14) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r5, r8, 0x25, 0x9}, 0x10) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r1, r4, &(0x7f0000000240)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x8, &(0x7f0000000200)=[r6, r7, r3, r5, 0xffffffffffffffff, 0xffffffffffffffff, r3, r5], 0x8, 0x0, 0x1, {0x0, r9}}, 0x6) (async) sendmsg$FOU_CMD_GET(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x0, 0xc00, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x30}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x40c4) (async) syz_open_dev$usbfs(&(0x7f00000001c0), 0xffffffff, 0x1) (async) 17:43:08 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@getsa={0x3c, 0x12, 0x300, 0x70bd25, 0x25dfdbfd, {@in6=@remote, 0x4d3, 0x2, 0x33}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x9}, @lastused={0xc, 0xf, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) 17:43:08 executing program 5: write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x7ffffffff000) 17:43:08 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x260000, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) 17:43:08 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@getsa={0x3c, 0x12, 0x300, 0x70bd25, 0x25dfdbfd, {@in6=@remote, 0x4d3, 0x2, 0x33}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x9}, @lastused={0xc, 0xf, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) 17:43:08 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) (async) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x20000001) 17:43:08 executing program 4: r0 = syz_io_uring_setup(0x6af9, &(0x7f00000002c0)={0x0, 0xae51, 0x0, 0x0, 0x2aa}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000180)=0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) (async) r3 = syz_io_uring_setup(0x20f9, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, 0x19d, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x36}}, './file0\x00'}) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async) r6 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000440)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r5, r8, 0x25, 0x9}, 0x10) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, 0x0, 0x0) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000240)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x8, &(0x7f0000000200)=[r6, r7, r3, r5, 0xffffffffffffffff, 0xffffffffffffffff, r3, r5], 0x8, 0x0, 0x1, {0x0, r9}}, 0x6) (async) sendmsg$FOU_CMD_GET(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x0, 0xc00, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x30}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x40c4) (async) syz_open_dev$usbfs(&(0x7f00000001c0), 0xffffffff, 0x1) 17:43:08 executing program 5: write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x7ffffffff000) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x7ffffffff000) (async) 17:43:08 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:08 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0x9, &(0x7f0000000040)='/dev/bsg\x00'}, 0x30) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) r4 = gettid() ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9545}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x49}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x800) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r4, 0x7, 0xffffffffffffffff, 0x0) r6 = gettid() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r6, 0x7, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[r2, r1, r3, r4, r6], 0x5, {r0}}, 0x58) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:08 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) read$rfkill(r0, &(0x7f0000000040), 0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r3, r0}}, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000000)=0x6) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) 17:43:08 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) (async) 17:43:08 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000040)={{&(0x7f00000000c0)=""/144, 0x90}, &(0x7f0000000000), 0x20}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) 17:43:08 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x20000001) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) (async) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x20000001) (async) 17:43:08 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0)={0x0, 0x47ab}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 17:43:08 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0x9, &(0x7f0000000040)='/dev/bsg\x00'}, 0x30) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) r4 = gettid() ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9545}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x49}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x800) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r4, 0x7, 0xffffffffffffffff, 0x0) r6 = gettid() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r6, 0x7, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[r2, r1, r3, r4, r6], 0x5, {r0}}, 0x58) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) gettid() (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0x9, &(0x7f0000000040)='/dev/bsg\x00'}, 0x30) (async) fcntl$getownex(r0, 0x10, &(0x7f0000000240)) (async) fcntl$getownex(r0, 0x10, &(0x7f0000000280)) (async) gettid() (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) (async) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9545}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x49}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x800) (async) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r4, 0x7, 0xffffffffffffffff, 0x0) (async) gettid() (async) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r6, 0x7, 0xffffffffffffffff, 0x0) (async) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[r2, r1, r3, r4, r6], 0x5, {r0}}, 0x58) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) 17:43:08 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0)={0x0, 0x47ab}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 17:43:08 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) (async) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000040)={{&(0x7f00000000c0)=""/144, 0x90}, &(0x7f0000000000), 0x20}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) 17:43:08 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:08 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) (async) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) (async) read$rfkill(r0, &(0x7f0000000040), 0x8) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r3, r0}}, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) (async) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000000)=0x6) (async) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) 17:43:08 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0)={0x0, 0x47ab}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) syz_io_uring_setup(0x5edc, &(0x7f00000002c0)={0x0, 0x47ab}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) (async) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) 17:43:08 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0xa0080, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x4007, @fd_index=0x3, 0x6, 0x7eb4ac77, 0x80, 0x5, 0x0, {0x3, r2}}, 0x1) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f0000000040)=[0xffffff30, 0x9, 0x66cfbdaa, 0x80800, 0x401, 0x1, 0x1000100, 0x100]) 17:43:08 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) (async) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000040)={{&(0x7f00000000c0)=""/144, 0x90}, &(0x7f0000000000), 0x20}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) 17:43:08 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0x9, &(0x7f0000000040)='/dev/bsg\x00'}, 0x30) (async) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) (async) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) (async) r4 = gettid() ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9545}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x49}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x800) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r4, 0x7, 0xffffffffffffffff, 0x0) (async, rerun: 64) r6 = gettid() (rerun: 64) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r6, 0x7, 0xffffffffffffffff, 0x0) (async) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[r2, r1, r3, r4, r6], 0x5, {r0}}, 0x58) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:09 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x3, 0x10, 0x1, 0x0, '\x00', 0x0, r0, 0x0, 0x7f03, 0x3}, 0x48) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_IBPORT={0x5}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg1\x00'}]}, 0x30}}, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, r3, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) ioctl$SG_IO(r1, 0x2285, &(0x7f00000004c0)={0x0, 0xfffffffffffffffb, 0x57, 0x0, @scatter={0x3, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/219, 0xdb}, {&(0x7f0000000000)=""/110, 0x6e}, {&(0x7f0000000200)=""/136, 0x88}]}, &(0x7f0000000340)="307d92db62033bfd9529ba01ef37272d8660d846bd6d2faad64a0da911ad97d66249bef3415b38724e80251d0404c9cda1794cc49d5f296df877bae9d2f5a2cb4985de4b71712aa919b4da7b5974ade5b56201561298e4", &(0x7f00000003c0)=""/130, 0x7, 0x10, 0x2, &(0x7f0000000480)}) 17:43:09 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) (async) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) (async) read$rfkill(r0, &(0x7f0000000040), 0x8) (async, rerun: 64) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (rerun: 64) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r3, r0}}, 0x18) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) (async) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000000)=0x6) (async) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, 0x0, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) 17:43:09 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x50000, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) 17:43:09 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0xa0080, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) (async, rerun: 64) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 64) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x4007, @fd_index=0x3, 0x6, 0x7eb4ac77, 0x80, 0x5, 0x0, {0x3, r2}}, 0x1) (async, rerun: 64) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) (rerun: 64) ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f0000000040)=[0xffffff30, 0x9, 0x66cfbdaa, 0x80800, 0x401, 0x1, 0x1000100, 0x100]) 17:43:09 executing program 4: syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB="0100", @ANYRES32=r0, @ANYBLOB="00000100000000002e2f66696c653000"]) 17:43:09 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5d3042, 0x0) syz_open_dev$MSR(&(0x7f00000000c0), 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000180000003ba7c8086272de37ca823d37007b6ca01ff78a99", @ANYRES32=r0, @ANYBLOB="fdffffff001000002e2f66696c653000"]) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:09 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x50000, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) 17:43:09 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x3, 0x10, 0x1, 0x0, '\x00', 0x0, r0, 0x0, 0x7f03, 0x3}, 0x48) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_IBPORT={0x5}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg1\x00'}]}, 0x30}}, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, r3, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) ioctl$SG_IO(r1, 0x2285, &(0x7f00000004c0)={0x0, 0xfffffffffffffffb, 0x57, 0x0, @scatter={0x3, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/219, 0xdb}, {&(0x7f0000000000)=""/110, 0x6e}, {&(0x7f0000000200)=""/136, 0x88}]}, &(0x7f0000000340)="307d92db62033bfd9529ba01ef37272d8660d846bd6d2faad64a0da911ad97d66249bef3415b38724e80251d0404c9cda1794cc49d5f296df877bae9d2f5a2cb4985de4b71712aa919b4da7b5974ade5b56201561298e4", &(0x7f00000003c0)=""/130, 0x7, 0x10, 0x2, &(0x7f0000000480)}) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x3, 0x10, 0x1, 0x0, '\x00', 0x0, r0, 0x0, 0x7f03, 0x3}, 0x48) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_IBPORT={0x5}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg1\x00'}]}, 0x30}}, 0x0) (async) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, r3, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f00000004c0)={0x0, 0xfffffffffffffffb, 0x57, 0x0, @scatter={0x3, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/219, 0xdb}, {&(0x7f0000000000)=""/110, 0x6e}, {&(0x7f0000000200)=""/136, 0x88}]}, &(0x7f0000000340)="307d92db62033bfd9529ba01ef37272d8660d846bd6d2faad64a0da911ad97d66249bef3415b38724e80251d0404c9cda1794cc49d5f296df877bae9d2f5a2cb4985de4b71712aa919b4da7b5974ade5b56201561298e4", &(0x7f00000003c0)=""/130, 0x7, 0x10, 0x2, &(0x7f0000000480)}) (async) 17:43:09 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x50000, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) 17:43:09 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5d3042, 0x0) (async) syz_open_dev$MSR(&(0x7f00000000c0), 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000180000003ba7c8086272de37ca823d37007b6ca01ff78a99", @ANYRES32=r0, @ANYBLOB="fdffffff001000002e2f66696c653000"]) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:09 executing program 4: syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB="0100", @ANYRES32=r0, @ANYBLOB="00000100000000002e2f66696c653000"]) 17:43:09 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0xa0080, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x4007, @fd_index=0x3, 0x6, 0x7eb4ac77, 0x80, 0x5, 0x0, {0x3, r2}}, 0x1) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f0000000040)=[0xffffff30, 0x9, 0x66cfbdaa, 0x80800, 0x401, 0x1, 0x1000100, 0x100]) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0xa0080, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x4007, @fd_index=0x3, 0x6, 0x7eb4ac77, 0x80, 0x5, 0x0, {0x3, r2}}, 0x1) (async) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) (async) ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f0000000040)=[0xffffff30, 0x9, 0x66cfbdaa, 0x80800, 0x401, 0x1, 0x1000100, 0x100]) (async) 17:43:09 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x280a40, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x4, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x9}}, 0x197271f39b274ae8) fcntl$getownex(r0, 0x10, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r3, r0}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xca4, 0x401}}, './file0\x00'}) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000200)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x8d39, @remote, 0x3}, r3}}, 0x30) 17:43:09 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5d3042, 0x0) syz_open_dev$MSR(&(0x7f00000000c0), 0x5, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000180000003ba7c8086272de37ca823d37007b6ca01ff78a99", @ANYRES32=r0, @ANYBLOB="fdffffff001000002e2f66696c653000"]) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:09 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17:43:09 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x3, 0x10, 0x1, 0x0, '\x00', 0x0, r0, 0x0, 0x7f03, 0x3}, 0x48) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_IBPORT={0x5}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg1\x00'}]}, 0x30}}, 0x0) (async) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, r3, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f00000004c0)={0x0, 0xfffffffffffffffb, 0x57, 0x0, @scatter={0x3, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/219, 0xdb}, {&(0x7f0000000000)=""/110, 0x6e}, {&(0x7f0000000200)=""/136, 0x88}]}, &(0x7f0000000340)="307d92db62033bfd9529ba01ef37272d8660d846bd6d2faad64a0da911ad97d66249bef3415b38724e80251d0404c9cda1794cc49d5f296df877bae9d2f5a2cb4985de4b71712aa919b4da7b5974ade5b56201561298e4", &(0x7f00000003c0)=""/130, 0x7, 0x10, 0x2, &(0x7f0000000480)}) 17:43:09 executing program 4: syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB="0100", @ANYRES32=r0, @ANYBLOB="00000100000000002e2f66696c653000"]) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB="0100", @ANYRES32=r0, @ANYBLOB="00000100000000002e2f66696c653000"]) (async) 17:43:09 executing program 1: setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f00000010c0)={@l2tp6={0xa, 0x0, 0x6, @local, 0x9, 0x3}, {&(0x7f00000000c0)=""/4096, 0x1000}, &(0x7f0000000000), 0x20}, 0xa0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x3a1102, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:09 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x280a40, 0x0) (async, rerun: 64) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x4, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x9}}, 0x197271f39b274ae8) fcntl$getownex(r0, 0x10, &(0x7f0000000180)) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r3, r0}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xca4, 0x401}}, './file0\x00'}) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000200)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x8d39, @remote, 0x3}, r3}}, 0x30) 17:43:09 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 17:43:09 executing program 1: setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f00000010c0)={@l2tp6={0xa, 0x0, 0x6, @local, 0x9, 0x3}, {&(0x7f00000000c0)=""/4096, 0x1000}, &(0x7f0000000000), 0x20}, 0xa0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x3a1102, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f00000010c0)={@l2tp6={0xa, 0x0, 0x6, @local, 0x9, 0x3}, {&(0x7f00000000c0)=""/4096, 0x1000}, &(0x7f0000000000), 0x20}, 0xa0) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x3a1102, 0x0) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) (async) 17:43:09 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, r1, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000829bd7000fcdbdf250801000008000600ff0300002400028006000f0005000000080004000080000005000d0000000000080004007f00000008000500001e86ffd985911438ac143e01ad541159fc6182248e2b219ed538cae9f44bef879b9b00"], 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x24000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x78, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS, @IPVS_DEST_ATTR_FWD_METHOD={0x6b}, @IPVS_DEST_ATTR_ADDR={0x0, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x0, 0x9, 0xda5}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x78}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xb8, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x3e}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x39}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x400cc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r2, 0x7fffffff}}, 0x10) 17:43:09 executing program 3: prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000)) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:09 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17:43:09 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x280a40, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x4, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x9}}, 0x197271f39b274ae8) fcntl$getownex(r0, 0x10, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r3, r0}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xca4, 0x401}}, './file0\x00'}) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000200)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x8d39, @remote, 0x3}, r3}}, 0x30) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x280a40, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x4, 0xfa00, {0x2, &(0x7f00000000c0), 0x106, 0x9}}, 0x197271f39b274ae8) (async) fcntl$getownex(r0, 0x10, &(0x7f0000000180)) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r3, r0}}, 0x18) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xca4, 0x401}}, './file0\x00'}) (async) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000200)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x8d39, @remote, 0x3}, r3}}, 0x30) (async) 17:43:09 executing program 1: setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f00000010c0)={@l2tp6={0xa, 0x0, 0x6, @local, 0x9, 0x3}, {&(0x7f00000000c0)=""/4096, 0x1000}, &(0x7f0000000000), 0x20}, 0xa0) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x3a1102, 0x0) (async) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:09 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, r1, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000829bd7000fcdbdf250801000008000600ff0300002400028006000f0005000000080004000080000005000d0000000000080004007f00000008000500001e86ffd985911438ac143e01ad541159fc6182248e2b219ed538cae9f44bef879b9b00"], 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x24000000) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x78, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS, @IPVS_DEST_ATTR_FWD_METHOD={0x6b}, @IPVS_DEST_ATTR_ADDR={0x0, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x0, 0x9, 0xda5}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x78}}, 0x0) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xb8, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x3e}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x39}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x400cc) (async) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r2, 0x7fffffff}}, 0x10) 17:43:09 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}, @ib={0x1b, 0x0, 0x4c7, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x0, {0x3, 0xff, "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", 0x3, 0x6, 0x5, 0xb6, 0xd5, 0x8, 0x9}}}, 0x128) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) 17:43:09 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xfffffffffffffd27) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xa}}, 0xfffffca8) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) 17:43:09 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}, @ib={0x1b, 0x0, 0x4c7, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x0, {0x3, 0xff, "3192daa74c3977cb8f79a5c64f467911f26a16d282d7d9e1694837750d57d73232a8edde16403db6658d243d1882de542f6a0362e3f7b345152f7e92d44c76f1ecd2b6f3acb9c8fe523dc4682576598464aa54ea7792594e009a75fb644c57a379c164bc84094fa444db15ee53899badca465dd30625111aa9e2a5086c7faaa9c52c4fcc9e2070e28fdeeb96ff5dddedbe77465dc1ce3c8a430f692ce9980ba872f338cdb220cb41f46f870e07f2c11e55dbce8be1fffa30dee538e64baa13232c8a92e3347dcad89a84e37cc52448bb64e0a5102fcf13954c60b76e5433efe7edc3ad20e672dc6ec40050a43bda2181d9711cb4e527ae7f8fda7f3197125be8", 0x3, 0x6, 0x5, 0xb6, 0xd5, 0x8, 0x9}}}, 0x128) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}, @ib={0x1b, 0x0, 0x4c7, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x0, {0x3, 0xff, "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", 0x3, 0x6, 0x5, 0xb6, 0xd5, 0x8, 0x9}}}, 0x128) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) (async) 17:43:09 executing program 3: prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000)) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000)) (async) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000040)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) (async) 17:43:09 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5b3042, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:09 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5b3042, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5b3042, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) (async) 17:43:09 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, r1, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000829bd7000fcdbdf250801000008000600ff0300002400028006000f0005000000080004000080000005000d0000000000080004007f00000008000500001e86ffd985911438ac143e01ad541159fc6182248e2b219ed538cae9f44bef879b9b00"], 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x24000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x78, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS, @IPVS_DEST_ATTR_FWD_METHOD={0x6b}, @IPVS_DEST_ATTR_ADDR={0x0, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x0, 0x9, 0xda5}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x78}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xb8, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x3e}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x39}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x400cc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r2, 0x7fffffff}}, 0x10) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x106, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, r1, 0x5}}, 0x48) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000829bd7000fcdbdf250801000008000600ff0300002400028006000f0005000000080004000080000005000d0000000000080004007f00000008000500001e86ffd985911438ac143e01ad541159fc6182248e2b219ed538cae9f44bef879b9b00"], 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x24000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x78, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS, @IPVS_DEST_ATTR_FWD_METHOD={0x6b}, @IPVS_DEST_ATTR_ADDR={0x0, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x0, 0x9, 0xda5}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x78}}, 0x0) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xb8, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x3e}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x39}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x400cc) (async) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r2, 0x7fffffff}}, 0x10) (async) 17:43:09 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}, @ib={0x1b, 0x0, 0x4c7, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x0, {0x3, 0xff, "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", 0x3, 0x6, 0x5, 0xb6, 0xd5, 0x8, 0x9}}}, 0x128) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) 17:43:09 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) r0 = syz_io_uring_setup(0x1a70, &(0x7f00000000c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2401, 0x0) syz_io_uring_setup(0x818, &(0x7f0000000140)={0x0, 0xa3fa}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_POLL_REMOVE, 0x8000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r1) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r5, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20044050) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) syz_io_uring_submit(0x0, r3, &(0x7f0000000380)=@IORING_OP_STATX={0x15, 0x1, 0x0, r6, &(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x100, 0x0, 0x1}, 0xa0) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x28000, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="038725bd7000fddbdf2502"], 0x24}}, 0x0) sendmsg$FOU_CMD_GET(r7, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="43f40a00000004ea03000000006804000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20008090}, 0x5) 17:43:09 executing program 5: sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x41) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.sched_load_balance\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004040) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x7ffffffff000) 17:43:09 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) r0 = syz_io_uring_setup(0x1a70, &(0x7f00000000c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2401, 0x0) (async) syz_io_uring_setup(0x818, &(0x7f0000000140)={0x0, 0xa3fa}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) (async) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_POLL_REMOVE, 0x8000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r1) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r5, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20044050) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) syz_io_uring_submit(0x0, r3, &(0x7f0000000380)=@IORING_OP_STATX={0x15, 0x1, 0x0, r6, &(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x100, 0x0, 0x1}, 0xa0) (async) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x28000, 0x0) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r9 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="038725bd7000fddbdf2502"], 0x24}}, 0x0) (async) sendmsg$FOU_CMD_GET(r7, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="43f40a00000004ea03000000006804000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20008090}, 0x5) 17:43:09 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5b3042, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:09 executing program 5: sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x41) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.sched_load_balance\x00', 0x2, 0x0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004040) (async) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x7ffffffff000) 17:43:09 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xfffffffffffffd27) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xa}}, 0xfffffca8) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) 17:43:09 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:09 executing program 5: sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x41) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.sched_load_balance\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004040) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x7ffffffff000) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x41) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.sched_load_balance\x00', 0x2, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004040) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x7ffffffff000) (async) 17:43:09 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) r0 = syz_io_uring_setup(0x1a70, &(0x7f00000000c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2401, 0x0) syz_io_uring_setup(0x818, &(0x7f0000000140)={0x0, 0xa3fa}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_POLL_REMOVE, 0x8000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r1) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r5, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20044050) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) syz_io_uring_submit(0x0, r3, &(0x7f0000000380)=@IORING_OP_STATX={0x15, 0x1, 0x0, r6, &(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x100, 0x0, 0x1}, 0xa0) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x28000, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="038725bd7000fddbdf2502"], 0x24}}, 0x0) sendmsg$FOU_CMD_GET(r7, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="43f40a00000004ea03000000006804000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20008090}, 0x5) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) syz_io_uring_setup(0x1a70, &(0x7f00000000c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2401, 0x0) (async) syz_io_uring_setup(0x818, &(0x7f0000000140)={0x0, 0xa3fa}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)) (async) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) (async) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_POLL_REMOVE, 0x8000) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r1) (async) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r5, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20044050) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000380)=@IORING_OP_STATX={0x15, 0x1, 0x0, r6, &(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x100, 0x0, 0x1}, 0xa0) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x28000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$FOU_CMD_DEL(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="038725bd7000fddbdf2502"], 0x24}}, 0x0) (async) sendmsg$FOU_CMD_GET(r7, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="43f40a00000004ea03000000006804000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20008090}, 0x5) (async) 17:43:09 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) r1 = syz_io_uring_setup(0x818, &(0x7f0000000140)={0x0, 0xa3fa}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) eventfd2(0x81, 0x1) syz_io_uring_submit(r2, 0x0, &(0x7f00000003c0)=@IORING_OP_POLL_REMOVE, 0x7ffe) r3 = syz_io_uring_setup(0x43ff, &(0x7f0000000000)={0x0, 0x5f73, 0x10, 0x2, 0x54}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) r5 = io_uring_setup(0x7c57, &(0x7f00000001c0)) r6 = syz_io_uring_setup(0xc88, &(0x7f0000000000)={0x0, 0x431a}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r7, 0x1, 0x1, 0x0, 0x0) syz_io_uring_setup(0x7e4d, &(0x7f0000000700)={0x0, 0xa8dd, 0x0, 0x0, 0x184, 0x0, r7}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000400), &(0x7f00000004c0)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000005c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="01000000090063b2703d8e7b8db43000886fa46824e98602dbe1514153e958bc7c7534f70cb412c09e4cbcd7e4abe5aba83f64ad56ebbfd5f9078bc0f9e82b9165e49f124f756497a4d849fa525fe8dff19a8cc1b39633847e6b9c3add5a00328734bbb34a8b322a32478651724ad9add7b8105ae9e0f13cd37168eae708249d7b29ec7e7157a40697293941f869e95f2b38cc8310c7ba34d1b131dfdb6125c4d7b4b18b0294484b034f3d4aeb24c98981a17b7b8a6d90c4a5ddda76a3e0e48e203b223c7ff3222206742cc8de3ddbc6d08a7f37ca3485f173b23fb951a50a6f8d1134caa4d4f4355afa7bf72241a30eb8"]) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\t./file0\x00']) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x7, &(0x7f0000000580)=r9, 0x1) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r10) syz_io_uring_submit(r2, r4, &(0x7f0000000280)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x3) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000000c0)={0x40, 0x0, "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"}) 17:43:09 executing program 3: prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000)) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000)) (async) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000040)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) (async) 17:43:09 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) 17:43:09 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) (async) r1 = syz_io_uring_setup(0x818, &(0x7f0000000140)={0x0, 0xa3fa}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) (async) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) eventfd2(0x81, 0x1) (async) syz_io_uring_submit(r2, 0x0, &(0x7f00000003c0)=@IORING_OP_POLL_REMOVE, 0x7ffe) (async) r3 = syz_io_uring_setup(0x43ff, &(0x7f0000000000)={0x0, 0x5f73, 0x10, 0x2, 0x54}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) (async) r5 = io_uring_setup(0x7c57, &(0x7f00000001c0)) (async, rerun: 32) r6 = syz_io_uring_setup(0xc88, &(0x7f0000000000)={0x0, 0x431a}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (async, rerun: 32) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r7, 0x1, 0x1, 0x0, 0x0) (async, rerun: 32) syz_io_uring_setup(0x7e4d, &(0x7f0000000700)={0x0, 0xa8dd, 0x0, 0x0, 0x184, 0x0, r7}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000400), &(0x7f00000004c0)) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000005c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="01000000090063b2703d8e7b8db43000886fa46824e98602dbe1514153e958bc7c7534f70cb412c09e4cbcd7e4abe5aba83f64ad56ebbfd5f9078bc0f9e82b9165e49f124f756497a4d849fa525fe8dff19a8cc1b39633847e6b9c3add5a00328734bbb34a8b322a32478651724ad9add7b8105ae9e0f13cd37168eae708249d7b29ec7e7157a40697293941f869e95f2b38cc8310c7ba34d1b131dfdb6125c4d7b4b18b0294484b034f3d4aeb24c98981a17b7b8a6d90c4a5ddda76a3e0e48e203b223c7ff3222206742cc8de3ddbc6d08a7f37ca3485f173b23fb951a50a6f8d1134caa4d4f4355afa7bf72241a30eb8"]) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\t./file0\x00']) (async, rerun: 64) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x7, &(0x7f0000000580)=r9, 0x1) (async) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r10) syz_io_uring_submit(r2, r4, &(0x7f0000000280)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x3) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000000c0)={0x40, 0x0, "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"}) 17:43:09 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) 17:43:09 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x76e9, &(0x7f00000000c0)={0x0, 0x0, 0x20, 0xfffffffd, 0x1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r0 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000080)=0x2, 0x4) 17:43:09 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) (async) 17:43:09 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) 17:43:09 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xfffffffffffffd27) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xa}}, 0xfffffca8) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xfffffffffffffd27) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x13f, 0xa}}, 0xfffffca8) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) (async) 17:43:09 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) r1 = syz_io_uring_setup(0x818, &(0x7f0000000140)={0x0, 0xa3fa}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) eventfd2(0x81, 0x1) syz_io_uring_submit(r2, 0x0, &(0x7f00000003c0)=@IORING_OP_POLL_REMOVE, 0x7ffe) r3 = syz_io_uring_setup(0x43ff, &(0x7f0000000000)={0x0, 0x5f73, 0x10, 0x2, 0x54}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) r5 = io_uring_setup(0x7c57, &(0x7f00000001c0)) r6 = syz_io_uring_setup(0xc88, &(0x7f0000000000)={0x0, 0x431a}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r7, 0x1, 0x1, 0x0, 0x0) syz_io_uring_setup(0x7e4d, &(0x7f0000000700)={0x0, 0xa8dd, 0x0, 0x0, 0x184, 0x0, r7}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000400), &(0x7f00000004c0)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000005c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="01000000090063b2703d8e7b8db43000886fa46824e98602dbe1514153e958bc7c7534f70cb412c09e4cbcd7e4abe5aba83f64ad56ebbfd5f9078bc0f9e82b9165e49f124f756497a4d849fa525fe8dff19a8cc1b39633847e6b9c3add5a00328734bbb34a8b322a32478651724ad9add7b8105ae9e0f13cd37168eae708249d7b29ec7e7157a40697293941f869e95f2b38cc8310c7ba34d1b131dfdb6125c4d7b4b18b0294484b034f3d4aeb24c98981a17b7b8a6d90c4a5ddda76a3e0e48e203b223c7ff3222206742cc8de3ddbc6d08a7f37ca3485f173b23fb951a50a6f8d1134caa4d4f4355afa7bf72241a30eb8"]) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\t./file0\x00']) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x7, &(0x7f0000000580)=r9, 0x1) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r10) syz_io_uring_submit(r2, r4, &(0x7f0000000280)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x3) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000000c0)={0x40, 0x0, "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"}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) (async) syz_io_uring_setup(0x818, &(0x7f0000000140)={0x0, 0xa3fa}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)) (async) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) (async) eventfd2(0x81, 0x1) (async) syz_io_uring_submit(r2, 0x0, &(0x7f00000003c0)=@IORING_OP_POLL_REMOVE, 0x7ffe) (async) syz_io_uring_setup(0x43ff, &(0x7f0000000000)={0x0, 0x5f73, 0x10, 0x2, 0x54}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) (async) io_uring_setup(0x7c57, &(0x7f00000001c0)) (async) syz_io_uring_setup(0xc88, &(0x7f0000000000)={0x0, 0x431a}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) setsockopt$inet6_icmp_ICMP_FILTER(r7, 0x1, 0x1, 0x0, 0x0) (async) syz_io_uring_setup(0x7e4d, &(0x7f0000000700)={0x0, 0xa8dd, 0x0, 0x0, 0x184, 0x0, r7}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000400), &(0x7f00000004c0)) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000005c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="01000000090063b2703d8e7b8db43000886fa46824e98602dbe1514153e958bc7c7534f70cb412c09e4cbcd7e4abe5aba83f64ad56ebbfd5f9078bc0f9e82b9165e49f124f756497a4d849fa525fe8dff19a8cc1b39633847e6b9c3add5a00328734bbb34a8b322a32478651724ad9add7b8105ae9e0f13cd37168eae708249d7b29ec7e7157a40697293941f869e95f2b38cc8310c7ba34d1b131dfdb6125c4d7b4b18b0294484b034f3d4aeb24c98981a17b7b8a6d90c4a5ddda76a3e0e48e203b223c7ff3222206742cc8de3ddbc6d08a7f37ca3485f173b23fb951a50a6f8d1134caa4d4f4355afa7bf72241a30eb8"]) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\t./file0\x00']) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x7, &(0x7f0000000580)=r9, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r10) (async) syz_io_uring_submit(r2, r4, &(0x7f0000000280)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x3) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000000c0)={0x40, 0x0, "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"}) (async) 17:43:09 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x1868, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:09 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) (async) 17:43:09 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x400}, @in={0x2, 0x4e23, @broadcast}}}, 0x118) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r2}}, 0x18) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x458280, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000800)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0xfffb, 0xff800000, {"86c757d588d2bcfc2a41af32f1289883"}, 0x4, 0x6, 0x1}}}, 0x90) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000001c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000180)}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x41}}, @ib={0x1b, 0x0, 0xfffffff8, {"464bcb720f5ef5373d21b5b42a3200"}, 0x40}}}, 0x118) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_ACCEPT(r7, &(0x7f0000000540)={0x8, 0x120, 0xfa00, {0x2, {0x6, 0x6, "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", 0x8, 0x3f, 0x0, 0x1, 0x1f, 0x8, 0x4}, r2}}, 0x128) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000140)={0x5, 0x10, 0xfa00, {&(0x7f0000000340), r6, 0x2}}, 0x18) 17:43:09 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x76e9, &(0x7f00000000c0)={0x0, 0x0, 0x20, 0xfffffffd, 0x1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) r0 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r0) (async) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000080)=0x2, 0x4) 17:43:09 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x400}, @in={0x2, 0x4e23, @broadcast}}}, 0x118) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r2}}, 0x18) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x458280, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000800)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0xfffb, 0xff800000, {"86c757d588d2bcfc2a41af32f1289883"}, 0x4, 0x6, 0x1}}}, 0x90) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000001c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000180)}}, 0x18) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x41}}, @ib={0x1b, 0x0, 0xfffffff8, {"464bcb720f5ef5373d21b5b42a3200"}, 0x40}}}, 0x118) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20) (async) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_ACCEPT(r7, &(0x7f0000000540)={0x8, 0x120, 0xfa00, {0x2, {0x6, 0x6, "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", 0x8, 0x3f, 0x0, 0x1, 0x1f, 0x8, 0x4}, r2}}, 0x128) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000140)={0x5, 0x10, 0xfa00, {&(0x7f0000000340), r6, 0x2}}, 0x18) 17:43:09 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x1868, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:09 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x76e9, &(0x7f00000000c0)={0x0, 0x0, 0x20, 0xfffffffd, 0x1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r0 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000080)=0x2, 0x4) 17:43:09 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3, 0x2}}, 0x18) 17:43:09 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x400}, @in={0x2, 0x4e23, @broadcast}}}, 0x118) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) (async, rerun: 32) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r2}}, 0x18) (async, rerun: 32) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x458280, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000800)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0xfffb, 0xff800000, {"86c757d588d2bcfc2a41af32f1289883"}, 0x4, 0x6, 0x1}}}, 0x90) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000001c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000180)}}, 0x18) (async, rerun: 32) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x41}}, @ib={0x1b, 0x0, 0xfffffff8, {"464bcb720f5ef5373d21b5b42a3200"}, 0x40}}}, 0x118) (async, rerun: 32) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20) (async) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async, rerun: 64) write$RDMA_USER_CM_CMD_ACCEPT(r7, &(0x7f0000000540)={0x8, 0x120, 0xfa00, {0x2, {0x6, 0x6, "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", 0x8, 0x3f, 0x0, 0x1, 0x1f, 0x8, 0x4}, r2}}, 0x128) (rerun: 64) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000140)={0x5, 0x10, 0xfa00, {&(0x7f0000000340), r6, 0x2}}, 0x18) 17:43:09 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)={0x4000001a}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r4, 0x7}}, 0x10) 17:43:09 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f00000001c0)='\x00'}, 0x30) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000180)=0x8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x7ffff000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000000)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), r3, 0x1}}, 0x18) 17:43:09 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3, 0x2}}, 0x18) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3, 0x2}}, 0x18) (async) 17:43:09 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)={0x4000001a}) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r4, 0x7}}, 0x10) 17:43:09 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x1868, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x1868, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) (async) 17:43:09 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfffffffc}}, './file0\x00'}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80}, @ib={0x1b, 0x8000, 0x8000, {"36a4fdfbd7ec4403bc8fa1a5e7b61f7b"}, 0xe24, 0x8, 0x3acb}}}, 0x118) 17:43:09 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x713002, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0x541b, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) r2 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f00000001c0)={{0x3, 0x100}, 0x7d}, 0x10) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000440)={0x9, 0x108, 0xfa00, {r3, 0x3, "6008ce", "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"}}, 0x110) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 17:43:09 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0x2}, 0x18) 17:43:09 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfffffffc}}, './file0\x00'}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80}, @ib={0x1b, 0x8000, 0x8000, {"36a4fdfbd7ec4403bc8fa1a5e7b61f7b"}, 0xe24, 0x8, 0x3acb}}}, 0x118) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfffffffc}}, './file0\x00'}) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80}, @ib={0x1b, 0x8000, 0x8000, {"36a4fdfbd7ec4403bc8fa1a5e7b61f7b"}, 0xe24, 0x8, 0x3acb}}}, 0x118) (async) 17:43:09 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)={0x4000001a}) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r4, 0x7}}, 0x10) 17:43:09 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3, 0x2}}, 0x18) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3, 0x2}}, 0x18) (async) 17:43:09 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f00000001c0)='\x00'}, 0x30) (async) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) (async) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000180)=0x8) (async) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x7ffff000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000000)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), r3, 0x1}}, 0x18) 17:43:09 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'pim6reg1\x00', 0x200}) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) 17:43:09 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfffffffc}}, './file0\x00'}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80}, @ib={0x1b, 0x8000, 0x8000, {"36a4fdfbd7ec4403bc8fa1a5e7b61f7b"}, 0xe24, 0x8, 0x3acb}}}, 0x118) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfffffffc}}, './file0\x00'}) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80}, @ib={0x1b, 0x8000, 0x8000, {"36a4fdfbd7ec4403bc8fa1a5e7b61f7b"}, 0xe24, 0x8, 0x3acb}}}, 0x118) (async) 17:43:09 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f00000001c0)='\x00'}, 0x30) (async, rerun: 64) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) (async, rerun: 64) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000180)=0x8) (async) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x7ffff000) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000000)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), r3, 0x1}}, 0x18) 17:43:09 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x713002, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0x541b, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) r2 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f00000001c0)={{0x3, 0x100}, 0x7d}, 0x10) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000440)={0x9, 0x108, 0xfa00, {r3, 0x3, "6008ce", "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"}}, 0x110) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x713002, 0x0) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0x541b, 0x0) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) (async) socket(0x0, 0x0, 0x3ff) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) (async) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f00000001c0)={{0x3, 0x100}, 0x7d}, 0x10) (async) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200), 0x106, 0x1}}, 0x20) (async) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000440)={0x9, 0x108, 0xfa00, {r3, 0x3, "6008ce", "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"}}, 0x110) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) 17:43:09 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0000000000ec67002e2f666966b87000"]) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {&(0x7f00000001c0), 0x4, {0xa, 0x4e24, 0x2, @private1, 0x7}}}, 0x38) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r3, r4}}, 0x18) 17:43:09 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) (async) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0x2}, 0x18) 17:43:09 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'pim6reg1\x00', 0x200}) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) 17:43:09 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48811}, 0x41880) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:09 executing program 2: r0 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x7ffff000) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) 17:43:09 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0000000000ec67002e2f666966b87000"]) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {&(0x7f00000001c0), 0x4, {0xa, 0x4e24, 0x2, @private1, 0x7}}}, 0x38) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r3, r4}}, 0x18) 17:43:09 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) (async) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'pim6reg1\x00', 0x200}) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) 17:43:09 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x713002, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0x541b, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) r2 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f00000001c0)={{0x3, 0x100}, 0x7d}, 0x10) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000440)={0x9, 0x108, 0xfa00, {r3, 0x3, "6008ce", "2bb3110d21aaf6d5f6deeb49d59e587a2263b92b1e2f407d94147a22b8d1eb734774ea6db864214d6760833544f411bc5705aed48fb088a7477f5595d2b8ecfdd4ad96f38d7184ea4fc77ca3c06f811b61b42ece333b948199324b64b29271329158c4b6ae61aa1b1689d8922529d4fa9ba42a52b7184e76f64e9b3ba3ae7e41d478dec555ed52db2516a05418c3447e3424723123ddce959bc77fd582e19b0ff8599fc96ab3bcd65433f77db6f587316109667e3c6475969be5de4f283f5b15936e18c60bf073dee4d856beb525d4eb79b5d85fff6336f8f1eaed9e7b729ff4651833943fd54df4b15089475c9a04ffab5afd733390e836afdb26b2f392d831"}}, 0x110) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x713002, 0x0) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0x541b, 0x0) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) (async) socket(0x0, 0x0, 0x3ff) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) (async) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f00000001c0)={{0x3, 0x100}, 0x7d}, 0x10) (async) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200), 0x106, 0x1}}, 0x20) (async) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000440)={0x9, 0x108, 0xfa00, {r3, 0x3, "6008ce", "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"}}, 0x110) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) 17:43:09 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48811}, 0x41880) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:09 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) (async) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0x2}, 0x18) 17:43:09 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x793903, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) 17:43:09 executing program 2: r0 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r0) (async) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x7ffff000) (async) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) 17:43:09 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0000000000ec67002e2f666966b87000"]) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {&(0x7f00000001c0), 0x4, {0xa, 0x4e24, 0x2, @private1, 0x7}}}, 0x38) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) (rerun: 64) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r3, r4}}, 0x18) 17:43:09 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48811}, 0x41880) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48811}, 0x41880) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) 17:43:09 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x793903, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) 17:43:09 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0xfffffffa}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3, {0x7a}}, './file0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {r5, 0x1, 0x0, 0x0, 0x0, @ib={0x1b, 0x400, 0x2, {"f192c831ee0e3add20e588722b7e20ea"}, 0x1ff, 0x1, 0x10000000000000}, @in6={0xa, 0x4e24, 0x7, @private1, 0x4}}}, 0x118) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r6, &(0x7f0000000040)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x4}}, 0x18) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0xffffffffffffffcf) 17:43:09 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x793903, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) 17:43:09 executing program 0: write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040)=0xff, r1, 0x0, 0x0, 0x1}}, 0x20) 17:43:09 executing program 4: r0 = syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xf532, 0x8}}, './file0\x00'}) syz_io_uring_setup(0x1a6c, &(0x7f0000000040)={0x0, 0xe4ce, 0x0, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000100)=r1, 0x1) 17:43:09 executing program 2: r0 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x7ffff000) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) 17:43:09 executing program 3: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xc4f3}}, './file0\x00'}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000040), 0x4) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x8001, 0x2}}, './file0\x00'}) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x100cb, 0x2300, 0x1, 0x0, 0x1, 0xac, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0x7f01, 0x3}, 0x48) 17:43:09 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0xfffffffa}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3, {0x7a}}, './file0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {r5, 0x1, 0x0, 0x0, 0x0, @ib={0x1b, 0x400, 0x2, {"f192c831ee0e3add20e588722b7e20ea"}, 0x1ff, 0x1, 0x10000000000000}, @in6={0xa, 0x4e24, 0x7, @private1, 0x4}}}, 0x118) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r6, &(0x7f0000000040)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x4}}, 0x18) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0xffffffffffffffcf) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0xfffffffa}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3, {0x7a}}, './file0\x00'}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240), 0x2, 0x5}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {r5, 0x1, 0x0, 0x0, 0x0, @ib={0x1b, 0x400, 0x2, {"f192c831ee0e3add20e588722b7e20ea"}, 0x1ff, 0x1, 0x10000000000000}, @in6={0xa, 0x4e24, 0x7, @private1, 0x4}}}, 0x118) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r6, &(0x7f0000000040)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x4}}, 0x18) (async) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0xffffffffffffffcf) (async) 17:43:09 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x208040, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_open_dev$MSR(&(0x7f0000002300), 0x80, 0x0) socket$rds(0x15, 0x5, 0x0) 17:43:09 executing program 0: write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040)=0xff, r1, 0x0, 0x0, 0x1}}, 0x20) 17:43:09 executing program 4: r0 = syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xf532, 0x8}}, './file0\x00'}) syz_io_uring_setup(0x1a6c, &(0x7f0000000040)={0x0, 0xe4ce, 0x0, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000100)=r1, 0x1) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xf532, 0x8}}, './file0\x00'}) (async) syz_io_uring_setup(0x1a6c, &(0x7f0000000040)={0x0, 0xe4ce, 0x0, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000100)=r1, 0x1) (async) 17:43:09 executing program 3: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xc4f3}}, './file0\x00'}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000040), 0x4) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x8001, 0x2}}, './file0\x00'}) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x100cb, 0x2300, 0x1, 0x0, 0x1, 0xac, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0x7f01, 0x3}, 0x48) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xc4f3}}, './file0\x00'}) (async) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000040), 0x4) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x8001, 0x2}}, './file0\x00'}) (async) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) (async) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0x18) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x100cb, 0x2300, 0x1, 0x0, 0x1, 0xac, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0x7f01, 0x3}, 0x48) (async) 17:43:09 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x77b002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) 17:43:09 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x208040, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_open_dev$MSR(&(0x7f0000002300), 0x80, 0x0) socket$rds(0x15, 0x5, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x208040, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) syz_open_dev$MSR(&(0x7f0000002300), 0x80, 0x0) (async) socket$rds(0x15, 0x5, 0x0) (async) 17:43:09 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0xfffffffa}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3, {0x7a}}, './file0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {r5, 0x1, 0x0, 0x0, 0x0, @ib={0x1b, 0x400, 0x2, {"f192c831ee0e3add20e588722b7e20ea"}, 0x1ff, 0x1, 0x10000000000000}, @in6={0xa, 0x4e24, 0x7, @private1, 0x4}}}, 0x118) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r6, &(0x7f0000000040)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x4}}, 0x18) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0xffffffffffffffcf) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0xfffffffa}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3, {0x7a}}, './file0\x00'}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240), 0x2, 0x5}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {r5, 0x1, 0x0, 0x0, 0x0, @ib={0x1b, 0x400, 0x2, {"f192c831ee0e3add20e588722b7e20ea"}, 0x1ff, 0x1, 0x10000000000000}, @in6={0xa, 0x4e24, 0x7, @private1, 0x4}}}, 0x118) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r6, &(0x7f0000000040)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x4}}, 0x18) (async) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0xffffffffffffffcf) (async) 17:43:09 executing program 3: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xc4f3}}, './file0\x00'}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000040), 0x4) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x8001, 0x2}}, './file0\x00'}) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x100cb, 0x2300, 0x1, 0x0, 0x1, 0xac, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0x7f01, 0x3}, 0x48) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xc4f3}}, './file0\x00'}) (async) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000040), 0x4) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x8001, 0x2}}, './file0\x00'}) (async) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) (async) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0x18) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x100cb, 0x2300, 0x1, 0x0, 0x1, 0xac, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0x7f01, 0x3}, 0x48) (async) 17:43:09 executing program 0: write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040)=0xff, r1, 0x0, 0x0, 0x1}}, 0x20) 17:43:09 executing program 4: r0 = syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xf532, 0x8}}, './file0\x00'}) syz_io_uring_setup(0x1a6c, &(0x7f0000000040)={0x0, 0xe4ce, 0x0, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000100)=r1, 0x1) 17:43:10 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x7d3042, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:10 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x208040, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_open_dev$MSR(&(0x7f0000002300), 0x80, 0x0) socket$rds(0x15, 0x5, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x208040, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) syz_open_dev$MSR(&(0x7f0000002300), 0x80, 0x0) (async) socket$rds(0x15, 0x5, 0x0) (async) 17:43:10 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x77b002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x77b002, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) (async) 17:43:10 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file0\x00'}) 17:43:10 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {r3, 0x125c0e11, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0xffff, @dev={0xfe, 0x80, '\x00', 0x13}, 0x8}, @ib={0x1b, 0x9, 0x2, {"cb5fb499351ddb55dd82123f9d8df231"}, 0x11b, 0x32ab, 0x9}}}, 0x118) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000340)={0x16, 0x98, 0xfa00, {&(0x7f0000000300), 0x0, r3, 0x30, 0x0, @in6={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3f}}}, 0xa0) 17:43:10 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x3, 0xffffffffffffffff, 0x30, 0x1, @in={0x2, 0x4e20, @broadcast}}}, 0xa0) 17:43:10 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x77b002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) 17:43:10 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x7d3042, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:10 executing program 4: syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 17:43:10 executing program 4: syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 17:43:10 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {r3, 0x125c0e11, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0xffff, @dev={0xfe, 0x80, '\x00', 0x13}, 0x8}, @ib={0x1b, 0x9, 0x2, {"cb5fb499351ddb55dd82123f9d8df231"}, 0x11b, 0x32ab, 0x9}}}, 0x118) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000340)={0x16, 0x98, 0xfa00, {&(0x7f0000000300), 0x0, r3, 0x30, 0x0, @in6={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3f}}}, 0xa0) 17:43:10 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file0\x00'}) 17:43:10 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x7d3042, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:10 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2f}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfffffffc}}, './file0\x00'}) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) 17:43:10 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async, rerun: 32) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x3, 0xffffffffffffffff, 0x30, 0x1, @in={0x2, 0x4e20, @broadcast}}}, 0xa0) (rerun: 32) 17:43:10 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {r3, 0x125c0e11, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0xffff, @dev={0xfe, 0x80, '\x00', 0x13}, 0x8}, @ib={0x1b, 0x9, 0x2, {"cb5fb499351ddb55dd82123f9d8df231"}, 0x11b, 0x32ab, 0x9}}}, 0x118) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000340)={0x16, 0x98, 0xfa00, {&(0x7f0000000300), 0x0, r3, 0x30, 0x0, @in6={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3f}}}, 0xa0) 17:43:10 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r1}}, 0x18) 17:43:10 executing program 4: syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 17:43:10 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2f}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfffffffc}}, './file0\x00'}) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) 17:43:10 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file0\x00'}) (async) 17:43:10 executing program 4: r0 = syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x2a79, &(0x7f0000000040)={0x0, 0x8a41, 0x2, 0x2, 0xa2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x9, 0x2, {0x0, r0}, 0x200, 0x2, 0x0, {0x0, 0x0, r0}}, 0x80) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x9, 0x80, "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", 0x20, 0x9, 0xff, 0x0, 0x4, 0xa9, 0x40}}}, 0x120) 17:43:10 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x3, 0xffffffffffffffff, 0x30, 0x1, @in={0x2, 0x4e20, @broadcast}}}, 0xa0) 17:43:10 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2f}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfffffffc}}, './file0\x00'}) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2f}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfffffffc}}, './file0\x00'}) (async) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) (async) 17:43:10 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) r1 = syz_clone3(&(0x7f00000013c0)={0x4000000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x41}, &(0x7f0000000340)=""/64, 0x40, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0x0], 0x2, {r0}}, 0x58) r2 = gettid() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r2, 0x7, 0xffffffffffffffff, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) syz_clone3(&(0x7f0000001480)={0x80, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), {0x32}, &(0x7f0000000140)=""/189, 0xbd, &(0x7f0000000200)=""/117, &(0x7f0000001440)=[r1, 0xffffffffffffffff, r2, 0xffffffffffffffff], 0x4, {r3}}, 0x58) 17:43:10 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r1}}, 0x18) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x106, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r1}}, 0x18) (async) 17:43:10 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) mq_timedsend(r3, &(0x7f0000000000)="a806226a755d51990ed1f1af161b515145ad3f0355ca7155fa8b177aec9a82f39d3882b50e86470b71fe4c1035d6814b15880ad14064c0d74cd2c87424aef31b2e91b7a23484a8a1a2c9c5879ab19f76658a50e790ebbc", 0x57, 0x7, &(0x7f0000000100)={r1, r2+10000000}) 17:43:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fedbdf251200000008003200ff0f00000a000900aaaaaaf8189b5109bf372f9da4aaaa3300000600280003000000090031000720000005080000000000000000390004000000"], 0x48}, 0x1, 0x0, 0x0, 0x20040800}, 0x800) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x7ffffffff000) 17:43:10 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) r1 = syz_clone3(&(0x7f00000013c0)={0x4000000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x41}, &(0x7f0000000340)=""/64, 0x40, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0x0], 0x2, {r0}}, 0x58) r2 = gettid() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r2, 0x7, 0xffffffffffffffff, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) syz_clone3(&(0x7f0000001480)={0x80, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), {0x32}, &(0x7f0000000140)=""/189, 0xbd, &(0x7f0000000200)=""/117, &(0x7f0000001440)=[r1, 0xffffffffffffffff, r2, 0xffffffffffffffff], 0x4, {r3}}, 0x58) 17:43:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) (async) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fedbdf251200000008003200ff0f00000a000900aaaaaaf8189b5109bf372f9da4aaaa3300000600280003000000090031000720000005080000000000000000390004000000"], 0x48}, 0x1, 0x0, 0x0, 0x20040800}, 0x800) (async) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x7ffffffff000) 17:43:10 executing program 4: r0 = syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x2a79, &(0x7f0000000040)={0x0, 0x8a41, 0x2, 0x2, 0xa2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x9, 0x2, {0x0, r0}, 0x200, 0x2, 0x0, {0x0, 0x0, r0}}, 0x80) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x9, 0x80, "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", 0x20, 0x9, 0xff, 0x0, 0x4, 0xa9, 0x40}}}, 0x120) 17:43:10 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r1}}, 0x18) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x106, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r1}}, 0x18) (async) 17:43:10 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x117002, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000)=r0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x72b, 0x2300, 0x10001, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 17:43:10 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) mq_timedsend(r3, &(0x7f0000000000)="a806226a755d51990ed1f1af161b515145ad3f0355ca7155fa8b177aec9a82f39d3882b50e86470b71fe4c1035d6814b15880ad14064c0d74cd2c87424aef31b2e91b7a23484a8a1a2c9c5879ab19f76658a50e790ebbc", 0x57, 0x7, &(0x7f0000000100)={r1, r2+10000000}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) (async) mq_timedsend(r3, &(0x7f0000000000)="a806226a755d51990ed1f1af161b515145ad3f0355ca7155fa8b177aec9a82f39d3882b50e86470b71fe4c1035d6814b15880ad14064c0d74cd2c87424aef31b2e91b7a23484a8a1a2c9c5879ab19f76658a50e790ebbc", 0x57, 0x7, &(0x7f0000000100)={r1, r2+10000000}) (async) 17:43:10 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) r1 = syz_clone3(&(0x7f00000013c0)={0x4000000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x41}, &(0x7f0000000340)=""/64, 0x40, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, 0x0], 0x2, {r0}}, 0x58) (async) r2 = gettid() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r2, 0x7, 0xffffffffffffffff, 0x0) (async) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) syz_clone3(&(0x7f0000001480)={0x80, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), {0x32}, &(0x7f0000000140)=""/189, 0xbd, &(0x7f0000000200)=""/117, &(0x7f0000001440)=[r1, 0xffffffffffffffff, r2, 0xffffffffffffffff], 0x4, {r3}}, 0x58) 17:43:10 executing program 4: r0 = syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x2a79, &(0x7f0000000040)={0x0, 0x8a41, 0x2, 0x2, 0xa2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x9, 0x2, {0x0, r0}, 0x200, 0x2, 0x0, {0x0, 0x0, r0}}, 0x80) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x9, 0x80, "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", 0x20, 0x9, 0xff, 0x0, 0x4, 0xa9, 0x40}}}, 0x120) 17:43:10 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = mq_open(&(0x7f0000000040)='/dev/bsg\x00', 0x1, 0x0, &(0x7f00000000c0)={0x0, 0x856, 0x1ff, 0xa4}) mq_timedreceive(r1, &(0x7f0000000100)=""/163, 0xa3, 0x1, &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000000)=ANY=[@ANYBLOB="0100"/12, @ANYRES32=r0, @ANYBLOB="00000000010000002e2f66696c653000"]) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) 17:43:10 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593242, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0x72, 0x0, "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", 0x1, 0x3f, 0x3, 0x2, 0x1, 0x2, 0x8}}}, 0x120) 17:43:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fedbdf251200000008003200ff0f00000a000900aaaaaaf8189b5109bf372f9da4aaaa3300000600280003000000090031000720000005080000000000000000390004000000"], 0x48}, 0x1, 0x0, 0x0, 0x20040800}, 0x800) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x7ffffffff000) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) (async) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fedbdf251200000008003200ff0f00000a000900aaaaaaf8189b5109bf372f9da4aaaa3300000600280003000000090031000720000005080000000000000000390004000000"], 0x48}, 0x1, 0x0, 0x0, 0x20040800}, 0x800) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x7ffffffff000) (async) 17:43:10 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x117002, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000)=r0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x72b, 0x2300, 0x10001, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x117002, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000)=r0, 0x1) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x72b, 0x2300, 0x10001, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) (async) 17:43:10 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) (async, rerun: 32) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 32) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) (async, rerun: 32) mq_timedsend(r3, &(0x7f0000000000)="a806226a755d51990ed1f1af161b515145ad3f0355ca7155fa8b177aec9a82f39d3882b50e86470b71fe4c1035d6814b15880ad14064c0d74cd2c87424aef31b2e91b7a23484a8a1a2c9c5879ab19f76658a50e790ebbc", 0x57, 0x7, &(0x7f0000000100)={r1, r2+10000000}) (rerun: 32) 17:43:10 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x7f}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd26, 0x9, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x1c}}, 0x4041) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 17:43:10 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000000), 0x4) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) 17:43:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000020) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x7ffff000) 17:43:10 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593242, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0x72, 0x0, "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", 0x1, 0x3f, 0x3, 0x2, 0x1, 0x2, 0x8}}}, 0x120) 17:43:10 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async, rerun: 64) r1 = mq_open(&(0x7f0000000040)='/dev/bsg\x00', 0x1, 0x0, &(0x7f00000000c0)={0x0, 0x856, 0x1ff, 0xa4}) (rerun: 64) mq_timedreceive(r1, &(0x7f0000000100)=""/163, 0xa3, 0x1, &(0x7f00000001c0)) (async, rerun: 32) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000000)=ANY=[@ANYBLOB="0100"/12, @ANYRES32=r0, @ANYBLOB="00000000010000002e2f66696c653000"]) (async) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) 17:43:10 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000000), 0x4) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) 17:43:10 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x117002, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000)=r0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x72b, 0x2300, 0x10001, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x117002, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000)=r0, 0x1) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x72b, 0x2300, 0x10001, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) (async) 17:43:10 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = mq_open(&(0x7f0000000040)='/dev/bsg\x00', 0x1, 0x0, &(0x7f00000000c0)={0x0, 0x856, 0x1ff, 0xa4}) mq_timedreceive(r1, &(0x7f0000000100)=""/163, 0xa3, 0x1, &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000000)=ANY=[@ANYBLOB="0100"/12, @ANYRES32=r0, @ANYBLOB="00000000010000002e2f66696c653000"]) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) mq_open(&(0x7f0000000040)='/dev/bsg\x00', 0x1, 0x0, &(0x7f00000000c0)={0x0, 0x856, 0x1ff, 0xa4}) (async) mq_timedreceive(r1, &(0x7f0000000100)=""/163, 0xa3, 0x1, &(0x7f00000001c0)) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000000)=ANY=[@ANYBLOB="0100"/12, @ANYRES32=r0, @ANYBLOB="00000000010000002e2f66696c653000"]) (async) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) (async) 17:43:10 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x7f}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd26, 0x9, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x1c}}, 0x4041) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x7f}, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd26, 0x9, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x1c}}, 0x4041) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) 17:43:10 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000000), 0x4) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000000), 0x4) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) (async) 17:43:10 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x22fc, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:10 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593242, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0x72, 0x0, "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", 0x1, 0x3f, 0x3, 0x2, 0x1, 0x2, 0x8}}}, 0x120) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593242, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0x72, 0x0, "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", 0x1, 0x3f, 0x3, 0x2, 0x1, 0x2, 0x8}}}, 0x120) (async) 17:43:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000020) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x7ffff000) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) (async) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000020) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x7ffff000) (async) 17:43:10 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040), 0x4) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xbfb0}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x5040}, 0x2001) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x18000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:10 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f00000000c0), r2, 0x2}}, 0x18) 17:43:10 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x7f}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd26, 0x9, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x1c}}, 0x4041) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x7f}, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd26, 0x9, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x1c}}, 0x4041) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) 17:43:10 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x22fc, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:10 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040), 0x4) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xbfb0}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x5040}, 0x2001) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x18000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socket(0x0, 0x0, 0x3ff) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) (async) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040), 0x4) (async) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xbfb0}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x5040}, 0x2001) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x18000, 0x0) (async) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) (async) 17:43:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000020) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x7ffff000) 17:43:10 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x4c7f, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x222, 0xa}}, 0x20) 17:43:10 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f00000000c0), r2, 0x2}}, 0x18) 17:43:10 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)=ANY=[@ANYBLOB="010000d90100000000800000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="01000000740000002e2f66696c653000"]) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) epoll_pwait2(r0, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f0000000140)={r1, r2+60000000}, &(0x7f0000000180)={[0x100]}, 0x8) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x7ffff000) 17:43:10 executing program 4: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x4}) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 17:43:10 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f00000000c0), r2, 0x2}}, 0x18) 17:43:10 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x22fc, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:10 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x4c7f, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x222, 0xa}}, 0x20) 17:43:10 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040), 0x4) (async, rerun: 64) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), 0x4) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xbfb0}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x5040}, 0x2001) (async, rerun: 64) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x18000, 0x0) (rerun: 64) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:10 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)=ANY=[@ANYBLOB="010000d90100000000800000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="01000000740000002e2f66696c653000"]) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) (rerun: 64) epoll_pwait2(r0, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f0000000140)={r1, r2+60000000}, &(0x7f0000000180)={[0x100]}, 0x8) (async) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x7ffff000) 17:43:10 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x79b942, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x2c0400, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x1000, @loopback, 0x9000}}}, 0x30) 17:43:10 executing program 4: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x4}) (async) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 17:43:10 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x4c7f, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x222, 0xa}}, 0x20) 17:43:10 executing program 4: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x4}) (async) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 17:43:10 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)=ANY=[@ANYBLOB="010000d90100000000800000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="01000000740000002e2f66696c653000"]) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) epoll_pwait2(r0, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f0000000140)={r1, r2+60000000}, &(0x7f0000000180)={[0x100]}, 0x8) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x7ffff000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)=ANY=[@ANYBLOB="010000d90100000000800000", @ANYRES32, @ANYBLOB="01000000740000002e2f66696c653000"]) (async) clock_gettime(0x0, &(0x7f0000000040)) (async) epoll_pwait2(r0, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f0000000140)={r1, r2+60000000}, &(0x7f0000000180)={[0x100]}, 0x8) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x7ffff000) (async) 17:43:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7, 0x7}}, './file0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd4, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x63e}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xcf}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x576fd8b3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3934}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4044045}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:10 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x79b942, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x2c0400, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x1000, @loopback, 0x9000}}}, 0x30) 17:43:10 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x79b942, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x2c0400, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x1000, @loopback, 0x9000}}}, 0x30) 17:43:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x880) r1 = syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000040)={0x20000000}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x14f9e1f9c9cfe4e5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) syz_io_uring_setup(0x7c6, &(0x7f00000004c0)={0x0, 0xfc81, 0x20, 0x3, 0x250}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000540), &(0x7f0000000580)) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000080)=@usbdevfs_connect={0x2}) 17:43:10 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:10 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000480), 0x593082, 0x0) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000080)=0xd130) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000340)={0x6, 0x118, 0xfa00, {{0x7, 0x1ff, "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", 0x5, 0xfb, 0x3f, 0xd8, 0x9, 0x7, 0x6, 0x1}, r5}}, 0x120) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r2, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f00000004c0)={0x15, 0x110, 0xfa00, {r5, 0x4, 0x0, 0x0, 0x0, @ib={0x1b, 0x6, 0x10001, {"97962d2fea8cee38adaddfef1fcc9f4a"}, 0x2, 0x1, 0x5}, @in6={0xa, 0x4e23, 0x0, @private1}}}, 0x118) 17:43:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7, 0x7}}, './file0\x00'}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd4, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x63e}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xcf}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x576fd8b3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3934}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4044045}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:10 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000300)={0x9, 0x108, 0xfa00, {r1, 0x7, "8d6eb2", "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"}}, 0x110) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfff}, {0xa, 0x4e23, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x32}, 0xff}, r3, 0x7f}}, 0x48) 17:43:10 executing program 5: sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x40040) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) 17:43:10 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000480), 0x593082, 0x0) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000080)=0xd130) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) (async, rerun: 64) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) (async) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000340)={0x6, 0x118, 0xfa00, {{0x7, 0x1ff, "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", 0x5, 0xfb, 0x3f, 0xd8, 0x9, 0x7, 0x6, 0x1}, r5}}, 0x120) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r2, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f00000004c0)={0x15, 0x110, 0xfa00, {r5, 0x4, 0x0, 0x0, 0x0, @ib={0x1b, 0x6, 0x10001, {"97962d2fea8cee38adaddfef1fcc9f4a"}, 0x2, 0x1, 0x5}, @in6={0xa, 0x4e23, 0x0, @private1}}}, 0x118) 17:43:10 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x880) (async) r1 = syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000040)={0x20000000}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x14f9e1f9c9cfe4e5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) syz_io_uring_setup(0x7c6, &(0x7f00000004c0)={0x0, 0xfc81, 0x20, 0x3, 0x250}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000540), &(0x7f0000000580)) (async) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) (async) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000080)=@usbdevfs_connect={0x2}) 17:43:10 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000300)={0x9, 0x108, 0xfa00, {r1, 0x7, "8d6eb2", "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"}}, 0x110) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfff}, {0xa, 0x4e23, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x32}, 0xff}, r3, 0x7f}}, 0x48) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2, 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000300)={0x9, 0x108, 0xfa00, {r1, 0x7, "8d6eb2", "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"}}, 0x110) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfff}, {0xa, 0x4e23, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x32}, 0xff}, r3, 0x7f}}, 0x48) (async) 17:43:10 executing program 5: sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x40040) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) 17:43:10 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000480), 0x593082, 0x0) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000080)=0xd130) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000340)={0x6, 0x118, 0xfa00, {{0x7, 0x1ff, "7f072921ef12b9dff4e3e0c518ae411be019c1331575343eda40e41b381de9572f5d622bd7eb4132d4d6cbafcd2c20b40dbb768721e020b97de9bb9eba2a9b404edfc5787230e22e16a8a1843bc5e707cfdd0aa0a08753f1d3e9361cd4bec13e18e5836e0365246d4fd53aba35b9a12b9925c7ea9f181696c05112828a637dc32f47196110edb7761e533881e554afbb160504a693b37705feda35895fb5be4524744e4a2bd9dc7025e5dcb599fa983148879c5c2c04ee115ed8a0ed14c0a7b047ff7702d2140c96dab4ccf79b10dcff6853d16347457daaedff5e7ff51a6e5476858d911775e0d76ba4ea0cd94d6c982568f83001e212fcf6fbfc0b3a5f41d4", 0x5, 0xfb, 0x3f, 0xd8, 0x9, 0x7, 0x6, 0x1}, r5}}, 0x120) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r2, 0x1}}, 0x18) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f00000004c0)={0x15, 0x110, 0xfa00, {r5, 0x4, 0x0, 0x0, 0x0, @ib={0x1b, 0x6, 0x10001, {"97962d2fea8cee38adaddfef1fcc9f4a"}, 0x2, 0x1, 0x5}, @in6={0xa, 0x4e23, 0x0, @private1}}}, 0x118) 17:43:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7, 0x7}}, './file0\x00'}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd4, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x63e}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xcf}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x576fd8b3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3934}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4044045}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:10 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) 17:43:10 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) mq_notify(r0, &(0x7f0000000100)={0x0, 0x3e, 0x1, @thr={&(0x7f0000000040)="dd0fad", &(0x7f00000000c0)="637bc055112c7636a92dc8e37cc273fe54ba9fdd0d59f9afba"}}) 17:43:10 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000300)={0x9, 0x108, 0xfa00, {r1, 0x7, "8d6eb2", "31355b45fef9c83464725dd2c71345e2680a3fc168f30aa1fd640821420edec66b6bf876790a0ed648eb033950ea680403f1806330a787e09fdc563ae588d6ca13d9522675256e1df8119d3e55c16f6c12e7a848e04a24b981110b74de4bbe9d9f76bc85bb7aadf39696057222b59dfdb1ac9e1e5d127fd824be884355cdecd73164603c0f44f7cbb1eae55f9b1253ad2e1c23176f7cf7f0a38cd4f95d919380b19463c04bf0beebec750f2a606f2d7b2fe0e326f6760f3ca97dcd3fb3be0bd6cb87c51aa89d7a161142cc8e10d058d3ad3a1d9e808990f4d6a4be4a1f903b0b10f182b34318d936c85fe0cfb607b6585fd20bde5261ff2c336e453bbd049d1a"}}, 0x110) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfff}, {0xa, 0x4e23, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x32}, 0xff}, r3, 0x7f}}, 0x48) 17:43:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000020000000300000014000182080005000000000006000100000000002705c1a2d95c4d728cd5164bca1aa353cac018395f5a75f1206cf8cd04a70866188efd6b0050ee8ada230f124aa6826818c947e8350f20ebf130d381fda50977202346f424d450491c390a3c066854bee8108af2b9171da80a87f75792411ced71da63c29e322af7b6a6116ae9558a5cba471a"], 0x28}}, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x7ffff000) 17:43:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x880) r1 = syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000040)={0x20000000}) (async) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x14f9e1f9c9cfe4e5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) (async) syz_io_uring_setup(0x7c6, &(0x7f00000004c0)={0x0, 0xfc81, 0x20, 0x3, 0x250}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000540), &(0x7f0000000580)) (async, rerun: 32) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 32) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000080)=@usbdevfs_connect={0x2}) 17:43:10 executing program 5: sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x40040) (async) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) 17:43:10 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x2, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:10 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) (async) mq_notify(r0, &(0x7f0000000100)={0x0, 0x3e, 0x1, @thr={&(0x7f0000000040)="dd0fad", &(0x7f00000000c0)="637bc055112c7636a92dc8e37cc273fe54ba9fdd0d59f9afba"}}) 17:43:10 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) connect$rds(r1, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) 17:43:10 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_io_uring_setup(0x1a6c, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x20000003, 0x111, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 17:43:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000020000000300000014000182080005000000000006000100000000002705c1a2d95c4d728cd5164bca1aa353cac018395f5a75f1206cf8cd04a70866188efd6b0050ee8ada230f124aa6826818c947e8350f20ebf130d381fda50977202346f424d450491c390a3c066854bee8108af2b9171da80a87f75792411ced71da63c29e322af7b6a6116ae9558a5cba471a"], 0x28}}, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x7ffff000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000020000000300000014000182080005000000000006000100000000002705c1a2d95c4d728cd5164bca1aa353cac018395f5a75f1206cf8cd04a70866188efd6b0050ee8ada230f124aa6826818c947e8350f20ebf130d381fda50977202346f424d450491c390a3c066854bee8108af2b9171da80a87f75792411ced71da63c29e322af7b6a6116ae9558a5cba471a"], 0x28}}, 0x0) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x7ffff000) (async) 17:43:10 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) mq_notify(r0, &(0x7f0000000100)={0x0, 0x3e, 0x1, @thr={&(0x7f0000000040)="dd0fad", &(0x7f00000000c0)="637bc055112c7636a92dc8e37cc273fe54ba9fdd0d59f9afba"}}) 17:43:10 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x2, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:10 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000004c0)="277ce93bdc67811a13bfe61c338568de6eb44c28bfb19d02ae9207ba843bed4a9672db1643e8dfb517e533faae73eefbcaa03bc831669516e00630709ffd42e965da0d79c38fe510d8b00d5a5704eab3c1e32800003576dab76ca9e1b8f0b065777b6bd3fce94d8b9ec81dadfc19821325b1a416566d0080ff028383cfa0a7a3aa25a02c6b4661cfddd63a516101b1b58b73b956cb7d3c710c0fcc09531ea8067f911d93ffce5f49e37306724f51e77a2b02f19f0eebd988bd8dc67044f2bcc5227c0c20d9e64cda56", 0xc9, 0xfffffffffffffffc) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)="cc44eb410ab7811fbbc1b976d85cd1480642d3e5a5692692b01e1eb735ee2d4db0732094d4c1829705292737cf85b19998a755ac89b82e6dc7fc62420f06b0226a9aca445751e9d6fbe780bc8b168cccce90fbfb66fef5064f175996c53323f9dadfaa59719366de299ea4448a5e7dc00ed98d6cb0805b09e91bc6c68a8137d09821092e9d9f659feb3cd0", 0x8b, 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f0000000300)={0x0, r1, r2}, &(0x7f0000000340)=""/111, 0x6f, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:10 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_io_uring_setup(0x1a6c, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x20000003, 0x111, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 17:43:10 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) (async) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) connect$rds(r1, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) 17:43:10 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) r1 = add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000004c0)="277ce93bdc67811a13bfe61c338568de6eb44c28bfb19d02ae9207ba843bed4a9672db1643e8dfb517e533faae73eefbcaa03bc831669516e00630709ffd42e965da0d79c38fe510d8b00d5a5704eab3c1e32800003576dab76ca9e1b8f0b065777b6bd3fce94d8b9ec81dadfc19821325b1a416566d0080ff028383cfa0a7a3aa25a02c6b4661cfddd63a516101b1b58b73b956cb7d3c710c0fcc09531ea8067f911d93ffce5f49e37306724f51e77a2b02f19f0eebd988bd8dc67044f2bcc5227c0c20d9e64cda56", 0xc9, 0xfffffffffffffffc) (async) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)="cc44eb410ab7811fbbc1b976d85cd1480642d3e5a5692692b01e1eb735ee2d4db0732094d4c1829705292737cf85b19998a755ac89b82e6dc7fc62420f06b0226a9aca445751e9d6fbe780bc8b168cccce90fbfb66fef5064f175996c53323f9dadfaa59719366de299ea4448a5e7dc00ed98d6cb0805b09e91bc6c68a8137d09821092e9d9f659feb3cd0", 0x8b, 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f0000000300)={0x0, r1, r2}, &(0x7f0000000340)=""/111, 0x6f, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000020000000300000014000182080005000000000006000100000000002705c1a2d95c4d728cd5164bca1aa353cac018395f5a75f1206cf8cd04a70866188efd6b0050ee8ada230f124aa6826818c947e8350f20ebf130d381fda50977202346f424d450491c390a3c066854bee8108af2b9171da80a87f75792411ced71da63c29e322af7b6a6116ae9558a5cba471a"], 0x28}}, 0x0) (async) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x7ffff000) 17:43:10 executing program 0: getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) 17:43:10 executing program 0: getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) 17:43:10 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0xdfb19a16300a4921, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) syz_open_dev$usbfs(&(0x7f0000000000), 0x4a, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000002c0)={'erspan0\x00'}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0xde, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}, 0x0, 0x0, 0xfffffffffffffffe}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x18) 17:43:10 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) r1 = add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000004c0)="277ce93bdc67811a13bfe61c338568de6eb44c28bfb19d02ae9207ba843bed4a9672db1643e8dfb517e533faae73eefbcaa03bc831669516e00630709ffd42e965da0d79c38fe510d8b00d5a5704eab3c1e32800003576dab76ca9e1b8f0b065777b6bd3fce94d8b9ec81dadfc19821325b1a416566d0080ff028383cfa0a7a3aa25a02c6b4661cfddd63a516101b1b58b73b956cb7d3c710c0fcc09531ea8067f911d93ffce5f49e37306724f51e77a2b02f19f0eebd988bd8dc67044f2bcc5227c0c20d9e64cda56", 0xc9, 0xfffffffffffffffc) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)="cc44eb410ab7811fbbc1b976d85cd1480642d3e5a5692692b01e1eb735ee2d4db0732094d4c1829705292737cf85b19998a755ac89b82e6dc7fc62420f06b0226a9aca445751e9d6fbe780bc8b168cccce90fbfb66fef5064f175996c53323f9dadfaa59719366de299ea4448a5e7dc00ed98d6cb0805b09e91bc6c68a8137d09821092e9d9f659feb3cd0", 0x8b, 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f0000000300)={0x0, r1, r2}, &(0x7f0000000340)=""/111, 0x6f, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:10 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_io_uring_setup(0x1a6c, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x20000003, 0x111, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 17:43:10 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x2, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x2, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) (async) 17:43:10 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) connect$rds(r1, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) 17:43:10 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x4dc3, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x131000, 0x0) 17:43:10 executing program 0: getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) 17:43:10 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0xdfb19a16300a4921, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) (async, rerun: 32) syz_open_dev$usbfs(&(0x7f0000000000), 0x4a, 0x1) (async, rerun: 32) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async, rerun: 32) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000002c0)={'erspan0\x00'}) (rerun: 32) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0xde, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}, 0x0, 0x0, 0xfffffffffffffffe}}}, 0x118) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x18) 17:43:10 executing program 4: r0 = syz_io_uring_setup(0x5edc, &(0x7f00000002c0)={0x0, 0xdad2, 0x1, 0x400000}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000200), 0x1) r2 = syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) socket(0x9, 0x6, 0x2) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x395, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x3f) gettid() r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, 0x0, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) syz_clone3(&(0x7f00000013c0)={0x90080, &(0x7f0000000080)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000014c0), {0x20000015}, &(0x7f0000001500)=""/187, 0xbb, &(0x7f0000000380)=""/4108, &(0x7f0000001380), 0x0, {r6}}, 0x58) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r8, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r9, 0x0, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) syz_io_uring_submit(r3, r4, &(0x7f0000001480)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x3ff, &(0x7f0000001440)=[r7, r8, r2, r9, r10, r2, r2, r0, r2], 0x9, 0x0, 0x1}, 0xffffffff) 17:43:10 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x1f1022, 0x0) write$eventfd(r0, &(0x7f0000000100)=0x1, 0x8) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f0000000040)=[0x4ce, 0x9449, 0x5, 0x2, 0x1, 0x0, 0x6, 0x3]) 17:43:10 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0xdfb19a16300a4921, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) syz_open_dev$usbfs(&(0x7f0000000000), 0x4a, 0x1) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000002c0)={'erspan0\x00'}) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0xde, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}, 0x0, 0x0, 0xfffffffffffffffe}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x18) 17:43:10 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000000)=0x1ff, 0x4) 17:43:10 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x4dc3, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x131000, 0x0) 17:43:10 executing program 4: r0 = syz_io_uring_setup(0x5edc, &(0x7f00000002c0)={0x0, 0xdad2, 0x1, 0x400000}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000200), 0x1) (async) r2 = syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) (async) socket(0x9, 0x6, 0x2) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x395, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x3f) (async) gettid() (async) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, 0x0, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) syz_clone3(&(0x7f00000013c0)={0x90080, &(0x7f0000000080)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000014c0), {0x20000015}, &(0x7f0000001500)=""/187, 0xbb, &(0x7f0000000380)=""/4108, &(0x7f0000001380), 0x0, {r6}}, 0x58) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r8, 0x0, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r9, 0x0, 0x0) (async) r10 = socket$can_j1939(0x1d, 0x2, 0x7) syz_io_uring_submit(r3, r4, &(0x7f0000001480)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x3ff, &(0x7f0000001440)=[r7, r8, r2, r9, r10, r2, r2, r0, r2], 0x9, 0x0, 0x1}, 0xffffffff) 17:43:10 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0xbe, 0x44, 0x405, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x101, 0x9, 0x6, 0x1421, r0, 0xf3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0xfffffffe, 0xb}, 0x48) 17:43:10 executing program 4: r0 = syz_io_uring_setup(0x5edc, &(0x7f00000002c0)={0x0, 0xdad2, 0x1, 0x400000}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000200), 0x1) r2 = syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) socket(0x9, 0x6, 0x2) (async) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x395, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x3f) (async) gettid() r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, 0x0, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) syz_clone3(&(0x7f00000013c0)={0x90080, &(0x7f0000000080)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000014c0), {0x20000015}, &(0x7f0000001500)=""/187, 0xbb, &(0x7f0000000380)=""/4108, &(0x7f0000001380), 0x0, {r6}}, 0x58) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r8, 0x0, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r9, 0x0, 0x0) (async) r10 = socket$can_j1939(0x1d, 0x2, 0x7) syz_io_uring_submit(r3, r4, &(0x7f0000001480)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x3ff, &(0x7f0000001440)=[r7, r8, r2, r9, r10, r2, r2, r0, r2], 0x9, 0x0, 0x1}, 0xffffffff) 17:43:10 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x4dc3, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x131000, 0x0) 17:43:10 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000000)=0x1ff, 0x4) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000000)=0x1ff, 0x4) (async) 17:43:10 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x1f1022, 0x0) write$eventfd(r0, &(0x7f0000000100)=0x1, 0x8) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async, rerun: 32) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 32) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) (async) ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f0000000040)=[0x4ce, 0x9449, 0x5, 0x2, 0x1, 0x0, 0x6, 0x3]) 17:43:10 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) syz_io_uring_setup(0x407188, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x187}, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) syz_io_uring_setup(0x818, &(0x7f0000000140)={0x0, 0xa3fa}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000480)={0x1, 0x10, 0xfa00, {&(0x7f0000000440), r5}}, 0x18) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_io_uring_submit(r2, r6, &(0x7f00000003c0)=@IORING_OP_POLL_REMOVE, 0x8000) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x44210d84bc7cdc87, 0x0, 0x0, 0x0, 0x1}, 0x9) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0), 0x2}}, 0x20) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r7, 0x1, 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x7, 0x1}}, './file0\x00'}) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x200, @loopback, 0xc54}}}, 0x30) 17:43:10 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x9b20616bfc525c77, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x5, 0x80400) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xfff}}, './file0\x00'}) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:10 executing program 4: write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000340)={0x16, 0x98, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e24, @empty}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x10, 0xfa00, {&(0x7f0000000080), r0}}, 0x18) syz_io_uring_setup(0x5edc, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000040), 0x0) io_uring_setup(0x66d8, &(0x7f0000000180)={0x0, 0x9843, 0x20, 0x3, 0xcf}) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000280), 0x1) 17:43:10 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0xbe, 0x44, 0x405, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x101, 0x9, 0x6, 0x1421, r0, 0xf3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0xfffffffe, 0xb}, 0x48) 17:43:10 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000000)=0x1ff, 0x4) 17:43:10 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) syz_io_uring_setup(0x407188, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x187}, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) syz_io_uring_setup(0x818, &(0x7f0000000140)={0x0, 0xa3fa}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000480)={0x1, 0x10, 0xfa00, {&(0x7f0000000440), r5}}, 0x18) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_io_uring_submit(r2, r6, &(0x7f00000003c0)=@IORING_OP_POLL_REMOVE, 0x8000) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x44210d84bc7cdc87, 0x0, 0x0, 0x0, 0x1}, 0x9) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0), 0x2}}, 0x20) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r7, 0x1, 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x7, 0x1}}, './file0\x00'}) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x200, @loopback, 0xc54}}}, 0x30) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) (async) syz_io_uring_setup(0x407188, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x187}, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) (async) syz_io_uring_setup(0x818, &(0x7f0000000140)={0x0, 0xa3fa}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000480)={0x1, 0x10, 0xfa00, {&(0x7f0000000440), r5}}, 0x18) (async) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) (async) syz_io_uring_submit(r2, r6, &(0x7f00000003c0)=@IORING_OP_POLL_REMOVE, 0x8000) (async) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x44210d84bc7cdc87, 0x0, 0x0, 0x0, 0x1}, 0x9) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0), 0x2}}, 0x20) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) setsockopt$inet6_icmp_ICMP_FILTER(r7, 0x1, 0x1, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x7, 0x1}}, './file0\x00'}) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x200, @loopback, 0xc54}}}, 0x30) (async) 17:43:10 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x1f1022, 0x0) write$eventfd(r0, &(0x7f0000000100)=0x1, 0x8) (async, rerun: 32) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async, rerun: 32) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) (async) ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f0000000040)=[0x4ce, 0x9449, 0x5, 0x2, 0x1, 0x0, 0x6, 0x3]) 17:43:10 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0xbe, 0x44, 0x405, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x101, 0x9, 0x6, 0x1421, r0, 0xf3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0xfffffffe, 0xb}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0xbe, 0x44, 0x405, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x101, 0x9, 0x6, 0x1421, r0, 0xf3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0xfffffffe, 0xb}, 0x48) (async) 17:43:10 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x2, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:10 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000010000001800009a1900", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653000"]) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xfffffff9}}, './file0\x00'}) r2 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000040)={0x5}, 0x4) 17:43:10 executing program 4: write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000340)={0x16, 0x98, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e24, @empty}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x10, 0xfa00, {&(0x7f0000000080), r0}}, 0x18) (async) syz_io_uring_setup(0x5edc, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000040), 0x0) io_uring_setup(0x66d8, &(0x7f0000000180)={0x0, 0x9843, 0x20, 0x3, 0xcf}) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000280), 0x1) 17:43:10 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x9b20616bfc525c77, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x5, 0x80400) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f00000000c0)) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xfff}}, './file0\x00'}) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:10 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x9b20616bfc525c77, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x5, 0x80400) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xfff}}, './file0\x00'}) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x9b20616bfc525c77, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0x5, 0x80400) (async) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f00000000c0)) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xfff}}, './file0\x00'}) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) (async) 17:43:10 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1e, 0x7, 0x9, 0xfffff800, 0x801, r1, 0x100, '\x00', 0x0, r0, 0x4, 0x5}, 0x48) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r0, r2}, 0x10) 17:43:10 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) (async, rerun: 64) syz_io_uring_setup(0x407188, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x187}, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) (rerun: 64) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) syz_io_uring_setup(0x818, &(0x7f0000000140)={0x0, 0xa3fa}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000480)={0x1, 0x10, 0xfa00, {&(0x7f0000000440), r5}}, 0x18) (async) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_io_uring_submit(r2, r6, &(0x7f00000003c0)=@IORING_OP_POLL_REMOVE, 0x8000) (async) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x44210d84bc7cdc87, 0x0, 0x0, 0x0, 0x1}, 0x9) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0), 0x2}}, 0x20) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r7, 0x1, 0x1, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x7, 0x1}}, './file0\x00'}) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x200, @loopback, 0xc54}}}, 0x30) 17:43:10 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x2, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:10 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x0, 0xfffffffffffffffd, 0x54, 0x0, @buffer={0x0, 0xa9, &(0x7f0000000300)=""/169}, &(0x7f00000003c0)="141f1e7dc6e0c83f4ecf97632f2d58098ea906534235d5ca5f867ed470b75ea69b380ea3e0b4c787a2dfa48b6de41a326732ff2fdd3800dd94019329f4b8e7282cb5aeab79ab85fe2cafc18e13a74d687b253b97", &(0x7f0000000440)=""/247, 0xffff6ef6, 0x0, 0x80000001}) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r2, 0x8c, "059798", "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"}}, 0x110) 17:43:10 executing program 4: write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000340)={0x16, 0x98, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e24, @empty}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x10, 0xfa00, {&(0x7f0000000080), r0}}, 0x18) (async) syz_io_uring_setup(0x5edc, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000040), 0x0) (async) io_uring_setup(0x66d8, &(0x7f0000000180)={0x0, 0x9843, 0x20, 0x3, 0xcf}) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000280), 0x1) 17:43:10 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000010000001800009a1900", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653000"]) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xfffffff9}}, './file0\x00'}) r2 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000040)={0x5}, 0x4) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000010000001800009a1900", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653000"]) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xfffffff9}}, './file0\x00'}) (async) socket(0x0, 0x0, 0x3ff) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) (async) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000040)={0x5}, 0x4) (async) 17:43:11 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x0, 0xfffffffffffffffd, 0x54, 0x0, @buffer={0x0, 0xa9, &(0x7f0000000300)=""/169}, &(0x7f00000003c0)="141f1e7dc6e0c83f4ecf97632f2d58098ea906534235d5ca5f867ed470b75ea69b380ea3e0b4c787a2dfa48b6de41a326732ff2fdd3800dd94019329f4b8e7282cb5aeab79ab85fe2cafc18e13a74d687b253b97", &(0x7f0000000440)=""/247, 0xffff6ef6, 0x0, 0x80000001}) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r2, 0x8c, "059798", "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"}}, 0x110) 17:43:11 executing program 4: r0 = syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x12a}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000140)) syz_io_uring_setup(0x3bbe, &(0x7f0000000040)={0x0, 0x72e3, 0x1, 0x2, 0x1a0, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff6000/0x7000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) read$rfkill(r1, &(0x7f0000000240), 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000003c0)={@xdp={0x2c, 0x2, 0x0, 0x2e}, {&(0x7f0000000280)}, &(0x7f0000000380), 0x70}, 0xa0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000200), 0x1) 17:43:11 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1e, 0x7, 0x9, 0xfffff800, 0x801, r1, 0x100, '\x00', 0x0, r0, 0x4, 0x5}, 0x48) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r0, r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1e, 0x7, 0x9, 0xfffff800, 0x801, r1, 0x100, '\x00', 0x0, r0, 0x4, 0x5}, 0x48) (async) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r0, r2}, 0x10) (async) 17:43:11 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5d3002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r1) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) r2 = socket(0x2c, 0x5, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000000), 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, r3, 0x4, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x62}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x62}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x37}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010102}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x5) 17:43:11 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x0, 0xfffffffffffffffd, 0x54, 0x0, @buffer={0x0, 0xa9, &(0x7f0000000300)=""/169}, &(0x7f00000003c0)="141f1e7dc6e0c83f4ecf97632f2d58098ea906534235d5ca5f867ed470b75ea69b380ea3e0b4c787a2dfa48b6de41a326732ff2fdd3800dd94019329f4b8e7282cb5aeab79ab85fe2cafc18e13a74d687b253b97", &(0x7f0000000440)=""/247, 0xffff6ef6, 0x0, 0x80000001}) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r2, 0x8c, "059798", "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"}}, 0x110) 17:43:11 executing program 4: r0 = syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x12a}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000140)) syz_io_uring_setup(0x3bbe, &(0x7f0000000040)={0x0, 0x72e3, 0x1, 0x2, 0x1a0, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff6000/0x7000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) read$rfkill(r1, &(0x7f0000000240), 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000003c0)={@xdp={0x2c, 0x2, 0x0, 0x2e}, {&(0x7f0000000280)}, &(0x7f0000000380), 0x70}, 0xa0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000200), 0x1) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x12a}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) syz_io_uring_setup(0x3bbe, &(0x7f0000000040)={0x0, 0x72e3, 0x1, 0x2, 0x1a0, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff6000/0x7000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) (async) read$rfkill(r1, &(0x7f0000000240), 0x8) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) socket$rds(0x15, 0x5, 0x0) (async) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000003c0)={@xdp={0x2c, 0x2, 0x0, 0x2e}, {&(0x7f0000000280)}, &(0x7f0000000380), 0x70}, 0xa0) (async) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000200), 0x1) (async) 17:43:11 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000010000001800009a1900", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653000"]) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xfffffff9}}, './file0\x00'}) r2 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000040)={0x5}, 0x4) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000010000001800009a1900", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653000"]) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xfffffff9}}, './file0\x00'}) (async) socket(0x0, 0x0, 0x3ff) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) (async) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000040)={0x5}, 0x4) (async) 17:43:11 executing program 1: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x200}}, './file0\x00'}) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r0, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), r0, 0x6}}, 0x18) 17:43:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x2, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:11 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5d3002, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r1) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) (async) r2 = socket(0x2c, 0x5, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) (async) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000000), 0x0) (async, rerun: 64) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) (rerun: 64) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, r3, 0x4, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x62}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x62}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x37}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010102}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x5) 17:43:11 executing program 1: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x200}}, './file0\x00'}) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r0, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), r0, 0x6}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x200}}, './file0\x00'}) (async) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r0, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), r0, 0x6}}, 0x18) (async) 17:43:11 executing program 1: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x200}}, './file0\x00'}) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r0, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), r0, 0x6}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x200}}, './file0\x00'}) (async) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r0, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), r0, 0x6}}, 0x18) (async) 17:43:11 executing program 4: r0 = syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x12a}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) syz_io_uring_setup(0x3bbe, &(0x7f0000000040)={0x0, 0x72e3, 0x1, 0x2, 0x1a0, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff6000/0x7000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) (async) read$rfkill(r1, &(0x7f0000000240), 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000003c0)={@xdp={0x2c, 0x2, 0x0, 0x2e}, {&(0x7f0000000280)}, &(0x7f0000000380), 0x70}, 0xa0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) (async, rerun: 32) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000200), 0x1) (rerun: 32) 17:43:11 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40e000, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000000)={0xa, 0x4, 0xfa00, {r3}}, 0xc) 17:43:11 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) (async, rerun: 64) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 64) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1e, 0x7, 0x9, 0xfffff800, 0x801, r1, 0x100, '\x00', 0x0, r0, 0x4, 0x5}, 0x48) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r0, r2}, 0x10) 17:43:11 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0xfffffe87, 0xfa00, {0x0}}, 0x17) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000004c0)=r2, 0x1) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {r4, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e20, @empty}}}, 0x118) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x4140, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r8, &(0x7f0000000480)={0x1, 0x10, 0xfa00, {&(0x7f00000003c0), r9}}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r7, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f0000000380)={0x10, 0x30, 0xfa00, {&(0x7f0000000340), 0x0, {0xa, 0x4e23, 0x98c, @private2, 0xae6}, r7}}, 0x38) 17:43:11 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5d3002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r1) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) r2 = socket(0x2c, 0x5, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000000), 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, r3, 0x4, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x62}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x62}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x37}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010102}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x5) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5d3002, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, 0x0, 0x0) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r1) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) (async) socket(0x2c, 0x5, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) (async) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000000), 0x0) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) (async) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, r3, 0x4, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x62}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x62}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x37}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010102}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x5) (async) 17:43:11 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000080)) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x1f}, 0x10) 17:43:11 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40e000, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000000)={0xa, 0x4, 0xfa00, {r3}}, 0xc) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40e000, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000000)={0xa, 0x4, 0xfa00, {r3}}, 0xc) (async) 17:43:11 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 17:43:11 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0xfffffe87, 0xfa00, {0x0}}, 0x17) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000004c0)=r2, 0x1) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) (async, rerun: 32) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {r4, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e20, @empty}}}, 0x118) (async, rerun: 32) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x4140, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) (async) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r8, &(0x7f0000000480)={0x1, 0x10, 0xfa00, {&(0x7f00000003c0), r9}}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r7, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f0000000380)={0x10, 0x30, 0xfa00, {&(0x7f0000000340), 0x0, {0xa, 0x4e23, 0x98c, @private2, 0xae6}, r7}}, 0x38) 17:43:11 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 17:43:11 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40e000, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000000)={0xa, 0x4, 0xfa00, {r3}}, 0xc) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40e000, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000000)={0xa, 0x4, 0xfa00, {r3}}, 0xc) (async) 17:43:11 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0x21, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r0) 17:43:11 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0xfffffe87, 0xfa00, {0x0}}, 0x17) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async, rerun: 64) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 64) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000004c0)=r2, 0x1) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {r4, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e20, @empty}}}, 0x118) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x4140, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) (async, rerun: 32) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r8, &(0x7f0000000480)={0x1, 0x10, 0xfa00, {&(0x7f00000003c0), r9}}, 0x18) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r7, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f0000000380)={0x10, 0x30, 0xfa00, {&(0x7f0000000340), 0x0, {0xa, 0x4e23, 0x98c, @private2, 0xae6}, r7}}, 0x38) 17:43:11 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x80040, 0x0) 17:43:11 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x80040, 0x0) 17:43:11 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000080)) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x1f}, 0x10) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000080)) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x1f}, 0x10) (async) 17:43:11 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0x21, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r0) 17:43:11 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 17:43:11 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1a, 0xcb, 0x2300, 0x2, 0x1, 0x1, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x7f01, 0x5}, 0x48) 17:43:11 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1a, 0xcb, 0x2300, 0x2, 0x1, 0x1, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x7f01, 0x5}, 0x48) 17:43:11 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000080)) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x1f}, 0x10) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000080)) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x1f}, 0x10) (async) 17:43:11 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x80040, 0x0) 17:43:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x0, 0x2, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:11 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0x21, 0x0) (async, rerun: 64) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) (async, rerun: 64) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r0) 17:43:11 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x1}, @jmp={0x5, 0x0, 0x8, 0xa, 0x4, 0x50, 0x1}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x970c}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r0]}, 0x80) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x3}}, 0x18) 17:43:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x0, 0x2, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:11 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5b3403, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2b}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x62}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8040) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:11 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0xffff, 0x1, 0x1, 0x221, 0xffffffffffffffff, 0x7, '\x00', r1, r2, 0x1, 0x4}, 0x48) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) 17:43:11 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x1}, @jmp={0x5, 0x0, 0x8, 0xa, 0x4, 0x50, 0x1}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x970c}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r0]}, 0x80) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x3}}, 0x18) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x1}, @jmp={0x5, 0x0, 0x8, 0xa, 0x4, 0x50, 0x1}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x970c}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r0]}, 0x80) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x3}}, 0x18) (async) 17:43:11 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1a, 0xcb, 0x2300, 0x2, 0x1, 0x1, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x7f01, 0x5}, 0x48) 17:43:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x0, 0x2, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:11 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) (async) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x1}, @jmp={0x5, 0x0, 0x8, 0xa, 0x4, 0x50, 0x1}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x970c}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r0]}, 0x80) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x3}}, 0x18) 17:43:11 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0xffff, 0x1, 0x1, 0x221, 0xffffffffffffffff, 0x7, '\x00', r1, r2, 0x1, 0x4}, 0x48) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0xffff, 0x1, 0x1, 0x221, 0xffffffffffffffff, 0x7, '\x00', r1, r2, 0x1, 0x4}, 0x48) (async) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) (async) 17:43:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x0, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:11 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x37a2, &(0x7f0000000040)={0x0, 0x4eb, 0x3, 0x1, 0x1b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x818, &(0x7f0000000140)={0x0, 0xa3fa}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_POLL_REMOVE, 0x8000) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r0, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x102, 0x0, {0x3}}, 0x5c4) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 17:43:11 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5b3403, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2b}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x62}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8040) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:11 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000000)=r0, 0x1) 17:43:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x0, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:11 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0xffff, 0x1, 0x1, 0x221, 0xffffffffffffffff, 0x7, '\x00', r1, r2, 0x1, 0x4}, 0x48) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0xffff, 0x1, 0x1, 0x221, 0xffffffffffffffff, 0x7, '\x00', r1, r2, 0x1, 0x4}, 0x48) (async) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) (async) 17:43:11 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x37a2, &(0x7f0000000040)={0x0, 0x4eb, 0x3, 0x1, 0x1b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x818, &(0x7f0000000140)={0x0, 0xa3fa}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_POLL_REMOVE, 0x8000) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r0, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x102, 0x0, {0x3}}, 0x5c4) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) syz_io_uring_setup(0x37a2, &(0x7f0000000040)={0x0, 0x4eb, 0x3, 0x1, 0x1b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (async) syz_io_uring_setup(0x818, &(0x7f0000000140)={0x0, 0xa3fa}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)) (async) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_POLL_REMOVE, 0x8000) (async) socket$packet(0x11, 0x3, 0x300) (async) syz_io_uring_submit(r0, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x102, 0x0, {0x3}}, 0x5c4) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) 17:43:11 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5b3403, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2b}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x62}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8040) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:11 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x111, 0x9}}, 0x20) 17:43:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14dabb2ba0b30013f813a03424e38b8380b6bbcabd9c9de61faa3e15a1fffece8b", @ANYRES16=r2, @ANYBLOB="0200000000000000000004000000"], 0x14}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfd}, 0x14}}, 0x4000000) syz_genetlink_get_family_id$fou(&(0x7f0000000140), r0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x7ffff000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r5, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r8, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r7, &(0x7f0000000500)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x77}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000180)={0x15, 0x110, 0xfa00, {r8, 0x1a, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x23}, 0x401}, @in={0x2, 0x4e24, @empty}}}, 0x118) 17:43:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x0, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:11 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000000)=r0, 0x1) 17:43:11 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x111, 0x9}}, 0x20) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x111, 0x9}}, 0x20) (async) 17:43:11 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x6b6702, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000696c653000"]) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000100), 0x4) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x80040, 0x0) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000000140)={0xdb55, 0xffffffff}) 17:43:11 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x6b6702, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000696c653000"]) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000100), 0x4) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x80040, 0x0) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000000140)={0xdb55, 0xffffffff}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x6b6702, 0x0) (async) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="04000000000000696c653000"]) (async) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000100), 0x4) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x80040, 0x0) (async) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000000140)={0xdb55, 0xffffffff}) (async) 17:43:11 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x111, 0x9}}, 0x20) 17:43:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:11 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) syz_io_uring_setup(0x37a2, &(0x7f0000000040)={0x0, 0x4eb, 0x3, 0x1, 0x1b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) (async) syz_io_uring_setup(0x818, &(0x7f0000000140)={0x0, 0xa3fa}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) (async) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_POLL_REMOVE, 0x8000) (async) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r0, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x102, 0x0, {0x3}}, 0x5c4) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 17:43:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14dabb2ba0b30013f813a03424e38b8380b6bbcabd9c9de61faa3e15a1fffece8b", @ANYRES16=r2, @ANYBLOB="0200000000000000000004000000"], 0x14}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfd}, 0x14}}, 0x4000000) syz_genetlink_get_family_id$fou(&(0x7f0000000140), r0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x7ffff000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r5, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r8, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r7, &(0x7f0000000500)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x77}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000180)={0x15, 0x110, 0xfa00, {r8, 0x1a, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x23}, 0x401}, @in={0x2, 0x4e24, @empty}}}, 0x118) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14dabb2ba0b30013f813a03424e38b8380b6bbcabd9c9de61faa3e15a1fffece8b", @ANYRES16=r2, @ANYBLOB="0200000000000000000004000000"], 0x14}}, 0x0) (async) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfd}, 0x14}}, 0x4000000) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000140), r0) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x7ffff000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NET_DM_CMD_START(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), 0xffffffffffffffff) (async) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r5, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r8, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r7, &(0x7f0000000500)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x77}}, 0x10) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000180)={0x15, 0x110, 0xfa00, {r8, 0x1a, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x23}, 0x401}, @in={0x2, 0x4e24, @empty}}}, 0x118) (async) 17:43:11 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000000)=r0, 0x1) 17:43:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:11 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x6b6702, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000696c653000"]) (async) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000100), 0x4) (async) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x80040, 0x0) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000000140)={0xdb55, 0xffffffff}) 17:43:11 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000580)={&(0x7f00000003c0), 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x108, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x800}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000086}, 0x4001) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x4642357a681cb38e) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3cb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x38}, 0x1, 0x0, 0x0, 0x50010}, 0x1) 17:43:11 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040), 0x10) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x20}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 17:43:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14dabb2ba0b30013f813a03424e38b8380b6bbcabd9c9de61faa3e15a1fffece8b", @ANYRES16=r2, @ANYBLOB="0200000000000000000004000000"], 0x14}}, 0x0) (async) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfd}, 0x14}}, 0x4000000) syz_genetlink_get_family_id$fou(&(0x7f0000000140), r0) (async, rerun: 64) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (rerun: 64) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x7ffff000) (async, rerun: 32) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NET_DM_CMD_START(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r5, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r8, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r7, &(0x7f0000000500)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x77}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000180)={0x15, 0x110, 0xfa00, {r8, 0x1a, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x23}, 0x401}, @in={0x2, 0x4e24, @empty}}}, 0x118) 17:43:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:11 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:11 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000580)={&(0x7f00000003c0), 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x108, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x800}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000086}, 0x4001) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x4642357a681cb38e) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3cb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x38}, 0x1, 0x0, 0x0, 0x50010}, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000580)={&(0x7f00000003c0), 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x108, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x800}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000086}, 0x4001) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x4642357a681cb38e) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3cb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x38}, 0x1, 0x0, 0x0, 0x50010}, 0x1) (async) 17:43:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x2, 0x2300, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:11 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040), 0x10) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x20}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040), 0x10) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x20}}, './file0\x00'}) (async) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async) 17:43:11 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000000)={r0, r0, 0x6}) 17:43:11 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:11 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000580)={&(0x7f00000003c0), 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x108, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x800}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000086}, 0x4001) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x4642357a681cb38e) (async) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3cb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x38}, 0x1, 0x0, 0x0, 0x50010}, 0x1) 17:43:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x2, 0x2300, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:11 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040), 0x10) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x20}}, './file0\x00'}) (async, rerun: 32) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) (rerun: 32) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 17:43:11 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000000)={r0, r0, 0x6}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, 0x0, 0x0) (async) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000000)={r0, r0, 0x6}) (async) 17:43:11 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0xf095d5d43709e5ac, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x2000000c}) 17:43:11 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, 0x0, 0x0) (async) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000000)={r0, r0, 0x6}) 17:43:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x2, 0x2300, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:11 executing program 0: sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xb3a4604eba3db3c2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x11}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x17, 0x20}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4084}, 0x4040010) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x208000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="21006f44555d6faba6c30000", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fddbdf2508000000080039000100010005002f00010000000500350040000000050037000200000008003200070000000500370001000000"], 0x44}, 0x1, 0x0, 0x0, 0x4008005}, 0x800) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8000}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10900}, 0x88000) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:ptchown_exec_t:s0\x00', 0x24) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r3) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106, 0x1}}, 0x20) 17:43:11 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:11 executing program 4: r0 = syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040)=r1, 0x1) 17:43:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x2, 0x2300, 0x1, 0x0, 0x1}, 0x48) 17:43:11 executing program 0: sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xb3a4604eba3db3c2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x11}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x17, 0x20}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4084}, 0x4040010) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) (async, rerun: 64) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x208000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="21006f44555d6faba6c30000", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fddbdf2508000000080039000100010005002f00010000000500350040000000050037000200000008003200070000000500370001000000"], 0x44}, 0x1, 0x0, 0x0, 0x4008005}, 0x800) (rerun: 64) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8000}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10900}, 0x88000) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:ptchown_exec_t:s0\x00', 0x24) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, 0x0, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r3) (rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106, 0x1}}, 0x20) 17:43:11 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x593002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000000c0)={0x20, 0x16, 0x5, 0x7fff, 0x58, 0x6c6, &(0x7f0000000040)="744b81aedafa7e767e46fe017c1eb7edbf33621333b75ed02ea285fbeef03e63499b6994403c38197dc3caca6df37d2c8cddca25ef196292f3b85831027cb1d1fceafe0d1ba195a4d26a0b7ef08e76d493ed76c58a9c90a5"}) 17:43:11 executing program 4: r0 = syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040)=r1, 0x1) 17:43:11 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0xf095d5d43709e5ac, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x2000000c}) 17:43:11 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x801) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2303, 0xfffffffa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) r2 = epoll_create(0x5) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008011}, 0x40040) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000180)={0x80002002}) 17:43:11 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0xf095d5d43709e5ac, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x2000000c}) 17:43:11 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x593002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) (async) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000000c0)={0x20, 0x16, 0x5, 0x7fff, 0x58, 0x6c6, &(0x7f0000000040)="744b81aedafa7e767e46fe017c1eb7edbf33621333b75ed02ea285fbeef03e63499b6994403c38197dc3caca6df37d2c8cddca25ef196292f3b85831027cb1d1fceafe0d1ba195a4d26a0b7ef08e76d493ed76c58a9c90a5"}) 17:43:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x2, 0x2300, 0x1, 0x0, 0x1}, 0x48) 17:43:11 executing program 4: r0 = syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040)=r1, 0x1) 17:43:11 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x801) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2303, 0xfffffffa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) r2 = epoll_create(0x5) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008011}, 0x40040) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000180)={0x80002002}) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x801) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2303, 0xfffffffa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) (async) epoll_create(0x5) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008011}, 0x40040) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000180)={0x80002002}) (async) 17:43:11 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x193242, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) 17:43:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x2, 0x2300, 0x1, 0x0, 0x1}, 0x48) 17:43:11 executing program 0: sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xb3a4604eba3db3c2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x11}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x17, 0x20}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4084}, 0x4040010) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x208000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="21006f44555d6faba6c30000", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fddbdf2508000000080039000100010005002f00010000000500350040000000050037000200000008003200070000000500370001000000"], 0x44}, 0x1, 0x0, 0x0, 0x4008005}, 0x800) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8000}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10900}, 0x88000) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:ptchown_exec_t:s0\x00', 0x24) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r3) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106, 0x1}}, 0x20) 17:43:11 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x593002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000000c0)={0x20, 0x16, 0x5, 0x7fff, 0x58, 0x6c6, &(0x7f0000000040)="744b81aedafa7e767e46fe017c1eb7edbf33621333b75ed02ea285fbeef03e63499b6994403c38197dc3caca6df37d2c8cddca25ef196292f3b85831027cb1d1fceafe0d1ba195a4d26a0b7ef08e76d493ed76c58a9c90a5"}) 17:43:11 executing program 4: r0 = syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x25b2, &(0x7f00000003c0)={0x0, 0x1e9a, 0x1, 0x3, 0x145, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000280), &(0x7f0000000440)) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x2000c015) r1 = syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000640)=ANY=[@ANYBLOB="010000000000000000000000ee13eaaea961452ff585cf3f0a9a0443a09074d56302d19d65bec0f04f1b92f1368fd8758cc857244b77b6320b3ee6a3be93", @ANYRES32=r1, @ANYBLOB="ff010066696c65300000000000000000"]) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x10000014}) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r5, {0x7}}, './file0\x00'}) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x24}}, 0x4040084) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x6000) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) syz_io_uring_setup(0x688f, &(0x7f00000001c0)={0x0, 0x4d8f, 0x2, 0x1, 0x72, 0x0, r6}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000380)) 17:43:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x2, 0x2300, 0x1, 0x0, 0x1}, 0x48) 17:43:11 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x193242, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) 17:43:11 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x801) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2303, 0xfffffffa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) (async) r2 = epoll_create(0x5) (async, rerun: 64) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async, rerun: 64) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008011}, 0x40040) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000180)={0x80002002}) 17:43:11 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x801) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2303, 0xfffffffa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) r2 = epoll_create(0x5) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008011}, 0x40040) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000180)={0x80002002}) 17:43:11 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x193242, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) 17:43:11 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 17:43:11 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x801) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2303, 0xfffffffa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) r2 = epoll_create(0x5) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008011}, 0x40040) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000180)={0x80002002}) 17:43:11 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000140)={@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @mcast1, 0x4}}, {&(0x7f0000000200)=""/30, 0x1e}, &(0x7f0000000100), 0x23}, 0xa0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:11 executing program 4: r0 = syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x25b2, &(0x7f00000003c0)={0x0, 0x1e9a, 0x1, 0x3, 0x145, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000280), &(0x7f0000000440)) (async) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x2000c015) r1 = syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000640)=ANY=[@ANYBLOB="010000000000000000000000ee13eaaea961452ff585cf3f0a9a0443a09074d56302d19d65bec0f04f1b92f1368fd8758cc857244b77b6320b3ee6a3be93", @ANYRES32=r1, @ANYBLOB="ff010066696c65300000000000000000"]) (async) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x10000014}) (async) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, 0x0, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r5, {0x7}}, './file0\x00'}) (async) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x24}}, 0x4040084) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x6000) (async) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) (async) syz_io_uring_setup(0x688f, &(0x7f00000001c0)={0x0, 0x4d8f, 0x2, 0x1, 0x72, 0x0, r6}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000380)) 17:43:11 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = gettid() epoll_create(0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r2 = epoll_create(0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, r0, &(0x7f0000000040)={r2, r3, 0xfffffffa}) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) 17:43:11 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x9, 0x2300, 0x1, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7d01}, 0x48) 17:43:11 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 17:43:11 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000140)={@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @mcast1, 0x4}}, {&(0x7f0000000200)=""/30, 0x1e}, &(0x7f0000000100), 0x23}, 0xa0) (async) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:11 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = gettid() (async) epoll_create(0x1) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r2 = epoll_create(0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, r0, &(0x7f0000000040)={r2, r3, 0xfffffffa}) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) 17:43:11 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 17:43:11 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x9, 0x2300, 0x1, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7d01}, 0x48) 17:43:11 executing program 4: r0 = syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x25b2, &(0x7f00000003c0)={0x0, 0x1e9a, 0x1, 0x3, 0x145, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000280), &(0x7f0000000440)) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x2000c015) r1 = syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000640)=ANY=[@ANYBLOB="010000000000000000000000ee13eaaea961452ff585cf3f0a9a0443a09074d56302d19d65bec0f04f1b92f1368fd8758cc857244b77b6320b3ee6a3be93", @ANYRES32=r1, @ANYBLOB="ff010066696c65300000000000000000"]) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x10000014}) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r5, {0x7}}, './file0\x00'}) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x24}}, 0x4040084) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x6000) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) syz_io_uring_setup(0x688f, &(0x7f00000001c0)={0x0, 0x4d8f, 0x2, 0x1, 0x72, 0x0, r6}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000380)) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) syz_io_uring_setup(0x25b2, &(0x7f00000003c0)={0x0, 0x1e9a, 0x1, 0x3, 0x145, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000280), &(0x7f0000000440)) (async) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x2000c015) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000640)=ANY=[@ANYBLOB="010000000000000000000000ee13eaaea961452ff585cf3f0a9a0443a09074d56302d19d65bec0f04f1b92f1368fd8758cc857244b77b6320b3ee6a3be93", @ANYRES32=r1, @ANYBLOB="ff010066696c65300000000000000000"]) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x10000014}) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r5, {0x7}}, './file0\x00'}) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x24}}, 0x4040084) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x6000) (async) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) (async) syz_io_uring_setup(0x688f, &(0x7f00000001c0)={0x0, 0x4d8f, 0x2, 0x1, 0x72, 0x0, r6}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000380)) (async) 17:43:11 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x801) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2303, 0xfffffffa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) r2 = epoll_create(0x5) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008011}, 0x40040) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000180)={0x80002002}) 17:43:11 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = gettid() epoll_create(0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r2 = epoll_create(0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, r0, &(0x7f0000000040)={r2, r3, 0xfffffffa}) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) gettid() (async) epoll_create(0x1) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (async) epoll_create(0x7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, 0x0, 0x0) (async) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, r0, &(0x7f0000000040)={r2, r3, 0xfffffffa}) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) (async) 17:43:11 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) (async) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000140)={@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @mcast1, 0x4}}, {&(0x7f0000000200)=""/30, 0x1e}, &(0x7f0000000100), 0x23}, 0xa0) (async) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000040)) (async, rerun: 32) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (rerun: 32) 17:43:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x0, 0x2, 0x2300, 0x1, 0x0, 0x1}, 0x48) 17:43:11 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x801) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2303, 0xfffffffa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) r2 = epoll_create(0x5) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x1}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000180)={0x80002002}) 17:43:11 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r1, 0x7, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, r2, &(0x7f0000000000)={r3, r0, 0x36dafcdc}) 17:43:11 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x9, 0x2300, 0x1, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7d01}, 0x48) 17:43:11 executing program 4: r0 = syz_io_uring_setup(0x5edc, &(0x7f00000002c0)={0x0, 0x406d, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000180)={0xfffff729}, 0x4) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000040), 0x1) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 17:43:11 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r1, 0x7, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, r2, &(0x7f0000000000)={r3, r0, 0x36dafcdc}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) gettid() (async) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r1, 0x7, 0xffffffffffffffff, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, 0x0, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) (async) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, r2, &(0x7f0000000000)={r3, r0, 0x36dafcdc}) (async) 17:43:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x0, 0x2, 0x2300, 0x1, 0x0, 0x1}, 0x48) 17:43:11 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x801) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2303, 0xfffffffa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) r2 = epoll_create(0x5) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000180)={0x80002002}) 17:43:11 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {0x0, r1}}, 0x18) 17:43:11 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r1, 0x7, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, r2, &(0x7f0000000000)={r3, r0, 0x36dafcdc}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) gettid() (async) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r1, 0x7, 0xffffffffffffffff, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, 0x0, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) (async) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, r2, &(0x7f0000000000)={r3, r0, 0x36dafcdc}) (async) 17:43:11 executing program 4: r0 = syz_io_uring_setup(0x5edc, &(0x7f00000002c0)={0x0, 0x406d, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000180)={0xfffff729}, 0x4) (async) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000040), 0x1) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 17:43:11 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {0x0, r1}}, 0x18) 17:43:12 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x0, 0x2, 0x2300, 0x1, 0x0, 0x1}, 0x48) 17:43:12 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) r0 = socket(0x22, 0x0, 0x403) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) socket(0x29, 0x6, 0xffffff81) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x101, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000140)={@qipcrtr={0x2a, 0x1, 0x4001}, {&(0x7f0000000000)=""/246, 0xf6}, &(0x7f0000000100), 0x22}, 0xa0) 17:43:12 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x801) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2303, 0xfffffffa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) r2 = epoll_create(0x5) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000180)={0x80002002}) 17:43:12 executing program 4: r0 = syz_io_uring_setup(0x5edc, &(0x7f00000002c0)={0x0, 0x406d, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000180)={0xfffff729}, 0x4) (async) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000040), 0x1) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 17:43:12 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x0, 0x2300, 0x1, 0x0, 0x1}, 0x48) 17:43:12 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {0x0, r1}}, 0x18) 17:43:12 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xf7b013a1a924caaa}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xbcaf}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x40}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}]}, 0x4c}}, 0x20044000) 17:43:12 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r3 = syz_io_uring_setup(0x818, &(0x7f0000000140)={0x0, 0xa3fa}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000400)={{0x1, 0x1, 0x18, r3, {0xc0000000}}, './file0\x00'}) ioctl$SG_GET_KEEP_ORPHAN(r6, 0x2288, &(0x7f0000000440)) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_POLL_REMOVE, 0x8000) syz_io_uring_setup(0x6a8c, &(0x7f0000000180)={0x0, 0xd4cf, 0x0, 0x3, 0x131, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r8, &(0x7f0000000280)=0x80, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x0, 0x80000, 0x1, {0x0, r9}}, 0x8) epoll_pwait2(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, &(0x7f0000000100)={r1, r2+10000000}, &(0x7f0000000140)={[0x5]}, 0x8) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) syz_io_uring_setup(0x3099, &(0x7f0000000480)={0x0, 0xd372, 0x4, 0x1, 0x2c4}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000500), &(0x7f0000000540)) 17:43:12 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x801) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2303, 0xfffffffa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) r2 = epoll_create(0x5) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000180)={0x80002002}) 17:43:12 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) (async, rerun: 32) r0 = socket(0x22, 0x0, 0x403) (rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) (async) socket(0x29, 0x6, 0xffffff81) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x101, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r0) (async, rerun: 64) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000140)={@qipcrtr={0x2a, 0x1, 0x4001}, {&(0x7f0000000000)=""/246, 0xf6}, &(0x7f0000000100), 0x22}, 0xa0) (rerun: 64) 17:43:12 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x0, 0x2300, 0x1, 0x0, 0x1}, 0x48) 17:43:12 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0xe1a601, 0x0) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x4010, r0, 0x100000001) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001c0dbb14b685fbe9986e85d56c206500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f00000001c0)={0x1, 0x5}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYRES16=r0, @ANYBLOB="000427bd7000fedbdf250100000008000b00", @ANYRES8, @ANYBLOB="08000800ac1414aa14000700fe800000000000000000000000000024"], 0x38}, 0x1, 0x0, 0x0, 0x24008844}, 0x4000000) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) ioctl$USBDEVFS_RESETEP(r3, 0x80045503, &(0x7f0000000200)={0x1, 0x1}) 17:43:12 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xf7b013a1a924caaa}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xbcaf}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x40}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}]}, 0x4c}}, 0x20044000) 17:43:12 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x801) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2303, 0xfffffffa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) r2 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x80002002}) 17:43:12 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r3 = syz_io_uring_setup(0x818, &(0x7f0000000140)={0x0, 0xa3fa}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000400)={{0x1, 0x1, 0x18, r3, {0xc0000000}}, './file0\x00'}) ioctl$SG_GET_KEEP_ORPHAN(r6, 0x2288, &(0x7f0000000440)) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_POLL_REMOVE, 0x8000) syz_io_uring_setup(0x6a8c, &(0x7f0000000180)={0x0, 0xd4cf, 0x0, 0x3, 0x131, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r8, &(0x7f0000000280)=0x80, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x0, 0x80000, 0x1, {0x0, r9}}, 0x8) epoll_pwait2(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, &(0x7f0000000100)={r1, r2+10000000}, &(0x7f0000000140)={[0x5]}, 0x8) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) syz_io_uring_setup(0x3099, &(0x7f0000000480)={0x0, 0xd372, 0x4, 0x1, 0x2c4}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000500), &(0x7f0000000540)) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) syz_io_uring_setup(0x818, &(0x7f0000000140)={0x0, 0xa3fa}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)) (async) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000400)={{0x1, 0x1, 0x18, r3, {0xc0000000}}, './file0\x00'}) (async) ioctl$SG_GET_KEEP_ORPHAN(r6, 0x2288, &(0x7f0000000440)) (async) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_POLL_REMOVE, 0x8000) (async) syz_io_uring_setup(0x6a8c, &(0x7f0000000180)={0x0, 0xd4cf, 0x0, 0x3, 0x131, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r4, r7, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r8, &(0x7f0000000280)=0x80, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x0, 0x80000, 0x1, {0x0, r9}}, 0x8) (async) epoll_pwait2(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, &(0x7f0000000100)={r1, r2+10000000}, &(0x7f0000000140)={[0x5]}, 0x8) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) (async) syz_io_uring_setup(0x3099, &(0x7f0000000480)={0x0, 0xd372, 0x4, 0x1, 0x2c4}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000500), &(0x7f0000000540)) (async) 17:43:12 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x0, 0x2300, 0x1, 0x0, 0x1}, 0x48) 17:43:12 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0xe1a601, 0x0) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x4010, r0, 0x100000001) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001c0dbb14b685fbe9986e85d56c206500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f00000001c0)={0x1, 0x5}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYRES16=r0, @ANYBLOB="000427bd7000fedbdf250100000008000b00", @ANYRES8, @ANYBLOB="08000800ac1414aa14000700fe800000000000000000000000000024"], 0x38}, 0x1, 0x0, 0x0, 0x24008844}, 0x4000000) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) ioctl$USBDEVFS_RESETEP(r3, 0x80045503, &(0x7f0000000200)={0x1, 0x1}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0xe1a601, 0x0) (async) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x4010, r0, 0x100000001) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001c0dbb14b685fbe9986e85d56c206500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f00000001c0)={0x1, 0x5}) (async) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYRES16=r0, @ANYBLOB="000427bd7000fedbdf250100000008000b00", @ANYRES8, @ANYBLOB="08000800ac1414aa14000700fe800000000000000000000000000024"], 0x38}, 0x1, 0x0, 0x0, 0x24008844}, 0x4000000) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) (async) ioctl$USBDEVFS_RESETEP(r3, 0x80045503, &(0x7f0000000200)={0x1, 0x1}) (async) 17:43:12 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) (async) r0 = socket(0x22, 0x0, 0x403) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) socket(0x29, 0x6, 0xffffff81) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x101, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r0) (async) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000140)={@qipcrtr={0x2a, 0x1, 0x4001}, {&(0x7f0000000000)=""/246, 0xf6}, &(0x7f0000000100), 0x22}, 0xa0) 17:43:12 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x2, 0x0, 0x1, 0x0, 0x1}, 0x48) 17:43:12 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xf7b013a1a924caaa}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xbcaf}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x40}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}]}, 0x4c}}, 0x20044000) 17:43:12 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x801) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2303, 0xfffffffa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) r2 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x80002002}) 17:43:12 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x801) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2303, 0xfffffffa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) r2 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x80002002}) 17:43:12 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0xe1a601, 0x0) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x4010, r0, 0x100000001) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001c0dbb14b685fbe9986e85d56c206500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f00000001c0)={0x1, 0x5}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYRES16=r0, @ANYBLOB="000427bd7000fedbdf250100000008000b00", @ANYRES8, @ANYBLOB="08000800ac1414aa14000700fe800000000000000000000000000024"], 0x38}, 0x1, 0x0, 0x0, 0x24008844}, 0x4000000) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) ioctl$USBDEVFS_RESETEP(r3, 0x80045503, &(0x7f0000000200)={0x1, 0x1}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0xe1a601, 0x0) (async) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x4010, r0, 0x100000001) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001c0dbb14b685fbe9986e85d56c206500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f00000001c0)={0x1, 0x5}) (async) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYRES16=r0, @ANYBLOB="000427bd7000fedbdf250100000008000b00", @ANYRES8, @ANYBLOB="08000800ac1414aa14000700fe800000000000000000000000000024"], 0x38}, 0x1, 0x0, 0x0, 0x24008844}, 0x4000000) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) (async) ioctl$USBDEVFS_RESETEP(r3, 0x80045503, &(0x7f0000000200)={0x1, 0x1}) (async) 17:43:12 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x2, 0x0, 0x1, 0x0, 0x1}, 0x48) 17:43:12 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) (async) r3 = syz_io_uring_setup(0x818, &(0x7f0000000140)={0x0, 0xa3fa}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) (async) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000400)={{0x1, 0x1, 0x18, r3, {0xc0000000}}, './file0\x00'}) ioctl$SG_GET_KEEP_ORPHAN(r6, 0x2288, &(0x7f0000000440)) (async) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_POLL_REMOVE, 0x8000) (async) syz_io_uring_setup(0x6a8c, &(0x7f0000000180)={0x0, 0xd4cf, 0x0, 0x3, 0x131, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) (async) r8 = socket$can_j1939(0x1d, 0x2, 0x7) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r8, &(0x7f0000000280)=0x80, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x0, 0x80000, 0x1, {0x0, r9}}, 0x8) (async) epoll_pwait2(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, &(0x7f0000000100)={r1, r2+10000000}, &(0x7f0000000140)={[0x5]}, 0x8) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) (async) syz_io_uring_setup(0x3099, &(0x7f0000000480)={0x0, 0xd372, 0x4, 0x1, 0x2c4}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000500), &(0x7f0000000540)) 17:43:12 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)='\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r0}, 0x4) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x401, 0x80000) ioctl$USBDEVFS_RESET(r2, 0x5514) 17:43:12 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) r0 = syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000009c0)={0x5, 0x80, 0x7f, 0x8, 0x7f, 0x5, 0x0, 0x80000001, 0x200a0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x0, 0xe0bb, 0xffffffff, 0x620a5beb03585cef, 0x6f, 0x1, 0x1, 0x0, 0x3ff, 0x0, 0x2}, r1, 0x10, r1, 0x2) write$cgroup_pressure(r1, &(0x7f0000000380)={'some', 0x20, 0x10000006, 0x20, 0xfffffffffffffff6}, 0x2f) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000ffdbdf250a000000050035007b00000005003300010000000500380007e1ff00080032002000000005002e0000000000"], 0x3c}}, 0x20008000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000001000000580000003838ed5d05561ec18edce3cb5c7076e608", @ANYRES32=r0, @ANYBLOB="ff000000000000002e2f66696c653000"]) ioctl$SG_IO(r6, 0x2285, &(0x7f00000007c0)={0x53, 0xfffffffffffffffc, 0xae, 0x1, @buffer={0x0, 0x8c, &(0x7f0000000500)=""/140}, &(0x7f00000005c0)="bfaee55a7d7266641024b683aeab6594983c967579f9e2f6338ed2d98774116162e985965323aad3f921e776eed6f7534635e7822c80f31f819319eff20a33955238183214aa039f3ffad341b4f2dd54e02f0e66e6c6599b8100160ec683edf712476976412a60b0d8b33d875ac541001db5eb14e10441ab6c5ae866fa0c0a5baf6da028a59f82c07a0d37512c385634a7b0f52512bba4a3774423b79df668f238ff6167311e6900d5be5c829462", &(0x7f0000000680)=""/206, 0x800, 0x2, 0x1, &(0x7f0000000780)}) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000040000000c00018008000b0073697000340002800000040000000000080009000000000000000900000000006b00030000000000000001000000000000000000000000000000000000000900a50d00001400028005000d000000000008000500000000000800040000000000080004000000000060ffc12989ad7a696026198515ed6a8ffafe8415c5697c1f97b2c9d18fe5835b1eef282530f336ca67a24902374bd11425ed3e22c1f6beda1db3f3d51b418da94dffd8e0fa1792806618a271214a8de7d289a34ef263577988aeac8ed700d6b455eae76d0c89639c6ddd58aad48ab6183360db6cdf53400394e45b29a29a0582096f930e7bdd5c1b7dc894db8b9d5b5f74880705ad5767f04e6e736c2c5a2ecbfc1cd5a27f4e6429f60228f1c7bf06bef4670cb3fddf"], 0x78}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r5, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x419f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x99}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}]}, 0x30}, 0x1, 0x0, 0x0, 0xa0b3c2605933fcc3}, 0x8000) 17:43:12 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x801) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2303, 0xfffffffa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) r2 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x80002002}) 17:43:12 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x2, 0x0, 0x1, 0x0, 0x1}, 0x48) 17:43:12 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5833c2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) 17:43:12 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)='\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r0}, 0x4) (async) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x401, 0x80000) ioctl$USBDEVFS_RESET(r2, 0x5514) 17:43:12 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x801) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2303, 0xfffffffa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000180)={0x80002002}) 17:43:12 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x801) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2303, 0xfffffffa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) r2 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x80002002}) 17:43:12 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x801) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2303, 0xfffffffa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000180)={0x80002002}) 17:43:12 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x2, 0x2300, 0x0, 0x0, 0x1}, 0x48) 17:43:12 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5833c2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) 17:43:12 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x2, 0x2300, 0x0, 0x0, 0x1}, 0x48) 17:43:12 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) r0 = syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000009c0)={0x5, 0x80, 0x7f, 0x8, 0x7f, 0x5, 0x0, 0x80000001, 0x200a0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x0, 0xe0bb, 0xffffffff, 0x620a5beb03585cef, 0x6f, 0x1, 0x1, 0x0, 0x3ff, 0x0, 0x2}, r1, 0x10, r1, 0x2) write$cgroup_pressure(r1, &(0x7f0000000380)={'some', 0x20, 0x10000006, 0x20, 0xfffffffffffffff6}, 0x2f) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000ffdbdf250a000000050035007b00000005003300010000000500380007e1ff00080032002000000005002e0000000000"], 0x3c}}, 0x20008000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000001000000580000003838ed5d05561ec18edce3cb5c7076e608", @ANYRES32=r0, @ANYBLOB="ff000000000000002e2f66696c653000"]) ioctl$SG_IO(r6, 0x2285, &(0x7f00000007c0)={0x53, 0xfffffffffffffffc, 0xae, 0x1, @buffer={0x0, 0x8c, &(0x7f0000000500)=""/140}, &(0x7f00000005c0)="bfaee55a7d7266641024b683aeab6594983c967579f9e2f6338ed2d98774116162e985965323aad3f921e776eed6f7534635e7822c80f31f819319eff20a33955238183214aa039f3ffad341b4f2dd54e02f0e66e6c6599b8100160ec683edf712476976412a60b0d8b33d875ac541001db5eb14e10441ab6c5ae866fa0c0a5baf6da028a59f82c07a0d37512c385634a7b0f52512bba4a3774423b79df668f238ff6167311e6900d5be5c829462", &(0x7f0000000680)=""/206, 0x800, 0x2, 0x1, &(0x7f0000000780)}) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x78}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r5, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x419f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x99}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}]}, 0x30}, 0x1, 0x0, 0x0, 0xa0b3c2605933fcc3}, 0x8000) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) (async) perf_event_open$cgroup(&(0x7f00000009c0)={0x5, 0x80, 0x7f, 0x8, 0x7f, 0x5, 0x0, 0x80000001, 0x200a0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x0, 0xe0bb, 0xffffffff, 0x620a5beb03585cef, 0x6f, 0x1, 0x1, 0x0, 0x3ff, 0x0, 0x2}, r1, 0x10, r1, 0x2) (async) write$cgroup_pressure(r1, &(0x7f0000000380)={'some', 0x20, 0x10000006, 0x20, 0xfffffffffffffff6}, 0x2f) (async) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000180)=0xffffffffffffffff, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000ffdbdf250a000000050035007b00000005003300010000000500380007e1ff00080032002000000005002e0000000000"], 0x3c}}, 0x20008000) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000001000000580000003838ed5d05561ec18edce3cb5c7076e608", @ANYRES32=r0, @ANYBLOB="ff000000000000002e2f66696c653000"]) (async) ioctl$SG_IO(r6, 0x2285, &(0x7f00000007c0)={0x53, 0xfffffffffffffffc, 0xae, 0x1, @buffer={0x0, 0x8c, &(0x7f0000000500)=""/140}, &(0x7f00000005c0)="bfaee55a7d7266641024b683aeab6594983c967579f9e2f6338ed2d98774116162e985965323aad3f921e776eed6f7534635e7822c80f31f819319eff20a33955238183214aa039f3ffad341b4f2dd54e02f0e66e6c6599b8100160ec683edf712476976412a60b0d8b33d875ac541001db5eb14e10441ab6c5ae866fa0c0a5baf6da028a59f82c07a0d37512c385634a7b0f52512bba4a3774423b79df668f238ff6167311e6900d5be5c829462", &(0x7f0000000680)=""/206, 0x800, 0x2, 0x1, &(0x7f0000000780)}) (async) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x78}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r5, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x419f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x99}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}]}, 0x30}, 0x1, 0x0, 0x0, 0xa0b3c2605933fcc3}, 0x8000) (async) 17:43:12 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x801) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2303, 0xfffffffa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) r2 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x80002002}) 17:43:12 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)='\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r0}, 0x4) (async) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x401, 0x80000) ioctl$USBDEVFS_RESET(r2, 0x5514) 17:43:12 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x801) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2303, 0xfffffffa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000180)={0x80002002}) 17:43:12 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5833c2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5833c2, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) (async) 17:43:12 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x2, 0x2300, 0x0, 0x0, 0x1}, 0x48) [ 1883.593529][ T3018] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 17:43:12 executing program 0: ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:12 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x801) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2303, 0xfffffffa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) epoll_create(0x5) 17:43:12 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$cgroup_pressure(r0, &(0x7f0000000000)={'full', 0x20, 0x3f, 0x20, 0x401}, 0x2f) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff00c) 17:43:12 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x1}, @jmp={0x5, 0x0, 0x8, 0xa, 0x4, 0x50, 0x1}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x970c}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r0]}, 0x80) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x3}}, 0x18) 17:43:12 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x801) r2 = epoll_create(0x5) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000180)={0x80002002}) 17:43:12 executing program 0: ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) (async) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:12 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$cgroup_pressure(r0, &(0x7f0000000000)={'full', 0x20, 0x3f, 0x20, 0x401}, 0x2f) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff00c) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$cgroup_pressure(r0, &(0x7f0000000000)={'full', 0x20, 0x3f, 0x20, 0x401}, 0x2f) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff00c) (async) 17:43:12 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x1}, @jmp={0x5, 0x0, 0x8, 0xa, 0x4, 0x50, 0x1}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x970c}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r0]}, 0x80) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x3}}, 0x18) 17:43:12 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) r0 = syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async, rerun: 32) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) (async, rerun: 32) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) (async) perf_event_open$cgroup(&(0x7f00000009c0)={0x5, 0x80, 0x7f, 0x8, 0x7f, 0x5, 0x0, 0x80000001, 0x200a0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x0, 0xe0bb, 0xffffffff, 0x620a5beb03585cef, 0x6f, 0x1, 0x1, 0x0, 0x3ff, 0x0, 0x2}, r1, 0x10, r1, 0x2) (async) write$cgroup_pressure(r1, &(0x7f0000000380)={'some', 0x20, 0x10000006, 0x20, 0xfffffffffffffff6}, 0x2f) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000180)=0xffffffffffffffff, 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, 0x0, 0x0) (async, rerun: 32) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000ffdbdf250a000000050035007b00000005003300010000000500380007e1ff00080032002000000005002e0000000000"], 0x3c}}, 0x20008000) (rerun: 32) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000001000000580000003838ed5d05561ec18edce3cb5c7076e608", @ANYRES32=r0, @ANYBLOB="ff000000000000002e2f66696c653000"]) (async) ioctl$SG_IO(r6, 0x2285, &(0x7f00000007c0)={0x53, 0xfffffffffffffffc, 0xae, 0x1, @buffer={0x0, 0x8c, &(0x7f0000000500)=""/140}, &(0x7f00000005c0)="bfaee55a7d7266641024b683aeab6594983c967579f9e2f6338ed2d98774116162e985965323aad3f921e776eed6f7534635e7822c80f31f819319eff20a33955238183214aa039f3ffad341b4f2dd54e02f0e66e6c6599b8100160ec683edf712476976412a60b0d8b33d875ac541001db5eb14e10441ab6c5ae866fa0c0a5baf6da028a59f82c07a0d37512c385634a7b0f52512bba4a3774423b79df668f238ff6167311e6900d5be5c829462", &(0x7f0000000680)=""/206, 0x800, 0x2, 0x1, &(0x7f0000000780)}) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x78}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r5, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x419f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x99}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}]}, 0x30}, 0x1, 0x0, 0x0, 0xa0b3c2605933fcc3}, 0x8000) 17:43:12 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x1}, 0x14}}, 0x0) r2 = epoll_create(0x5) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000180)={0x80002002}) 17:43:12 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x801) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2303, 0xfffffffa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:12 executing program 0: ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) [ 1883.652899][ T3038] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 17:43:12 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x1}, @jmp={0x5, 0x0, 0x8, 0xa, 0x4, 0x50, 0x1}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x970c}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r0]}, 0x80) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x3}}, 0x18) 17:43:12 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$cgroup_pressure(r0, &(0x7f0000000000)={'full', 0x20, 0x3f, 0x20, 0x401}, 0x2f) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff00c) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$cgroup_pressure(r0, &(0x7f0000000000)={'full', 0x20, 0x3f, 0x20, 0x401}, 0x2f) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff00c) (async) 17:43:12 executing program 1: syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = epoll_create(0x5) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)={0x80002002}) 17:43:12 executing program 0: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8dd7}}, './file0\x00'}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000000c0)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:12 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x1}, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2303, 0xfffffffa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:12 executing program 1: syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r0 = epoll_create(0x5) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)={0x80002002}) 17:43:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff8a6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008015}, 0x44c4) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 17:43:12 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x1}, @jmp={0x5, 0x0, 0x8, 0xa, 0x4, 0x50, 0x1}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x970c}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r0]}, 0x80) 17:43:12 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r1}}, 0x18) 17:43:12 executing program 0: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8dd7}}, './file0\x00'}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000000c0)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8dd7}}, './file0\x00'}) (async) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000000c0)) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) 17:43:12 executing program 1: r0 = epoll_create(0x5) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)={0x80002002}) 17:43:12 executing program 3: syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2303, 0xfffffffa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:12 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, r1, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000829bd7000fcdbdf250801000008000600ff0300002400028006000f0005000000080004000080000005000d0000000000080004007f00000008000500001e86ffd985911438ac143e01ad541159fc6182248e2b219ed538cae9f44bef879b9b00"], 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x24000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x78, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS, @IPVS_DEST_ATTR_FWD_METHOD={0x6b}, @IPVS_DEST_ATTR_ADDR={0x0, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x0, 0x9, 0xda5}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x78}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xb8, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x3e}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x39}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x400cc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r2, 0x7fffffff}}, 0x10) 17:43:12 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x1}, @jmp={0x5, 0x0, 0x8, 0xa, 0x4, 0x50, 0x1}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x970c}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r0]}, 0x80) 17:43:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff8a6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008015}, 0x44c4) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff8a6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008015}, 0x44c4) (async) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) 17:43:12 executing program 0: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8dd7}}, './file0\x00'}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000000c0)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8dd7}}, './file0\x00'}) (async) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000000c0)) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) 17:43:12 executing program 3: syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2303, 0xfffffffa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:12 executing program 1: r0 = epoll_create(0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)={0x80002002}) 17:43:12 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, r1, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000829bd7000fcdbdf250801000008000600ff0300002400028006000f0005000000080004000080000005000d0000000000080004007f00000008000500001e86ffd985911438ac143e01ad541159fc6182248e2b219ed538cae9f44bef879b9b00"], 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x24000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x78, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS, @IPVS_DEST_ATTR_FWD_METHOD={0x6b}, @IPVS_DEST_ATTR_ADDR={0x0, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x0, 0x9, 0xda5}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x78}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xb8, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x3e}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x39}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x400cc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r2, 0x7fffffff}}, 0x10) 17:43:12 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x1}, @jmp={0x5, 0x0, 0x8, 0xa, 0x4, 0x50, 0x1}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x970c}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r0]}, 0x80) 17:43:12 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x8000000, @mcast2}, @ib={0x1b, 0x0, 0x7, {"444bcb830f5ef53e3d21b5b42a32a390"}, 0x4}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000100)={0xa, 0x4, 0xfa00, {r2}}, 0xc) ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f0000000140)=0x3f) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f00000001c0)=@usbdevfs_disconnect={0x7}) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:12 executing program 1: r0 = epoll_create(0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)={0x80002002}) 17:43:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff8a6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008015}, 0x44c4) (async) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 17:43:12 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2303, 0xfffffffa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:12 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x1}, @jmp={0x5, 0x0, 0x8, 0xa, 0x4, 0x50, 0x1}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x970c}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r0]}, 0x80) 17:43:12 executing program 1: r0 = epoll_create(0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)={0x80002002}) 17:43:12 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x8000000, @mcast2}, @ib={0x1b, 0x0, 0x7, {"444bcb830f5ef53e3d21b5b42a32a390"}, 0x4}}}, 0x118) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000100)={0xa, 0x4, 0xfa00, {r2}}, 0xc) (async) ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f0000000140)=0x3f) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) (async) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f00000001c0)=@usbdevfs_disconnect={0x7}) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:12 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, r1, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000829bd7000fcdbdf250801000008000600ff0300002400028006000f0005000000080004000080000005000d0000000000080004007f00000008000500001e86ffd985911438ac143e01ad541159fc6182248e2b219ed538cae9f44bef879b9b00"], 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x24000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x78, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS, @IPVS_DEST_ATTR_FWD_METHOD={0x6b}, @IPVS_DEST_ATTR_ADDR={0x0, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x0, 0x9, 0xda5}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x78}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xb8, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x3e}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x39}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x400cc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r2, 0x7fffffff}}, 0x10) 17:43:12 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000280), 0x1) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x5, 0x10, 0xfa00, {&(0x7f0000000380), r0, 0x1}}, 0x18) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000140)=""/123, 0x7b, 0x64c1, &(0x7f0000000000)) syz_io_uring_setup(0x1a68, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000040)) 17:43:12 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 17:43:12 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x1}, @jmp={0x5, 0x0, 0x8, 0xa, 0x4, 0x50, 0x1}, @map_fd={0x18, 0x8}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x970c}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r0]}, 0x80) 17:43:12 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x8000000, @mcast2}, @ib={0x1b, 0x0, 0x7, {"444bcb830f5ef53e3d21b5b42a32a390"}, 0x4}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000100)={0xa, 0x4, 0xfa00, {r2}}, 0xc) ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f0000000140)=0x3f) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f00000001c0)=@usbdevfs_disconnect={0x7}) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) fcntl$getownex(r0, 0x10, &(0x7f0000000180)) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x8000000, @mcast2}, @ib={0x1b, 0x0, 0x7, {"444bcb830f5ef53e3d21b5b42a32a390"}, 0x4}}}, 0x118) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x2, 0x5}}, 0x20) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000100)={0xa, 0x4, 0xfa00, {r2}}, 0xc) (async) ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f0000000140)=0x3f) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) (async) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f00000001c0)=@usbdevfs_disconnect={0x7}) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) 17:43:12 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, r1, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000829bd7000fcdbdf250801000008000600ff0300002400028006000f0005000000080004000080000005000d0000000000080004007f00000008000500001e86ffd985911438ac143e01ad541159fc6182248e2b219ed538cae9f44bef879b9b00"], 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x24000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x78, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS, @IPVS_DEST_ATTR_FWD_METHOD={0x6b}, @IPVS_DEST_ATTR_ADDR={0x0, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x0, 0x9, 0xda5}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x78}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xb8, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x3e}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x39}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x400cc) 17:43:12 executing program 1: r0 = epoll_create(0x5) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)={0x80002002}) 17:43:12 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 17:43:12 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x1}, @jmp={0x5, 0x0, 0x8, 0xa, 0x4, 0x50, 0x1}, @map_fd={0x18, 0x8}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x970c}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:12 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x3d}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4040) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:12 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000280), 0x1) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) (rerun: 64) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x5, 0x10, 0xfa00, {&(0x7f0000000380), r0, 0x1}}, 0x18) (async, rerun: 64) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000140)=""/123, 0x7b, 0x64c1, &(0x7f0000000000)) (rerun: 64) syz_io_uring_setup(0x1a68, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000040)) 17:43:12 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 17:43:12 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, r1, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000829bd7000fcdbdf250801000008000600ff0300002400028006000f0005000000080004000080000005000d0000000000080004007f00000008000500001e86ffd985911438ac143e01ad541159fc6182248e2b219ed538cae9f44bef879b9b00"], 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x24000000) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x78, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS, @IPVS_DEST_ATTR_FWD_METHOD={0x6b}, @IPVS_DEST_ATTR_ADDR={0x0, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x0, 0x9, 0xda5}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x78}}, 0x0) 17:43:12 executing program 5: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 17:43:12 executing program 1: r0 = epoll_create(0x5) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)={0x80002002}) 17:43:12 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async, rerun: 32) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000280), 0x1) (async, rerun: 32) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x5, 0x10, 0xfa00, {&(0x7f0000000380), r0, 0x1}}, 0x18) (async) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000140)=""/123, 0x7b, 0x64c1, &(0x7f0000000000)) (async) syz_io_uring_setup(0x1a68, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000040)) 17:43:12 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x0, 0xcb, 0x2303, 0xfffffffa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:12 executing program 5: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 17:43:12 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, r1, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000829bd7000fcdbdf250801000008000600ff0300002400028006000f0005000000080004000080000005000d0000000000080004007f00000008000500001e86ffd985911438ac143e01ad541159fc6182248e2b219ed538cae9f44bef879b9b00"], 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x24000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 17:43:12 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x3d}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4040) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:12 executing program 1: r0 = epoll_create(0x5) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)={0x80002002}) 17:43:12 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x0, 0xcb, 0x2303, 0xfffffffa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:12 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, r1, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000829bd7000fcdbdf250801000008000600ff0300002400028006000f0005000000080004000080000005000d0000000000080004007f00000008000500001e86ffd985911438ac143e01ad541159fc6182248e2b219ed538cae9f44bef879b9b00"], 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x24000000) socket$nl_generic(0x10, 0x3, 0x10) 17:43:12 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x0, 0xcb, 0x2303, 0xfffffffa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:12 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x3d}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4040) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:12 executing program 1: epoll_create(0x5) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000180)={0x80002002}) 17:43:12 executing program 5: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 17:43:12 executing program 4: r0 = syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x400}}, './file1\x00'}) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x67c}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xecc}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x814) io_uring_setup(0x1405, &(0x7f00000001c0)={0x0, 0xc7b3, 0x12, 0x2, 0x234, 0x0, r0}) io_uring_setup(0x2797, &(0x7f0000000380)={0x0, 0xc0ba, 0x0, 0x3, 0x303}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x10000014}) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, &(0x7f0000000180)=0x613) r3 = io_uring_setup(0x387f, &(0x7f0000000240)={0x0, 0xbf3f, 0x0, 0x2, 0x29a, 0x0, r2}) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) 17:43:12 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, r1, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000829bd7000fcdbdf250801000008000600ff0300002400028006000f0005000000080004000080000005000d0000000000080004007f00000008000500001e86ffd985911438ac143e01ad541159fc6182248e2b219ed538cae9f44bef879b9b00"], 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x24000000) 17:43:12 executing program 1: epoll_create(0x5) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000180)={0x80002002}) 17:43:12 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:12 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x0, 0x2303, 0xfffffffa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:12 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x46201, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7ff}}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) 17:43:12 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, r1, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) 17:43:12 executing program 1: epoll_create(0x5) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000180)={0x80002002}) 17:43:12 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:12 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x46201, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7ff}}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x46201, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7ff}}, './file0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) 17:43:12 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x0, 0x2303, 0xfffffffa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:12 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:12 executing program 4: r0 = syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x400}}, './file1\x00'}) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x67c}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xecc}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x814) (async) io_uring_setup(0x1405, &(0x7f00000001c0)={0x0, 0xc7b3, 0x12, 0x2, 0x234, 0x0, r0}) io_uring_setup(0x2797, &(0x7f0000000380)={0x0, 0xc0ba, 0x0, 0x3, 0x303}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x10000014}) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (rerun: 64) ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, &(0x7f0000000180)=0x613) (async) r3 = io_uring_setup(0x387f, &(0x7f0000000240)={0x0, 0xbf3f, 0x0, 0x2, 0x29a, 0x0, r2}) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) 17:43:12 executing program 1: r0 = epoll_create(0x5) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x80002002}) 17:43:12 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, r1, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:12 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x1}, @jmp={0x5, 0x0, 0x8, 0xa, 0x4, 0x50, 0x1}, @map_fd={0x18, 0x8}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x970c}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:12 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x46201, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7ff}}, './file0\x00'}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) 17:43:12 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x0, 0x2303, 0xfffffffa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:12 executing program 1: r0 = epoll_create(0x5) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x80002002}) 17:43:12 executing program 1: r0 = epoll_create(0x5) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x80002002}) 17:43:12 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x1}, @jmp={0x5, 0x0, 0x8, 0xa, 0x4, 0x50, 0x1}, @map_fd={0x18, 0x8}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x970c}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:12 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:12 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x0, 0xfffffffa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:12 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000200)={0x5, 0x10, 0xfa00, {0x0}}, 0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x2, 0xffffffffffffffff, 0x10, 0x3, @in={0x2, 0x4e22, @local}}}, 0xa0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000300)={0x10, 0x30, 0xfa00, {&(0x7f0000000240), 0x3, {0xa, 0x4e21, 0xfb9, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3f}, r4}}, 0x38) 17:43:12 executing program 4: r0 = syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x400}}, './file1\x00'}) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x67c}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xecc}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x814) io_uring_setup(0x1405, &(0x7f00000001c0)={0x0, 0xc7b3, 0x12, 0x2, 0x234, 0x0, r0}) io_uring_setup(0x2797, &(0x7f0000000380)={0x0, 0xc0ba, 0x0, 0x3, 0x303}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x10000014}) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, &(0x7f0000000180)=0x613) r3 = io_uring_setup(0x387f, &(0x7f0000000240)={0x0, 0xbf3f, 0x0, 0x2, 0x29a, 0x0, r2}) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x400}}, './file1\x00'}) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x67c}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xecc}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x814) (async) io_uring_setup(0x1405, &(0x7f00000001c0)={0x0, 0xc7b3, 0x12, 0x2, 0x234, 0x0, r0}) (async) io_uring_setup(0x2797, &(0x7f0000000380)={0x0, 0xc0ba, 0x0, 0x3, 0x303}) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x10000014}) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async) ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, &(0x7f0000000180)=0x613) (async) io_uring_setup(0x387f, &(0x7f0000000240)={0x0, 0xbf3f, 0x0, 0x2, 0x29a, 0x0, r2}) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) 17:43:12 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x11, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x1}, @jmp={0x5, 0x0, 0x8, 0xa, 0x4, 0x50, 0x1}, @map_fd={0x18, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:12 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:12 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x0, 0xfffffffa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:12 executing program 1: r0 = epoll_create(0x5) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) 17:43:12 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000200)={0x5, 0x10, 0xfa00, {0x0}}, 0x1) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x2, 0xffffffffffffffff, 0x10, 0x3, @in={0x2, 0x4e22, @local}}}, 0xa0) (async) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000300)={0x10, 0x30, 0xfa00, {&(0x7f0000000240), 0x3, {0xa, 0x4e21, 0xfb9, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3f}, r4}}, 0x38) 17:43:12 executing program 1: r0 = epoll_create(0x5) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) 17:43:12 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x0, 0xfffffffa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:12 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:12 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x11, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x1}, @jmp={0x5, 0x0, 0x8, 0xa, 0x4, 0x50, 0x1}, @map_fd={0x18, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:12 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000200)={0x5, 0x10, 0xfa00, {0x0}}, 0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x2, 0xffffffffffffffff, 0x10, 0x3, @in={0x2, 0x4e22, @local}}}, 0xa0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000300)={0x10, 0x30, 0xfa00, {&(0x7f0000000240), 0x3, {0xa, 0x4e21, 0xfb9, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3f}, r4}}, 0x38) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000200)={0x5, 0x10, 0xfa00, {0x0}}, 0x1) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x2, 0xffffffffffffffff, 0x10, 0x3, @in={0x2, 0x4e22, @local}}}, 0xa0) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280), 0x106, 0xd}}, 0x20) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000300)={0x10, 0x30, 0xfa00, {&(0x7f0000000240), 0x3, {0xa, 0x4e21, 0xfb9, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3f}, r4}}, 0x38) (async) 17:43:12 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, 0xffffffffffffffff, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:12 executing program 4: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1d}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x44880) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 17:43:13 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x11, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x1}, @jmp={0x5, 0x0, 0x8, 0xa, 0x4, 0x50, 0x1}, @map_fd={0x18, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:13 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2303, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:13 executing program 1: r0 = epoll_create(0x5) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) 17:43:13 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, 0xffffffffffffffff, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:13 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, 0xffffffffffffffff, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:13 executing program 1: r0 = epoll_create(0x5) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)) 17:43:13 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2303, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:13 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x1}, @jmp={0x5, 0x0, 0x8, 0xa, 0x4, 0x50, 0x1}, @map_fd={0x18, 0x8}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x970c}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:13 executing program 4: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1d}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x44880) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1d}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x44880) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) 17:43:13 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, r1, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:13 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x1}, @jmp={0x5, 0x0, 0x8, 0xa, 0x4, 0x50, 0x1}, @map_fd={0x18, 0x8}, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:13 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x78, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS, @IPVS_DEST_ATTR_FWD_METHOD={0x6b}, @IPVS_DEST_ATTR_ADDR={0x0, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x0, 0x9, 0xda5}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x78}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x2404081c) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:13 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2303, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) 17:43:13 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000200)={0x5, 0x10, 0xfa00, {0x0}}, 0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x2, 0xffffffffffffffff, 0x10, 0x3, @in={0x2, 0x4e22, @local}}}, 0xa0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000300)={0x10, 0x30, 0xfa00, {&(0x7f0000000240), 0x3, {0xa, 0x4e21, 0xfb9, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3f}, r4}}, 0x38) 17:43:13 executing program 4: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1d}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x44880) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1d}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x44880) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) 17:43:13 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, r1, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:13 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x11, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x1}, @jmp={0x5, 0x0, 0x8, 0xa, 0x4, 0x50, 0x1}, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:13 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2303, 0xfffffffa, 0x0, 0x1}, 0x48) 17:43:13 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000200)={0x5, 0x10, 0xfa00, {0x0}}, 0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x2, 0xffffffffffffffff, 0x10, 0x3, @in={0x2, 0x4e22, @local}}}, 0xa0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000300)={0x10, 0x30, 0xfa00, {&(0x7f0000000240), 0x3, {0xa, 0x4e21, 0xfb9, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3f}, r4}}, 0x38) 17:43:13 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, r1, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:13 executing program 4: perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x2, 0xff, 0x6, 0xff, 0x0, 0x81, 0x20000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x5985, 0x7}, 0x0, 0x8, 0x4, 0x0, 0x10001, 0x7, 0x1, 0x0, 0x544f, 0x0, 0x7}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5edc, &(0x7f00000002c0)={0x0, 0xf739, 0x4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 17:43:13 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x78, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS, @IPVS_DEST_ATTR_FWD_METHOD={0x6b}, @IPVS_DEST_ATTR_ADDR={0x0, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x0, 0x9, 0xda5}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x78}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x2404081c) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x78, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS, @IPVS_DEST_ATTR_FWD_METHOD={0x6b}, @IPVS_DEST_ATTR_ADDR={0x0, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x0, 0x9, 0xda5}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x78}}, 0x0) (async) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x2404081c) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) 17:43:13 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000200)={0x5, 0x10, 0xfa00, {0x0}}, 0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x2, 0xffffffffffffffff, 0x10, 0x3, @in={0x2, 0x4e22, @local}}}, 0xa0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000300)={0x10, 0x30, 0xfa00, {&(0x7f0000000240), 0x3, {0xa, 0x4e21, 0xfb9, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3f}, r4}}, 0x38) 17:43:13 executing program 4: perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x2, 0xff, 0x6, 0xff, 0x0, 0x81, 0x20000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x5985, 0x7}, 0x0, 0x8, 0x4, 0x0, 0x10001, 0x7, 0x1, 0x0, 0x544f, 0x0, 0x7}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r0 = syz_io_uring_setup(0x5edc, &(0x7f00000002c0)={0x0, 0xf739, 0x4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 17:43:13 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x11, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x1}, @jmp={0x5, 0x0, 0x8, 0xa, 0x4, 0x50, 0x1}, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:13 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, r1, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:13 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, r1, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) [ 1884.445667][ T3367] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 17:43:13 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x11, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x1}, @jmp={0x5, 0x0, 0x8, 0xa, 0x4, 0x50, 0x1}, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:13 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000200)={0x5, 0x10, 0xfa00, {0x0}}, 0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x2, 0xffffffffffffffff, 0x10, 0x3, @in={0x2, 0x4e22, @local}}}, 0xa0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280), 0x106, 0xd}}, 0x20) 17:43:13 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x78, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS, @IPVS_DEST_ATTR_FWD_METHOD={0x6b}, @IPVS_DEST_ATTR_ADDR={0x0, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x0, 0x9, 0xda5}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x78}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x2404081c) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x78, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS, @IPVS_DEST_ATTR_FWD_METHOD={0x6b}, @IPVS_DEST_ATTR_ADDR={0x0, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x0, 0x9, 0xda5}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x78}}, 0x0) (async) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x2404081c) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) 17:43:13 executing program 4: perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x2, 0xff, 0x6, 0xff, 0x0, 0x81, 0x20000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x5985, 0x7}, 0x0, 0x8, 0x4, 0x0, 0x10001, 0x7, 0x1, 0x0, 0x544f, 0x0, 0x7}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r0 = syz_io_uring_setup(0x5edc, &(0x7f00000002c0)={0x0, 0xf739, 0x4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 17:43:13 executing program 2: write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, r0, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:13 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) read$rfkill(r0, &(0x7f0000000040), 0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r3, r0}}, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000000)=0x6) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) 17:43:13 executing program 2: write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, r0, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:13 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000200)={0x5, 0x10, 0xfa00, {0x0}}, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x2, 0xffffffffffffffff, 0x10, 0x3, @in={0x2, 0x4e22, @local}}}, 0xa0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) 17:43:13 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x1}, @jmp={0x5, 0x0, 0x8, 0xa, 0x4, 0x50, 0x1}, @map_fd, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) [ 1884.498884][ T3387] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 17:43:13 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000200)={0x5, 0x10, 0xfa00, {0x0}}, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x2, 0xffffffffffffffff, 0x10, 0x3, @in={0x2, 0x4e22, @local}}}, 0xa0) 17:43:13 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x5, @empty, 0x7}, {0xa, 0x4e20, 0xffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0xffffffffffffffff, 0x8}}, 0x48) 17:43:13 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) read$rfkill(r0, &(0x7f0000000040), 0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r3, r0}}, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000000)=0x6) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) 17:43:13 executing program 2: write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, r0, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:13 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x12, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x1}, @map_fd, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:13 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x5, @empty, 0x7}, {0xa, 0x4e20, 0xffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0xffffffffffffffff, 0x8}}, 0x48) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x5, @empty, 0x7}, {0xa, 0x4e20, 0xffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0xffffffffffffffff, 0x8}}, 0x48) (async) 17:43:13 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000200)={0x5, 0x10, 0xfa00, {0x0}}, 0x1) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x2, 0xffffffffffffffff, 0x10, 0x3, @in={0x2, 0x4e22, @local}}}, 0xa0) 17:43:13 executing program 4: r0 = syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file0\x00'}) syz_io_uring_setup(0x6d40, &(0x7f0000000140)={0x0, 0x636e, 0x2, 0x3, 0x82, 0x0, r0}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x818, &(0x7f0000000140)={0x0, 0xa3fa}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440), 0x200481, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_POLL_REMOVE, 0x8000) r5 = io_uring_setup(0x7c57, &(0x7f00000001c0)) r6 = syz_io_uring_setup(0xc88, &(0x7f0000000000)={0x0, 0x431a}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) syz_io_uring_submit(r2, r4, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x800, 0x1, {0x0, r7}}, 0x7f) 17:43:13 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, r1, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:13 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) read$rfkill(r0, &(0x7f0000000040), 0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r3, r0}}, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000000)=0x6) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) [ 1884.573655][ T3416] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 17:43:13 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x5, @empty, 0x7}, {0xa, 0x4e20, 0xffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0xffffffffffffffff, 0x8}}, 0x48) 17:43:13 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @map_fd, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:13 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000200)={0x5, 0x10, 0xfa00, {0x0}}, 0x1) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x2, 0xffffffffffffffff, 0x10, 0x3, @in={0x2, 0x4e22, @local}}}, 0xa0) 17:43:13 executing program 4: r0 = syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file0\x00'}) (async) syz_io_uring_setup(0x6d40, &(0x7f0000000140)={0x0, 0x636e, 0x2, 0x3, 0x82, 0x0, r0}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x818, &(0x7f0000000140)={0x0, 0xa3fa}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440), 0x200481, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_POLL_REMOVE, 0x8000) (async) r5 = io_uring_setup(0x7c57, &(0x7f00000001c0)) (async) r6 = syz_io_uring_setup(0xc88, &(0x7f0000000000)={0x0, 0x431a}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) (async) syz_io_uring_submit(r2, r4, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x800, 0x1, {0x0, r7}}, 0x7f) 17:43:13 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = socket(0x0, 0x0, 0x3ff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000040)={{0x5, 0x7}, 0x3a}, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x322}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044034}, 0x56ad0ad6863de071) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:13 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @map_fd, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:13 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) read$rfkill(r0, &(0x7f0000000040), 0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r3, r0}}, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000000)=0x6) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 17:43:13 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, r1, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:13 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000200)={0x5, 0x10, 0xfa00, {0x0}}, 0x1) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x2, 0xffffffffffffffff, 0x10, 0x3, @in={0x2, 0x4e22, @local}}}, 0xa0) 17:43:13 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @map_fd, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:13 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) read$rfkill(r0, &(0x7f0000000040), 0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r3, r0}}, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000000)=0x6) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, 0x0, 0x0) 17:43:13 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x2, 0xffffffffffffffff, 0x10, 0x3, @in={0x2, 0x4e22, @local}}}, 0xa0) 17:43:13 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = socket(0x0, 0x0, 0x3ff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) (async, rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) (rerun: 32) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000040)={{0x5, 0x7}, 0x3a}, 0x10) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x322}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044034}, 0x56ad0ad6863de071) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:13 executing program 4: r0 = syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file0\x00'}) (async) syz_io_uring_setup(0x6d40, &(0x7f0000000140)={0x0, 0x636e, 0x2, 0x3, 0x82, 0x0, r0}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000001c0)) (async, rerun: 32) syz_io_uring_setup(0x818, &(0x7f0000000140)={0x0, 0xa3fa}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) (rerun: 32) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440), 0x200481, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_POLL_REMOVE, 0x8000) r5 = io_uring_setup(0x7c57, &(0x7f00000001c0)) r6 = syz_io_uring_setup(0xc88, &(0x7f0000000000)={0x0, 0x431a}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) (async, rerun: 32) syz_io_uring_submit(r2, r4, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x800, 0x1, {0x0, r7}}, 0x7f) (rerun: 32) 17:43:13 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, r1, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:13 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x12, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x1}, @map_fd, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:13 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) read$rfkill(r0, &(0x7f0000000040), 0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r3, r0}}, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000000)=0x6) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 17:43:13 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x2, 0xffffffffffffffff, 0x10, 0x3, @in={0x2, 0x4e22, @local}}}, 0xa0) 17:43:13 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, r1, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:13 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, r1, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:13 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000040), 0x0) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000080)=r1, 0x1) 17:43:13 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x12, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func, @map_fd, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:13 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x2, 0xffffffffffffffff, 0x10, 0x3, @in={0x2, 0x4e22, @local}}}, 0xa0) 17:43:13 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, r1, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:13 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) r1 = socket(0x0, 0x0, 0x3ff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) (async) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000040)={{0x5, 0x7}, 0x3a}, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x322}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044034}, 0x56ad0ad6863de071) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:13 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func, @map_fd, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:13 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) read$rfkill(r0, &(0x7f0000000040), 0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r3, r0}}, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000000)=0x6) 17:43:13 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000040), 0x0) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000080)=r1, 0x1) 17:43:13 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x2, 0xffffffffffffffff, 0x10, 0x3, @in={0x2, 0x4e22, @local}}}, 0xa0) 17:43:13 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func, @map_fd, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:13 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, r1, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:13 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func, @map_fd, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:13 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x2, 0xffffffffffffffff, 0x10, 0x3, @in={0x2, 0x4e22, @local}}}, 0xa0) 17:43:13 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0xfffffffc}}, './file0\x00'}) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffa}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44001}, 0x40c4) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r2, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4010}, 0x4008000) 17:43:13 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, r1, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:13 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x2, 0xffffffffffffffff, 0x10, 0x3, @in={0x2, 0x4e22, @local}}}, 0xa0) 17:43:13 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) read$rfkill(r0, &(0x7f0000000040), 0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r3, r0}}, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) 17:43:13 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x12, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func, @cb_func, @map_fd, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:13 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000040), 0x0) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000080)=r1, 0x1) 17:43:13 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, r1, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:13 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0xfffffffc}}, './file0\x00'}) (async, rerun: 32) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async, rerun: 32) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffa}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44001}, 0x40c4) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r2, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4010}, 0x4008000) 17:43:13 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) read$rfkill(r0, &(0x7f0000000040), 0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r3, r0}}, 0x18) 17:43:13 executing program 1: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x2, 0xffffffffffffffff, 0x10, 0x3, @in={0x2, 0x4e22, @local}}}, 0xa0) 17:43:13 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x12, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func, @cb_func, @map_fd, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:13 executing program 4: r0 = syz_io_uring_setup(0x5edc, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x6785, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000140)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000180)=[{}, {}, {}], &(0x7f0000000080)=0x18) 17:43:13 executing program 1: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x2, 0xffffffffffffffff, 0x10, 0x3, @in={0x2, 0x4e22, @local}}}, 0xa0) 17:43:13 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, r1, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:13 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) read$rfkill(r0, &(0x7f0000000040), 0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100), 0x13f, 0x9}}, 0x20) 17:43:13 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) r1 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0xfffffffc}}, './file0\x00'}) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffa}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44001}, 0x40c4) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r2, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4010}, 0x4008000) 17:43:13 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x12, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func, @cb_func, @map_fd, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:13 executing program 4: r0 = syz_io_uring_setup(0x5edc, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_setup(0x6785, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000140)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000180)=[{}, {}, {}], &(0x7f0000000080)=0x18) 17:43:13 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x10}}, 0x10) 17:43:13 executing program 1: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x2, 0xffffffffffffffff, 0x10, 0x3, @in={0x2, 0x4e22, @local}}}, 0xa0) 17:43:13 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, r1, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:13 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x11, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func, @map_fd, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:13 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, 0x0, 0x0) 17:43:13 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) read$rfkill(r0, &(0x7f0000000040), 0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) 17:43:13 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x10}}, 0x10) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x10}}, 0x10) (async) 17:43:13 executing program 4: r0 = syz_io_uring_setup(0x5edc, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_setup(0x6785, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000180)=[{}, {}, {}], &(0x7f0000000080)=0x18) 17:43:13 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, r1, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:13 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x11, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func, @map_fd, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:13 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, r1, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:13 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x10}}, 0x10) 17:43:13 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, 0x0, 0x0) 17:43:13 executing program 4: syz_io_uring_setup(0x1789, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x88000, 0x0) read$usbfs(r0, &(0x7f0000000180)=""/121, 0x79) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 17:43:13 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) read$rfkill(r0, &(0x7f0000000040), 0x8) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 17:43:13 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, 0x0, 0x0) 17:43:13 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, r1, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:13 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x0, {0xa, 0x4e20, 0x2, @mcast1, 0xfffffffb}}}, 0x38) 17:43:13 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x11, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func, @map_fd, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:13 executing program 4: syz_io_uring_setup(0x1789, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x88000, 0x0) read$usbfs(r0, &(0x7f0000000180)=""/121, 0x79) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 17:43:13 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) read$rfkill(r0, &(0x7f0000000040), 0x8) 17:43:13 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, r1, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:13 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x12, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func, @map_fd, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:13 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x10, 0x3, @in={0x2, 0x4e22, @local}}}, 0xa0) 17:43:13 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x0, {0xa, 0x4e20, 0x2, @mcast1, 0xfffffffb}}}, 0x38) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x0, {0xa, 0x4e20, 0x2, @mcast1, 0xfffffffb}}}, 0x38) (async) 17:43:13 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, 0xffffffffffffffff, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:13 executing program 4: syz_io_uring_setup(0x1789, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x88000, 0x0) read$usbfs(r0, &(0x7f0000000180)=""/121, 0x79) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) syz_io_uring_setup(0x1789, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x88000, 0x0) (async) read$usbfs(r0, &(0x7f0000000180)=""/121, 0x79) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) 17:43:13 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x10, 0x3, @in={0x2, 0x4e22, @local}}}, 0xa0) 17:43:13 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func, @map_fd, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:13 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, 0xffffffffffffffff, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:13 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) socket(0x0, 0x0, 0x3ff) read$rfkill(r0, &(0x7f0000000040), 0x8) 17:43:13 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) gettid() syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 17:43:13 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x0, {0xa, 0x4e20, 0x2, @mcast1, 0xfffffffb}}}, 0x38) 17:43:13 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, @in={0x2, 0x4e22, @local}}}, 0xa0) 17:43:13 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, @in={0x2, 0x4e22, @local}}}, 0xa0) 17:43:13 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func, @map_fd, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:13 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, 0xffffffffffffffff, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:13 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) read$rfkill(r0, &(0x7f0000000040), 0x8) 17:43:13 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func, @map_fd, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:13 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) gettid() (async, rerun: 64) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (rerun: 64) 17:43:13 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, r2}}, 0x18) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000340)={0xb, 0x10, 0xfa00, {0xfffffffffffffffe, r4, 0x9f1}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000140)={0x4, 0x8, 0xfa00, {r5, 0x6}}, 0x10) 17:43:13 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, 0xffffffffffffffff, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:13 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) read$rfkill(r0, &(0x7f0000000040), 0x8) 17:43:13 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, @in={0x2, 0x4e22, @local}}}, 0xa0) 17:43:13 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x12, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x1}, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func, @map_fd, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:13 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, r2}}, 0x18) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000340)={0xb, 0x10, 0xfa00, {0xfffffffffffffffe, r4, 0x9f1}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000140)={0x4, 0x8, 0xfa00, {r5, 0x6}}, 0x10) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, r2}}, 0x18) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000340)={0xb, 0x10, 0xfa00, {0xfffffffffffffffe, r4, 0x9f1}}, 0x18) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000140)={0x4, 0x8, 0xfa00, {r5, 0x6}}, 0x10) (async) 17:43:13 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, 0xffffffffffffffff, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:13 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x12, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func, @map_fd, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:13 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) 17:43:13 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, r2}}, 0x18) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000340)={0xb, 0x10, 0xfa00, {0xfffffffffffffffe, r4, 0x9f1}}, 0x18) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000140)={0x4, 0x8, 0xfa00, {r5, 0x6}}, 0x10) 17:43:13 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e22, @local}}}, 0xa0) 17:43:14 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) gettid() (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 17:43:14 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, 0xffffffffffffffff, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:14 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @cb_func, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func, @map_fd, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:14 executing program 3: read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) 17:43:14 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e22, @local}}}, 0xa0) 17:43:14 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x65, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x2b) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) 17:43:14 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x65, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x2b) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) 17:43:14 executing program 3: read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) 17:43:14 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xe, &(0x7f00000000c0)=@framed={{}, [@cb_func, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func, @map_fd, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:14 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, 0xffffffffffffffff, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:14 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e22, @local}}}, 0xa0) 17:43:14 executing program 3: read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) 17:43:14 executing program 4: syz_io_uring_setup(0x7c1a, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 17:43:14 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x10, 0x3, @in={0x2, 0x0, @local}}}, 0xa0) 17:43:14 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x65, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x2b) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) 17:43:14 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, 0xffffffffffffffff, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:14 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xe, &(0x7f00000000c0)=@framed={{}, [@cb_func, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func, @map_fd, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:14 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) read$eventfd(r0, &(0x7f0000000140), 0x55) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) r2 = io_uring_setup(0x125d, &(0x7f0000000180)={0x0, 0x9c24, 0x10, 0x0, 0x100, 0x0, r0}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x6}}, '.\x00'}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r0, 0x1) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r5, 0x7}}, 0x10) 17:43:14 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) 17:43:14 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, 0xffffffffffffffff, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:14 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xe, &(0x7f00000000c0)=@framed={{}, [@cb_func, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func, @map_fd, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:14 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x12, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func, @map_fd, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:14 executing program 4: syz_io_uring_setup(0x7c1a, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 17:43:14 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) read$eventfd(r0, &(0x7f0000000140), 0x55) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) r2 = io_uring_setup(0x125d, &(0x7f0000000180)={0x0, 0x9c24, 0x10, 0x0, 0x100, 0x0, r0}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x6}}, '.\x00'}) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r0, 0x1) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r5, 0x7}}, 0x10) 17:43:14 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) 17:43:14 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f00000000c0)=@framed={{}, [@initr0, @cb_func, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func, @map_fd, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:14 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:14 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x12, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func, @map_fd, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:14 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:14 executing program 4: syz_io_uring_setup(0x7c1a, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 17:43:14 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) 17:43:14 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f00000000c0)=@framed={{}, [@initr0, @cb_func, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func, @map_fd, @map_idx_val]}, 0x0, 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:14 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) read$eventfd(r0, &(0x7f0000000140), 0x55) (async, rerun: 32) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async, rerun: 32) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) (async) r2 = io_uring_setup(0x125d, &(0x7f0000000180)={0x0, 0x9c24, 0x10, 0x0, 0x100, 0x0, r0}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x6}}, '.\x00'}) (async, rerun: 32) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r0, 0x1) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r5, 0x7}}, 0x10) 17:43:14 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x12, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func, @map_fd, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:14 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:14 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f00000000c0)=@framed={{}, [@initr0, @cb_func, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func, @map_fd, @map_idx_val]}, 0x0, 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:14 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0)={0x0, 0x1, 0x2, 0x0, 0x397, 0x0, r2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000180)) 17:43:14 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) 17:43:14 executing program 1: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 17:43:14 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000000c0)}}, 0x10) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x450101, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) 17:43:14 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f00000000c0)=@framed={{}, [@initr0, @cb_func, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func, @map_fd, @map_idx_val]}, 0x0, 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:14 executing program 1: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 17:43:14 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0xc8, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, 0xffffffffffffffff, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:14 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) 17:43:14 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) (async) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0)={0x0, 0x1, 0x2, 0x0, 0x397, 0x0, r2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000180)) 17:43:14 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f00000000c0)=@framed={{}, [@initr0, @cb_func, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func, @map_fd, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x0, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:14 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private0, 0x6}, {0xa, 0x4e21, 0x1, @local, 0x63}, 0xffffffffffffffff, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:14 executing program 1: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 17:43:14 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) 17:43:14 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async, rerun: 64) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000000c0)}}, 0x10) (async, rerun: 64) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x450101, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) 17:43:14 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f00000000c0)=@framed={{}, [@initr0, @cb_func, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func, @map_fd, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x0, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:14 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) (async) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0)={0x0, 0x1, 0x2, 0x0, 0x397, 0x0, r2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000180)) 17:43:14 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) 17:43:14 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private0}, {0xa, 0x4e21, 0x1, @local, 0x63}, 0xffffffffffffffff, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:14 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:14 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f00000000c0)=@framed={{}, [@initr0, @cb_func, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func, @map_fd, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x0, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:14 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000000c0)}}, 0x10) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x450101, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000000c0)}}, 0x10) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x450101, 0x0) (async) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) (async) 17:43:14 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x818, &(0x7f0000000140)={0x0, 0xa3fa, 0x2, 0x3}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_POLL_REMOVE, 0x8000) syz_io_uring_submit(r0, r2, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)="dae622313753fffa2995946dafb998a6f93b775c39f9cc3aaa53381a97891f596d9a65e64e1078edfcbb641d641a7b6393794d83d30f0f13ae3d13e6ca17c06267ef9bd3975b0bd6900fd666c51f81fd795f387f382fb0c83d0c913bd8ef4e4d80b9f3cb8014c6149e41b7c958a519b19d4339f4cafc0cee56b3f36a918ae506718cd75a00938cb7ca8988b057ea0e6ffbc9a515eab2fb000f039468722a32b04b1a83b8e1f185099dc2203f5310ba6207b7a4dba2b73c5e1793103b3ffbb4", 0x7, 0x0, 0x0, {0x1}}, 0x25d) 17:43:14 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) 17:43:14 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private0}, {0xa, 0x0, 0x1, @local, 0x63}, 0xffffffffffffffff, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:14 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f00000000c0)=@framed={{}, [@initr0, @cb_func, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func, @map_fd, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:14 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:14 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) 17:43:14 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f00000000c0)=@framed={{}, [@initr0, @cb_func, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func, @map_fd, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:14 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:14 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) 17:43:14 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @local, 0x63}, 0xffffffffffffffff, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:14 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) (async) 17:43:14 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x818, &(0x7f0000000140)={0x0, 0xa3fa, 0x2, 0x3}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_POLL_REMOVE, 0x8000) syz_io_uring_submit(r0, r2, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)="dae622313753fffa2995946dafb998a6f93b775c39f9cc3aaa53381a97891f596d9a65e64e1078edfcbb641d641a7b6393794d83d30f0f13ae3d13e6ca17c06267ef9bd3975b0bd6900fd666c51f81fd795f387f382fb0c83d0c913bd8ef4e4d80b9f3cb8014c6149e41b7c958a519b19d4339f4cafc0cee56b3f36a918ae506718cd75a00938cb7ca8988b057ea0e6ffbc9a515eab2fb000f039468722a32b04b1a83b8e1f185099dc2203f5310ba6207b7a4dba2b73c5e1793103b3ffbb4", 0x7, 0x0, 0x0, {0x1}}, 0x25d) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) syz_io_uring_setup(0x818, &(0x7f0000000140)={0x0, 0xa3fa, 0x2, 0x3}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) (async) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_POLL_REMOVE, 0x8000) (async) syz_io_uring_submit(r0, r2, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)="dae622313753fffa2995946dafb998a6f93b775c39f9cc3aaa53381a97891f596d9a65e64e1078edfcbb641d641a7b6393794d83d30f0f13ae3d13e6ca17c06267ef9bd3975b0bd6900fd666c51f81fd795f387f382fb0c83d0c913bd8ef4e4d80b9f3cb8014c6149e41b7c958a519b19d4339f4cafc0cee56b3f36a918ae506718cd75a00938cb7ca8988b057ea0e6ffbc9a515eab2fb000f039468722a32b04b1a83b8e1f185099dc2203f5310ba6207b7a4dba2b73c5e1793103b3ffbb4", 0x7, 0x0, 0x0, {0x1}}, 0x25d) (async) 17:43:14 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f00000000c0)=@framed={{}, [@initr0, @cb_func, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func, @map_fd, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:14 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func, @map_fd]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:14 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) read$rfkill(r0, 0x0, 0x0) 17:43:14 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f00000000c0)=@framed={{}, [@initr0, @cb_func, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func, @map_fd, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:14 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @local}, 0xffffffffffffffff, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:14 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) 17:43:14 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xe, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:14 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) read$rfkill(r0, 0x0, 0x0) 17:43:14 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @local}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:14 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004840}, 0x475c9874010b87fe) epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000140)={r3, r4+10000000}, &(0x7f0000000180)={[0x9]}, 0x8) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0xfffffffffffffe2a, 0xfa00, {0x0, r2, 0x1}}, 0x18) 17:43:14 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f00000000c0)=@framed={{}, [@initr0, @cb_func, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func, @map_fd, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:14 executing program 4: syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) syz_io_uring_setup(0x1a6c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)) (async) syz_io_uring_setup(0x818, &(0x7f0000000140)={0x0, 0xa3fa, 0x2, 0x3}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_POLL_REMOVE, 0x8000) syz_io_uring_submit(r0, r2, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)="dae622313753fffa2995946dafb998a6f93b775c39f9cc3aaa53381a97891f596d9a65e64e1078edfcbb641d641a7b6393794d83d30f0f13ae3d13e6ca17c06267ef9bd3975b0bd6900fd666c51f81fd795f387f382fb0c83d0c913bd8ef4e4d80b9f3cb8014c6149e41b7c958a519b19d4339f4cafc0cee56b3f36a918ae506718cd75a00938cb7ca8988b057ea0e6ffbc9a515eab2fb000f039468722a32b04b1a83b8e1f185099dc2203f5310ba6207b7a4dba2b73c5e1793103b3ffbb4", 0x7, 0x0, 0x0, {0x1}}, 0x25d) 17:43:14 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:14 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @local}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:14 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000000c0)}}, 0x10) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x450101, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) 17:43:14 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f00000000c0)=@framed={{}, [@initr0, @cb_func, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func, @map_fd, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:14 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, 0x0, 0x0) (async) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004840}, 0x475c9874010b87fe) epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000140)={r3, r4+10000000}, &(0x7f0000000180)={[0x9]}, 0x8) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0xfffffffffffffe2a, 0xfa00, {0x0, r2, 0x1}}, 0x18) 17:43:14 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:14 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @local}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:14 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, 0x0, 0x0) (async) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004840}, 0x475c9874010b87fe) epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000140)={r3, r4+10000000}, &(0x7f0000000180)={[0x9]}, 0x8) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0xfffffffffffffe2a, 0xfa00, {0x0, r2, 0x1}}, 0x18) 17:43:14 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f00000000c0)=@framed={{}, [@initr0, @cb_func, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func, @map_fd, @map_idx_val]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:43:14 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) read$rfkill(r0, &(0x7f0000000040), 0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r3, r0}}, 0x18) 17:43:14 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @local}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:14 executing program 4: perf_event_open$cgroup(&(0x7f0000000000)={0x3, 0x80, 0x8, 0xc0, 0x1, 0x9, 0x0, 0x8, 0x14082, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x61ec, 0x2, @perf_config_ext={0x4, 0x1}, 0x4800, 0xd43, 0x5, 0x0, 0xffffffffffff1935, 0x0, 0xfffa, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, {0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, r2, 0x4ab3}}, 0x48) 17:43:14 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:14 executing program 0: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$selinux_attr(r1, &(0x7f0000000040)='system_u:object_r:scsi_generic_device_t:s0\x00', 0x2b) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r5, 0x1, 0x0, 0x0, 0x0, @ib={0x1b, 0x0, 0x2, {"6c6711275e155edf1f4cb40fb4a3abcc"}, 0x5, 0x3ff, 0x7c46b6e4}, @in={0x2, 0x800, @multicast2}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, r3}}, 0x18) 17:43:14 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @local}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 17:43:14 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0x9, &(0x7f0000000040)='/dev/bsg\x00'}, 0x30) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) r4 = gettid() ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9545}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x49}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x800) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r4, 0x7, 0xffffffffffffffff, 0x0) r6 = gettid() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r6, 0x7, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[r2, r1, r3, r4, r6], 0x5, {r0}}, 0x58) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:14 executing program 4: perf_event_open$cgroup(&(0x7f0000000000)={0x3, 0x80, 0x8, 0xc0, 0x1, 0x9, 0x0, 0x8, 0x14082, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x61ec, 0x2, @perf_config_ext={0x4, 0x1}, 0x4800, 0xd43, 0x5, 0x0, 0xffffffffffff1935, 0x0, 0xfffa, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) (async) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, {0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, r2, 0x4ab3}}, 0x48) 17:43:14 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) read$rfkill(r0, &(0x7f0000000040), 0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r3, r0}}, 0x18) 17:43:14 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func, @cb_func]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:14 executing program 0: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$selinux_attr(r1, &(0x7f0000000040)='system_u:object_r:scsi_generic_device_t:s0\x00', 0x2b) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async, rerun: 64) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (rerun: 64) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r5, 0x1, 0x0, 0x0, 0x0, @ib={0x1b, 0x0, 0x2, {"6c6711275e155edf1f4cb40fb4a3abcc"}, 0x5, 0x3ff, 0x7c46b6e4}, @in={0x2, 0x800, @multicast2}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, r3}}, 0x18) 17:43:14 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @local}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 17:43:14 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) read$rfkill(r0, &(0x7f0000000040), 0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r3, r0}}, 0x18) 17:43:14 executing program 4: perf_event_open$cgroup(&(0x7f0000000000)={0x3, 0x80, 0x8, 0xc0, 0x1, 0x9, 0x0, 0x8, 0x14082, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x61ec, 0x2, @perf_config_ext={0x4, 0x1}, 0x4800, 0xd43, 0x5, 0x0, 0xffffffffffff1935, 0x0, 0xfffa, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, {0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, r2, 0x4ab3}}, 0x48) perf_event_open$cgroup(&(0x7f0000000000)={0x3, 0x80, 0x8, 0xc0, 0x1, 0x9, 0x0, 0x8, 0x14082, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x61ec, 0x2, @perf_config_ext={0x4, 0x1}, 0x4800, 0xd43, 0x5, 0x0, 0xffffffffffff1935, 0x0, 0xfffa, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) (async) syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, {0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, r2, 0x4ab3}}, 0x48) (async) 17:43:14 executing program 0: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$selinux_attr(r1, &(0x7f0000000040)='system_u:object_r:scsi_generic_device_t:s0\x00', 0x2b) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r5, 0x1, 0x0, 0x0, 0x0, @ib={0x1b, 0x0, 0x2, {"6c6711275e155edf1f4cb40fb4a3abcc"}, 0x5, 0x3ff, 0x7c46b6e4}, @in={0x2, 0x800, @multicast2}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, r3}}, 0x18) 17:43:14 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @local}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 17:43:14 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0x9, &(0x7f0000000040)='/dev/bsg\x00'}, 0x30) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) r4 = gettid() ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9545}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x49}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x800) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r4, 0x7, 0xffffffffffffffff, 0x0) r6 = gettid() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r6, 0x7, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[r2, r1, r3, r4, r6], 0x5, {r0}}, 0x58) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:14 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func, @cb_func]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:14 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2304, 0x80000001, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x440603, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000040)=0x5) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000080)) 17:43:14 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) read$rfkill(r0, &(0x7f0000000040), 0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100), 0x13f, 0x9}}, 0x20) 17:43:14 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @local}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 17:43:14 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func, @cb_func]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:14 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000000040)=0x200) 17:43:14 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @local}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x5}}, 0x20) 17:43:14 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x906, 0x1}}, './file0\x00'}) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:14 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0x9, &(0x7f0000000040)='/dev/bsg\x00'}, 0x30) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) r4 = gettid() ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9545}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x49}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x800) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r4, 0x7, 0xffffffffffffffff, 0x0) r6 = gettid() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r6, 0x7, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[r2, r1, r3, r4, r6], 0x5, {r0}}, 0x58) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:14 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000000040)=0x200) 17:43:14 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xe, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func, @cb_func, @cb_func]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:14 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x906, 0x1}}, './file0\x00'}) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:14 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) read$rfkill(r0, &(0x7f0000000040), 0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100), 0x13f, 0x9}}, 0x20) 17:43:14 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xe, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func, @cb_func, @cb_func]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:14 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000000040)=0x200) 17:43:14 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @local}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x5}}, 0x20) 17:43:14 executing program 4: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x7c57, &(0x7f00000001c0)) r2 = syz_io_uring_setup(0xc88, &(0x7f0000000000)={0x0, 0x431a, 0x0, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000540)) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x100001, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x583000, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, r1, 0x0, &(0x7f00000000c0)="4f62ee576977cd329e0b7f344e6e59717fb438920b223d2baff71364c64ae31685210ec6d558fe0d48ef79737fba20bd0eefeea14de16aa0495a96f5dacebb71a950374783e1eecfa2d7f352c4a02cd79fc3325c9368ec65856d16b84974a1987d29d0e6d25d098a986cb538cf878e9e4602cf815663c1d712b7aafceabb9d3b23b9388f4393ee39951c0739bfe13a39c75d6158ced4ef26cf2935c6ee9cc7ad02bd817bd677eb3461b260d761c1aed06199ad97cdba", 0xb6, 0x2121, 0x1, {0x0, r6}}, 0x20) r7 = io_uring_setup(0x3df4, &(0x7f00000002c0)={0x0, 0x6588, 0x8, 0x1, 0x206, 0x0, r5}) io_uring_setup(0x7f77, &(0x7f0000000340)={0x0, 0x737e, 0x20, 0x1, 0x1e0, 0x0, r7}) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) mq_timedsend(0xffffffffffffffff, &(0x7f00000003c0)="33bb495eae61869ae26b28aef621a096665ee89fbb19fdccff309e796562384f046a0b6c144dd7398ba488b1ad8e0021080ffd6175ec30d758f897f8e7cab00cfc2b5745d7305fb9ae11e1c0e62a88d85a839a2074d739c2f28aa6906d73d3d9d02018c7b2c717a77714963fb5c30beb0d2c937ec2f463706d640e6b933dea9602f488ae26bf45940b5cebe9ce35d4156889f0959b42d18f7d2e7d2b052ebff2bb7419e69fc56a3d29ebcedff67767fd088900fd9be75c0e2eb1ff39cb2476d5e0508276b0595d063ec4bd28411fdc654967617f91ff47a52baa19dc3e7e0ab85720", 0xe2, 0xffff, &(0x7f0000000500)={r8, r9+60000000}) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:14 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xe, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @func, @cb_func, @cb_func]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:14 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @local}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 17:43:14 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0x9, &(0x7f0000000040)='/dev/bsg\x00'}, 0x30) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) r4 = gettid() ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9545}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x49}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x800) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r4, 0x7, 0xffffffffffffffff, 0x0) r6 = gettid() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r6, 0x7, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[r2, r1, r3, r4, r6], 0x5, {r0}}, 0x58) 17:43:14 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000040)=0x1) 17:43:14 executing program 4: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x7c57, &(0x7f00000001c0)) r2 = syz_io_uring_setup(0xc88, &(0x7f0000000000)={0x0, 0x431a, 0x0, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000540)) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x100001, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x583000, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, r1, 0x0, &(0x7f00000000c0)="4f62ee576977cd329e0b7f344e6e59717fb438920b223d2baff71364c64ae31685210ec6d558fe0d48ef79737fba20bd0eefeea14de16aa0495a96f5dacebb71a950374783e1eecfa2d7f352c4a02cd79fc3325c9368ec65856d16b84974a1987d29d0e6d25d098a986cb538cf878e9e4602cf815663c1d712b7aafceabb9d3b23b9388f4393ee39951c0739bfe13a39c75d6158ced4ef26cf2935c6ee9cc7ad02bd817bd677eb3461b260d761c1aed06199ad97cdba", 0xb6, 0x2121, 0x1, {0x0, r6}}, 0x20) r7 = io_uring_setup(0x3df4, &(0x7f00000002c0)={0x0, 0x6588, 0x8, 0x1, 0x206, 0x0, r5}) io_uring_setup(0x7f77, &(0x7f0000000340)={0x0, 0x737e, 0x20, 0x1, 0x1e0, 0x0, r7}) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) mq_timedsend(0xffffffffffffffff, &(0x7f00000003c0)="33bb495eae61869ae26b28aef621a096665ee89fbb19fdccff309e796562384f046a0b6c144dd7398ba488b1ad8e0021080ffd6175ec30d758f897f8e7cab00cfc2b5745d7305fb9ae11e1c0e62a88d85a839a2074d739c2f28aa6906d73d3d9d02018c7b2c717a77714963fb5c30beb0d2c937ec2f463706d640e6b933dea9602f488ae26bf45940b5cebe9ce35d4156889f0959b42d18f7d2e7d2b052ebff2bb7419e69fc56a3d29ebcedff67767fd088900fd9be75c0e2eb1ff39cb2476d5e0508276b0595d063ec4bd28411fdc654967617f91ff47a52baa19dc3e7e0ab85720", 0xe2, 0xffff, &(0x7f0000000500)={r8, r9+60000000}) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:14 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) read$rfkill(r0, &(0x7f0000000040), 0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100), 0x13f, 0x9}}, 0x20) 17:43:14 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:14 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000040)=0x1) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000040)=0x1) (async) 17:43:14 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @local}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 17:43:14 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0x9, &(0x7f0000000040)='/dev/bsg\x00'}, 0x30) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) r4 = gettid() ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9545}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x49}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x800) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r4, 0x7, 0xffffffffffffffff, 0x0) r6 = gettid() syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[r2, r1, r3, r4, r6], 0x5, {r0}}, 0x58) 17:43:14 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:14 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) read$rfkill(r0, &(0x7f0000000040), 0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) 17:43:14 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000040)=0x1) 17:43:14 executing program 2: r0 = syz_io_uring_setup(0x5edc, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x81a6c, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080), 0x1) 17:43:14 executing program 4: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x7c57, &(0x7f00000001c0)) r2 = syz_io_uring_setup(0xc88, &(0x7f0000000000)={0x0, 0x431a, 0x0, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000540)) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x100001, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x583000, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, r1, 0x0, &(0x7f00000000c0)="4f62ee576977cd329e0b7f344e6e59717fb438920b223d2baff71364c64ae31685210ec6d558fe0d48ef79737fba20bd0eefeea14de16aa0495a96f5dacebb71a950374783e1eecfa2d7f352c4a02cd79fc3325c9368ec65856d16b84974a1987d29d0e6d25d098a986cb538cf878e9e4602cf815663c1d712b7aafceabb9d3b23b9388f4393ee39951c0739bfe13a39c75d6158ced4ef26cf2935c6ee9cc7ad02bd817bd677eb3461b260d761c1aed06199ad97cdba", 0xb6, 0x2121, 0x1, {0x0, r6}}, 0x20) r7 = io_uring_setup(0x3df4, &(0x7f00000002c0)={0x0, 0x6588, 0x8, 0x1, 0x206, 0x0, r5}) io_uring_setup(0x7f77, &(0x7f0000000340)={0x0, 0x737e, 0x20, 0x1, 0x1e0, 0x0, r7}) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) mq_timedsend(0xffffffffffffffff, &(0x7f00000003c0)="33bb495eae61869ae26b28aef621a096665ee89fbb19fdccff309e796562384f046a0b6c144dd7398ba488b1ad8e0021080ffd6175ec30d758f897f8e7cab00cfc2b5745d7305fb9ae11e1c0e62a88d85a839a2074d739c2f28aa6906d73d3d9d02018c7b2c717a77714963fb5c30beb0d2c937ec2f463706d640e6b933dea9602f488ae26bf45940b5cebe9ce35d4156889f0959b42d18f7d2e7d2b052ebff2bb7419e69fc56a3d29ebcedff67767fd088900fd9be75c0e2eb1ff39cb2476d5e0508276b0595d063ec4bd28411fdc654967617f91ff47a52baa19dc3e7e0ab85720", 0xe2, 0xffff, &(0x7f0000000500)={r8, r9+60000000}) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:14 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:14 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) read$rfkill(r0, &(0x7f0000000040), 0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) 17:43:14 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0x9, &(0x7f0000000040)='/dev/bsg\x00'}, 0x30) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) r4 = gettid() ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9545}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x49}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x800) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r4, 0x7, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[r2, r1, r3, r4, 0x0], 0x5, {r0}}, 0x58) 17:43:14 executing program 4: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x7c57, &(0x7f00000001c0)) r2 = syz_io_uring_setup(0xc88, &(0x7f0000000000)={0x0, 0x431a, 0x0, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000540)) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x100001, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x583000, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, r1, 0x0, &(0x7f00000000c0)="4f62ee576977cd329e0b7f344e6e59717fb438920b223d2baff71364c64ae31685210ec6d558fe0d48ef79737fba20bd0eefeea14de16aa0495a96f5dacebb71a950374783e1eecfa2d7f352c4a02cd79fc3325c9368ec65856d16b84974a1987d29d0e6d25d098a986cb538cf878e9e4602cf815663c1d712b7aafceabb9d3b23b9388f4393ee39951c0739bfe13a39c75d6158ced4ef26cf2935c6ee9cc7ad02bd817bd677eb3461b260d761c1aed06199ad97cdba", 0xb6, 0x2121, 0x1, {0x0, r6}}, 0x20) r7 = io_uring_setup(0x3df4, &(0x7f00000002c0)={0x0, 0x6588, 0x8, 0x1, 0x206, 0x0, r5}) io_uring_setup(0x7f77, &(0x7f0000000340)={0x0, 0x737e, 0x20, 0x1, 0x1e0, 0x0, r7}) clock_gettime(0x0, &(0x7f00000004c0)) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:14 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0x9, &(0x7f0000000040)='/dev/bsg\x00'}, 0x30) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) r4 = gettid() ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9545}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x49}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x800) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r4, 0x7, 0xffffffffffffffff, 0x0) r6 = gettid() syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[r2, r1, r3, r4, r6], 0x5, {r0}}, 0x58) 17:43:14 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000140)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xd}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd=r1, 0xe6, {0x0, r0}, 0x6, 0x3, 0x0, {0x0, 0x0, r3}}, 0x2ce2) 17:43:14 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:14 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:15 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) read$rfkill(r0, &(0x7f0000000040), 0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) 17:43:15 executing program 4: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x7c57, &(0x7f00000001c0)) r2 = syz_io_uring_setup(0xc88, &(0x7f0000000000)={0x0, 0x431a, 0x0, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000540)) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x100001, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x583000, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, r1, 0x0, &(0x7f00000000c0)="4f62ee576977cd329e0b7f344e6e59717fb438920b223d2baff71364c64ae31685210ec6d558fe0d48ef79737fba20bd0eefeea14de16aa0495a96f5dacebb71a950374783e1eecfa2d7f352c4a02cd79fc3325c9368ec65856d16b84974a1987d29d0e6d25d098a986cb538cf878e9e4602cf815663c1d712b7aafceabb9d3b23b9388f4393ee39951c0739bfe13a39c75d6158ced4ef26cf2935c6ee9cc7ad02bd817bd677eb3461b260d761c1aed06199ad97cdba", 0xb6, 0x2121, 0x1, {0x0, r6}}, 0x20) r7 = io_uring_setup(0x3df4, &(0x7f00000002c0)={0x0, 0x6588, 0x8, 0x1, 0x206, 0x0, r5}) io_uring_setup(0x7f77, &(0x7f0000000340)={0x0, 0x737e, 0x20, 0x1, 0x1e0, 0x0, r7}) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:15 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0x9, &(0x7f0000000040)='/dev/bsg\x00'}, 0x30) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) r4 = gettid() ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9545}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x49}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x800) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[r2, r1, r3, r4, 0x0], 0x5, {r0}}, 0x58) 17:43:15 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) (async, rerun: 32) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000140)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xd}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd=r1, 0xe6, {0x0, r0}, 0x6, 0x3, 0x0, {0x0, 0x0, r3}}, 0x2ce2) 17:43:15 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0x9, &(0x7f0000000040)='/dev/bsg\x00'}, 0x30) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) r4 = gettid() ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9545}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x49}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x800) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r4, 0x7, 0xffffffffffffffff, 0x0) r6 = gettid() syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[r2, r1, r3, r4, r6], 0x5, {r0}}, 0x58) 17:43:15 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:15 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) (async, rerun: 64) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) (rerun: 64) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000140)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xd}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd=r1, 0xe6, {0x0, r0}, 0x6, 0x3, 0x0, {0x0, 0x0, r3}}, 0x2ce2) 17:43:15 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) read$rfkill(r0, &(0x7f0000000040), 0x8) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 17:43:15 executing program 4: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x7c57, &(0x7f00000001c0)) r2 = syz_io_uring_setup(0xc88, &(0x7f0000000000)={0x0, 0x431a, 0x0, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000540)) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x100001, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x583000, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, r1, 0x0, &(0x7f00000000c0)="4f62ee576977cd329e0b7f344e6e59717fb438920b223d2baff71364c64ae31685210ec6d558fe0d48ef79737fba20bd0eefeea14de16aa0495a96f5dacebb71a950374783e1eecfa2d7f352c4a02cd79fc3325c9368ec65856d16b84974a1987d29d0e6d25d098a986cb538cf878e9e4602cf815663c1d712b7aafceabb9d3b23b9388f4393ee39951c0739bfe13a39c75d6158ced4ef26cf2935c6ee9cc7ad02bd817bd677eb3461b260d761c1aed06199ad97cdba", 0xb6, 0x2121, 0x1, {0x0, r6}}, 0x20) io_uring_setup(0x3df4, &(0x7f00000002c0)={0x0, 0x6588, 0x8, 0x1, 0x206, 0x0, r5}) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:15 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0x9, &(0x7f0000000040)='/dev/bsg\x00'}, 0x30) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) r4 = gettid() ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[r2, r1, r3, r4, 0x0], 0x5, {r0}}, 0x58) 17:43:15 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xe, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x1}, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:15 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0x9, &(0x7f0000000040)='/dev/bsg\x00'}, 0x30) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) r4 = gettid() ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9545}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x49}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x800) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r4, 0x7, 0xffffffffffffffff, 0x0) r6 = gettid() syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[r2, r1, r3, r4, r6], 0x5, {r0}}, 0x58) 17:43:15 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0x9, &(0x7f0000000040)='/dev/bsg\x00'}, 0x30) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) r4 = gettid() syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[r2, r1, r3, r4, 0x0], 0x5, {r0}}, 0x58) 17:43:15 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) r1 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) read$rfkill(r0, &(0x7f0000000040), 0x8) 17:43:15 executing program 4: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x7c57, &(0x7f00000001c0)) r2 = syz_io_uring_setup(0xc88, &(0x7f0000000000)={0x0, 0x431a, 0x0, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000540)) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x100001, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x583000, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, r1, 0x0, &(0x7f00000000c0)="4f62ee576977cd329e0b7f344e6e59717fb438920b223d2baff71364c64ae31685210ec6d558fe0d48ef79737fba20bd0eefeea14de16aa0495a96f5dacebb71a950374783e1eecfa2d7f352c4a02cd79fc3325c9368ec65856d16b84974a1987d29d0e6d25d098a986cb538cf878e9e4602cf815663c1d712b7aafceabb9d3b23b9388f4393ee39951c0739bfe13a39c75d6158ced4ef26cf2935c6ee9cc7ad02bd817bd677eb3461b260d761c1aed06199ad97cdba", 0xb6, 0x2121, 0x1, {0x0, r6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:15 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004800}, 0x24000000) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:15 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xe, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @cb_func, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:15 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) socket(0x0, 0x0, 0x3ff) read$rfkill(r0, &(0x7f0000000040), 0x8) 17:43:15 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004800}, 0x24000000) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:15 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0x9, &(0x7f0000000040)='/dev/bsg\x00'}, 0x30) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[r2, r1, r3, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:15 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f00000000c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @cb_func, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:15 executing program 4: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x7c57, &(0x7f00000001c0)) r1 = syz_io_uring_setup(0xc88, &(0x7f0000000000)={0x0, 0x431a, 0x0, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000540)) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x100001, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x583000, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r5) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:15 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0x9, &(0x7f0000000040)='/dev/bsg\x00'}, 0x30) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) r4 = gettid() ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9545}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x49}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x800) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r4, 0x7, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[r2, r1, r3, r4, 0x0], 0x5, {r0}}, 0x58) 17:43:15 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) read$rfkill(r0, &(0x7f0000000040), 0x8) 17:43:15 executing program 4: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x7c57, &(0x7f00000001c0)) syz_io_uring_setup(0xc88, &(0x7f0000000000)={0x0, 0x431a, 0x0, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000540)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x100001, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x583000, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:15 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) read$rfkill(r0, &(0x7f0000000040), 0x8) 17:43:15 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xa, &(0x7f00000000c0)=@framed={{}, [@cb_func, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:15 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004800}, 0x24000000) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004800}, 0x24000000) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) 17:43:15 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0x9, &(0x7f0000000040)='/dev/bsg\x00'}, 0x30) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) r4 = gettid() ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9545}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x49}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x800) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[r2, r1, r3, r4, 0x0], 0x5, {r0}}, 0x58) 17:43:15 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0x9, &(0x7f0000000040)='/dev/bsg\x00'}, 0x30) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[r2, r1, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:15 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xa, &(0x7f00000000c0)=@framed={{}, [@cb_func, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:15 executing program 4: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x7c57, &(0x7f00000001c0)) syz_io_uring_setup(0xc88, &(0x7f0000000000)={0x0, 0x431a, 0x0, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000540)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x100001, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x583000, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:15 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffff000) read$rfkill(r0, &(0x7f0000000040), 0x8) 17:43:15 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) gettid() 17:43:15 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0x9, &(0x7f0000000040)='/dev/bsg\x00'}, 0x30) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, r1, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:15 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0x9, &(0x7f0000000040)='/dev/bsg\x00'}, 0x30) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) r4 = gettid() ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[r2, r1, r3, r4, 0x0], 0x5, {r0}}, 0x58) 17:43:15 executing program 4: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x7c57, &(0x7f00000001c0)) syz_io_uring_setup(0xc88, &(0x7f0000000000)={0x0, 0x431a, 0x0, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000540)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x100001, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x583000, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:15 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) gettid() 17:43:15 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xa, &(0x7f00000000c0)=@framed={{}, [@cb_func, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:15 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) socket(0x0, 0x0, 0x3ff) read$rfkill(r0, &(0x7f0000000040), 0x8) 17:43:15 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0x9, &(0x7f0000000040)='/dev/bsg\x00'}, 0x30) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) r4 = gettid() syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[r2, r1, r3, r4, 0x0], 0x5, {r0}}, 0x58) 17:43:15 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f00000000c0)=@framed={{}, [@initr0, @cb_func, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:15 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) gettid() 17:43:15 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, r1, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:15 executing program 4: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x7c57, &(0x7f00000001c0)) syz_io_uring_setup(0xc88, &(0x7f0000000000)={0x0, 0x431a, 0x0, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000540)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x100001, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x583000, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:15 executing program 3: socket(0x0, 0x0, 0x3ff) read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) 17:43:15 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000180)) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, &(0x7f0000000140)=0xfffffffffffffffe) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:15 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0x9, &(0x7f0000000040)='/dev/bsg\x00'}, 0x30) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[r2, r1, r3, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:15 executing program 4: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x7c57, &(0x7f00000001c0)) syz_io_uring_setup(0xc88, &(0x7f0000000000)={0x0, 0x431a, 0x0, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000540)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x100001, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x583000, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:15 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f00000000c0)=@framed={{}, [@initr0, @cb_func, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func]}, 0x0, 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:15 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:15 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f00000000c0)=@framed={{}, [@initr0, @cb_func, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func]}, 0x0, 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:15 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0x9, &(0x7f0000000040)='/dev/bsg\x00'}, 0x30) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[r2, r1, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:15 executing program 3: socket(0x0, 0x0, 0x3ff) read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) 17:43:15 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000180)) (async) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) (async) ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, &(0x7f0000000140)=0xfffffffffffffffe) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:15 executing program 4: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x7c57, &(0x7f00000001c0)) syz_io_uring_setup(0xc88, &(0x7f0000000000)={0x0, 0x431a, 0x0, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000540)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x100001, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x583000, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:15 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f00000000c0)=@framed={{}, [@initr0, @cb_func, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func]}, 0x0, 0x1, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:15 executing program 5: syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58) 17:43:15 executing program 4: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x7c57, &(0x7f00000001c0)) syz_io_uring_setup(0xc88, &(0x7f0000000000)={0x0, 0x431a, 0x0, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000540)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x100001, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x583000, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:15 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000180)) (async) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) (async) ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, &(0x7f0000000140)=0xfffffffffffffffe) (async) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:15 executing program 3: socket(0x0, 0x0, 0x3ff) read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) 17:43:15 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f00000000c0)=@framed={{}, [@initr0, @cb_func, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func]}, &(0x7f0000000040)='GPL\x00', 0x0, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:15 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0x9, &(0x7f0000000040)='/dev/bsg\x00'}, 0x30) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, r1, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:15 executing program 5: syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58) 17:43:15 executing program 0: perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x5d, 0x6d, 0x1, 0x0, 0x3, 0x8201, 0xf, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0xc}, 0x800, 0x8001, 0x40, 0x0, 0x6, 0x1, 0x800, 0x0, 0xf3c2, 0x0, 0x3}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xa) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000040}, 0xc0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000140), 0x4) 17:43:15 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) socket(0x0, 0x0, 0x3ff) read$rfkill(r0, &(0x7f0000000040), 0x8) 17:43:15 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f00000000c0)=@framed={{}, [@initr0, @cb_func, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func]}, &(0x7f0000000040)='GPL\x00', 0x0, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:15 executing program 4: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x7c57, &(0x7f00000001c0)) syz_io_uring_setup(0xc88, &(0x7f0000000000)={0x0, 0x431a, 0x0, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000540)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x100001, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:15 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, r1, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:15 executing program 5: syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58) 17:43:15 executing program 4: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x7c57, &(0x7f00000001c0)) syz_io_uring_setup(0xc88, &(0x7f0000000000)={0x0, 0x431a, 0x0, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000540)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x100001, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:15 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:15 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f00000000c0)=@framed={{}, [@initr0, @cb_func, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func]}, &(0x7f0000000040)='GPL\x00', 0x0, 0xda, &(0x7f0000000180)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:15 executing program 0: perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x5d, 0x6d, 0x1, 0x0, 0x3, 0x8201, 0xf, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0xc}, 0x800, 0x8001, 0x40, 0x0, 0x6, 0x1, 0x800, 0x0, 0xf3c2, 0x0, 0x3}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xa) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000040}, 0xc0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000140), 0x4) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x5d, 0x6d, 0x1, 0x0, 0x3, 0x8201, 0xf, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0xc}, 0x800, 0x8001, 0x40, 0x0, 0x6, 0x1, 0x800, 0x0, 0xf3c2, 0x0, 0x3}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xa) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000040}, 0xc0) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000140), 0x4) (async) 17:43:15 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) socket(0x0, 0x0, 0x3ff) read$rfkill(r0, &(0x7f0000000040), 0x8) 17:43:15 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:15 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:15 executing program 4: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x7c57, &(0x7f00000001c0)) syz_io_uring_setup(0xc88, &(0x7f0000000000)={0x0, 0x431a, 0x0, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000540)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x100001, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:15 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f00000000c0)=@framed={{}, [@initr0, @cb_func, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:15 executing program 0: perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x5d, 0x6d, 0x1, 0x0, 0x3, 0x8201, 0xf, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0xc}, 0x800, 0x8001, 0x40, 0x0, 0x6, 0x1, 0x800, 0x0, 0xf3c2, 0x0, 0x3}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xa) (async) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async, rerun: 32) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) (async, rerun: 32) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000040}, 0xc0) (async, rerun: 32) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async, rerun: 64) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000140), 0x4) (rerun: 64) 17:43:15 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) socket(0x0, 0x0, 0x3ff) read$rfkill(r0, &(0x7f0000000040), 0x8) 17:43:15 executing program 4: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x7c57, &(0x7f00000001c0)) syz_io_uring_setup(0xc88, &(0x7f0000000000)={0x0, 0x431a, 0x0, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000540)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:15 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:15 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f00000000c0)=@framed={{}, [@initr0, @cb_func, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:15 executing program 2: syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58) 17:43:15 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:15 executing program 4: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x7c57, &(0x7f00000001c0)) syz_io_uring_setup(0xc88, &(0x7f0000000000)={0x0, 0x431a, 0x0, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000540)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:15 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x0, 0x0, 0x3ff) read$rfkill(r0, &(0x7f0000000040), 0x8) 17:43:15 executing program 2: syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58) 17:43:15 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f00000000c0)=@framed={{}, [@initr0, @cb_func, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:15 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000240)=0x80) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x199b82, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f00000000c0)={0x9, 0x1, 0xfa00, {r3, 0x6, "ae168d", "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"}}, 0xcb) 17:43:15 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f00000000c0)=@framed={{}, [@initr0, @cb_func, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:15 executing program 4: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x7c57, &(0x7f00000001c0)) syz_io_uring_setup(0xc88, &(0x7f0000000000)={0x0, 0x431a, 0x0, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000540)) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:15 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x0, 0x0, 0x3ff) read$rfkill(r0, &(0x7f0000000040), 0x8) 17:43:15 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000240)=0x80) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x199b82, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f00000000c0)={0x9, 0x1, 0xfa00, {r3, 0x6, "ae168d", "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"}}, 0xcb) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) (async) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000240)=0x80) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x199b82, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000200), 0x111, 0x9}}, 0x20) (async) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f00000000c0)={0x9, 0x1, 0xfa00, {r3, 0x6, "ae168d", "1a09ed6a465f53af89f7af3bbed555d6cd7a8e42dd19895413b83f00c21c6be1c8c28a8a62a4970f589a5b023127d90635ebe10d4171e0554f3240066057ac56a3e14c62906b5c2a9c0060b1b28ff0d485f1b6e72831f8a6d97ce65174d73ec9e07a83c2b51af1d73e7f2232b28d18ea4a56bf8d35fd1c50087189d94bd6df8d88eda17c219536f696cd8886ea928f13888c13ad9653f4b9cd4a436081542eb85fb8a9236934250f7ecd34f69f67e3e96e0ad50dd009bf8f26683e3b61b0abc5ef0a3bacf5d3c3880369ce96747335a971a94dfd36b4508e381c7be8f182ee466bff529a76081394dc84eb8584dd2a572c4fd3876dad95cc1cbf7108caf32fdd"}}, 0xcb) (async) 17:43:15 executing program 2: syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58) 17:43:15 executing program 5: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(0x0, 0x0) 17:43:15 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f00000000c0)=@framed={{}, [@initr0, @cb_func, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:15 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x0, 0x0, 0x3ff) read$rfkill(r0, &(0x7f0000000040), 0x8) 17:43:15 executing program 4: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x7c57, &(0x7f00000001c0)) syz_io_uring_setup(0xc88, &(0x7f0000000000)={0x0, 0x431a, 0x0, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000540)) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:15 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:15 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f00000000c0)=@framed={{}, [@initr0, @cb_func, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 17:43:15 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) (async, rerun: 32) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000240)=0x80) (rerun: 32) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x199b82, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f00000000c0)={0x9, 0x1, 0xfa00, {r3, 0x6, "ae168d", "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"}}, 0xcb) 17:43:15 executing program 5: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(0x0, 0x0) 17:43:15 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f00000000c0)=@framed={{}, [@initr0, @cb_func, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xda, &(0x7f0000000180)=""/218, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:43:15 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) socket(0x0, 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) 17:43:15 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:15 executing program 4: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x7c57, &(0x7f00000001c0)) syz_io_uring_setup(0xc88, &(0x7f0000000000)={0x0, 0x431a, 0x0, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000540)) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:15 executing program 5: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(0x0, 0x0) 17:43:15 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000003c0)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000380), 0x0, r0, 0x10, 0x1, @in={0x2, 0x4e21, @local}}}, 0xa0) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000a00)={0x6, 0x118, 0xfa00, {{0xffff0001, 0x3, "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", 0x3, 0x1, 0xcc, 0x6, 0x81, 0x90, 0x80}, r4}}, 0x120) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000540)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f00000005c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000500), 0x3, r6, 0x30, 0x1, @in={0x2, 0x4e23, @private=0xa010101}}}, 0xa0) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r7, 0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x2, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000006f09000000fc000002000000c85ff77f1103058c44381b41243fc5ade53326e83460b67fd402c47cca6c32bffec953b7cce81b5246b24775f2a77e31b0f472443d09"], &(0x7f00000000c0)='GPL\x00', 0xc650, 0xbb, &(0x7f0000000100)=""/187, 0x41100, 0x10, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0xd, 0x1, 0xfffffffb}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, r7]}, 0x80) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r8, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_FAIL(r8, 0xc0189377, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r7, {0x80000000, 0x6}}, './file0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000840)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000800)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r9, &(0x7f0000000880)={0x6, 0x118, 0xfa00, {{0x81, 0xffffffff, "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", 0x0, 0x5, 0x8, 0xf0, 0x3f, 0x24, 0x9, 0x1}, r10}}, 0x120) 17:43:15 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, r1, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:15 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) socket(0x0, 0x0, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) 17:43:15 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:15 executing program 4: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x7c57, &(0x7f00000001c0)) syz_io_uring_setup(0xc88, &(0x7f0000000000)={0x0, 0x431a, 0x0, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000540)) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:15 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:15 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000003c0)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000380), 0x0, r0, 0x10, 0x1, @in={0x2, 0x4e21, @local}}}, 0xa0) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000a00)={0x6, 0x118, 0xfa00, {{0xffff0001, 0x3, "9d74a30eb5ae86dbf294280cf3ea5b9e7d37ece15d0852d3111f2e1faa395d589ed2d5b18499e1e575396d4692027316ce116e3f978a3d74575d90593f32049aea3139ec9be1f2c5daeb0eaabec5c67f4f08c9b78cd4349ba167a1252522710cd1c9f1e0fae837e2e369d85482591ec0b3f2bf932c5ef8e7c8df4aae94eb3930e23dabaa13312d276addc74c2c9d8451780e7da4f0bc013f35192447ff0ad685557c1a1eb07ce8b69c8ad59821154cab705ab9ec7cde29091dafedd2a8b24f38c0d957b92f5d36bb367c6e466229d7ec4b7209adcc716bef377fd288b3176482c290e971155101374a0050e473928d4ee007b59002380f3b509b9e99007aec51", 0x3, 0x1, 0xcc, 0x6, 0x81, 0x90, 0x80}, r4}}, 0x120) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000540)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f00000005c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000500), 0x3, r6, 0x30, 0x1, @in={0x2, 0x4e23, @private=0xa010101}}}, 0xa0) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r7, 0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x2, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000006f09000000fc000002000000c85ff77f1103058c44381b41243fc5ade53326e83460b67fd402c47cca6c32bffec953b7cce81b5246b24775f2a77e31b0f472443d09"], &(0x7f00000000c0)='GPL\x00', 0xc650, 0xbb, &(0x7f0000000100)=""/187, 0x41100, 0x10, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0xd, 0x1, 0xfffffffb}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, r7]}, 0x80) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r8, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_FAIL(r8, 0xc0189377, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r7, {0x80000000, 0x6}}, './file0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000840)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000800)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r9, &(0x7f0000000880)={0x6, 0x118, 0xfa00, {{0x81, 0xffffffff, "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", 0x0, 0x5, 0x8, 0xf0, 0x3f, 0x24, 0x9, 0x1}, r10}}, 0x120) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000003c0), 0x13f, 0x5}}, 0x20) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000380), 0x0, r0, 0x10, 0x1, @in={0x2, 0x4e21, @local}}}, 0xa0) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000a00)={0x6, 0x118, 0xfa00, {{0xffff0001, 0x3, "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", 0x3, 0x1, 0xcc, 0x6, 0x81, 0x90, 0x80}, r4}}, 0x120) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000540), 0x111, 0x5}}, 0x20) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f00000005c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000500), 0x3, r6, 0x30, 0x1, @in={0x2, 0x4e23, @private=0xa010101}}}, 0xa0) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) setsockopt$inet6_icmp_ICMP_FILTER(r7, 0x1, 0x1, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x2, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000006f09000000fc000002000000c85ff77f1103058c44381b41243fc5ade53326e83460b67fd402c47cca6c32bffec953b7cce81b5246b24775f2a77e31b0f472443d09"], &(0x7f00000000c0)='GPL\x00', 0xc650, 0xbb, &(0x7f0000000100)=""/187, 0x41100, 0x10, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0xd, 0x1, 0xfffffffb}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, r7]}, 0x80) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x593002, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r8, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r8, 0xc0189377, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r7, {0x80000000, 0x6}}, './file0\x00'}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000840)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000800), 0x13f, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_CONNECT(r9, &(0x7f0000000880)={0x6, 0x118, 0xfa00, {{0x81, 0xffffffff, "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", 0x0, 0x5, 0x8, 0xf0, 0x3f, 0x24, 0x9, 0x1}, r10}}, 0x120) (async) 17:43:15 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:15 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) socket(0x0, 0x0, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) 17:43:15 executing program 4: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x7c57, &(0x7f00000001c0)) syz_io_uring_setup(0xc88, &(0x7f0000000000)={0x0, 0x431a, 0x0, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000540)) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:15 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:15 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, r1, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:15 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000003c0)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000380), 0x0, r0, 0x10, 0x1, @in={0x2, 0x4e21, @local}}}, 0xa0) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000a00)={0x6, 0x118, 0xfa00, {{0xffff0001, 0x3, "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", 0x3, 0x1, 0xcc, 0x6, 0x81, 0x90, 0x80}, r4}}, 0x120) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000540)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f00000005c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000500), 0x3, r6, 0x30, 0x1, @in={0x2, 0x4e23, @private=0xa010101}}}, 0xa0) (async) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r7, 0x1, 0x1, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x2, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000006f09000000fc000002000000c85ff77f1103058c44381b41243fc5ade53326e83460b67fd402c47cca6c32bffec953b7cce81b5246b24775f2a77e31b0f472443d09"], &(0x7f00000000c0)='GPL\x00', 0xc650, 0xbb, &(0x7f0000000100)=""/187, 0x41100, 0x10, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0xd, 0x1, 0xfffffffb}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, r7]}, 0x80) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r8, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r8, 0xc0189377, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r7, {0x80000000, 0x6}}, './file0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000840)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000800)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r9, &(0x7f0000000880)={0x6, 0x118, 0xfa00, {{0x81, 0xffffffff, "a0297dceeeb5ff5aa52b7632f651f670b3a29334653e953199a03228fb05d6338924b77780f7ca905a606dfd24c7555b473e40e1836bb943eb531a5ee3f594211b1667b65ace5aaa68d33aea5d03d1c42690b55bf1f8d61ae76b511af4b6e446eb9c6e4689e3ec4efef55f42c1814ac0e4ccbfdc4ec336adab80bf2b1c0b4b4fa336789e564799d4240769cd1ab205de2b901454fcb622862c15a4b4d49de06368e6420123b1cbb29cce9b8becbf34e0d37cdc872258488d38dfe5282a5d1673856983f9ee0c557c540d63cc25bf1506ebafa49dfdecf71fc65a64a74fb52b5334eeeb63cb3b5c7763154f2809d917d40ce4327198bece3070a362cc650f409e", 0x0, 0x5, 0x8, 0xf0, 0x3f, 0x24, 0x9, 0x1}, r10}}, 0x120) 17:43:15 executing program 2: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(0x0, 0x0) 17:43:15 executing program 4: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x7c57, &(0x7f00000001c0)) syz_io_uring_setup(0xc88, &(0x7f0000000000)={0x0, 0x431a, 0x0, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000540)) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:15 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) socket(0x0, 0x0, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) 17:43:15 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x173202, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:15 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:15 executing program 2: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(0x0, 0x0) 17:43:15 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, r1, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:15 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) socket(0x0, 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 17:43:15 executing program 4: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x7c57, &(0x7f00000001c0)) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:15 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x173202, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:15 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x173202, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:15 executing program 2: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(0x0, 0x0) 17:43:15 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:15 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:15 executing program 4: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x7c57, &(0x7f00000001c0)) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:15 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0x9, &(0x7f0000000040)='/dev/bsg\x00'}, 0x30) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) r4 = gettid() ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9545}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x49}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x800) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[r2, r1, r3, r4, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 4: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:16 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 4: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:16 executing program 1: syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58) 17:43:16 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 4: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:16 executing program 1: syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58) 17:43:16 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0x9, &(0x7f0000000040)='/dev/bsg\x00'}, 0x30) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) r4 = gettid() ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9545}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x49}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x800) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[r2, r1, r3, r4, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 4: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) io_uring_setup(0x7c57, &(0x7f00000001c0)) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:16 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 1: syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58) 17:43:16 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0x9, &(0x7f0000000040)='/dev/bsg\x00'}, 0x30) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) r4 = gettid() ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9545}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x49}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x800) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[r2, r1, r3, r4, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 3: syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58) 17:43:16 executing program 4: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180)) io_uring_setup(0x7c57, &(0x7f00000001c0)) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:16 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 3: syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58) 17:43:16 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 4: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180)) io_uring_setup(0x7c57, &(0x7f00000001c0)) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:16 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0x9, &(0x7f0000000040)='/dev/bsg\x00'}, 0x30) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) r4 = gettid() ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[r2, r1, r3, r4, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 4: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180)) io_uring_setup(0x7c57, &(0x7f00000001c0)) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:16 executing program 3: syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58) 17:43:16 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) io_uring_setup(0x7c57, &(0x7f00000001c0)) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:16 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0x9, &(0x7f0000000040)='/dev/bsg\x00'}, 0x30) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) r4 = gettid() syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[r2, r1, r3, r4, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0x9, &(0x7f0000000040)='/dev/bsg\x00'}, 0x30) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[r2, r1, r3, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) io_uring_setup(0x7c57, &(0x7f00000001c0)) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:16 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 17:43:16 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(0x0, 0x0) 17:43:16 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(0x0, 0x0) 17:43:16 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 5: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:43:16 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) io_uring_setup(0x7c57, &(0x7f00000001c0)) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:16 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(0x0, 0x0) 17:43:16 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0x9, &(0x7f0000000040)='/dev/bsg\x00'}, 0x30) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[r2, r1, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(0x0, 0x0) 17:43:16 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) io_uring_setup(0x7c57, &(0x7f00000001c0)) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:16 executing program 5: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:43:16 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(0x0, 0x0) 17:43:16 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(0x0, 0x0) 17:43:16 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) io_uring_setup(0x7c57, &(0x7f00000001c0)) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:16 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0x9, &(0x7f0000000040)='/dev/bsg\x00'}, 0x30) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, r1, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 5: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:43:16 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) io_uring_setup(0x7c57, &(0x7f00000001c0)) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:16 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) io_uring_setup(0x7c57, &(0x7f00000001c0)) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:16 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, r1, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) io_uring_setup(0x0, &(0x7f00000001c0)) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:16 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) io_uring_setup(0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:16 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = gettid() syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, r1, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) io_uring_setup(0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:16 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) io_uring_setup(0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:16 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 17:43:16 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 4: openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) io_uring_setup(0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:16 executing program 0: syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58) 17:43:16 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 4: openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) io_uring_setup(0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:16 executing program 0: syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58) 17:43:16 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 4: openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) io_uring_setup(0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 17:43:16 executing program 2: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:43:16 executing program 0: syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58) 17:43:16 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xcb, 0x2300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7f01}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40094}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, 0x0, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x100, 0x0) write$cgroup_int(r6, &(0x7f0000000440)=0x9, 0x12) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r7, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r8, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_IBPORT={0x5}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg1\x00'}]}, 0x30}}, 0x0) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvtap0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x4c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r7, {0x101}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r9, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, 0x0, 0x701, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffff9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc32d}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x8e75cff163d9f83d) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x19, 0x1, 0xfffffffb, 0x1, 0x1626, 0x1, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x6d}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0xef, &(0x7f0000000080)=""/239, 0x5c37162f90f8ad1a, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x0, 0x4, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r3, r0, r0, r4, r5, r0, r10, r0]}, 0x80) 17:43:16 executing program 2: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:43:16 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) io_uring_setup(0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, 0x0, 0x0) 17:43:16 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 2: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:43:16 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) io_uring_setup(0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, 0x0, 0x0) 17:43:16 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x60, 0x0, 0x200, 0x9, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x42}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x87}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x60}}, 0x24000880) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) r3 = socket(0x0, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r3) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) r4 = socket(0x3, 0x4, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r5) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x1) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) syz_clone3(&(0x7f0000000740)={0x1000, &(0x7f00000004c0)=0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000540), {0x22}, &(0x7f0000000580)=""/132, 0x84, &(0x7f0000000640)=""/64, &(0x7f0000000680)=[0xffffffffffffffff], 0x1, {r0}}, 0x58) r9 = accept4$bt_l2cap(r4, &(0x7f00000006c0)={0x1f, 0x0, @none}, &(0x7f00000007c0)=0xe, 0x400) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r8, 0xcb, {0x0, r9}, 0x7, 0x2, 0x1}, 0x9) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="78000100", @ANYRES16=r7, @ANYBLOB="01000000000000000000040000000c00018008000b0073697000340002800000040000000000080009000000000000000900000000006b00030000000000000001000000000000000000000000000000000000000900a50d00001400028005000d0000000000080005000000000008000400000000000800040000000000"], 0x78}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r7, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4041) 17:43:16 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) io_uring_setup(0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, 0x0, 0x0) 17:43:16 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x49a802, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x1, {0x0, 0x5, "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", 0x1f, 0xf1, 0x40, 0x2, 0xff, 0x20, 0x4, 0x1}, r1}}, 0x128) 17:43:16 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x49a802, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x1, {0x0, 0x5, "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", 0x1f, 0xf1, 0x40, 0x2, 0xff, 0x20, 0x4, 0x1}, r1}}, 0x128) 17:43:16 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x593002, 0x0) io_uring_setup(0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 17:43:16 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x49a802, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x1, {0x0, 0x5, "908a748e1d566ae8b6b518c288ab5516cdc8bf8c9be90e9f3233ff8bf1deb69cd98ce989c653459571298471d9eaa9d44548e7f3ca2836e644628eb32cb69fdc68d9af164dfd96b4dec57c9c2fea2b9998d62a71e3e554cb1cb1e43bc1998f9ea5ee56f2f00fcfef3ed58201e9c11957787e73d80fbb9f81097c643570461bb145943aba14c85421487e16836f97c52cca21065eae6f119820a0d7a79092338737adec9066dcdda88e76a54ae2dda2ccb6ffd9b9b816c8b3fd2fa8463139ab124693c12789a1928cdcf370a71f810920d5f034fb47a26782c3049564b4597dc50bdef8478b88393ca40a668e9a2906f068bf2ca964d51b8bab95deccdb49207c", 0x1f, 0xf1, 0x40, 0x2, 0xff, 0x20, 0x4, 0x1}, r1}}, 0x128) 17:43:16 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 17:43:16 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:16 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x513402, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:16 executing program 4: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x4c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffb}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40050) geteuid() r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = mq_open(&(0x7f0000000000)='pids.max\x00', 0x40, 0x86, &(0x7f00000000c0)={0x7, 0xff, 0x80000001, 0x3f}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) openat$cgroup_int(r0, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) 17:43:16 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 17:43:16 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(0x0, 0x0) 17:43:16 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x49a802, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x2, 0x8}}, 0x20) 17:43:16 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x513402, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:16 executing program 4: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x4c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffb}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40050) geteuid() r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = mq_open(&(0x7f0000000000)='pids.max\x00', 0x40, 0x86, &(0x7f00000000c0)={0x7, 0xff, 0x80000001, 0x3f}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) openat$cgroup_int(r0, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) 17:43:16 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:43:16 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(0x0, 0x0) 17:43:16 executing program 4: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x4c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffb}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40050) geteuid() r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = mq_open(&(0x7f0000000000)='pids.max\x00', 0x40, 0x86, &(0x7f00000000c0)={0x7, 0xff, 0x80000001, 0x3f}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) openat$cgroup_int(r0, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x7ffffffff000) 17:43:16 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x49a802, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x2, 0x8}}, 0x20) 17:43:16 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x513402, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:16 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:43:16 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:43:16 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(0x0, 0x0) 17:43:16 executing program 4: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x4c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffb}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40050) geteuid() r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = mq_open(&(0x7f0000000000)='pids.max\x00', 0x40, 0x86, &(0x7f00000000c0)={0x7, 0xff, 0x80000001, 0x3f}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) openat$cgroup_int(r0, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) 17:43:17 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x2, 0x8}}, 0x20) 17:43:17 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:43:17 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:43:17 executing program 5: write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0xeffd) 17:43:17 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:17 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x2, 0x8}}, 0x20) 17:43:17 executing program 4: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x4c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffb}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40050) geteuid() r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = mq_open(&(0x7f0000000000)='pids.max\x00', 0x40, 0x86, &(0x7f00000000c0)={0x7, 0xff, 0x80000001, 0x3f}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) 17:43:17 executing program 5: write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0xeffd) 17:43:17 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 17:43:17 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:43:17 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x2, 0x8}}, 0x20) 17:43:17 executing program 4: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x4c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffb}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40050) geteuid() openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mq_open(&(0x7f0000000000)='pids.max\x00', 0x40, 0x86, &(0x7f00000000c0)={0x7, 0xff, 0x80000001, 0x3f}) 17:43:17 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:17 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfffffdef) 17:43:17 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x49a802, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x2, 0x8}}, 0x20) 17:43:17 executing program 5: write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0xeffd) 17:43:17 executing program 4: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x4c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffb}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40050) geteuid() mq_open(&(0x7f0000000000)='pids.max\x00', 0x40, 0x86, &(0x7f00000000c0)={0x7, 0xff, 0x80000001, 0x3f}) 17:43:17 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x7ffff000) 17:43:17 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x49a802, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x2, 0x8}}, 0x20) 17:43:17 executing program 4: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x4c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffb}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40050) mq_open(&(0x7f0000000000)='pids.max\x00', 0x40, 0x86, &(0x7f00000000c0)={0x7, 0xff, 0x80000001, 0x3f}) 17:43:17 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:17 executing program 4: mq_open(&(0x7f0000000000)='pids.max\x00', 0x40, 0x86, &(0x7f00000000c0)={0x7, 0xff, 0x80000001, 0x3f}) 17:43:17 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x49a802, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x2, 0x8}}, 0x20) 17:43:17 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x513402, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:17 executing program 4: mq_open(0x0, 0x40, 0x86, &(0x7f00000000c0)={0x7, 0xff, 0x80000001, 0x3f}) 17:43:17 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfffffdef) 17:43:17 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x513402, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:17 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x2, 0x8}}, 0x20) 17:43:17 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:17 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x7ffff000) 17:43:17 executing program 4: mq_open(0x0, 0x40, 0x86, &(0x7f00000000c0)={0x7, 0xff, 0x80000001, 0x3f}) 17:43:17 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x513402, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:17 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x2, 0x8}}, 0x20) 17:43:17 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:17 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:17 executing program 4: mq_open(0x0, 0x40, 0x86, &(0x7f00000000c0)={0x7, 0xff, 0x80000001, 0x3f}) 17:43:17 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x2, 0x8}}, 0x20) [ 1888.773937][ T4746] ================================================================== [ 1888.782056][ T4746] BUG: KCSAN: data-race in __percpu_counter_compare / percpu_counter_add_batch [ 1888.791009][ T4746] [ 1888.793332][ T4746] read-write to 0xffff88810004b490 of 8 bytes by task 4754 on cpu 0: [ 1888.801398][ T4746] percpu_counter_add_batch+0x9a/0x110 [ 1888.806880][ T4746] shmem_getpage_gfp+0x4b3/0x1750 [ 1888.811935][ T4746] shmem_write_begin+0x84/0x110 [ 1888.816810][ T4746] generic_perform_write+0x1d4/0x3f0 [ 1888.822125][ T4746] __generic_file_write_iter+0xe3/0x280 [ 1888.827687][ T4746] generic_file_write_iter+0x79/0x1c0 [ 1888.833075][ T4746] vfs_write+0x468/0x760 [ 1888.837326][ T4746] ksys_write+0xe8/0x1a0 [ 1888.841570][ T4746] __x64_sys_write+0x3e/0x50 [ 1888.846165][ T4746] do_syscall_64+0x2b/0x70 [ 1888.850590][ T4746] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1888.856493][ T4746] [ 1888.858815][ T4746] read to 0xffff88810004b490 of 8 bytes by task 4746 on cpu 1: [ 1888.866420][ T4746] __percpu_counter_compare+0x27/0x1e0 [ 1888.871863][ T4746] shmem_getpage_gfp+0x47c/0x1750 [ 1888.876870][ T4746] shmem_write_begin+0x84/0x110 [ 1888.881721][ T4746] generic_perform_write+0x1d4/0x3f0 [ 1888.886989][ T4746] __generic_file_write_iter+0xe3/0x280 [ 1888.892518][ T4746] generic_file_write_iter+0x79/0x1c0 [ 1888.897880][ T4746] vfs_write+0x468/0x760 [ 1888.902103][ T4746] ksys_write+0xe8/0x1a0 [ 1888.906328][ T4746] __x64_sys_write+0x3e/0x50 [ 1888.910902][ T4746] do_syscall_64+0x2b/0x70 [ 1888.915302][ T4746] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1888.921197][ T4746] 17:43:17 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfffffdef) 17:43:17 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:17 executing program 4: mq_open(&(0x7f0000000000)='pids.max\x00', 0x0, 0x86, &(0x7f00000000c0)={0x7, 0xff, 0x80000001, 0x3f}) 17:43:17 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {0x5}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:17 executing program 2: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x49a802, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x2, 0x8}}, 0x20) 17:43:17 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x7ffff000) [ 1888.923503][ T4746] value changed: 0x0000000000001360 -> 0x0000000000001380 [ 1888.930594][ T4746] [ 1888.932900][ T4746] Reported by Kernel Concurrency Sanitizer on: [ 1888.939027][ T4746] CPU: 1 PID: 4746 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-00042-g46452d3786a8-dirty #0 [ 1888.949854][ T4746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1888.959892][ T4746] ================================================================== 17:43:17 executing program 2: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x49a802, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x2, 0x8}}, 0x20) 17:43:17 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0xeffd) 17:43:17 executing program 4: mq_open(&(0x7f0000000000)='pids.max\x00', 0x0, 0x86, &(0x7f00000000c0)={0x7, 0xff, 0x80000001, 0x3f}) 17:43:17 executing program 2: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x49a802, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x2, 0x8}}, 0x20) 17:43:17 executing program 5: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x513402, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0xeffd) 17:43:17 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {}, &(0x7f00000001c0)=""/40, 0x28, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:17 executing program 3: write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfffffdef) 17:43:17 executing program 4: mq_open(&(0x7f0000000000)='pids.max\x00', 0x0, 0x86, &(0x7f00000000c0)={0x7, 0xff, 0x80000001, 0x3f}) 17:43:17 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x49a802, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 17:43:17 executing program 5: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x513402, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0xeffd) 17:43:17 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:17 executing program 1: write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x7ffff000) 17:43:17 executing program 5: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x513402, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0xeffd) 17:43:17 executing program 4: mq_open(&(0x7f0000000000)='pids.max\x00', 0x40, 0x0, &(0x7f00000000c0)={0x7, 0xff, 0x80000001, 0x3f}) 17:43:17 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x49a802, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 17:43:17 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000200)=""/6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:17 executing program 3: write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfffffdef) 17:43:17 executing program 3: write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfffffdef) 17:43:17 executing program 4: mq_open(&(0x7f0000000000)='pids.max\x00', 0x40, 0x0, 0x0) 17:43:17 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x49a802, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 17:43:17 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x49a802, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 17:43:17 executing program 4: mq_open(&(0x7f0000000000)='pids.max\x00', 0x40, 0x0, 0x0) 17:43:17 executing program 1: write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x7ffff000) 17:43:17 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfffffdef) 17:43:17 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 17:43:17 executing program 4: mq_open(&(0x7f0000000000)='pids.max\x00', 0x40, 0x0, 0x0) 17:43:17 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x49a802, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x2, 0x8}}, 0x20) 17:43:17 executing program 5: mq_open(&(0x7f0000000000)='pids.max\x00', 0x40, 0x0, 0x0) 17:43:17 executing program 5: mq_open(&(0x7f0000000000)='pids.max\x00', 0x40, 0x0, 0x0) 17:43:17 executing program 1: write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x7ffff000) 17:43:17 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfffffdef) 17:43:18 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 17:43:18 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfffffdef) 17:43:18 executing program 5: mq_open(&(0x7f0000000000)='pids.max\x00', 0x40, 0x0, 0x0) 17:43:18 executing program 4: mq_open(&(0x7f0000000000)='pids.max\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0xff, 0x80000001, 0x3f}) 17:43:18 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x49a802, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x8}}, 0x20) 17:43:18 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x49a802, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x8}}, 0x20) 17:43:18 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x7ffff000) 17:43:18 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) 17:43:18 executing program 4: mq_open(&(0x7f0000000000)='pids.max\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0xff, 0x80000001, 0x3f}) 17:43:18 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 17:43:18 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfffffdef) 17:43:18 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x49a802, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 17:43:18 executing program 4: mq_open(&(0x7f0000000000)='pids.max\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0xff, 0x80000001, 0x3f}) 17:43:18 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x7ffff000) 17:43:18 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfffffdef) 17:43:18 executing program 4: mq_open(&(0x7f0000000000)='pids.max\x00', 0x40, 0x0, &(0x7f00000000c0)={0x7, 0x0, 0x80000001, 0x3f}) 17:43:18 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfdef) 17:43:18 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfffffdef) 17:43:18 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:43:18 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) 17:43:18 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x7ffff000) 17:43:18 executing program 4: mq_open(&(0x7f0000000000)='pids.max\x00', 0x40, 0x0, &(0x7f00000000c0)={0x7, 0x0, 0x80000001, 0x3f}) 17:43:18 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfdef) 17:43:18 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfffffdef) 17:43:18 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:43:18 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x7ffff000) 17:43:18 executing program 4: mq_open(&(0x7f0000000000)='pids.max\x00', 0x40, 0x0, &(0x7f00000000c0)={0x7, 0x0, 0x80000001, 0x3f}) 17:43:18 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfdef) 17:43:18 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfffffdef) 17:43:18 executing program 4: mq_open(&(0x7f0000000000)='pids.max\x00', 0x40, 0x0, &(0x7f00000000c0)={0x7, 0xff, 0x0, 0x3f}) 17:43:18 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x7ffff000) 17:43:18 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) 17:43:18 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x211020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:43:18 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfffffdef) 17:43:18 executing program 2: write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfdef) 17:43:18 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x7ffff000) 17:43:18 executing program 4: mq_open(&(0x7f0000000000)='pids.max\x00', 0x40, 0x0, &(0x7f00000000c0)={0x7, 0xff, 0x0, 0x3f}) 17:43:18 executing program 4: mq_open(&(0x7f0000000000)='pids.max\x00', 0x40, 0x0, &(0x7f00000000c0)={0x7, 0xff, 0x0, 0x3f}) 17:43:18 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, 0x0, 0x0) 17:43:18 executing program 2: write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfdef) 17:43:18 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x7ffff000) 17:43:18 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1001) 17:43:18 executing program 4: mq_open(&(0x7f0000000000)='pids.max\x00', 0x40, 0x0, &(0x7f00000000c0)={0x7, 0xff, 0x80000001}) 17:43:18 executing program 5: write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) 17:43:18 executing program 2: write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfdef) 17:43:18 executing program 4: mq_open(&(0x7f0000000000)='pids.max\x00', 0x40, 0x0, &(0x7f00000000c0)={0x7, 0xff, 0x80000001}) 17:43:18 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1001) 17:43:18 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, 0x0, 0x0) 17:43:18 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x7ffff000) 17:43:18 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x7ffff000) 17:43:18 executing program 4: mq_open(&(0x7f0000000000)='pids.max\x00', 0x40, 0x0, &(0x7f00000000c0)={0x7, 0xff, 0x80000001}) 17:43:18 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1001) 17:43:18 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfdef) 17:43:18 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, 0x0, 0x0) 17:43:18 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x4000000}}, 0x18) 17:43:18 executing program 5: write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) 17:43:18 executing program 0: write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1001) 17:43:18 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2500, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000040)=0x3ff) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000085}, 0x40) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x3000c055}, 0x44) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x7ffffffff000) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x8000) 17:43:18 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfdef) 17:43:18 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, 0x0, 0x0) 17:43:18 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2500, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000040)=0x3ff) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000085}, 0x40) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x3000c055}, 0x44) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x7ffffffff000) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x8000) 17:43:18 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfffffdef) (fail_nth: 1) 17:43:18 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfdef) 17:43:18 executing program 0: write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1001) 17:43:18 executing program 5: write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) 17:43:18 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, 0x0, 0x0) 17:43:18 executing program 0: write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1001) 17:43:18 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfdef) 17:43:18 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) 17:43:18 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1001) 17:43:18 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfffffdef) (fail_nth: 2) 17:43:18 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2500, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000040)=0x3ff) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000085}, 0x40) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x3000c055}, 0x44) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x7ffffffff000) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x8000) 17:43:18 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, 0x0, 0x0) 17:43:18 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfdef) 17:43:18 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1001) 17:43:18 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfdef) 17:43:18 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1001) 17:43:18 executing program 2: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfdef) 17:43:18 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1001) 17:43:18 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2500, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000040)=0x3ff) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000085}, 0x40) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x3000c055}, 0x44) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x8000) [ 1890.042046][ T4979] FAULT_INJECTION: forcing a failure. [ 1890.042046][ T4979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1890.055201][ T4979] CPU: 1 PID: 4979 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00042-g46452d3786a8-dirty #0 [ 1890.066129][ T4979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1890.076195][ T4979] Call Trace: [ 1890.079481][ T4979] [ 1890.082467][ T4979] dump_stack_lvl+0xd6/0x122 [ 1890.087083][ T4979] dump_stack+0x11/0x12 17:43:18 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) 17:43:18 executing program 2: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfdef) [ 1890.091284][ T4979] should_fail+0x242/0x250 [ 1890.095712][ T4979] should_fail_usercopy+0x16/0x20 [ 1890.100776][ T4979] copy_page_from_iter_atomic+0x24b/0xb90 [ 1890.106523][ T4979] generic_perform_write+0x214/0x3f0 [ 1890.111900][ T4979] ? file_update_time+0x1f9/0x250 [ 1890.116995][ T4979] __generic_file_write_iter+0xe3/0x280 [ 1890.122575][ T4979] generic_file_write_iter+0x79/0x1c0 [ 1890.127996][ T4979] vfs_write+0x468/0x760 [ 1890.132280][ T4979] ksys_write+0xe8/0x1a0 [ 1890.136561][ T4979] __x64_sys_write+0x3e/0x50 [ 1890.141187][ T4979] do_syscall_64+0x2b/0x70 [ 1890.145776][ T4979] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1890.151697][ T4979] RIP: 0033:0x7f885f9dc5a9 [ 1890.156326][ T4979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1890.176028][ T4979] RSP: 002b:00007f885f151168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1890.184462][ T4979] RAX: ffffffffffffffda RBX: 00007f885fafdf80 RCX: 00007f885f9dc5a9 [ 1890.192528][ T4979] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003 [ 1890.200684][ T4979] RBP: 00007f885f1511d0 R08: 0000000000000000 R09: 0000000000000000 [ 1890.208721][ T4979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1890.216680][ T4979] R13: 00007fffdcf4cfdf R14: 00007f885f151300 R15: 0000000000022000 [ 1890.224696][ T4979] 17:43:18 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfffffdef) (fail_nth: 3) 17:43:18 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1001) 17:43:18 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2500, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000040)=0x3ff) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000085}, 0x40) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x8000) 17:43:18 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) 17:43:18 executing program 2: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfdef) 17:43:18 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x7ffff000) (fail_nth: 1) 17:43:18 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) 17:43:18 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1001) 17:43:18 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2500, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000040)=0x3ff) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x8000) 17:43:18 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, 0x0, 0x0) 17:43:18 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x7ffff000) (fail_nth: 2) 17:43:18 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) 17:43:19 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfffffdef) (fail_nth: 4) 17:43:19 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1001) 17:43:19 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2500, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000040)=0x3ff) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x8000) 17:43:19 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) 17:43:19 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1001) 17:43:19 executing program 5: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) 17:43:19 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, 0x0, 0x0) 17:43:19 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1001) [ 1890.365777][ T5026] FAULT_INJECTION: forcing a failure. [ 1890.365777][ T5026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1890.378903][ T5026] CPU: 0 PID: 5026 Comm: syz-executor.1 Not tainted 6.0.0-rc7-syzkaller-00042-g46452d3786a8-dirty #0 [ 1890.389762][ T5026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1890.399831][ T5026] Call Trace: [ 1890.403181][ T5026] [ 1890.406121][ T5026] dump_stack_lvl+0xd6/0x122 [ 1890.410741][ T5026] dump_stack+0x11/0x12 17:43:19 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2500, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000040)=0x3ff) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x8000) [ 1890.414979][ T5026] should_fail+0x242/0x250 [ 1890.419434][ T5026] should_fail_usercopy+0x16/0x20 [ 1890.424473][ T5026] copy_page_from_iter_atomic+0x24b/0xb90 [ 1890.430216][ T5026] generic_perform_write+0x214/0x3f0 [ 1890.435624][ T5026] ? file_update_time+0x1f9/0x250 [ 1890.440671][ T5026] __generic_file_write_iter+0xe3/0x280 [ 1890.446267][ T5026] generic_file_write_iter+0x79/0x1c0 [ 1890.451729][ T5026] vfs_write+0x468/0x760 [ 1890.456093][ T5026] ksys_write+0xe8/0x1a0 [ 1890.460375][ T5026] __x64_sys_write+0x3e/0x50 17:43:19 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2500, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000040)=0x3ff) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x8000) [ 1890.464992][ T5026] do_syscall_64+0x2b/0x70 [ 1890.469465][ T5026] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1890.475421][ T5026] RIP: 0033:0x7fd486efe5a9 [ 1890.479882][ T5026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1890.499573][ T5026] RSP: 002b:00007fd486673168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1890.508004][ T5026] RAX: ffffffffffffffda RBX: 00007fd48701ff80 RCX: 00007fd486efe5a9 [ 1890.515993][ T5026] RDX: 000000007ffff000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1890.523993][ T5026] RBP: 00007fd4866731d0 R08: 0000000000000000 R09: 0000000000000000 [ 1890.531979][ T5026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1890.540160][ T5026] R13: 00007ffc12f2b96f R14: 00007fd486673300 R15: 0000000000022000 [ 1890.548158][ T5026] 17:43:19 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x7ffff000) (fail_nth: 3) 17:43:19 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2500, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000040)=0x3ff) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x10, 0xffffffffffffffff, 0x8000) 17:43:19 executing program 5: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) 17:43:19 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, 0x0, 0x0) 17:43:19 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, 0x0, 0x0) 17:43:19 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfffffdef) (fail_nth: 5) 17:43:19 executing program 5: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) 17:43:19 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfdef) (fail_nth: 1) 17:43:19 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2500, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000040)=0x3ff) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x10, 0xffffffffffffffff, 0x8000) 17:43:19 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, 0x0, 0x0) 17:43:19 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfdef) (fail_nth: 2) 17:43:19 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2500, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000040)=0x3ff) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x10, 0xffffffffffffffff, 0x8000) [ 1890.688198][ T5057] FAULT_INJECTION: forcing a failure. [ 1890.688198][ T5057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1890.701325][ T5057] CPU: 0 PID: 5057 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00042-g46452d3786a8-dirty #0 [ 1890.712231][ T5057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1890.722324][ T5057] Call Trace: [ 1890.725610][ T5057] [ 1890.728561][ T5057] dump_stack_lvl+0xd6/0x122 [ 1890.733176][ T5057] dump_stack+0x11/0x12 [ 1890.737357][ T5057] should_fail+0x242/0x250 [ 1890.741792][ T5057] should_fail_usercopy+0x16/0x20 [ 1890.746843][ T5057] copy_page_from_iter_atomic+0x24b/0xb90 [ 1890.752662][ T5057] generic_perform_write+0x214/0x3f0 [ 1890.758058][ T5057] ? shmem_write_begin+0x110/0x110 [ 1890.763219][ T5057] __generic_file_write_iter+0xe3/0x280 [ 1890.765808][ T5069] FAULT_INJECTION: forcing a failure. [ 1890.765808][ T5069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1890.768780][ T5057] generic_file_write_iter+0x79/0x1c0 [ 1890.787236][ T5057] vfs_write+0x468/0x760 [ 1890.791503][ T5057] ksys_write+0xe8/0x1a0 [ 1890.795823][ T5057] __x64_sys_write+0x3e/0x50 [ 1890.800420][ T5057] do_syscall_64+0x2b/0x70 [ 1890.804871][ T5057] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1890.810849][ T5057] RIP: 0033:0x7f885f9dc5a9 [ 1890.815323][ T5057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1890.834959][ T5057] RSP: 002b:00007f885f151168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1890.843365][ T5057] RAX: ffffffffffffffda RBX: 00007f885fafdf80 RCX: 00007f885f9dc5a9 [ 1890.851333][ T5057] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003 [ 1890.859383][ T5057] RBP: 00007f885f1511d0 R08: 0000000000000000 R09: 0000000000000000 [ 1890.867351][ T5057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1890.875328][ T5057] R13: 00007fffdcf4cfdf R14: 00007f885f151300 R15: 0000000000022000 [ 1890.883299][ T5057] [ 1890.886311][ T5069] CPU: 1 PID: 5069 Comm: syz-executor.2 Not tainted 6.0.0-rc7-syzkaller-00042-g46452d3786a8-dirty #0 [ 1890.897194][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1890.907274][ T5069] Call Trace: [ 1890.910628][ T5069] [ 1890.913565][ T5069] dump_stack_lvl+0xd6/0x122 [ 1890.918196][ T5069] dump_stack+0x11/0x12 [ 1890.922382][ T5069] should_fail+0x242/0x250 [ 1890.926868][ T5069] should_fail_usercopy+0x16/0x20 [ 1890.931907][ T5069] copy_page_from_iter_atomic+0x24b/0xb90 [ 1890.937737][ T5069] generic_perform_write+0x214/0x3f0 [ 1890.943099][ T5069] ? file_update_time+0x1f9/0x250 [ 1890.948168][ T5069] __generic_file_write_iter+0xe3/0x280 [ 1890.953737][ T5069] generic_file_write_iter+0x79/0x1c0 [ 1890.959212][ T5069] vfs_write+0x468/0x760 [ 1890.963548][ T5069] ksys_write+0xe8/0x1a0 [ 1890.967923][ T5069] __x64_sys_write+0x3e/0x50 [ 1890.972538][ T5069] do_syscall_64+0x2b/0x70 [ 1890.977032][ T5069] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1890.982975][ T5069] RIP: 0033:0x7f4afaa705a9 17:43:19 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x7ffff000) 17:43:19 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2500, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x8000) 17:43:19 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, 0x0, 0x0) 17:43:19 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, 0x0, 0x0) 17:43:19 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfffffdef) (fail_nth: 6) [ 1890.987394][ T5069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1891.007012][ T5069] RSP: 002b:00007f4afa1e5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1891.015444][ T5069] RAX: ffffffffffffffda RBX: 00007f4afab91f80 RCX: 00007f4afaa705a9 [ 1891.023506][ T5069] RDX: 000000000000fdef RSI: 0000000020000000 RDI: 0000000000000003 [ 1891.031549][ T5069] RBP: 00007f4afa1e51d0 R08: 0000000000000000 R09: 0000000000000000 17:43:19 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, 0x0, 0x0) 17:43:19 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfdef) (fail_nth: 3) 17:43:19 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x8000) 17:43:19 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfffffdef) (fail_nth: 7) 17:43:19 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1001) (fail_nth: 1) 17:43:19 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x8000) 17:43:19 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1001) (fail_nth: 2) [ 1891.039543][ T5069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1891.047688][ T5069] R13: 00007ffc60988f2f R14: 00007f4afa1e5300 R15: 0000000000022000 [ 1891.055710][ T5069] [ 1891.097008][ T5086] FAULT_INJECTION: forcing a failure. [ 1891.097008][ T5086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1891.110890][ T5086] CPU: 1 PID: 5086 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00042-g46452d3786a8-dirty #0 [ 1891.121761][ T5086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1891.131835][ T5086] Call Trace: [ 1891.134479][ T5095] FAULT_INJECTION: forcing a failure. [ 1891.134479][ T5095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1891.135109][ T5086] [ 1891.151080][ T5086] dump_stack_lvl+0xd6/0x122 [ 1891.155693][ T5086] dump_stack+0x11/0x12 [ 1891.159873][ T5086] should_fail+0x242/0x250 [ 1891.164338][ T5086] should_fail_usercopy+0x16/0x20 [ 1891.169370][ T5086] copy_page_from_iter_atomic+0x24b/0xb90 [ 1891.175166][ T5086] generic_perform_write+0x214/0x3f0 [ 1891.180474][ T5086] ? shmem_write_begin+0x110/0x110 [ 1891.185676][ T5086] __generic_file_write_iter+0xe3/0x280 [ 1891.191309][ T5086] generic_file_write_iter+0x79/0x1c0 [ 1891.196696][ T5086] vfs_write+0x468/0x760 [ 1891.200959][ T5086] ksys_write+0xe8/0x1a0 [ 1891.205229][ T5086] __x64_sys_write+0x3e/0x50 [ 1891.209821][ T5086] do_syscall_64+0x2b/0x70 [ 1891.214287][ T5086] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1891.220304][ T5086] RIP: 0033:0x7f885f9dc5a9 [ 1891.224713][ T5086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1891.244400][ T5086] RSP: 002b:00007f885f151168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1891.252876][ T5086] RAX: ffffffffffffffda RBX: 00007f885fafdf80 RCX: 00007f885f9dc5a9 [ 1891.260876][ T5086] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003 [ 1891.268841][ T5086] RBP: 00007f885f1511d0 R08: 0000000000000000 R09: 0000000000000000 [ 1891.276860][ T5086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1891.284826][ T5086] R13: 00007fffdcf4cfdf R14: 00007f885f151300 R15: 0000000000022000 [ 1891.292824][ T5086] [ 1891.295860][ T5095] CPU: 0 PID: 5095 Comm: syz-executor.0 Not tainted 6.0.0-rc7-syzkaller-00042-g46452d3786a8-dirty #0 [ 1891.306777][ T5095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1891.316843][ T5095] Call Trace: [ 1891.320152][ T5095] [ 1891.323113][ T5095] dump_stack_lvl+0xd6/0x122 [ 1891.327744][ T5095] dump_stack+0x11/0x12 [ 1891.331909][ T5095] should_fail+0x242/0x250 [ 1891.336334][ T5095] should_fail_usercopy+0x16/0x20 [ 1891.341574][ T5095] copy_page_from_iter_atomic+0x24b/0xb90 [ 1891.347313][ T5095] generic_perform_write+0x214/0x3f0 [ 1891.352629][ T5095] ? file_update_time+0x1f9/0x250 [ 1891.357658][ T5095] __generic_file_write_iter+0xe3/0x280 [ 1891.363235][ T5095] generic_file_write_iter+0x79/0x1c0 [ 1891.368647][ T5095] vfs_write+0x468/0x760 [ 1891.372917][ T5095] ksys_write+0xe8/0x1a0 [ 1891.377208][ T5095] __x64_sys_write+0x3e/0x50 [ 1891.381868][ T5095] do_syscall_64+0x2b/0x70 [ 1891.386351][ T5095] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1891.392255][ T5095] RIP: 0033:0x7f2f75b1b5a9 17:43:20 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0xf, 0x10, 0xfa00, {0x0}}, 0x7ffff000) 17:43:20 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x8000) 17:43:20 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, 0x0, 0x0) [ 1891.396689][ T5095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1891.416315][ T5095] RSP: 002b:00007f2f75290168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1891.424763][ T5095] RAX: ffffffffffffffda RBX: 00007f2f75c3cf80 RCX: 00007f2f75b1b5a9 [ 1891.432744][ T5095] RDX: 0000000000001001 RSI: 0000000020000000 RDI: 0000000000000003 [ 1891.440760][ T5095] RBP: 00007f2f752901d0 R08: 0000000000000000 R09: 0000000000000000 17:43:20 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) (fail_nth: 1) 17:43:20 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfdef) (fail_nth: 4) 17:43:20 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x8000) 17:43:20 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x8000) 17:43:20 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1001) (fail_nth: 3) [ 1891.448887][ T5095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1891.456904][ T5095] R13: 00007ffc30a1e53f R14: 00007f2f75290300 R15: 0000000000022000 [ 1891.464888][ T5095] 17:43:20 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfffffdef) (fail_nth: 8) 17:43:20 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x8000) 17:43:20 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1001) (fail_nth: 4) 17:43:20 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) (fail_nth: 2) [ 1891.590437][ T5118] FAULT_INJECTION: forcing a failure. [ 1891.590437][ T5118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1891.603651][ T5118] CPU: 0 PID: 5118 Comm: syz-executor.5 Not tainted 6.0.0-rc7-syzkaller-00042-g46452d3786a8-dirty #0 [ 1891.614611][ T5118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1891.624691][ T5118] Call Trace: [ 1891.627972][ T5118] [ 1891.630907][ T5118] dump_stack_lvl+0xd6/0x122 [ 1891.635529][ T5118] dump_stack+0x11/0x12 17:43:20 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x25, 0x10, 0xfa00, {0x0}}, 0x7ffff000) 17:43:20 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfdef) (fail_nth: 5) 17:43:20 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1001) (fail_nth: 5) 17:43:20 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x8000) 17:43:20 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfffffdef) (fail_nth: 9) [ 1891.639718][ T5118] should_fail+0x242/0x250 [ 1891.644142][ T5118] should_fail_usercopy+0x16/0x20 [ 1891.649167][ T5118] copy_page_from_iter_atomic+0x24b/0xb90 [ 1891.654903][ T5118] generic_perform_write+0x214/0x3f0 [ 1891.660270][ T5118] ? file_update_time+0x1f9/0x250 [ 1891.665319][ T5118] __generic_file_write_iter+0xe3/0x280 [ 1891.670899][ T5118] generic_file_write_iter+0x79/0x1c0 [ 1891.676369][ T5118] vfs_write+0x468/0x760 [ 1891.680636][ T5118] ksys_write+0xe8/0x1a0 [ 1891.684912][ T5118] __x64_sys_write+0x3e/0x50 [ 1891.685769][ T5125] FAULT_INJECTION: forcing a failure. [ 1891.685769][ T5125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1891.689504][ T5118] do_syscall_64+0x2b/0x70 [ 1891.707055][ T5118] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1891.712957][ T5118] RIP: 0033:0x7f25565575a9 [ 1891.717365][ T5118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1891.737043][ T5118] RSP: 002b:00007f2555ccc168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1891.745541][ T5118] RAX: ffffffffffffffda RBX: 00007f2556678f80 RCX: 00007f25565575a9 [ 1891.753511][ T5118] RDX: 0000000008800000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1891.761485][ T5118] RBP: 00007f2555ccc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1891.769478][ T5118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1891.777444][ T5118] R13: 00007fffd3703cdf R14: 00007f2555ccc300 R15: 0000000000022000 [ 1891.785422][ T5118] [ 1891.788441][ T5125] CPU: 1 PID: 5125 Comm: syz-executor.0 Not tainted 6.0.0-rc7-syzkaller-00042-g46452d3786a8-dirty #0 [ 1891.799300][ T5125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1891.809370][ T5125] Call Trace: [ 1891.812650][ T5125] [ 1891.815585][ T5125] dump_stack_lvl+0xd6/0x122 [ 1891.820267][ T5125] dump_stack+0x11/0x12 [ 1891.824430][ T5125] should_fail+0x242/0x250 [ 1891.829044][ T5125] should_fail_usercopy+0x16/0x20 [ 1891.834256][ T5125] copy_page_from_iter_atomic+0x24b/0xb90 [ 1891.839989][ T5125] generic_perform_write+0x214/0x3f0 [ 1891.845321][ T5125] ? shmem_write_begin+0x110/0x110 [ 1891.850447][ T5125] __generic_file_write_iter+0xe3/0x280 [ 1891.856125][ T5125] generic_file_write_iter+0x79/0x1c0 [ 1891.861558][ T5125] vfs_write+0x468/0x760 [ 1891.865839][ T5125] ksys_write+0xe8/0x1a0 [ 1891.870113][ T5125] __x64_sys_write+0x3e/0x50 [ 1891.874711][ T5125] do_syscall_64+0x2b/0x70 [ 1891.879201][ T5125] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1891.885275][ T5125] RIP: 0033:0x7f2f75b1b5a9 17:43:20 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfffffdef) 17:43:20 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x8000) 17:43:20 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) (fail_nth: 3) 17:43:20 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfdef) [ 1891.889698][ T5125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1891.909384][ T5125] RSP: 002b:00007f2f75290168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1891.917820][ T5125] RAX: ffffffffffffffda RBX: 00007f2f75c3cf80 RCX: 00007f2f75b1b5a9 [ 1891.925811][ T5125] RDX: 0000000000001001 RSI: 0000000020000000 RDI: 0000000000000003 [ 1891.933791][ T5125] RBP: 00007f2f752901d0 R08: 0000000000000000 R09: 0000000000000000 17:43:20 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x8000) 17:43:20 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) (fail_nth: 4) 17:43:20 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000) [ 1891.941789][ T5125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1891.949771][ T5125] R13: 00007ffc30a1e53f R14: 00007f2f75290300 R15: 0000000000022000 [ 1891.957782][ T5125] 17:43:20 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x45, 0x10, 0xfa00, {0x0}}, 0x7ffff000) 17:43:20 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0xf, 0x10, 0xfa00, {0x0}}, 0xfdef) 17:43:20 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000) 17:43:20 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1001) (fail_nth: 6) 17:43:20 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0xf, 0x10, 0xfa00, {0x0}}, 0xfffffdef) 17:43:20 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000) 17:43:20 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x25, 0x10, 0xfa00, {0x0}}, 0xfdef) 17:43:20 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) (fail_nth: 5) 17:43:20 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x45, 0x10, 0xfa00, {0x0}}, 0xfdef) 17:43:20 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) [ 1892.259856][ T5164] FAULT_INJECTION: forcing a failure. [ 1892.259856][ T5164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1892.272988][ T5164] CPU: 1 PID: 5164 Comm: syz-executor.5 Not tainted 6.0.0-rc7-syzkaller-00042-g46452d3786a8-dirty #0 [ 1892.283921][ T5164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1892.294054][ T5164] Call Trace: [ 1892.297345][ T5164] [ 1892.300286][ T5164] dump_stack_lvl+0xd6/0x122 [ 1892.305041][ T5164] dump_stack+0x11/0x12 17:43:20 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x110, 0xfa00, {0x0}}, 0xfdef) 17:43:20 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x25, 0x10, 0xfa00, {0x0}}, 0x7ffff000) [ 1892.309254][ T5164] should_fail+0x242/0x250 [ 1892.313703][ T5164] should_fail_usercopy+0x16/0x20 [ 1892.318832][ T5164] copy_page_from_iter_atomic+0x24b/0xb90 [ 1892.324681][ T5164] generic_perform_write+0x214/0x3f0 [ 1892.330054][ T5164] ? shmem_write_begin+0x110/0x110 [ 1892.335185][ T5164] __generic_file_write_iter+0xe3/0x280 [ 1892.340754][ T5164] generic_file_write_iter+0x79/0x1c0 [ 1892.346210][ T5164] vfs_write+0x468/0x760 [ 1892.350512][ T5164] ksys_write+0xe8/0x1a0 [ 1892.354835][ T5164] __x64_sys_write+0x3e/0x50 [ 1892.359438][ T5164] do_syscall_64+0x2b/0x70 [ 1892.363957][ T5164] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1892.369924][ T5164] RIP: 0033:0x7f25565575a9 [ 1892.374349][ T5164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1892.393978][ T5164] RSP: 002b:00007f2555ccc168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1892.402468][ T5164] RAX: ffffffffffffffda RBX: 00007f2556678f80 RCX: 00007f25565575a9 17:43:21 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x110, 0xfa00, {0x0}}, 0x7ffff000) 17:43:21 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0xef0d, 0xfa00, {0x0}}, 0xfdef) [ 1892.410454][ T5164] RDX: 0000000008800000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1892.418478][ T5164] RBP: 00007f2555ccc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1892.426526][ T5164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1892.434515][ T5164] R13: 00007fffd3703cdf R14: 00007f2555ccc300 R15: 0000000000022000 [ 1892.442572][ T5164] [ 1892.466356][ T5172] FAULT_INJECTION: forcing a failure. [ 1892.466356][ T5172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1892.479437][ T5172] CPU: 1 PID: 5172 Comm: syz-executor.0 Not tainted 6.0.0-rc7-syzkaller-00042-g46452d3786a8-dirty #0 [ 1892.490336][ T5172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1892.500462][ T5172] Call Trace: [ 1892.503809][ T5172] [ 1892.506816][ T5172] dump_stack_lvl+0xd6/0x122 [ 1892.511551][ T5172] dump_stack+0x11/0x12 [ 1892.515787][ T5172] should_fail+0x242/0x250 [ 1892.520243][ T5172] should_fail_usercopy+0x16/0x20 [ 1892.525284][ T5172] _copy_to_user+0x1a/0x90 [ 1892.529720][ T5172] simple_read_from_buffer+0xab/0x120 [ 1892.535144][ T5172] proc_fail_nth_read+0x10d/0x150 [ 1892.540207][ T5172] ? proc_fault_inject_write+0x230/0x230 [ 1892.545879][ T5172] vfs_read+0x198/0x560 [ 1892.550182][ T5172] ? __fget_files+0x1a7/0x1e0 [ 1892.554921][ T5172] ksys_read+0xe8/0x1a0 [ 1892.559103][ T5172] __x64_sys_read+0x3e/0x50 [ 1892.563631][ T5172] do_syscall_64+0x2b/0x70 [ 1892.568123][ T5172] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1892.574093][ T5172] RIP: 0033:0x7f2f75acd2ec [ 1892.578607][ T5172] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1892.598241][ T5172] RSP: 002b:00007f2f75290160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1892.606721][ T5172] RAX: ffffffffffffffda RBX: 00007f2f75c3cf80 RCX: 00007f2f75acd2ec 17:43:21 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0xef1d, 0xfa00, {0x0}}, 0xfdef) 17:43:21 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1001) 17:43:21 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x25, 0x10, 0xfa00, {0x0}}, 0xfffffdef) 17:43:21 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0xef2d, 0xfa00, {0x0}}, 0xfdef) 17:43:21 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x25, 0x10, 0xfa00, {0x0}}, 0x1001) [ 1892.614704][ T5172] RDX: 000000000000000f RSI: 00007f2f752901e0 RDI: 0000000000000004 [ 1892.622811][ T5172] RBP: 00007f2f752901d0 R08: 0000000000000000 R09: 0000000000000000 [ 1892.630809][ T5172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1892.638873][ T5172] R13: 00007ffc30a1e53f R14: 00007f2f75290300 R15: 0000000000022000 [ 1892.646869][ T5172] 17:43:21 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) (fail_nth: 6) 17:43:21 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x45, 0x10, 0xfa00, {0x0}}, 0x7ffff000) 17:43:21 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0xef3d, 0xfa00, {0x0}}, 0xfdef) 17:43:21 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x45, 0x10, 0xfa00, {0x0}}, 0x1001) 17:43:21 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa02, {0x0}}, 0x7ffff000) 17:43:21 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x110, 0xfa00, {0x0}}, 0x1001) 17:43:21 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0xef4d, 0xfa00, {0x0}}, 0xfdef) 17:43:21 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) (fail_nth: 7) 17:43:21 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa02, {0x0}}, 0x1001) [ 1892.885549][ T5202] FAULT_INJECTION: forcing a failure. [ 1892.885549][ T5202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1892.898722][ T5202] CPU: 0 PID: 5202 Comm: syz-executor.5 Not tainted 6.0.0-rc7-syzkaller-00042-g46452d3786a8-dirty #0 [ 1892.909580][ T5202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1892.919641][ T5202] Call Trace: [ 1892.922920][ T5202] [ 1892.925852][ T5202] dump_stack_lvl+0xd6/0x122 [ 1892.930464][ T5202] dump_stack+0x11/0x12 [ 1892.934665][ T5202] should_fail+0x242/0x250 [ 1892.939175][ T5202] should_fail_usercopy+0x16/0x20 [ 1892.944224][ T5202] copy_page_from_iter_atomic+0x24b/0xb90 [ 1892.950039][ T5202] generic_perform_write+0x214/0x3f0 [ 1892.955358][ T5202] ? shmem_write_begin+0x110/0x110 [ 1892.960534][ T5202] __generic_file_write_iter+0xe3/0x280 [ 1892.966105][ T5202] generic_file_write_iter+0x79/0x1c0 [ 1892.971694][ T5202] vfs_write+0x468/0x760 [ 1892.975962][ T5202] ksys_write+0xe8/0x1a0 [ 1892.980274][ T5202] __x64_sys_write+0x3e/0x50 [ 1892.984933][ T5202] do_syscall_64+0x2b/0x70 [ 1892.989379][ T5202] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1892.995298][ T5202] RIP: 0033:0x7f25565575a9 [ 1892.999803][ T5202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1893.019440][ T5202] RSP: 002b:00007f2555ccc168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1893.027917][ T5202] RAX: ffffffffffffffda RBX: 00007f2556678f80 RCX: 00007f25565575a9 17:43:21 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x45, 0x10, 0xfa00, {0x0}}, 0xfffffdef) 17:43:21 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0xef5d, 0xfa00, {0x0}}, 0xfdef) 17:43:21 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa06, {0x0}}, 0x1001) [ 1893.035900][ T5202] RDX: 0000000008800000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1893.043894][ T5202] RBP: 00007f2555ccc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1893.051954][ T5202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1893.060004][ T5202] R13: 00007fffd3703cdf R14: 00007f2555ccc300 R15: 0000000000022000 [ 1893.068004][ T5202] 17:43:21 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa08, {0x0}}, 0x1001) 17:43:21 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0xf, 0x10, 0xfa00, {0x0}}, 0x7ffff000) 17:43:21 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa04, {0x0}}, 0x7ffff000) 17:43:21 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa10, {0x0}}, 0x1001) 17:43:21 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0xef6d, 0xfa00, {0x0}}, 0xfdef) 17:43:21 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0xef7d, 0xfa00, {0x0}}, 0xfdef) 17:43:21 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1001) 17:43:21 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) (fail_nth: 8) 17:43:21 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x1001) 17:43:22 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x6}}, 0x1001) 17:43:22 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa06, {0x0}}, 0x7ffff000) 17:43:22 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) (fail_nth: 9) 17:43:22 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0xef8d, 0xfa00, {0x0}}, 0xfdef) 17:43:22 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x110, 0xfa00, {0x0}}, 0xfffffdef) 17:43:22 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) (fail_nth: 1) 17:43:22 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x8}}, 0x1001) 17:43:22 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0xef9d, 0xfa00, {0x0}}, 0xfdef) 17:43:22 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0xefad, 0xfa00, {0x0}}, 0xfdef) 17:43:22 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0xefbd, 0xfa00, {0x0}}, 0xfdef) [ 1893.441942][ T5233] FAULT_INJECTION: forcing a failure. [ 1893.441942][ T5233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1893.455082][ T5233] CPU: 1 PID: 5233 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-00042-g46452d3786a8-dirty #0 [ 1893.466124][ T5233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1893.476211][ T5233] Call Trace: [ 1893.479499][ T5233] [ 1893.482440][ T5233] dump_stack_lvl+0xd6/0x122 [ 1893.487106][ T5233] dump_stack+0x11/0x12 [ 1893.491278][ T5233] should_fail+0x242/0x250 [ 1893.495858][ T5233] should_fail_usercopy+0x16/0x20 [ 1893.500902][ T5233] _copy_to_user+0x1a/0x90 [ 1893.505407][ T5233] simple_read_from_buffer+0xab/0x120 [ 1893.511014][ T5233] proc_fail_nth_read+0x10d/0x150 [ 1893.516063][ T5233] ? proc_fault_inject_write+0x230/0x230 [ 1893.521735][ T5233] vfs_read+0x198/0x560 [ 1893.525936][ T5233] ? __fget_files+0x1a7/0x1e0 [ 1893.530644][ T5233] ksys_read+0xe8/0x1a0 [ 1893.534819][ T5233] __x64_sys_read+0x3e/0x50 [ 1893.539334][ T5233] do_syscall_64+0x2b/0x70 [ 1893.543768][ T5233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1893.549708][ T5233] RIP: 0033:0x7f832a4802ec [ 1893.554129][ T5233] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1893.573759][ T5233] RSP: 002b:00007f8329c43160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1893.582255][ T5233] RAX: ffffffffffffffda RBX: 00007f832a5eff80 RCX: 00007f832a4802ec 17:43:22 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x10}}, 0x1001) [ 1893.590348][ T5233] RDX: 000000000000000f RSI: 00007f8329c431e0 RDI: 0000000000000004 [ 1893.598329][ T5233] RBP: 00007f8329c431d0 R08: 0000000000000000 R09: 0000000000000000 [ 1893.606367][ T5233] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 1893.614352][ T5233] R13: 00007ffc9151295f R14: 00007f8329c43300 R15: 0000000000022000 [ 1893.622478][ T5233] [ 1893.635321][ T5246] FAULT_INJECTION: forcing a failure. [ 1893.635321][ T5246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1893.648416][ T5246] CPU: 1 PID: 5246 Comm: syz-executor.5 Not tainted 6.0.0-rc7-syzkaller-00042-g46452d3786a8-dirty #0 [ 1893.659357][ T5246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1893.669474][ T5246] Call Trace: [ 1893.672780][ T5246] [ 1893.675761][ T5246] dump_stack_lvl+0xd6/0x122 [ 1893.680429][ T5246] dump_stack+0x11/0x12 [ 1893.684709][ T5246] should_fail+0x242/0x250 17:43:22 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa02, {0x0}}, 0xfffffdef) [ 1893.689138][ T5246] should_fail_usercopy+0x16/0x20 [ 1893.694188][ T5246] copy_page_from_iter_atomic+0x24b/0xb90 [ 1893.699958][ T5246] generic_perform_write+0x214/0x3f0 [ 1893.705371][ T5246] ? shmem_write_begin+0x110/0x110 [ 1893.710517][ T5246] __generic_file_write_iter+0xe3/0x280 [ 1893.716131][ T5246] generic_file_write_iter+0x79/0x1c0 [ 1893.721522][ T5246] vfs_write+0x468/0x760 [ 1893.725784][ T5246] ksys_write+0xe8/0x1a0 [ 1893.730119][ T5246] __x64_sys_write+0x3e/0x50 [ 1893.734716][ T5246] do_syscall_64+0x2b/0x70 17:43:22 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x204}}, 0x1001) 17:43:22 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa08, {0x0}}, 0x7ffff000) [ 1893.739148][ T5246] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1893.745141][ T5246] RIP: 0033:0x7f25565575a9 [ 1893.749559][ T5246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1893.769261][ T5246] RSP: 002b:00007f2555ccc168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1893.777744][ T5246] RAX: ffffffffffffffda RBX: 00007f2556678f80 RCX: 00007f25565575a9 17:43:22 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0xefcd, 0xfa00, {0x0}}, 0xfdef) 17:43:22 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) [ 1893.785730][ T5246] RDX: 0000000008800000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1893.793720][ T5246] RBP: 00007f2555ccc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1893.802169][ T5246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1893.810156][ T5246] R13: 00007fffd3703cdf R14: 00007f2555ccc300 R15: 0000000000022000 [ 1893.818147][ T5246] 17:43:22 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) (fail_nth: 10) 17:43:22 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x402}}, 0x1001) 17:43:22 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0xefdd, 0xfa00, {0x0}}, 0xfdef) 17:43:22 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3002, 0x0, 0x10, r0, 0x0) 17:43:22 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa04, {0x0}}, 0xfffffdef) 17:43:22 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0xefed, 0xfa00, {0x0}}, 0xfdef) 17:43:22 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3003, 0x0, 0x10, r0, 0x0) 17:43:22 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x406}}, 0x1001) 17:43:22 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x408}}, 0x1001) 17:43:22 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa0c, {0x0}}, 0x7ffff000) 17:43:22 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) (fail_nth: 11) 17:43:22 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3004, 0x0, 0x10, r0, 0x0) 17:43:22 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0xeffd, 0xfa00, {0x0}}, 0xfdef) 17:43:22 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x600}}, 0x1001) 17:43:22 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x604}}, 0x1001) [ 1894.080076][ T5281] FAULT_INJECTION: forcing a failure. [ 1894.080076][ T5281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1894.093236][ T5281] CPU: 1 PID: 5281 Comm: syz-executor.5 Not tainted 6.0.0-rc7-syzkaller-00042-g46452d3786a8-dirty #0 [ 1894.104180][ T5281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1894.114247][ T5281] Call Trace: [ 1894.117553][ T5281] [ 1894.120490][ T5281] dump_stack_lvl+0xd6/0x122 [ 1894.125174][ T5281] dump_stack+0x11/0x12 17:43:22 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) [ 1894.129362][ T5281] should_fail+0x242/0x250 [ 1894.133787][ T5281] should_fail_usercopy+0x16/0x20 [ 1894.138819][ T5281] copy_page_from_iter_atomic+0x24b/0xb90 [ 1894.144608][ T5281] generic_perform_write+0x214/0x3f0 [ 1894.149951][ T5281] ? shmem_write_begin+0x110/0x110 [ 1894.155076][ T5281] __generic_file_write_iter+0xe3/0x280 [ 1894.160658][ T5281] generic_file_write_iter+0x79/0x1c0 [ 1894.166108][ T5281] vfs_write+0x468/0x760 [ 1894.170364][ T5281] ksys_write+0xe8/0x1a0 [ 1894.174798][ T5281] __x64_sys_write+0x3e/0x50 17:43:22 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa06, {0x0}}, 0xfffffdef) 17:43:22 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x0) 17:43:22 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa02, {0x0}}, 0xfdef) 17:43:22 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x10, r0, 0x0) [ 1894.179411][ T5281] do_syscall_64+0x2b/0x70 [ 1894.183903][ T5281] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1894.189831][ T5281] RIP: 0033:0x7f25565575a9 [ 1894.194251][ T5281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1894.213908][ T5281] RSP: 002b:00007f2555ccc168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1894.222341][ T5281] RAX: ffffffffffffffda RBX: 00007f2556678f80 RCX: 00007f25565575a9 17:43:22 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x804}}, 0x1001) [ 1894.230355][ T5281] RDX: 0000000008800000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1894.238378][ T5281] RBP: 00007f2555ccc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1894.246360][ T5281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1894.254351][ T5281] R13: 00007fffd3703cdf R14: 00007f2555ccc300 R15: 0000000000022000 [ 1894.262341][ T5281] 17:43:23 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa10, {0x0}}, 0x7ffff000) 17:43:23 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) (fail_nth: 12) 17:43:23 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa04, {0x0}}, 0xfdef) 17:43:23 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x10, r0, 0x0) 17:43:23 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x4000}}, 0x1001) 17:43:23 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa08, {0x0}}, 0xfffffdef) 17:43:23 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa06, {0x0}}, 0xfdef) 17:43:23 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x8008}}, 0x1001) 17:43:23 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300, 0x10, r0, 0x0) 17:43:23 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) (fail_nth: 13) 17:43:23 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa08, {0x0}}, 0xfdef) 17:43:23 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r0, 0x0) [ 1894.496554][ T24] audit: type=1400 audit(1664387003.122:248): avc: denied { execute } for pid=5310 comm="syz-executor.3" path=2F6465762F6273672F2333363630202864656C6574656429 dev="devtmpfs" ino=3660 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 1894.564180][ T5327] FAULT_INJECTION: forcing a failure. [ 1894.564180][ T5327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1894.577351][ T5327] CPU: 1 PID: 5327 Comm: syz-executor.5 Not tainted 6.0.0-rc7-syzkaller-00042-g46452d3786a8-dirty #0 [ 1894.588314][ T5327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1894.598574][ T5327] Call Trace: [ 1894.601853][ T5327] [ 1894.604831][ T5327] dump_stack_lvl+0xd6/0x122 [ 1894.609441][ T5327] dump_stack+0x11/0x12 [ 1894.613609][ T5327] should_fail+0x242/0x250 [ 1894.618064][ T5327] should_fail_usercopy+0x16/0x20 [ 1894.623105][ T5327] copy_page_from_iter_atomic+0x24b/0xb90 [ 1894.628849][ T5327] generic_perform_write+0x214/0x3f0 [ 1894.634188][ T5327] ? shmem_write_begin+0x110/0x110 [ 1894.639382][ T5327] __generic_file_write_iter+0xe3/0x280 [ 1894.644988][ T5327] generic_file_write_iter+0x79/0x1c0 [ 1894.650393][ T5327] vfs_write+0x468/0x760 [ 1894.654722][ T5327] ksys_write+0xe8/0x1a0 [ 1894.659033][ T5327] __x64_sys_write+0x3e/0x50 [ 1894.663661][ T5327] do_syscall_64+0x2b/0x70 [ 1894.668096][ T5327] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1894.674104][ T5327] RIP: 0033:0x7f25565575a9 [ 1894.678581][ T5327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1894.698211][ T5327] RSP: 002b:00007f2555ccc168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1894.706632][ T5327] RAX: ffffffffffffffda RBX: 00007f2556678f80 RCX: 00007f25565575a9 17:43:23 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x7ffff000) 17:43:23 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x100000}}, 0x1001) 17:43:23 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa10, {0x0}}, 0xfdef) 17:43:23 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x10, r0, 0x0) 17:43:23 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa0c, {0x0}}, 0xfffffdef) 17:43:23 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000000, 0x10, r0, 0x0) 17:43:23 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1000000}}, 0x1001) 17:43:23 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfdef) 17:43:23 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2000000}}, 0x1001) [ 1894.714645][ T5327] RDX: 0000000008800000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1894.722683][ T5327] RBP: 00007f2555ccc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1894.730666][ T5327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1894.738643][ T5327] R13: 00007fffd3703cdf R14: 00007f2555ccc300 R15: 0000000000022000 [ 1894.746673][ T5327] 17:43:23 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) (fail_nth: 14) 17:43:23 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0xfdef) 17:43:23 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000000, 0x10, r0, 0x0) 17:43:23 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x7ffff000) 17:43:23 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2040000}}, 0x1001) 17:43:23 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) (fail_nth: 15) 17:43:23 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x4}}, 0xfdef) 17:43:23 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x7fffffffffffc, 0x10, r0, 0x0) 17:43:23 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa10, {0x0}}, 0xfffffdef) 17:43:23 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x6}}, 0xfdef) 17:43:23 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x6000000}}, 0x1001) 17:43:23 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x8}}, 0xfdef) 17:43:23 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x6040000}}, 0x1001) [ 1895.017612][ T5359] FAULT_INJECTION: forcing a failure. [ 1895.017612][ T5359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1895.030808][ T5359] CPU: 1 PID: 5359 Comm: syz-executor.5 Not tainted 6.0.0-rc7-syzkaller-00042-g46452d3786a8-dirty #0 [ 1895.041678][ T5359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1895.051913][ T5359] Call Trace: [ 1895.055244][ T5359] [ 1895.058182][ T5359] dump_stack_lvl+0xd6/0x122 [ 1895.062846][ T5359] dump_stack+0x11/0x12 17:43:23 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x4}}, 0x7ffff000) [ 1895.067153][ T5359] should_fail+0x242/0x250 [ 1895.071593][ T5359] should_fail_usercopy+0x16/0x20 [ 1895.076654][ T5359] copy_page_from_iter_atomic+0x24b/0xb90 [ 1895.082464][ T5359] generic_perform_write+0x214/0x3f0 [ 1895.087815][ T5359] ? shmem_write_begin+0x110/0x110 [ 1895.093042][ T5359] __generic_file_write_iter+0xe3/0x280 [ 1895.098643][ T5359] generic_file_write_iter+0x79/0x1c0 [ 1895.104131][ T5359] vfs_write+0x468/0x760 [ 1895.108544][ T5359] ksys_write+0xe8/0x1a0 [ 1895.112834][ T5359] __x64_sys_write+0x3e/0x50 [ 1895.117465][ T5359] do_syscall_64+0x2b/0x70 [ 1895.121911][ T5359] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1895.127837][ T5359] RIP: 0033:0x7f25565575a9 [ 1895.132258][ T5359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1895.151900][ T5359] RSP: 002b:00007f2555ccc168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1895.160392][ T5359] RAX: ffffffffffffffda RBX: 00007f2556678f80 RCX: 00007f25565575a9 17:43:23 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x10}}, 0xfdef) 17:43:23 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x8000000}}, 0x1001) 17:43:23 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000000000, 0x10, r0, 0x0) [ 1895.168436][ T5359] RDX: 0000000008800000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1895.176418][ T5359] RBP: 00007f2555ccc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1895.184401][ T5359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1895.192382][ T5359] R13: 00007fffd3703cdf R14: 00007f2555ccc300 R15: 0000000000022000 [ 1895.200397][ T5359] 17:43:24 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) (fail_nth: 16) 17:43:24 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x204}}, 0xfdef) 17:43:24 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x8040000}}, 0x1001) 17:43:24 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000000000000, 0x10, r0, 0x0) 17:43:24 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfffffdef) 17:43:24 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x6}}, 0x7ffff000) 17:43:24 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x8800000}}, 0x1001) 17:43:24 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x402}}, 0xfdef) 17:43:24 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000000000000, 0x10, r0, 0x0) 17:43:24 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) (fail_nth: 17) 17:43:24 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x10000000}}, 0x1001) 17:43:24 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x400000000000000, 0x10, r0, 0x0) 17:43:24 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x406}}, 0xfdef) 17:43:24 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x40000000}}, 0x1001) 17:43:24 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xfcffffffffff0700, 0x10, r0, 0x0) 17:43:24 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1002) [ 1895.412087][ T5399] FAULT_INJECTION: forcing a failure. [ 1895.412087][ T5399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1895.425334][ T5399] CPU: 1 PID: 5399 Comm: syz-executor.5 Not tainted 6.0.0-rc7-syzkaller-00042-g46452d3786a8-dirty #0 [ 1895.436194][ T5399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1895.446333][ T5399] Call Trace: [ 1895.449614][ T5399] [ 1895.452548][ T5399] dump_stack_lvl+0xd6/0x122 [ 1895.457189][ T5399] dump_stack+0x11/0x12 [ 1895.461431][ T5399] should_fail+0x242/0x250 [ 1895.465887][ T5399] should_fail_usercopy+0x16/0x20 [ 1895.470957][ T5399] copy_page_from_iter_atomic+0x24b/0xb90 [ 1895.476857][ T5399] generic_perform_write+0x214/0x3f0 [ 1895.482166][ T5399] ? shmem_write_begin+0x110/0x110 [ 1895.487360][ T5399] __generic_file_write_iter+0xe3/0x280 [ 1895.492970][ T5399] generic_file_write_iter+0x79/0x1c0 [ 1895.498365][ T5399] vfs_write+0x468/0x760 [ 1895.502660][ T5399] ksys_write+0xe8/0x1a0 [ 1895.506923][ T5399] __x64_sys_write+0x3e/0x50 [ 1895.511569][ T5399] do_syscall_64+0x2b/0x70 [ 1895.516057][ T5399] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1895.522000][ T5399] RIP: 0033:0x7f25565575a9 [ 1895.526432][ T5399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1895.546053][ T5399] RSP: 002b:00007f2555ccc168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1895.554473][ T5399] RAX: ffffffffffffffda RBX: 00007f2556678f80 RCX: 00007f25565575a9 17:43:24 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0xfffffdef) [ 1895.562500][ T5399] RDX: 0000000008800000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1895.570564][ T5399] RBP: 00007f2555ccc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1895.578562][ T5399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1895.586536][ T5399] R13: 00007fffd3703cdf R14: 00007f2555ccc300 R15: 0000000000022000 [ 1895.594515][ T5399] 17:43:24 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x8}}, 0x7ffff000) 17:43:24 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x2) 17:43:24 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1003) 17:43:24 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x408}}, 0xfdef) 17:43:24 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) (fail_nth: 18) 17:43:24 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1004) 17:43:24 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x3) 17:43:24 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x600}}, 0xfdef) 17:43:24 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x4) 17:43:24 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x604}}, 0xfdef) 17:43:24 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) (fail_nth: 19) 17:43:24 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x4}}, 0xfffffdef) [ 1895.860368][ T5439] FAULT_INJECTION: forcing a failure. [ 1895.860368][ T5439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1895.873553][ T5439] CPU: 1 PID: 5439 Comm: syz-executor.5 Not tainted 6.0.0-rc7-syzkaller-00042-g46452d3786a8-dirty #0 [ 1895.884460][ T5439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1895.894596][ T5439] Call Trace: [ 1895.897879][ T5439] [ 1895.900810][ T5439] dump_stack_lvl+0xd6/0x122 [ 1895.905479][ T5439] dump_stack+0x11/0x12 17:43:24 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xc}}, 0x7ffff000) 17:43:24 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1005) 17:43:24 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x300) 17:43:24 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x804}}, 0xfdef) 17:43:24 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xdef}}, 0xfdef) [ 1895.909694][ T5439] should_fail+0x242/0x250 [ 1895.914115][ T5439] should_fail_usercopy+0x16/0x20 [ 1895.919154][ T5439] copy_page_from_iter_atomic+0x24b/0xb90 [ 1895.924909][ T5439] generic_perform_write+0x214/0x3f0 [ 1895.930215][ T5439] ? shmem_write_begin+0x110/0x110 [ 1895.935505][ T5439] __generic_file_write_iter+0xe3/0x280 [ 1895.941945][ T5439] generic_file_write_iter+0x79/0x1c0 [ 1895.947352][ T5439] vfs_write+0x468/0x760 [ 1895.951693][ T5439] ksys_write+0xe8/0x1a0 [ 1895.955963][ T5439] __x64_sys_write+0x3e/0x50 17:43:24 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x4000}}, 0xfdef) 17:43:24 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfdef) 17:43:24 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x8008}}, 0xfdef) [ 1895.960596][ T5439] do_syscall_64+0x2b/0x70 [ 1895.965108][ T5439] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1895.971112][ T5439] RIP: 0033:0x7f25565575a9 [ 1895.975575][ T5439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1895.995219][ T5439] RSP: 002b:00007f2555ccc168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 17:43:24 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x1000000) 17:43:24 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) [ 1896.003655][ T5439] RAX: ffffffffffffffda RBX: 00007f2556678f80 RCX: 00007f25565575a9 [ 1896.011733][ T5439] RDX: 0000000008800000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1896.019715][ T5439] RBP: 00007f2555ccc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1896.027755][ T5439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1896.035818][ T5439] R13: 00007fffd3703cdf R14: 00007f2555ccc300 R15: 0000000000022000 [ 1896.043806][ T5439] 17:43:24 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) (fail_nth: 20) 17:43:24 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x6}}, 0xfffffdef) 17:43:24 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xef0d}}, 0xfdef) 17:43:24 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x2000000) 17:43:24 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x10}}, 0x7ffff000) 17:43:24 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x7ffff000) 17:43:24 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) (fail_nth: 21) 17:43:24 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x3000000) 17:43:24 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x100000}}, 0xfdef) 17:43:24 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1000000}}, 0xfdef) [ 1896.339441][ T5476] FAULT_INJECTION: forcing a failure. [ 1896.339441][ T5476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1896.352586][ T5476] CPU: 1 PID: 5476 Comm: syz-executor.5 Not tainted 6.0.0-rc7-syzkaller-00042-g46452d3786a8-dirty #0 [ 1896.363469][ T5476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1896.373559][ T5476] Call Trace: [ 1896.376839][ T5476] [ 1896.379773][ T5476] dump_stack_lvl+0xd6/0x122 [ 1896.384431][ T5476] dump_stack+0x11/0x12 [ 1896.388674][ T5476] should_fail+0x242/0x250 [ 1896.393173][ T5476] should_fail_usercopy+0x16/0x20 [ 1896.398219][ T5476] copy_page_from_iter_atomic+0x24b/0xb90 [ 1896.404034][ T5476] generic_perform_write+0x214/0x3f0 [ 1896.409401][ T5476] ? shmem_write_begin+0x110/0x110 [ 1896.414602][ T5476] __generic_file_write_iter+0xe3/0x280 [ 1896.420178][ T5476] generic_file_write_iter+0x79/0x1c0 [ 1896.425594][ T5476] vfs_write+0x468/0x760 [ 1896.429938][ T5476] ksys_write+0xe8/0x1a0 [ 1896.434291][ T5476] __x64_sys_write+0x3e/0x50 17:43:25 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x8}}, 0xfffffdef) 17:43:25 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x4000000) [ 1896.439012][ T5476] do_syscall_64+0x2b/0x70 [ 1896.443448][ T5476] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1896.449432][ T5476] RIP: 0033:0x7f25565575a9 [ 1896.453876][ T5476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1896.473496][ T5476] RSP: 002b:00007f2555ccc168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1896.481929][ T5476] RAX: ffffffffffffffda RBX: 00007f2556678f80 RCX: 00007f25565575a9 17:43:25 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2000000}}, 0xfdef) 17:43:25 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2040000}}, 0xfdef) 17:43:25 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x7fffffffffffc) 17:43:25 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x100000000000000) [ 1896.489969][ T5476] RDX: 0000000008800000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1896.498016][ T5476] RBP: 00007f2555ccc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1896.506342][ T5476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1896.514326][ T5476] R13: 00007fffd3703cdf R14: 00007f2555ccc300 R15: 0000000000022000 [ 1896.522443][ T5476] 17:43:25 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x4000000}}, 0xfdef) 17:43:25 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfffffdef) 17:43:25 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) (fail_nth: 22) 17:43:25 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x204}}, 0x7ffff000) 17:43:25 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x200000000000000) 17:43:25 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x6000000}}, 0xfdef) 17:43:25 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xc}}, 0xfffffdef) 17:43:25 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x6040000}}, 0xfdef) 17:43:25 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x300000000000000) 17:43:25 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) (fail_nth: 23) 17:43:25 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x400000000000000) 17:43:25 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0xfcffffffffff0700) 17:43:25 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x300000c, 0x10, r0, 0x7) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f00000000c0)={{{0x5, 0x1}}, 0x84, 0x5, &(0x7f0000000300)="f8bcef13db4c906e36e49783840800aadfad3cb36c60171ece0900dfe2c3dc98036c820682b211df6bb61881331b9d4c275fe25591a7ee8bdbf9b53f43bc11e00c8d1d60bd51a4bbc3d3ae0a60b5e01dbbbf4a834533d9c7830169f2701189040000000000000061ca8f878cb9793264efdc1c7b7af24323aa322faa6ef741e6d8ee3c27"}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x24201, 0x0) r2 = socket(0x15, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) setsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000240), 0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x34000, 0x0) ioctl$USBDEVFS_RESETEP(r3, 0x80045503, &(0x7f00000002c0)) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042abd7000fbdbdf251100000009003200080000000600280003000000050033000200000005002e0001000000"], 0x34}, 0x1, 0x0, 0x0, 0x8000801}, 0x4004000) [ 1896.790364][ T5516] FAULT_INJECTION: forcing a failure. [ 1896.790364][ T5516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1896.803550][ T5516] CPU: 0 PID: 5516 Comm: syz-executor.5 Not tainted 6.0.0-rc7-syzkaller-00042-g46452d3786a8-dirty #0 [ 1896.814433][ T5516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1896.824587][ T5516] Call Trace: [ 1896.827874][ T5516] [ 1896.830809][ T5516] dump_stack_lvl+0xd6/0x122 [ 1896.835421][ T5516] dump_stack+0x11/0x12 [ 1896.839633][ T5516] should_fail+0x242/0x250 [ 1896.844064][ T5516] should_fail_usercopy+0x16/0x20 [ 1896.849110][ T5516] copy_page_from_iter_atomic+0x24b/0xb90 [ 1896.854940][ T5516] generic_perform_write+0x214/0x3f0 [ 1896.860325][ T5516] ? shmem_write_begin+0x110/0x110 [ 1896.865459][ T5516] __generic_file_write_iter+0xe3/0x280 [ 1896.871055][ T5516] generic_file_write_iter+0x79/0x1c0 [ 1896.876446][ T5516] vfs_write+0x468/0x760 [ 1896.880706][ T5516] ksys_write+0xe8/0x1a0 [ 1896.885093][ T5516] __x64_sys_write+0x3e/0x50 17:43:25 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x7ffffffff000) 17:43:25 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x300000c, 0x10, r0, 0x7) (async) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f00000000c0)={{{0x5, 0x1}}, 0x84, 0x5, &(0x7f0000000300)="f8bcef13db4c906e36e49783840800aadfad3cb36c60171ece0900dfe2c3dc98036c820682b211df6bb61881331b9d4c275fe25591a7ee8bdbf9b53f43bc11e00c8d1d60bd51a4bbc3d3ae0a60b5e01dbbbf4a834533d9c7830169f2701189040000000000000061ca8f878cb9793264efdc1c7b7af24323aa322faa6ef741e6d8ee3c27"}) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x24201, 0x0) (async) r2 = socket(0x15, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) (async) setsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000240), 0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x34000, 0x0) ioctl$USBDEVFS_RESETEP(r3, 0x80045503, &(0x7f00000002c0)) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042abd7000fbdbdf251100000009003200080000000600280003000000050033000200000005002e0001000000"], 0x34}, 0x1, 0x0, 0x0, 0x8000801}, 0x4004000) [ 1896.889844][ T5516] do_syscall_64+0x2b/0x70 [ 1896.894301][ T5516] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1896.900214][ T5516] RIP: 0033:0x7f25565575a9 [ 1896.904658][ T5516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1896.924296][ T5516] RSP: 002b:00007f2555ccc168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1896.932740][ T5516] RAX: ffffffffffffffda RBX: 00007f2556678f80 RCX: 00007f25565575a9 [ 1896.940741][ T5516] RDX: 0000000008800000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1896.948731][ T5516] RBP: 00007f2555ccc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1896.956806][ T5516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1896.964792][ T5516] R13: 00007fffd3703cdf R14: 00007f2555ccc300 R15: 0000000000022000 [ 1896.972865][ T5516] 17:43:25 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x402}}, 0x7ffff000) 17:43:25 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x8000000}}, 0xfdef) 17:43:25 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) mmap$usbfs(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x300000c, 0x10, r0, 0x7) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f00000000c0)={{{0x5, 0x1}}, 0x84, 0x5, &(0x7f0000000300)="f8bcef13db4c906e36e49783840800aadfad3cb36c60171ece0900dfe2c3dc98036c820682b211df6bb61881331b9d4c275fe25591a7ee8bdbf9b53f43bc11e00c8d1d60bd51a4bbc3d3ae0a60b5e01dbbbf4a834533d9c7830169f2701189040000000000000061ca8f878cb9793264efdc1c7b7af24323aa322faa6ef741e6d8ee3c27"}) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x24201, 0x0) r2 = socket(0x15, 0x0, 0x3ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) (async, rerun: 64) setsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000240), 0x4) (async, rerun: 64) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x34000, 0x0) ioctl$USBDEVFS_RESETEP(r3, 0x80045503, &(0x7f00000002c0)) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042abd7000fbdbdf251100000009003200080000000600280003000000050033000200000005002e0001000000"], 0x34}, 0x1, 0x0, 0x0, 0x8000801}, 0x4004000) 17:43:25 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x10}}, 0xfffffdef) 17:43:25 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfffffffffffffdef) 17:43:25 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x8040000}}, 0xfdef) 17:43:25 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) (fail_nth: 24) 17:43:25 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593042, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x8}) mmap$usbfs(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000008, 0x80010, 0xffffffffffffffff, 0x1) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) 17:43:25 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593042, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x8}) mmap$usbfs(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000008, 0x80010, 0xffffffffffffffff, 0x1) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593042, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x8}) (async) mmap$usbfs(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000008, 0x80010, 0xffffffffffffffff, 0x1) (async) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) (async) 17:43:25 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) (fail_nth: 25) 17:43:25 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x8800000}}, 0xfdef) 17:43:25 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x105040, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1001) [ 1897.214051][ T5552] FAULT_INJECTION: forcing a failure. [ 1897.214051][ T5552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1897.227219][ T5552] CPU: 1 PID: 5552 Comm: syz-executor.5 Not tainted 6.0.0-rc7-syzkaller-00042-g46452d3786a8-dirty #0 [ 1897.238137][ T5552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1897.248205][ T5552] Call Trace: [ 1897.251488][ T5552] [ 1897.254429][ T5552] dump_stack_lvl+0xd6/0x122 [ 1897.259196][ T5552] dump_stack+0x11/0x12 [ 1897.263413][ T5552] should_fail+0x242/0x250 [ 1897.267866][ T5552] should_fail_usercopy+0x16/0x20 [ 1897.272907][ T5552] copy_page_from_iter_atomic+0x24b/0xb90 [ 1897.278645][ T5552] generic_perform_write+0x214/0x3f0 [ 1897.283948][ T5552] ? shmem_write_begin+0x110/0x110 [ 1897.289129][ T5552] __generic_file_write_iter+0xe3/0x280 [ 1897.294692][ T5552] generic_file_write_iter+0x79/0x1c0 [ 1897.300091][ T5552] vfs_write+0x468/0x760 [ 1897.304343][ T5552] ksys_write+0xe8/0x1a0 [ 1897.308596][ T5552] __x64_sys_write+0x3e/0x50 [ 1897.313201][ T5552] do_syscall_64+0x2b/0x70 [ 1897.317638][ T5552] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1897.323546][ T5552] RIP: 0033:0x7f25565575a9 [ 1897.328011][ T5552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1897.347663][ T5552] RSP: 002b:00007f2555ccc168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1897.356160][ T5552] RAX: ffffffffffffffda RBX: 00007f2556678f80 RCX: 00007f25565575a9 17:43:26 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x406}}, 0x7ffff000) 17:43:26 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593042, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x8}) (async) mmap$usbfs(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000008, 0x80010, 0xffffffffffffffff, 0x1) (async, rerun: 64) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) (rerun: 64) 17:43:26 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x10000000}}, 0xfdef) 17:43:26 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x105040, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1001) 17:43:26 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x204}}, 0xfffffdef) 17:43:26 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}], &(0x7f0000000040)=0x28) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f00000000c0)=0x7) [ 1897.364236][ T5552] RDX: 0000000008800000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1897.372228][ T5552] RBP: 00007f2555ccc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1897.380285][ T5552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1897.388266][ T5552] R13: 00007fffd3703cdf R14: 00007f2555ccc300 R15: 0000000000022000 [ 1897.396468][ T5552] 17:43:26 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x105040, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1001) 17:43:26 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x40000000}}, 0xfdef) 17:43:26 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}], &(0x7f0000000040)=0x28) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) (async) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f00000000c0)=0x7) 17:43:26 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) (fail_nth: 26) 17:43:26 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xef0d0000}}, 0xfdef) 17:43:26 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1001) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0x7fff, 0x20, "d14366b29227e093cee28c4f4f52b0e604d46a9786350ba247570afadec681dda6eac835d6c900047184411d98486afd65d609e57def8a89215e312d123c04d711ffb2578f40ad81abd5de9ac16e841d8737ce03f474115d5ac4eedeedf14a60db8233906203183dbee0dabbb51ec7ed610cb0446740601d96f6f2cb5e51c52204f630112118458670aaf602f596c7c884b9d1b8bac4775359c56c9adf260f29b083e831d92ab87078a9d93f7cc95e103b88d6b36e855b2582f28dba56a785c564fb80700cc4c5d551fbda4046c95838a9a86703fbcf2819c25702cf53f2bc651cacf20f38ea1d0cdce8090a82522e516b06eb65343ab3d6e2279d8c735f60d1", 0xfb, 0x5f, 0x1f, 0x0, 0xdb, 0x73, 0x8}}}, 0x120) 17:43:26 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x408}}, 0x7ffff000) 17:43:26 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}], &(0x7f0000000040)=0x28) (async) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f00000000c0)=0x7) 17:43:26 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1001) (async) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0x7fff, 0x20, "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", 0xfb, 0x5f, 0x1f, 0x0, 0xdb, 0x73, 0x8}}}, 0x120) 17:43:26 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xf000) 17:43:26 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) (fail_nth: 27) 17:43:26 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x402}}, 0xfffffdef) 17:43:26 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) 17:43:26 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1001) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0x7fff, 0x20, "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", 0xfb, 0x5f, 0x1f, 0x0, 0xdb, 0x73, 0x8}}}, 0x120) [ 1897.694493][ T5598] FAULT_INJECTION: forcing a failure. [ 1897.694493][ T5598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1897.707665][ T5598] CPU: 1 PID: 5598 Comm: syz-executor.5 Not tainted 6.0.0-rc7-syzkaller-00042-g46452d3786a8-dirty #0 [ 1897.718616][ T5598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1897.728739][ T5598] Call Trace: [ 1897.732020][ T5598] [ 1897.734958][ T5598] dump_stack_lvl+0xd6/0x122 [ 1897.739600][ T5598] dump_stack+0x11/0x12 [ 1897.743897][ T5598] should_fail+0x242/0x250 [ 1897.748336][ T5598] should_fail_usercopy+0x16/0x20 [ 1897.753379][ T5598] copy_page_from_iter_atomic+0x24b/0xb90 [ 1897.759204][ T5598] generic_perform_write+0x214/0x3f0 [ 1897.764527][ T5598] ? shmem_write_begin+0x110/0x110 [ 1897.769670][ T5598] __generic_file_write_iter+0xe3/0x280 [ 1897.775295][ T5598] generic_file_write_iter+0x79/0x1c0 [ 1897.780746][ T5598] vfs_write+0x468/0x760 [ 1897.785083][ T5598] ksys_write+0xe8/0x1a0 [ 1897.789455][ T5598] __x64_sys_write+0x3e/0x50 [ 1897.794457][ T5598] do_syscall_64+0x2b/0x70 [ 1897.798948][ T5598] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1897.804964][ T5598] RIP: 0033:0x7f25565575a9 [ 1897.809400][ T5598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1897.829049][ T5598] RSP: 002b:00007f2555ccc168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 17:43:26 executing program 0: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="0100005b000000001c000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="faffffff000000002e2f66696c653000"]) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f00000000c0)=r0, 0x1) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x485601, 0x0) io_uring_setup(0x47d1, &(0x7f0000000140)={0x0, 0xa2e7, 0x0, 0x3, 0x3e2, 0x0, r1}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000001c0)={'sit0\x00', 0x600}) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1001) 17:43:26 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000380)={0xa0002001}) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000400)=0x4) clock_gettime(0x5, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, 0x0, 0x325, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008804}, 0x842) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0xfff}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7, 0x80000) ioctl$USBDEVFS_DISCARDURB(r5, 0x550b, &(0x7f0000000040)) 17:43:26 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000380)={0xa0002001}) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000400)=0x4) clock_gettime(0x5, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, 0x0, 0x325, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008804}, 0x842) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0xfff}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7, 0x80000) ioctl$USBDEVFS_DISCARDURB(r5, 0x550b, &(0x7f0000000040)) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000380)={0xa0002001}) (async) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000400)=0x4) (async) clock_gettime(0x5, &(0x7f00000003c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, 0x0, 0x325, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008804}, 0x842) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0xfff}}, 0x18) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0x7, 0x80000) (async) ioctl$USBDEVFS_DISCARDURB(r5, 0x550b, &(0x7f0000000040)) (async) 17:43:26 executing program 0: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="0100005b000000001c000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="faffffff000000002e2f66696c653000"]) (async, rerun: 64) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f00000000c0)=r0, 0x1) (rerun: 64) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x485601, 0x0) io_uring_setup(0x47d1, &(0x7f0000000140)={0x0, 0xa2e7, 0x0, 0x3, 0x3e2, 0x0, r1}) (async, rerun: 32) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (rerun: 32) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000001c0)={'sit0\x00', 0x600}) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1001) [ 1897.837496][ T5598] RAX: ffffffffffffffda RBX: 00007f2556678f80 RCX: 00007f25565575a9 [ 1897.845476][ T5598] RDX: 0000000008800000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1897.853557][ T5598] RBP: 00007f2555ccc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1897.863530][ T5598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1897.871700][ T5598] R13: 00007fffd3703cdf R14: 00007f2555ccc300 R15: 0000000000022000 [ 1897.879735][ T5598] 17:43:26 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x600}}, 0x7ffff000) 17:43:26 executing program 0: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="0100005b000000001c000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="faffffff000000002e2f66696c653000"]) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f00000000c0)=r0, 0x1) (async) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x485601, 0x0) io_uring_setup(0x47d1, &(0x7f0000000140)={0x0, 0xa2e7, 0x0, 0x3, 0x3e2, 0x0, r1}) (async) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000001c0)={'sit0\x00', 0x600}) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1001) 17:43:26 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000380)={0xa0002001}) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000400)=0x4) clock_gettime(0x5, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, 0x0, 0x325, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008804}, 0x842) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0xfff}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7, 0x80000) ioctl$USBDEVFS_DISCARDURB(r5, 0x550b, &(0x7f0000000040)) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000380)={0xa0002001}) (async) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000400)=0x4) (async) clock_gettime(0x5, &(0x7f00000003c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, 0x0, 0x325, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008804}, 0x842) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ib={0x1b, 0x0, 0x0, {"444bcb830f5ef53e3d21b5b42a32a390"}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0xfff}}, 0x18) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0x7, 0x80000) (async) ioctl$USBDEVFS_DISCARDURB(r5, 0x550b, &(0x7f0000000040)) (async) 17:43:26 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x7ffff000) 17:43:26 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) (fail_nth: 28) 17:43:26 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x591002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x2042, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x5) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="04000000000000002e2f2ac94b141a00008fb1ca74d066696c653000"]) 17:43:26 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x406}}, 0xfffffdef) 17:43:26 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x48840, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1001) 17:43:26 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x48840, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1001) 17:43:26 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfffffdef) 17:43:26 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x591002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) (async) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x2042, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x5) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="04000000000000002e2f2ac94b141a00008fb1ca74d066696c653000"]) 17:43:26 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) (fail_nth: 29) 17:43:26 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x48840, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1001) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x48840, 0x0) (async) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1001) (async) [ 1898.334338][ T5668] FAULT_INJECTION: forcing a failure. [ 1898.334338][ T5668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1898.347525][ T5668] CPU: 0 PID: 5668 Comm: syz-executor.5 Not tainted 6.0.0-rc7-syzkaller-00042-g46452d3786a8-dirty #0 [ 1898.358404][ T5668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1898.368470][ T5668] Call Trace: [ 1898.371754][ T5668] [ 1898.374689][ T5668] dump_stack_lvl+0xd6/0x122 [ 1898.379369][ T5668] dump_stack+0x11/0x12 [ 1898.383543][ T5668] should_fail+0x242/0x250 [ 1898.387969][ T5668] should_fail_usercopy+0x16/0x20 [ 1898.393038][ T5668] copy_page_from_iter_atomic+0x24b/0xb90 [ 1898.398779][ T5668] generic_perform_write+0x214/0x3f0 [ 1898.404076][ T5668] ? shmem_write_begin+0x110/0x110 [ 1898.409214][ T5668] __generic_file_write_iter+0xe3/0x280 [ 1898.414776][ T5668] generic_file_write_iter+0x79/0x1c0 [ 1898.420160][ T5668] vfs_write+0x468/0x760 [ 1898.424487][ T5668] ksys_write+0xe8/0x1a0 [ 1898.428816][ T5668] __x64_sys_write+0x3e/0x50 [ 1898.433410][ T5668] do_syscall_64+0x2b/0x70 [ 1898.438945][ T5668] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1898.444904][ T5668] RIP: 0033:0x7f25565575a9 [ 1898.449329][ T5668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1898.469076][ T5668] RSP: 002b:00007f2555ccc168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 17:43:27 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x604}}, 0x7ffff000) 17:43:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r2, 0xc02063a0, &(0x7f0000000400)=[0x3, 0x9, 0x2, 0x40, 0xbb5, 0x80000000, 0x400, 0x9]) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_IBPORT={0x5}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg1\x00'}]}, 0x30}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x78, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS, @IPVS_DEST_ATTR_FWD_METHOD={0x6b}, @IPVS_DEST_ATTR_ADDR={0x0, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x0, 0x9, 0xda5}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x78}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="964d0123", @ANYRES16=r5, @ANYBLOB="00022abd7000fddbdf25040000000800040005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000081}, 0x20004004) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfff}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r8, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1001) 17:43:27 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x591002, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) (async) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x2042, 0x0) (async) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x5) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="04000000000000002e2f2ac94b141a00008fb1ca74d066696c653000"]) 17:43:27 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x7ffffffff000) 17:43:27 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9b, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x5a, &(0x7f0000000100)=""/90, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0xc, 0xf5b, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x1, 0x1, 0x1]}, 0x80) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x9c}}, './file0\x00'}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x608640, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='itimer_expire\x00'}, 0x10) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000002, 0x80010, r1, 0x0) [ 1898.477497][ T5668] RAX: ffffffffffffffda RBX: 00007f2556678f80 RCX: 00007f25565575a9 [ 1898.485558][ T5668] RDX: 0000000008800000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1898.493548][ T5668] RBP: 00007f2555ccc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1898.501533][ T5668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1898.509520][ T5668] R13: 00007fffd3703cdf R14: 00007f2555ccc300 R15: 0000000000022000 [ 1898.517674][ T5668] [ 1898.518539][ T5676] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1898.611552][ T5656] ================================================================== [ 1898.619678][ T5656] BUG: KCSAN: data-race in __percpu_counter_compare / percpu_counter_add_batch [ 1898.628629][ T5656] [ 1898.630949][ T5656] read-write to 0xffff88810004b490 of 8 bytes by task 5668 on cpu 0: [ 1898.639015][ T5656] percpu_counter_add_batch+0x9a/0x110 [ 1898.644500][ T5656] shmem_getpage_gfp+0x4b3/0x1750 [ 1898.649535][ T5656] shmem_write_begin+0x84/0x110 [ 1898.654392][ T5656] generic_perform_write+0x1d4/0x3f0 [ 1898.659692][ T5656] __generic_file_write_iter+0xe3/0x280 [ 1898.665252][ T5656] generic_file_write_iter+0x79/0x1c0 [ 1898.670633][ T5656] vfs_write+0x468/0x760 [ 1898.674876][ T5656] ksys_write+0xe8/0x1a0 [ 1898.679126][ T5656] __x64_sys_write+0x3e/0x50 [ 1898.683722][ T5656] do_syscall_64+0x2b/0x70 [ 1898.688144][ T5656] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1898.694048][ T5656] [ 1898.696368][ T5656] read to 0xffff88810004b490 of 8 bytes by task 5656 on cpu 1: [ 1898.703914][ T5656] __percpu_counter_compare+0x27/0x1e0 [ 1898.709382][ T5656] shmem_getpage_gfp+0x47c/0x1750 [ 1898.714417][ T5656] shmem_write_begin+0x84/0x110 [ 1898.719265][ T5656] generic_perform_write+0x1d4/0x3f0 [ 1898.724557][ T5656] __generic_file_write_iter+0xe3/0x280 [ 1898.730107][ T5656] generic_file_write_iter+0x79/0x1c0 [ 1898.735467][ T5656] vfs_write+0x468/0x760 [ 1898.739705][ T5656] ksys_write+0xe8/0x1a0 [ 1898.744542][ T5656] __x64_sys_write+0x3e/0x50 [ 1898.749161][ T5656] do_syscall_64+0x2b/0x70 [ 1898.753565][ T5656] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1898.759543][ T5656] 17:43:27 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x408}}, 0xfffffdef) 17:43:27 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0xfffffffffffffdef) 17:43:27 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9b, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x5a, &(0x7f0000000100)=""/90, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0xc, 0xf5b, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x1, 0x1, 0x1]}, 0x80) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x9c}}, './file0\x00'}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x608640, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='itimer_expire\x00'}, 0x10) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000002, 0x80010, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9b, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x5a, &(0x7f0000000100)=""/90, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0xc, 0xf5b, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x1, 0x1, 0x1]}, 0x80) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x9c}}, './file0\x00'}) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x608640, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='itimer_expire\x00'}, 0x10) (async) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) (async) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000002, 0x80010, r1, 0x0) (async) 17:43:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 64) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) (async) ioctl$X86_IOC_RDMSR_REGS(r2, 0xc02063a0, &(0x7f0000000400)=[0x3, 0x9, 0x2, 0x40, 0xbb5, 0x80000000, 0x400, 0x9]) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_IBPORT={0x5}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg1\x00'}]}, 0x30}}, 0x0) (async) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c000) (async, rerun: 32) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 32) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x78, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS, @IPVS_DEST_ATTR_FWD_METHOD={0x6b}, @IPVS_DEST_ATTR_ADDR={0x0, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x0, 0x9, 0xda5}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x78}}, 0x0) (async) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="964d0123", @ANYRES16=r5, @ANYBLOB="00022abd7000fddbdf25040000000800040005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, 0x0, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) (rerun: 64) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000081}, 0x20004004) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfff}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) (async) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r8, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x1001) 17:43:27 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x8800000) (fail_nth: 30) 17:43:27 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x593002, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x804}}, 0x7ffff000)